MS11-024: Description of the security update for Windows Fax Cover Page Editor MFC components: April 12, 2011

None None...

MS11-020: Vulnerabilities in SMB Server could allow remote code execution: April 12, 2011

None None...

MS11-032: Vulnerability in the OpenType Compact Font Format (CFF) driver could allow remote code execution: April 12, 2011

None None...

MS11-024: Description of the security update for Windows Fax Cover Page Editor: April 12, 2011

None None...

MS11-017: Description of the security update for Remote Desktop client 6.1 and Remote Desktop client 6.0: March 8, 2011

None None...

MS11-017: Vulnerability in Remote Desktop client could allow remote code execution: March 8, 2011

Resolves a vulnerability in Windows Remote Desktop Client that could allow remote code execution if a user opens a legitimate Remote Desktop configuration .rdp file that is located in the same network folder as a specially crafted library file.Support for Windows Vista Service Pack 1 SP1 ends on...

CVE-2011-0096

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3433 / 3436 / 3445)

This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed : - A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kern...

Avira AntiVir Personal - Multiple Code Execution Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45807/info Avira AntiVir Personal is prone to multiple code-execution vulnerabilities. Successful exploits may allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely result in denial-of-service...

KingView 6.5.3 - SCADA HMI Heap Overflow

Exploit Title: KingView 6.53 SCADA HMI Heap Overflow PoC Date: 9/28/2010 Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 and SP3 will release new targets afte...

Microsoft Windows "CreateSizedDIBSECTION()"缩略视图栈缓冲区溢出漏洞

BUGTRAQ ID: 45662 CVE ID: CVE-2010-3970 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Windows Graphics Rendering Engine在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞通过诱使用户访问恶意网页或打开处理恶意Office文档破坏内存执行任意代码或造成拒绝服务。 Microsoft Windows XP Professional Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsof...

Microsoft Office FlashPix Image Converter (CVE-2010-3951) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially craft...

Crystal Reports CrystalPrintControl ActiveX ServerResourceVersion Property Overflow

This module exploits a heap based buffer overflow in the CrystalPrintControl ActiveX, while handling the ServerResourceVersion property. The affected control can be found in the PrintControl.dll component as included with Crystal Reports 2008. This module has been tested successfully on IE 6, 7 a...

Design/Logic Flaw

PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an...

腾讯QQ 2010 SP1消息记录远程代码注入漏洞

腾讯QQ是一款在中国非常广泛使用的即时聊天工具。 腾讯QQ 2010 SP1在处理消息记录时，没有对会话消息中的Javascript和Html标签进行正确转义，攻击者可以发送恶意消息注入脚本代码并执行。 Tencent QQ 2010 SP1 最新版本的腾讯QQ已经修复此漏洞，建议用户下载使用： http://im.qq.com/qq/dlqq.shtml input onclick="window.location=' x68x74x74x70x3ax2fx2fx77x77x77x2ex62x6fx77x6fx73x2ex63x6fx6d'"/ img src='tetet'...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle 13, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and integrity via unknown...

Buffer overflow

Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors...

CVE-2010-3110

CVE-2010-3110 describes multiple buffer overflows in the Novell Client novfs module for the Linux kernel, affecting SUSE Linux Enterprise 11 SP1 and openSUSE 11.3. The root cause is missing bounds checks in several ioctls of the novfs /proc interface, allowing unprivileged local users to crash th...

Windows SMB2 buffer overflow

Added: 09/20/2010 CVE: CVE-2009-3103 BID: 36299 OSVDB: 57799 Background SMB2 is the replacement protocol for the SMB Windows filesharing protocol. Problem A buffer overflow vulnerability in the SMB2 Service allows remote attackers to execute arbitrary commands. Resolution Apply the patch referenc...

CVE-2010-3421

Cross-site scripting XSS vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter, a different vector than CVE-2004-2174 and CVE-2005-0995. NOTE: some of these details ar...