14244 matches found
MPEG-4 Codec RCE Vulnerability (975558)
This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)
Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege 983539 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability ...
MS Unicode Scripts Processor and MS Office Could Code Execution Vulnerability (2320113)
This host is missing a critical security update according to Microsoft Bulletin MS10-063. OpenVAS Vulnerability Test $Id: secpodms10-063.nasl 6538 2017-07-05 11:38:27Z cfischer $ MS Unicode Scripts Processor and MS Office Remote Code Execution Vulnerability 2320113 Authors: Antu Sanadi Copyright:...
Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)
Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution 975558 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in MPEG-4 codec. The vulnerabili...
WordPad Text Converters Remote Code Execution Vulnerability (2259922)
This host is missing a critical security update according to Microsoft Bulletin MS10-067. OpenVAS Vulnerability Test $Id: secpodms10-067.nasl 5361 2017-02-20 11:57:13Z cfi $ WordPad Text Converters Remote Code Execution Vulnerability 2259922 Authors: Veerendra G.G Copyright c 2010 SecPod,...
VulnCheck KEV: CVE-2010-2729
The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to...
Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)
This host is missing a critical security update according to Microsoft Bulletin MS10-065. OpenVAS Vulnerability Test $Id: secpodms10-065.nasl 6605 2017-07-07 11:22:07Z cfischer $ Microsoft Internet Information Services Remote Code Execution Vulnerabilities 2267960 Authors: Sooraj KS Copyright:...
Stuxnet Fallout: Microsoft Patches Critical Print Spooler Hole
Microsoft patched a zero day vulnerability in Windows Print Spooler that was used by Stuxnet and says that cross vendor cooperation may be the silver lining to the Stuxnet attack. Microsoft on Tuesday announced a software update to close a critical hole in a common service used by WIndows XP...
Adobe LiveCycle ES DLL Hijacking
www.BugReport.ir AmnPardaz Security Research Team Title: Adobe LiveCycle ES DLL Hijacking Exploit .dll Vendor: http://www.adobe.com/products/livecycle/ Vulnerable Version: 8.2.1.3144.1.471865 Exploitation: Remote Code Execution - Description: Adobe® LiveCycle® Enterprise Suite ES software can hel...
Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability
Description Microsoft WordPad Text Converter is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies...
NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit
Exploit for windows platform in category local exploits ======================================================== NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit ======================================================== / Exploit Title: NCP Secure Entry Client v.9.23.017 DLL Hijacking...
MS10-067: Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2259922)
The remote host contains a vulnerable version of Microsoft WordPad, Office, or Office Converter Pack. Opening a specially crafted Word 97 file can result in the execution of arbitrary code. A remote attacker could exploit this by tricking a user into opening a malicious Word file. C Tenable Netwo...
MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010
None None...
MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)
The MPEG-4 codec, which is included with Windows Media codecs, contains a buffer overflow vulnerability that can be triggered by a specially crafted media file that uses MPEG-4 video encoding. If an attacker can trick a user on the affected system into opening a specially crafted media file or...
Microsoft Windows and Office Uniscribe Font Parsing Engine Remote Code Execution Vulnerability
Description Microsoft Windows and Office are prone to a remote code-execution vulnerability when handling crafted font data. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context...
MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD)
The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...
MS10-012: Vulnerabilities in SMB Could Allow Remote Code Execution (971468) (uncredentialed check)
The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...
Prevx DLL preloading exploit
Exploit for windows platform in category local exploits ============================ Prevx DLL preloading exploit ============================ ============================ Prevx DLL preloading exploit ============================ ==================================================== = PREVX DLL...
QK SMTP Server 3 RCPT TO: Command DoS
Exploit for windows platform in category dos / poc ===================================== QK SMTP Server 3 RCPT TO: Command DoS ===================================== Author: antrhacks Software Link: http://www.qksoft.com/qk-smtp-server/download.php Version: 3.01 Platform: Windows XP SP3 Home editi...
Webkit Memory Corruption
TITLE: WEBKIT APPLE SAFARI 4.1.2/5.0.2 & GOOGLE CHROME 5.0.375.125 MEMORY CORRUPTION VULNERABILITY TESTED OS: WINDOWS XP SP3 SEVERITY: HIGH CVE-NUMBER: CVE-2010-1813 DISCOVERED DATE: 2010-06-29 FIXED DATE: GOOGLE CHROME 2010-07-26 & APPLE SAFARI 2010-09-08 FIXED VERSIONS: GOOGLE CHROME 5.0.375.12...