Microsoft Windows Search Remote Code Execution Vulnerability (959349)

This host is missing a critical security update according to Microsoft Bulletin MS08-075. OpenVAS Vulnerability Test $Id: gbms08-075.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Search Remote Code Execution Vulnerability 959349 Authors: Madhuri D Copyright: Copyright c 2010 Greenbon...

Microsoft Windows Search Remote Code Execution Vulnerability (959349)

This host is missing a critical security update according to Microsoft Bulletin MS08-075. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-3157

Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer...

Design/Logic Flaw

Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer...

CVE-2010-3157

CVE-2010-3157 affects XacRett (before version 50). The vulnerability stems from an insecure file search/path logic that may load executables (.exe) from an unsafe location, allowing an attacker to execute arbitrary code via a Trojan horse file related to the explorer.exe filename and Windows Expl...

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

ffdshow Video Codec - Denial of Service

!/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author: Nishant Das Patnaik Web: http://nishantdaspatnaik.yolasite.com Software Link: ftp://majorgeeks.mirror.internode.on.net/multimedia/K-LiteCodecPack620Mega.exe Versio...

CVE-2010-2568

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...

Code injection

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...

PT-2010-1167 · Microsoft +1 · Windows Explorer +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 Description: The issue is related to errors in processing files with .LNK or .PIF extensions. Exploitation of this issue can allow a...

The Windows File System vulnerability-a small vulnerability, big-vulnerability warning-the black bar safety net

Windows useful file to replace the command, to bypass the File Protection Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example: in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another...

Microsoft Windows Explorer Search-ms File Parsing Code Execution (MS08-038; CVE-2008-1435)

There exists a code execution vulnerability in Microsoft Windows Explorer. The vulnerability is due to insecure design in the way Microsoft Windows Explorer parses and saves saved-search.search-ms files. Unauthenticated remote attackers can exploit this vulnerability by enticing the target user t...

Microsoft Windows Kodak Image Viewer Code Execution (MS07-055; CVE-2007-2217)

Kodak Image Viewer is the picture viewer shipped with Microsoft Windows. It is capable of handling several types of popular graphic document format such as BMP, JPEG, PCX, GIF, TIFF. There exists a buffer overflow vulnerability in Microsoft Windows Kodak Image Viewer. The vulnerability is due to ...

RealNetworks RealPlayer

A DLL file in RealNetworks RealPlayer 11 allows remote attackers to execute arbitrary code via a crafted Internet Video Recording IVR file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plug...

Microsoft Windows Folder GUID Code Execution (MS06-045; CVE-2006-3281)

Microsoft Windows is a very popular operating system that is deployed the majority of desktops and workstations in business and home user environments. Included with the operating system is a graphical file browsing and execution shell called Windows Explorer. The application is capable of...

CORE-2009-0911: DAZ Studio Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DAZ Studio Arbitrary Command Execution 1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id: CORE-2009-0911 Advisory URL:...

Core Security Technologies Advisory 2009.0911

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DAZ Studio Arbitrary Command Execution 1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id: CORE-2009-0911 Advisory URL:...

Microsoft Windows Explorer Invalid URL File Parsing Stack Overflow (CVE-2006-3351)

The Microsoft Windows series of operating systems is one of the most popular systems in use on workstations, home computers, and servers. All versions of the OS include a graphical shell interface, called Windows Explorer. There exists a stack exhaustion vulnerability in Microsoft Windows Explore...

CVE-2009-2420

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service launch of multiple Windows Explorer instances via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703...

CVE-2009-2420

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service launch of multiple Windows Explorer instances via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703...