CVE-2002-0694

The CVE-2002-0694 issue is tied to an unchecked buffer in Windows Help (Q323255) that affected Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP. Root cause: a vulnerability in the HTML Help facility could allow a remote attack...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2006-0008

The CVE-2006-0008 issue affects the Korean Input Method Editor (IME) on Windows XP SP1/SP2, Windows Server 2003 up to SP1, and Office 2003. A privilege-elevation flaw exists in the Korean IME; an attacker who can log on (locally or via Remote Desktop/Terminal Services) could exploit the ShellAbou...

CVE-2006-0376

CVE-2006-0376 affects the 802.11 wireless client in certain Windows family systems (Windows 2000, XP, Server 2003). The vulnerability arises because the client does not warn users when it associates with an ad hoc (peer-to-peer) station, or when a station in ad hoc mode associates with it. This o...

CVE-2006-5614

CVE-2006-5614 concerns Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2 with Internet Connection Sharing enabled. The vulnerability allows remote attackers to trigger a denial-of-service (svchost.exe crash) by sending a malformed DNS query that leads to a null pointer dere...

CVE-2007-1946

CVE-2007-1946 is described as an integer overflow in Windows Explorer on Windows XP SP1 that could allow denial of service and possibly arbitrary code execution via a crafted BMP image (w4intof.bmp). The connected OpenVAS and FreeBSD VuXML entries reference BMP/image parsing-related overflow issu...

CVE-2008-1441

CVE-2008-1441 describes a denial-of-service vulnerability in Pragmatic General Multicast (PGM) in Windows XP (SP2/SP3), Windows Server 2003 (SP1/SP2), Windows Vista (Gold/SP1), and Windows Server 2008. The flaw is due to improper validation in the PGM parser when handling malformed PGM fragments,...

CVE-2008-4036

CVE-2008-4036 describes a local elevation-of-privilege vulnerability in Windows memory management related to Virtual Address Descriptors (VADs). The root cause is an integer overflow when decrementing a memory allocation parameter, causing a memory allocation mapping error. Affected products incl...

CVE-2009-1546

CVE-2009-1546 is an AVI parsing vulnerability in Windows where an integer overflow in Avifil32.dll used by the AVI/RIFF handling code can allow remote code execution when a user opens a specially crafted AVI file. The issue affects multiple Windows editions (2000 SP4, XP SP2/SP3, Server 2003 SP2,...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...

CVE-2010-0491

CVE-2010-0491 is the IE HTML Object Memory Corruption vulnerability (Use-after-free) affecting Internet Explorer 5.01 SP4, 6, and 6 SP1. Exploitation requires crafting a page with an onreadystatechange handler to trigger arbitrary code execution; Microsoft documented this as part of MS10-018 and ...

CVE-2010-2740

The CVE-2010-2740 entry corresponds to two Windows OpenType Font (OTF) format driver vulnerabilities (CVE-2010-2740 and CVE-2010-2741) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The OpenType Font (OTF) format driver is vulnerable in how it allocates memory when parsing specially cr...

CVE-2010-2741

CVE-2010-2741 is a local elevation-of-privilege vulnerability in the Windows OpenType Font (OTF) format driver. OpenType fonts processed by the OTF driver could trigger improper integer calculations during parsing, enabling kernel-mode code execution when a specially crafted font is opened locall...

CVE-2011-0671

The CVE-2011-0671 issue affects Windows kernel-mode driver win32k.sys and is caused by a use-after-free from incorrect driver object management. Affects Windows XP SP2-SP3, Server 2003 SP2, Vista SP1-SP2, Server 2008 Gold/SP2/R2 and R2 SP1, and Windows 7 Gold/SP1. Local privilege escalation is po...

CVE-2011-1241

The CVE-2011-1241 entry details a use-after-free in the Windows kernel-mode driver Win32k.sys that can allow local privilege escalation via crafted code, due to incorrect driver object management. Affected products/versions include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP...

CVE-2011-1869

The CVE-2011-1869 issue affects the Distributed File System (DFS) implementation on multiple Windows platforms (Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2/R2 SP1, Windows 7 Gold/SP1). A crafted DFS referral response can be sent by a remote ...

CVE-2013-1267

CVE-2013-1267 describes a race condition in the win32k.sys kernel-mode driver that can be exploited locally to gain privileges and read arbitrary kernel memory. Affected platforms include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1, as indicated in the pr...

