253 matches found
Security update for the Windows Explorer denial of service vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows Explorer denial of service vulnerability in Windows Server 2008: July 11, 2017 Summary An denial of service vulnerability exists when Windows Explorer attempts to open a non-existent file. An attacker who successfully exploited this vulnerability could cause a deni...
Windows Explorer Denial of Service Vulnerability
An Denial Of Service vulnerability exists when Windows Explorer attempts to open a non-existent file. An attacker who successfully exploited this vulnerability could cause a denial of service. A attacker could exploit this vulnerability by hosting a specially crafted web site and convince a user ...
Windows Explorer Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Explorer improperly handles executable files and shares during rename operations. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of another user. Users not running as administrators would ...
Microsoft Windows Explorer CVE-2017-8463 Remote Code Execution Vulnerability
Description Microsoft Windows Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...
KB4025342: Windows 10 Version 1703 July 2017 Cumulative Update
The remote Windows 10 version 1703 host is missing security update KB4025342. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows Performance Monitor Console due to improper parsing of XML input that contains a reference to an...
CVE-2017-8464
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK fil...
Remote code execution
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK fil...
Microsoft LNK Remote Code Execution (CVE-2017-8464; CVE-2018-0978)
A vulnerability has been found in the way Windows Explorer handles LNK files. An attacker exploiting this vulnerability could achieve Remote Code Execution...
Published Windows Explorer does not retain icon size and layout settings with Profile Management enabled.
Under certain circumstances, users may find that some Windows Explorer settings are not retained after closing a published Windows Explorer session. These settings are saved in the registry under HKEYCURRENTUSER\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags...
BagMRU Folder History
Nessus was able to enumerate folders that were opened in Windows Explorer. Microsoft Windows maintains folder settings using a registry key known as shellbags or BagMRU. The generated folder list report contains folders local to the system, folders from past mounted network drives, and folders fr...
June 14, 2016 — KB3163017 (OS Build 10240.16942)
None None...
How to Publish Windows Explorer.exe with Specific Drives, Folders, or URLs
This article describes how to publish specific drives and folders as it is not recommended to publish Explorer.exe directly. Notes: Microsoft does NOTrecommend running Explorer.exe as a published application because the published Explorer.exe application runs as a separate process with restricted...
April 12, 2016 — KB3147461 (OS Build 10240.16769)
None None...
MS15-020: Description of the security update for Windows text services: March 10, 2015
None None...
Windows Explorer (explorer.exe) AVI Right Click Denial of Service - Ver2 (CVE-2007-0562)
A denial-of-service vulnerability has been reported in Microsoft Windows Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer DoS PoC
No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 vsfilter.dllVersion 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached Test7.flv file in Windows Explorer,causing...
Microsoft Windows Explorer explorer.exe WMV File Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected...
Microsoft Windows XP WAV File Handler Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they are processed. If an exploi...
Microsoft Windows Explorer PNG Image - Local Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25816/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows Explorer to exhaust CPU cycles an...
MS Windows 2000/NT 4 DLL Search Path Weakness
No description provided by source. source: http://www.securityfocus.com/bid/1699/info When a program executes under Microsoft Windows, it may require additional code stored in DLL library files. These files are dynamically located at run time, and loaded if necessary. A weakness exists in the...