Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free

Mozilla Firefox 3.6.16 Windows 7 - mChannel Object Use-After-Free Mozilla mChannel Object use after free - Found by regenrecht - MSF exploit by Rh0 - Win 7 fun version by mrme function trigger alert'ready?'; fakeobject = document.getElementById"d"; // allocate the object...

Mozilla Firefox 3.6.16 mChannel Object Use After Free

Mozilla mChannel Object use after free - Found by regenrecht - MSF exploit by Rh0 - Win 7 fun version by mrme function trigger alert'ready?'; fakeobject = document.getElementById"d"; // allocate the object fakeobject.QueryInterfaceComponents.interfaces.nsIChannelEventSink; // append to the object...

Mozilla Firefox 3.6.16 mChannel Object Use After Free Exploit (Win7)

Exploit for windows platform in category remote exploits Mozilla mChannel Object use after free - Found by regenrecht - MSF exploit by Rh0 - Win 7 fun version by mrme function trigger alert'ready?'; fakeobject = document.getElementById"d"; // allocate the object...

Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free

Mozilla mChannel Object use after free - Found by regenrecht - MSF exploit by Rh0 - Win 7 fun version by mrme function trigger alert'ready?'; fakeobject = document.getElementById"d"; // allocate the object fakeobject.QueryInterfaceComponents.interfaces.nsIChannelEventSink; // append to the object...

Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)

This host is missing an important security update according to Microsoft Bulletin MS11-059. OpenVAS Vulnerability Test $Id: secpodms11-059.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Data Access Components Remote Code Execution Vulnerabilities 2560656 Authors: Veerendra GG Copyright: Copyright...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmsactivebaractivexcontrolmultvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows ActiveX Control Multiple Vulnerabilities 2562937...

Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)

This host is missing an important security update according to Microsoft Bulletin MS11-064. OpenVAS Vulnerability Test $Id: secpodms11-064.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Stack Denial of Service Vulnerability 2563894 Authors: Veerendra GG Copyright: Copyright c 2011...

Microsoft Windows Kernel Denial of Service Vulnerability (2556532)

This host is missing an important security update according to Microsoft Bulletin MS11-068. OpenVAS Vulnerability Test $Id: secpodms11-068.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Denial of Service Vulnerability 2556532 Authors: Veerendra GG Copyright: Copyright c 2011 SecPod...

Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)

This host is missing an important security update according to Microsoft Bulletin MS11-059. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Insecure Library Loading Vulnerability (2269637)

This host is missing a critical security update according to Microsoft Security Advisory 2269637. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902792. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced...

Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)

This host is missing a critical security update according to Microsoft Bulletin MS11-063. OpenVAS Vulnerability Test $Id: secpodms11-063.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2567680 Authors: Antu Sanadi...

CVE-2011-1965

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

CVE-2011-1967

Winsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

CVE-2011-1871

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

Denial of service

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

CVE-2011-1971

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."...

CVE-2011-1971

The CVE-2011-1971 entry describes a Windows kernel vulnerability where the kernel’s file metadata parsing is flawed, enabling local users to trigger a denial-of-service (reboot) via a crafted file. Affected are Windows Vista SP2, Windows Server 2008 SP2, R2 and R2 SP1, and Windows 7 Gold/SP1. The...

CVE-2011-1965

CVE-2011-1965 corresponds to a denial-of-service vulnerability in the Windows TCP/IP stack (Tcpip.sys) where URL-based QoS handling could be abused to reboot the host. Affected products include Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1. The root cause is improper handling of UR...

CVE-2011-1967

Winsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

CVE-2011-1975

The CVE-2011-1975 entry describes an Untrusted search path vulnerability in the Data Access Tracing component of Windows Data Access Components (MDAC) 6.0. A local attacker could gain privileges by placing a Trojan horse DLL in the current working directory, demonstrated via a crafted Excel (.xls...