CVE-2013-3888

CVE-2013-3888 affects dxgkrnl.sys in the DirectX Graphics Kernel Subsystem used by Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The root cause is an elevation-of-privilege issue in kernel-mode code that could allow a local attacker to execute arbitrary code with kernel pr...

CVE-2013-3195

The DSAInsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allo...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing an critical security update according to Microsoft Bulletin MS13-083. OpenVAS Vulnerability Test $Id: secpodms13-083.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Comctl32 Integer Overflow Vulnerability 2864058 Authors: Shashi Kiran N Copyright: Copyright c 2013 SecPod,...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing a critical security update according to Microsoft Bulletin MS13-083. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ALLPlayer Local Buffer Overflow PoC UNICODE

Exploit for windows platform in category dos / poc Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSION...

ALLPlayer 5.6.2 Buffer Overflow

Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS AFFECTED ---- ALLPlayer 5.6.2 2Proof of Concept...

Internet Explorer Use-After-Free Memory Corruption (MS13-055)

Added: 10/09/2013 CVE: CVE-2013-3163 BID: 60975 OSVDB: 94981 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer contains a use-after-free error which can lead to memory corruption in such a way as to allow...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3881 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Windows OpenType Font Parsing CVE-2013-3128 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot Avay...

MS13-081: Description of the security update for USB drivers: October 8, 2013 (KB2862330)

None None...

Chiangraientersoft HTML Injection

Sites using the Chiangraientersoft code base suffer from a html injection vulnerability that can allow for cross site scripting attacks. Note that this advisory has site-specific information. Exploit Title : Chiangraientersoft HTML Injection Author : DevilScreaM Date : 05/10/2013 Category : Web...

Microsoft Windows Kernel 'dxgkrnl.sys' CVE-2013-3888 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that is related to DirectX Graphics Kernel Subsystem. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of...

MS13-081: Description of the security update for USB drivers: October 8, 2013 (KB2864202)

None None...

MS13-081: Description of the security update for kernel-mode drivers: October 8, 2013 (KB2876284)

None None...

Windows TrackPopupMenuEx Win32k NULL Page

This module exploits a vulnerability in win32k.sys where under specific conditions TrackPopupMenuEx will pass a NULL pointer to the MNEndMenuState procedure. This module has been tested successfully on Windows 7 SP0 and Windows 7 SP1. Module Options msf use...

Chiangraientersoft HTML Injection

Exploit Title : Chiangraientersoft HTML Injection Author : DevilScreaM Date : 05/10/2013 Category : Web Applications Vendor : http://chiangraientersoft.com/ Dork inurl:Qread.php?idques= inurl:webboard/Qread.php?idques= Vulnerability : HTML Injection Tested On : Windows 7, Ubuntu Mozila & Chrome...

SIEMENS Solid Edge ST4 SEListCtrlX - ActiveX Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution Vulnerability

This Metasploit module exploits the SEListCtrlX ActiveX installed with the SIEMENS Solid Edge product. The vulnerability exists on several APIs provided by the control, where user supplied input is handled as a memory pointer without proper validation, allowing an attacker to read and corrupt...

APPLE-SA-2013-09-18-1 iTunes 11.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-18-1 iTunes 11.1 iTunes 11.1 is now available and addresses the following: iTunes Available for: Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or...

Internet Explorer CCaret UpdateScreenCaret Memory Corruption

Added: 10/03/2013 CVE: CVE-2013-3205 BID: 62208 OSVDB: 97094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer contains a use-after-free error that is triggered when handling a CCaret object. The...