33 matches found
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver 'afd.sys'. A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer. Technologies Affected Microsoft Windows Server 2003...
Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞
Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出,远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中,FindFile函数管理垮文件系统文件搜索,可指定文件类型进行搜索。FindFile函数为buffer1分配内存,buffer1用于存储function2的第一个参数,而没有对其大小进行检查。这个数据用于开始一个搜索。...
Microsoft Windows SNMP Service Remote Code Execution Vulnerability
Description Microsoft Windows SNMP service is prone to a memory-corruption vulnerability because the software fails to properly bounds-check user-supplied network data before copying it to an insufficiently sized memory buffer. Exploiting this issue allows remote attackers to execute arbitrary...
Microsoft Windows Manifest File Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...
Microsoft Windows Help存在多个漏洞
Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件,或者通过EMAIL附件形式发送,诱使用户打开来触发此漏洞,成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...
Microsoft Windows图形设备接口附加库拒绝服务漏洞
Microsoft Windows是一款流行的操作系统。 Microsoft Windows图形社诶接口附加库处理畸形图象文件存在问题,远程攻击者可以利用漏洞可对系统进行拒绝服务攻击。 问题存在于Windows GDI+库'gdiplus.dll'中,构建恶意的图象文件,诱使用户打开,可导致系统崩溃。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...
Microsoft Windows Server Driver Remote Information Disclosure Vulnerability
Description Microsoft Windows Server driver is susceptible to a remote information-disclosure vulnerability. This issue is due to a flaw in the handling of certain SMB traffic. Exploiting this issue allows remote attackers to gain access to potentially sensitive fragments of kernel memory. This m...
Microsoft Windows Tablet PC Services Detection
Binary data 3494.prm...
Microsoft Windows Korean Input Method Editor Privilege Escalation Vulnerability
Description Microsoft Windows Korean Input Method Editor is prone to a local privilege-escalation vulnerability. Successful exploitation can allow local attackers to completely compromise a vulnerable computer. Technologies Affected Microsoft Office 2003 Microsoft Office 2003 SP1 Microsoft Office...
NOT (Windows XP MCE OR XP Tablet PC)
NOT Windows XP MCE OR XP Tablet PC...
Windows XP Tablet PC Edition 2005
Windows XP Tablet PC Edition 2005...