CVE-2013-3865

Win32k Multiple Fetch Vulnerability (CVE-2013-3865) affects multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, Windows RT). It allows local privilege escalation through a crafted application affecting win32k.sys in kernel-mode drivers...

CVE-2013-3866

CVE-2013-3866 is a Windows kernel‑mode driver privilege escalation in Win32k.sys affecting multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, Server 2012, Windows RT). The root cause is a crafted application that allows local users to gain...

CVE-2003-0812

CVE-2003-0812 corresponds to a stack-based buffer overflow in the Windows Workstation Service (WKSSVC.DLL) that can be exploited via RPC to achieve remote code execution through NetAddAlternateComputerName logging paths. Affected platforms include Windows 2000 and Windows XP (and 64‑bit edition p...

CVE-2004-0123

CVE-2004-0123 (ASN.1 “Double Free”) affects Windows platforms including NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The issue is a potential memory-management error caused by a possible double-free condition in the Microsoft ASN.1 Library, which could lead to memory corruption and,...

CVE-2004-0979

Internet Explorer on Windows XP fails to honor the security setting for “Drag and drop or copy and paste files” when the user selects Disable or Prompt. This weakness can allow drag-and-drop operations to occur contrary to user intent, potentially enabling security-sensitive actions (e.g., copyin...

CVE-2004-1043

CVE-2004-1043 describes a cross-domain vulnerability in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer. If one hhctrl.ocx instance opens a Related Topics window in one domain and another opens content in a different domain with the same window name, the content can run in th...

CVE-2006-0005

The CVE-2006-0005 vulnerability is a buffer overflow in the Windows Media Player plug-in (npdsplay.dll) used by non‑Microsoft browsers. When a user views HTML containing an EMBED tag with a long src attribute, it may allow remote code execution in the user’s context. Affected software includes Wi...

CVE-2006-0006

CVE-2006-0006 is a heap-based buffer overflow in Windows Media Player’s bitmap processing. A crafted BMP can trigger an overflow when the file declares a size of 0, allowing remote code execution. Affected products/versions include Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on W...

CVE-2006-3873

CVE-2006-3873 describes a heap-based buffer overflow in URLMON.DLL of Microsoft Internet Explorer 6 SP1 on Windows 2000/XP SP1, exploitable via a long URL in a GZIP-compressed HTTP-redirected web page. The issue is tied to an incomplete fix for CVE-2006-3869 and is mitigated by applying the MS06-...

CVE-2006-4071

CVE-2006-4071 affects Microsoft Windows XP and Windows Server 2003 (gdi32.dll). Vulnerable component: createBrushIndirect in GDI; root cause: sign extension issue that allows a crafted WMF file to crash the application (user-assisted DoS). Impact: denial of service via crash. Exploitation details...

CVE-2006-6659

CVE-2006-6659 affects the Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2. The vulnerability allows remote attackers to cause a denial of service by presenting crafted HTML, resulting in an Internet Explorer 7 hang. The connected Red Hat and NVD records reiterate ...

CVE-2007-4675

CVE-2007-4675 summary (Apple QuickTime): A heap-based buffer overflow in the QuickTime VR extension (QTVR) 7.2.0.240, embedded in QuickTime.qts, allows remote code execution when a user opens a specially crafted QTVR movie file. The vulnerability is caused by an unvalidated size field in the pano...

CVE-2010-0235

CVE-2010-0235 is the Windows Kernel Symbolic Link Value Vulnerability. The provided documents confirm a denial-of-service impact (system becomes unresponsive and reboots) caused by improper validation of symbolic link values when created by the Windows kernel. Affected products (per MS10-021 and ...

CVE-2010-0238

CVE-2010-0238 corresponds to the Windows Kernel Registry Key Vulnerability. A denial-of-service occurs when the Windows kernel validates registry keys, enabling a crafted local app to cause the system to become unresponsive and reboot on affected products: Windows 2000 SP4, XP SP2/SP3, Server 200...

CVE-2010-2563

CVE-2010-2563 affects WordPad Word 97 Text Converter memory handling in WordPad Text Converters on Windows XP SP2/SP3 and Windows Server 2003 SP2. A vulnerability arises from parsing malformed fields in Word 97 documents, causing memory corruption that could allow remote code execution when a use...

