3995 matches found
Microsoft Windows Kerberos Denial Of Service Vulnerability
Description Microsoft Windows is susceptible to a remote Kerberos denial of service vulnerability. By sending unspecified packets to the Kerberos service on TCP or UDP port 88, attackers may cause the affected service to crash. This vulnerability allows remote attackers to crash the affected...
Microsoft Security Bulletin MS05-036 Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)
Microsoft Security Bulletin MS05-036 Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution 901214 Issued: July 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...
iejavaprxyexploit.pl.txt
Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit Unpatched Advisory : FrSIRT/ADV-2005-0935 Rated as : Critical Status : Unpatched Code : http://www.frsirt.com/exploits/20050702.iejavaprxyexploit.pl.php !/usr/bin/perl Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit...
Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow
Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx...
Microsoft Windows NTFS Information Disclosure
Microsoft Windows NTFS Information Disclosure I. Synopsis Affected Systems: Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Risk: Moderate Impact: Local Information Leak Status: Maintenance Release Planned Uncoordinated release Author: Matthew Murphy [email protected]...
MS Windows (SMB) Transaction Response Handling Exploit (MS05-011)
漏洞描述：Windows SMB客户端在处理SMB响应时存在一个缓冲区溢出漏洞。恶意的SMB服务器可以利用这个漏洞在连接该服务器的SMB客户端主机上执行任意命令。MRXSMB.SYS驱动负责执行SMB客户端操作以及处理SMB服务器返回的响应。一些重要的Windows文件共享操作以及所有的RPC-over-named-pipes操作使用SMB命令Trans25h和Trans232h。一个恶意的SMB服务器通过发送特殊的Transaction响应数据可能导致一个缓冲区溢出漏洞。溢出可能发生在任何这个数据被处理的地方，例如MRXSMB.SYS或其他客户端代码中。例如，如果Trans2...
CVE-2005-1207
Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...
CVE-2005-1207
CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...
Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution (896426)
Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution 896426 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution (896358)
Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution 896358 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express (897715)
Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express 897715 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...
Microsoft Security Bulletin MS05-032 Vulnerability in Microsoft Agent Could Allow Spoofing (890046)
Microsoft Security Bulletin MS05-032 Vulnerability in Microsoft Agent Could Allow Spoofing 890046 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Spoofing Maximum Severity Rating: Moderate Recommendation:...
Microsoft Security Bulletin MS05-033 Vulnerability in Telnet Client Could Allow Information Disclosure (896428)
Microsoft Security Bulletin MS05-033 Vulnerability in Telnet Client Could Allow Information Disclosure 896428 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use a Microsoft Telnet client Impact of Vulnerability: Information Disclosure Maximum Severity...
Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution (896422)
Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution 896422 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
CVE-2005-1205
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...
Microsoft Windows HTML Help Remote Code Execution Vulnerability
Description Microsoft Windows HTML Help is affected by a remote code execution vulnerability. The vulnerability presents itself when the application handles malformed data through the InfoTech protocol ms-its, its, mk:@msitstore. An attacker may exploit this issue from a malicious Web page or...
Microsoft Agent Trusted Content Spoofing Vulnerability
Description Microsoft Agent is prone to a vulnerability that could allow a malicious website to spoof trusted content. This could result in a user downloading and executing malicious files thinking they are safe. Technologies Affected Microsoft Windows 2000 Advanced Server Microsoft Windows 2000...
Microsoft Internet Explorer XML Redirect Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Specifically, it may be possible for remote users to read XML data from an affected computer via a malicious Web page. This issue is a variant of BID 5560. This variant was not addressed with the release ...
CVE-2005-0061
The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests...
CVE-2005-0049
Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting XSS attack, or to spoof the web cache...