Design/Logic Flaw

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

CVE-2010-3223

The CVE-2010-3223 issue affects Microsoft Windows Server 2008 R2 in a failover cluster. The Failover Cluster Manager (MSCS) UI sets permissions on administrative shares of new shared cluster disks using unsecured default ACLs, potentially allowing unauthorized users to read, modify, or delete dat...

Torrent DVD Creator - quserex.dll DLL Loading Arbitrary Code Execution

Torrent DVD Creator - quserex.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44054/info Torrent DVD Creator is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...

Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)

This host is missing a critical security update according to Microsoft Bulletin MS10-083. OpenVAS Vulnerability Test $Id: secpodms10-083.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Shell and WordPad COM Validation Vulnerability 2405882 Authors: Antu Sanadi Copyright: Copyright c 2010...

Torrent DVD Creator - 'quserex.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44054/info Torrent DVD Creator is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

e2eSoft VCam - DLL Loading Arbitrary Code Execution source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open ...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

IsoBuster 2.7 - wnaspi32.dll DLL Loading Arbitrary Code Execution

IsoBuster 2.7 - wnaspi32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43912/info IsoBuster is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Microsoft Visio 2007 - mfc80esn.dll DLL Loading Arbitrary Code Execution

Microsoft Visio 2007 - mfc80esn.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...

Microsoft Visio 2007 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...

Adobe Dreamweaver CS4 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43911/info Adobe Dreamweaver CS4 is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location tha...

IsoBuster 2.7 - 'wnaspi32.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43912/info IsoBuster is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Dupehunter Professional 9.0.0.3911 - 'Fwpuclnt.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43863/info Dupehunter Professional is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location...

Oracle Secure Backup Administration property_box.php objectname command injection

Added: 09/30/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 66340 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the propertybox.php script allows remote attackers to inject arbitrary commands via the objectname paramete...

Oracle Secure Backup Administration property_box.php objectname command injection

Added: 09/30/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 66340 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the propertybox.php script allows remote attackers to inject arbitrary commands via the objectname paramete...

VirIT eXplorer 6.7.43 - 'tg-scan.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43506/info VirIT eXplorer is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to scan a file from a network share location that...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0659-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc573246 - mounted shares via mount.cifs disappear when dhclient rene...

WebDAV - Application DLL Hijacker (Metasploit)

$Id: webdavdllhijacker.rb 10454 2010-09-24 01:11:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Easy Office Recovery - dwmapi.dll DLL Loading Arbitrary Code Execution

Easy Office Recovery - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43416/info Easy Office Recovery is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43414/info GreenBrowser is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...