Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

xRadio 0.95b - '.xrl' Local Buffer Overflow (SEH)

GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray bar. + Information Title: xRadio 0.9...

Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. OpenVAS Vulnerability Test $Id: secpodms11-013.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Kerberos Privilege Escalation Vulnerabilities 2496930 Authors: Antu Sanadi Updated by: Antu Sanadi on 2011-03-17...

xRadio 0.95b Local Buffer Overflow

GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray bar. + Information Title: xRadio 0.9...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2479628)

This host is missing a critical security update according to Microsoft Bulletin MS11-012. OpenVAS Vulnerability Test $Id: secpodms11-012.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2479628 Authors: Sooraj KS Copyright: Copyright c 2011...

CVE-2011-0045

CVE-2011-0045 affects the Windows XP SP3 kernel “Trace Events” subsystem, specifically the WmiTraceMessageVa path. The vulnerability arises from improper type conversion that causes integer truncation, leading to insufficient memory allocation and a resulting buffer overflow. Exploitation enables...

CVE-2011-0045

The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. OpenVAS Vulnerability Test $Id: secpodms11-014.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows LSASS Privilege Escalation Vulnerability 2478960 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

CVE-2011-0087

The CVE-2011-0087 issue concerns the Windows kernel-mode driver win32k.sys, where user-mode input is not properly validated. This enables local privilege escalation, potentially allowing an attacker to gain complete control of the affected system. Affected products include Windows XP (SP2/SP3), S...

CVE-2011-0089

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

CVE-2011-0030

CVE-2011-0030 describes a CSRSS Elevation of Privilege vulnerability in Windows XP SP2/SP3 and Windows Server 2003 SP2. The Client/Server Run-time Subsystem (CSRSS) does not properly terminate processes after a user logs out, allowing a local attacker to keep a crafted process running into the ne...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

AoA Mp4 converter v4.1.0 ActiveX Stack Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

AoA MP4 Converter 4.1.0 ActiveX Stack Overflow

Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

AoA DVD Creator 2.5 ActiveX Stack Overflow

Exploit Title: AoA DVD Creator V2.5 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/aoadvdcreator.exe Version: v2.5 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

MS11-014: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)

The remote host allows elevation of privileges through its Local Security Authority Subsystem Service LSASS due to a failure to properly process specially crafted authentication requests. An attacker who has the ability to log on to the affected host can leverage this issue to gain full...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0086) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

AoA DVD Creator V2.5 ActiveX Stack Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0090) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

PT-2011-2076 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 through SP2 Windows Server 2008 versions Gold through SP2 and R2 Windows 7 affected versions not specified Description: The issue arises from...