CVE-2007-1537

CVE-2007-1537 affects NDISTAPI.sys in Windows XP SP2 and Windows Server 2003 SP1, where the device exposes weak permissions that allow local users to write to the device and trigger a denial of service. The documented exploit involves using an IRQL to acquire a spinlock on paged memory via NdisTa...

CVE-2008-1451

CVE-2008-1451 affects the Windows WINS service on: Windows 2000 Server SP4, Windows Server 2003 SP1/SP2 (including x64/Itanium variants listed in MS08-034). The vulnerability arises because WINS does not properly validate the data structures of crafted WINS network packets, enabling a local attac...

CVE-2005-2765

The CVE-2005-2765 entry concerns the Windows Firewall UI not properly displaying certain malformed Windows Registry entries. The underlying issue is an information-hiding condition that could enable attackers with already elevated (administrator) privileges to obscure activity when monitoring exc...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...