KB4561674: Windows Server 2012 June 2020 Security Update

The remote Windows host is missing security update 4561674 or cumulative update 4561612. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the...

Privilege escalation

An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'...

CVE-2019-1235

CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...

KB4516044: Windows 10 Version 1607 and Windows Server 2016 September 2019 Security Update

The remote Windows host is missing security update 4516044. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4512578: Windows 10 Version 1809 and Windows Server 2019 September 2019 Security Update

The remote Windows host is missing security update 4512578. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...

TSF Weather Widget - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application TSF Weather Widget published at the 'play' market has multiple vulnerabilities...

TSF Launcher 3D Shell - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application TSF Launcher 3D Shell published at the 'play' market has multiple vulnerabilities...

Mandriva Update for wpa_supplicant MDKSA-2007:245 (wpa_supplicant)

Check for the Version of wpasupplicant OpenVAS Vulnerability Test Mandriva Update for wpasupplicant MDKSA-2007:245 wpasupplicant Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[ MDKSA-2007:245 ] - Updated wpa_supplicant package fixes remote denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:245 http://www.mandriva.com/security/ Package : wpasupplicant Date : December 13, 2007 Affected: 2008.0 Problem Description: Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 allows remote...

wpa_supplicant driver DoS

Crash on parsing TSF data...

CVE-2007-6025

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 and earlier allows remote attackers to cause a denial of service crash via crafted TSF data...

CVE-2007-6025

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 and earlier allows remote attackers to cause a denial of service crash via crafted TSF data...

Stack overflow

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 and earlier allows remote attackers to cause a denial of service crash via crafted TSF data...

CVE-2007-6025

The CVE-2007-6025 entry is substantiated by multiple connected records describing a stack-based buffer overflow in driver_wext.c of wpa_supplicant 0.6.0 and earlier, exploitable by remote attackers via crafted TSF data to cause a denial of service (crash). Affected software is wpa_supplicant up t...