CVE-2011-2011

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages...

CVE-2011-2005

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages...

Privilege escalation

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege...

Design/Logic Flaw

Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in...

CVE-2011-2005

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege...

CVE-2011-2011

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages...

CVE-2011-1247

Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in...

Microsoft Windows Kernel Win32k.sys本地权限提升漏洞(MS11-077)(CVE-2011-1985)

BUGTRAQ ID: 49968 CVE ID: CVE-2011-1985 Microsoft Windows是流行的计算机操作系统。 Windows Kernel在Win32k.sys的实现上存在本地权限提升漏洞，远程攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)

This host is missing an important security update according to Microsoft Bulletin MS11-077. OpenVAS Vulnerability Test $Id: secpodms11-077.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2567053 Authors: Antu Sanadi Copyright: Copyright c 201...

MS Windows Ancillary Function Driver Privilege Elevation Vulnerability (2592799)

This host is missing an important security update according to Microsoft Bulletin MS11-080. OpenVAS Vulnerability Test $Id: secpodms11-080.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Ancillary Function Driver Privilege Elevation Vulnerability 2592799 Authors: Antu Sanadi Copyright: Copyright ...

CVE-2011-2005

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka “Ancillary Function Driver Elevation of Privilege...

Filmis 0.2 Beta Cross Site Scripting / SQL Injection

=================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis - Version 0.2 Beta SQL Injection and XSS...

Joomla Sgicatalog SQL Injection

Exploit Title: Joomla Component comsgicatalog = SQL Injection Vulnerability Google Dork: inurl:index.php?option=comsgicatalog Date: 2011-10-12 Author: BHG Security Center Home: Http://black-hg.org Software Link: http://joomlaapps.com/ Version: 1.x Tested on: Windows XP- Persian CVE : Webapps...

Microsoft Active Accessibility Remote Code Execution Vulnerability (2623699)

This host is missing an important security update according to Microsoft Bulletin MS11-075. OpenVAS Vulnerability Test $Id: secpodms11-075.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft Active Accessibility Remote Code Execution Vulnerability 2623699 Authors: Madhuri D Copyright: Copyright c...

MS11-077: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: October 11, 2011

None None...

PT-2011-3525 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 Description: The issue arises from improper validation of user-mode inp...

PT-2011-3549 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 Description: The issu...

Opera Browser 10/11/12 (SVG layout) Memory Corruption

Exploit for Opera Browser 10/11/12 SVG layout Memory Corruption 0day Vulnerability: Discovered: 2010-10-13 Patched: 0day Tested on: v10.xx v10.50, v10.51, v10.52, v10.53, v10.54, v10.6, v10.61, v10.62 and v10.63 v11.xx v11.00, v11.01, v11.10, v11.11, v11.50 and v11.51 Exploit: Coded: 2010-10-14...

PT-2011-3542 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...