Microsoft Windows XP/ME - Help and Support Center Buffer Overflow

// source: https://www.securityfocus.com/bid/6966/info The Microsoft Windows ME Help and Support Center is prone to a buffer overflow. This is due to insufficient bounds checking on input supplied through the HCP URI parameter. An attacker can exploit this vulnerability by making a HCP request wi...

Microsoft Windows XP - Redirector Privilege Escalation

Microsoft Windows XP - Redirector Privilege Escalation source: https://www.securityfocus.com/bid/6778/info The Microsoft Windows XP Redirector does not properly handle certain parameters that are passed to it. If one of these parameters was unusually long, a buffer could be overrun, resulting in...

Buffer overflow in Microsoft Windows Shell

Overview A remotely exploitable buffer overflow exists in the Microsoft Windows Shell. This buffer overflow is present in all versions of Windows XP, but it is not present in other versions of Windows. Description There is a buffer overflow in the Microsoft Windows Shell. The Shell provides the...

Microsoft Windows XP/2000/NT 4.0 - Help Facility ActiveX Control Buffer Overflow

// source: https://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context of the current user. / By...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (1)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 1 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (3)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 3 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (7)

source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with local...

[NT] Excel XP XML Stylesheet Security Problem

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

MS Office XP - the more money I give to Microsoft, the more vulnerable my Windows computers are

Georgi Guninski security advisory 49, 2001 MS Office XP - the more money I give to Microsoft, the more vulnerable my Windows computers are Systems affected: Win2K + IE 5.5 SP1 fully patched + Office XP. It was reported to work with IE6 beta also. Risk: High Date: 12 July 2001 Legal Notice: This...

CVE-2000-1081

Microsoft SQL Server extended stored procedures vulnerability CVE-2000-1081 affects xp_displayparamstmt in SQL Server and MSDE. The issue arises from insufficiently restricting the input buffer length before calling srv_paraminfo in the Extended Stored Procedures API, enabling potential denial of...

Security Update for DirectX 9 for Windows XP (KB904706)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using DirectShow and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows XP (KB974392)

A security issue has been identified that could allow an authenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...

Q323172: Security Update (Windows XP)

This update resolves the "Flaw in Digital Certificate Enrollment Component Allows Certificate Deletion" security vulnerability in Windows XP. Download now to help stop a Web site or HTML e-mail from deleting digital certificates on your computer and preventing you from using the services they are...

Q329390: Security Update

An identified security vulnerability in Windows XP could enable an attacker to compromise a user's Microsoft® Windows®-based computer and gain complete control over it, if the user visited the attacker's web site or took other, less likely, actions. You can help protect your computer from this an...

Security Update for Windows XP (KB932168)

A security issue has been identified in Microsoft Agent that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...