PT-2008-3746 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to a double free condition in the Windows kernel, allowing local users to gain privileges via a crafted application. This could enable an attacker to run...

[W02-1008] GearSoftware Powered Products Local Privilege Escalation (Microsoft Windows Kernel IopfCompleteRequest Integer Overflow)

HTML FORMATED Advisory http://www.wintercore.com/advisories/advisoryW021008.html TEXT VERSION GearSoftware Powered Products Local Privilege Escalation + GEARASpiWDM.sys Insecure Method + Microsoft Windows Kernel IopfCompleteRequest Integer Overflow :: Summary 1. Background 2. Non-technical...

Windows kernel vulnerability ms08025 analysis-vulnerability warning-the black bar safety net

Source:security focus Author: Polymorphours Email: [email protected] Homepage:http://www.whitecell.org Date: 2008-04-10 After internal discussion, it was decided to publish the analysis results. 4 on No. 8, microsoft again released a kernel patchKB941693, Microsoft the vulnerability is...

MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31798;...

PT-2008-2682 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Vista SP1 Microsoft Windows Server versions 2003 SP1 through 2008 Description: The issue is related to improper input validation in the Windows kernel, allowing local users to execute arbitrary code...

Microsoft Windows ICMP Fragmented Packet Denial of Service (MS08-001; CVE-2007-0066)

The Internet Control Message Protocol ICMP is one of the core protocols of the Internet protocol suite. The vulnerability is due to an error in the way that Windows Kernel processes fragmented router advertisement ICMP queries. Successful exploitation could allow a denial of service on the affect...

Microsoft Security Bulletin MS07-066 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)

Microsoft Security Bulletin MS07-066 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege 943078 Published: December 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability in the Windows...

CVE-2007-1973

Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...

CVE-2007-1973

CVE-2007-1973 describes a race condition in the Windows NTVDM (VDM) path where incorrect permissions on a mapped memory segment (PAGE_READWRITE to a PhysicalMemory view) allow a local user to modify memory and gain privileges via the \Device\PhysicalMemory handle. The related details indicate aff...

CVE-2007-1206

The Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions PAGEREADWRITE for a physical memory view, which allows local users to gain privileges by modifying th...

Race condition

The Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions PAGEREADWRITE for a physical memory view, which allows local users to gain privileges by modifying th...

CVE-2007-1206

CVE-2007-1206 describes a Windows Kernel local privilege elevation due to incorrect permissions on a mapped memory segment (PAGE_READWRITE) for a physical memory view, enabling an unprivileged user to modify the zero page and gain privileges. Affected systems include Windows NT 4.0; 2000 SP4; XP ...

MS07-022: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw which could allow a local user to elevate privileges or to crash it therefore causing a denial of service. Tenable Network Security, Inc. include"compat.inc"; if description scriptid25025;...

Microsoft Windows Kernel vulnerable to privilege escalation

Overview The Microsoft Windows Kernel contains a privilege escalation vulnerability that may allow a local attacker to take control of the system. Description The Microsoft Windows Kernel fails to properly set permissions when mapping to a memory segment. By running a specially crafted applicatio...

Windows kernel GDI structures privilege escalation

It's possible to remap read-only share memory section in write mode...

Multiple Windows kernel security vulnerabilities

Buffer overflow vulnerability allows privilege escalation, WinLogon user profile DLL privilege escalation, unhandled exception code execution vulnerability...

MS Windows (Windows Kernel) Privilege Escalation Exploit (MS06-049)

Exploit for unknown platform in category local exploits =================================================================== MS Windows Windows Kernel Privilege Escalation Exploit MS06-049 =================================================================== / MS06-049 Windows ZwQuerySystemInformati...

Microsoft Windows Kernel vulnerable to privilege escalation

Overview Microsoft Windows contains a privilege escalation vulnerability that could allow an authenticated, local attacker to gain complete control of the affected system. Description Winlogon is the component of Microsoft Windows responsible for interactive, security related functions. Upon logo...

Microsoft Security Bulletin MS06-051 Vulnerability in Windows Kernel Could Result in Remote Code Execution (917422)

Microsoft Security Bulletin MS06-051 Vulnerability in Windows Kernel Could Result in Remote Code Execution 917422 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Ratin...

Microsoft Security Bulletin MS06-049 Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958)

Microsoft Security Bulletin MS06-049 Vulnerability in Windows Kernel Could Result in Elevation of Privilege 920958 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Elevation of Privilege Maximum Severity...