Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference', 'Description' = %q This module triggers a NULL pointer dereference in the...

KB954593 - MS08-052: Vulnerabilities in GDI+ could allow remote code execution

Resolves several vulnerabilities in Microsoft Windows GDI+ that could allow remote code execution if a user viewed a specially crafted image file using affected software.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make su...

MS10-083: Vulnerability in COM Validation in Windows Shell and WordPad could allow remote code execution

Resolves a vulnerability in Microsoft Windows that could allow remote code execution if a user opened a specially crafted file using WordPad or selects or opens a shortcut file that is on a network or WebDAV share.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue...

MS15-020: Description of the security update for Windows shell: March 10, 2015

MS15-020: Description of the security update for Windows shell: March 10, 2015 Summary This security update resolves a vulnerability in Windows. This vulnerability could allow remote code execution if an attacker successfully convinces a user to open a file in a working directory that contains a...

MS09-061: Description of the security update for the Microsoft.NET Framework 1.1 Service Pack 1: October 13, 2009

MS09-061: Description of the security update for the Microsoft.NET Framework 1.1 Service Pack 1: October 13, 2009 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2...

Connection to Oracle database fails when you use Microsoft ODBC or OLE DB Driver for Oracle or Microsoft DTC in Windows

Connection to Oracle database fails when you use Microsoft ODBC or OLE DB Driver for Oracle or Microsoft DTC in Windows This article describes an issue that occurs when you use Microsoft ODBC or OLE DB Driver for Oracle or Microsoft Distributed Transaction Coordinator DTC to connect to Oracle...

Description of the Windows Vista and Windows Server 2008 installation software feature update released April 28, 2009

Description of the Windows Vista and Windows Server 2008 installation software feature update released April 28, 2009 INTRODUCTION This article describes the software update that applies to versions of Windows Vista and Windows Server 2008 that are mentioned in the "Applies to" section. When...

MS09-061: Vulnerability in the .NET common language runtime could allow Remote Code Execution

Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information, refer to this Microsoft web page: Support is ending for some versions of...

MS10-021: Vulnerabilities in Windows Kernel could allow elevation of privilege

MS10-021: Vulnerabilities in Windows Kernel could allow elevation of privilege Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information, refer to thi...

MS08-049: Vulnerability in Event System could allow remote code execution

MS08-049: Vulnerability in Event System could allow remote code execution Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information, refer to this...

MS10-012: Vulnerabilities in SMB Server could allow remote code execution

MS10-012: Vulnerabilities in SMB Server could allow remote code execution Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information, refer to this...

MS09-053: Vulnerabilities in FTP Service for Internet Information Services could allow remote code execution

MS09-053: Vulnerabilities in FTP Service for Internet Information Services could allow remote code execution Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For...

MS10-030: Vulnerability in Outlook Express and Windows Mail could allow remote code execution

MS10-030: Vulnerability in Outlook Express and Windows Mail could allow remote code execution Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more informatio...

MS10-022: Description of the security update for Visual Basic Scripting (VBScript) 5.8: April 13, 2010

MS10-022: Description of the security update for Visual Basic Scripting VBScript 5.8: April 13, 2010 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more...

MS08-069: Description of the security update for XML Core Services 6.0: November 11, 2008

MS08-069: Description of the security update for XML Core Services 6.0: November 11, 2008 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information,...

MS08-069: Description of the security update for XML Core Services 4.0: November 11, 2008

MS08-069: Description of the security update for XML Core Services 4.0: November 11, 2008 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information,...

CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0125

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0124

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...