CVE-2010-0477

CVE-2010-0477 is a remote code execution vulnerability in the Microsoft SMB client. The SMB client in Windows 7 and Windows Server 2008 R2 can be tricked by specially crafted SMB responses (affecting both SMBv1 and SMBv2), allowing an unauthenticated remote attacker to execute arbitrary code on t...

CVE-2010-0270

The CVE-2010-0270 entry describes a remote code execution/memory corruption vulnerability in the SMB client of Windows 7 and Windows Server 2008 R2. The SMB client fails to properly validate fields in SMB responses (SMB transaction responses), for both SMBv1 and SMBv2, allowing remote SMB servers...

CVE-2010-0270

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted 1 SMBv...

CVE-2010-0481

The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Virtual...

CVE-2010-0482

CVE-2010-0482 is the Windows Kernel Malformed Image Vulnerability affecting the Windows kernel in Windows 7 and Windows Server 2008 R2. The issue arises from improper validation of the relocation section of crafted image files, enabling a local attacker to trigger a denial of service (system rebo...

PT-2010-2242 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Windows Vista versions Gold, SP1, and SP2 Windows Server 2008 versions Gold, SP2, and R2 Windows 7 Description: A denial of service issue exists due to the improper translation of a registry key's virtual path to its real path by the Windows...

Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-020. OpenVAS Vulnerability Test $Id: secpodms10-020.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 980232 Authors: Antu Sanadi Updated By: Madhuri D on...

Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)

This host is missing an important security update according to Microsoft Bulletin MS10-021. OpenVAS Vulnerability Test $Id: secpodms10-021.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Could Allow Elevation of Privilege 979683 Authors: Veerendra G Updated By: Madhuri D on...

Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-022. OpenVAS Vulnerability Test $Id: secpodms10-022.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability 980232 Authors: Antu Sanadi Updated By: Madhuri...

CVE-2010-0477: Undefined Security Weakness

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...

CVE-2010-0482: Improper Input Validation

The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."...

Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)

This host is missing a critical security update according to Microsoft Bulletin MS10-019. OpenVAS Vulnerability Test $Id: secpodms10-019.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Authentication Verification Remote Code Execution Vulnerability 981210 Authors: Veerendra G Updated B...

CVE-2010-0270: Improper Input Validation

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted 1 SMBv...

Microsoft Plugs Critical Drive-By Download Holes

Microsoft today released 11 security bulletins with fixes for a total of 25 security vulnerabilities, including several flaws that expose users to browse-and-you’re-hacked malicious drive-by download attacks. Two of the bulletins are rated “critical” for all versions of Microsoft’s flagship...

MS Will Patch Unknown Windows 7 Bug

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can’t be exploited. Read the full article. Computerworld...

Microsoft Windows Kernel Virtual Path Local Denial Of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers may exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...

MS Patch Tuesday Heads-up: 11 Bulletins, 25 Vulnerabilities

Microsoft plans to release 11 security bulletins on Tuesday April 13, 2010 to fix multiple vulnerabilities that expose Windows users to remote code execution attacks. Five of the 11 bulletins will be rated “critical,” Microsoft’s highest severity rating. The flaws affect all versions of Windows,...

CDTrustee Crash Proof Of Concept

Exploit Title: CDTrustee .BAK Local Crash POC Date: March 30, 2010 Software Link: http://www.base40.com/cdtDownload.html Version: 2.06 Tested on: WinXP SP3 and Windows 7 Cost: 39.95 USD Author: chap0 Email: chap0x90atgmaildotcom Site: http://www.setfreesecurity.com Usage: Install software, run th...

CDTrustee - .BAK Local Crash (PoC)

CDTrustee - .BAK Local Crash PoC Exploit Title: CDTrustee .BAK Local Crash POC Date: March 30, 2010 Software Link: http://www.base40.com/cdtDownload.html Version: 2.06 Tested on: WinXP SP3 and Windows 7 Cost: 39.95 USD Author: anonymous Site: http://www.setfreesecurity.com Usage: Install software...

CDTrustee .BAK Local Crash POC

Exploit for windows platform in category dos / poc ============================== CDTrustee .BAK Local Crash POC ============================== Exploit Title: CDTrustee .BAK Local Crash POC Date: March 30, 2010 Software Link: http://www.base40.com/cdtDownload.html Version: 2.06 Tested on: WinXP S...