CVE-2010-2567

CVE-2010-2567 is an RPC memory corruption vulnerability in the Windows XP SP2/SP3 and Windows Server 2003 SP2 RPC client. The root cause is improper memory allocation while parsing RPC responses, which allows a remote server or a man-in-the-middle attacker to execute arbitrary code via a malforme...

CVE-2011-0030

CVE-2011-0030 describes a CSRSS Elevation of Privilege vulnerability in Windows XP SP2/SP3 and Windows Server 2003 SP2. The Client/Server Run-time Subsystem (CSRSS) does not properly terminate processes after a user logs out, allowing a local attacker to keep a crafted process running into the ne...

CVE-2011-0042

The CVE-2011-0042 issue affects Windows Media Player/Windows Media Center where SBE.dll in the Stream Buffer Engine mis-parses DVR-MS files. This parsing flaw can enable remote code execution via a crafted DVR-MS file on multiple Windows versions (XP SP2/SP3, XP MCE 2005 SP3, Vista SP1/SP2, Windo...

CVE-2011-1236

CVE-2011-1236 is a use-after-free vulnerability in win32k.sys (kernel-mode driver) affecting multiple Windows OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/R2 SP1, Windows 7 Gold/SP1). The issue arises from incorrect driver object management in the Win32k subsys...

CVE-2011-1242

CVE-2011-1242 is a Win32k.sys use-after-free local privilege-escalation vulnerability. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/R2 SP1, and Windows 7 SP1. Cause: incorrect management of kernel-mode driver objects in win32k.sys leading to use-after-free...

CVE-2011-1886

CVE-2011-1886: Information-disclosure in Win32k.sys (Windows XP SP3 kernel-mode driver) due to improper validation of function parameters, enabling local users to read kernel memory via a crafted application that triggers a NULL pointer dereference. Affected component is Win32k.sys; impact is ker...

CVE-2013-1251

CVE-2013-1251 describes a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and potential reading of arbitrary kernel memory. Affected products and versions include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 200...

CVE-2013-1253

The CVE concerns a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arbitrary kernel memory via a crafted applic...

CVE-2013-1264

CVE-2013-1264 describes a race condition in the Windows kernel driver win32k.sys that enables local privilege escalation and the potential to read arbitrary kernel memory. Affected products/versions include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 ...

CVE-2013-1343

Technical details for CVE-2013-1343 are not publicly available in the provided documents; affected components, impact, and remediation are not specified here. Monitor for updates from NVD and EUVD sources.

CVE-2001-1200

CVE-2001-1200 affects Microsoft Windows XP. The vulnerability allows local users to bypass a locked screen and execute programs associated with hot keys. The NVD entry lists a local attack vector with low complexity and complete impact to confidentiality, integrity, and availability (base score 7...

CVE-2002-0034

The CVE-2002-0034 issue concerns Microsoft CONVERT.EXE on Windows 2000/XP when converting FAT32 to NTFS. The vulnerability arises because default NTFS permissions are not applied during conversion, potentially producing a filesystem with less secure permissions than expected. Public sources (NVD/...

CVE-2003-0909

Concrete details show CVE-2003-0909 (Windows Management Vulnerability) affects Windows XP: a local attacker can create elevated-privilege tasks via eventtriggers.exe or Task Scheduler to execute arbitrary code. The MS04-011 bulletin documents the vulnerability and remediation: exploitation requir...

CVE-2004-0116

CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...

CVE-2005-0057

Microsoft’s MS05-015 fixes a remote code execution flaw in the Hyperlink Object Library (Hlink.dll) affecting Windows 98, 2000, XP, and Server 2003. The vulnerability arises from an unchecked buffer when handling hyperlinks, potentially allowing arbitrary code execution if a user clicks a crafted...

CVE-2005-0688

CVE-2005-0688 is described as a Land-like DoS affecting Windows XP SP2, Windows Server 2003 SP1, and Longhorn when the Windows Firewall is off. The vulnerability arises from processing of a TCP packet with the SYN flag set where the source and destination IP and port are identical, causing CPU co...

CVE-2005-4696

CVE-2005-4696 concerns the Microsoft Wireless Zero Configuration system (WZCS). The vulnerability arises because WZCS stores WEP keys and pair‑wise Master Keys (PMKs) for the WPA pre‑shared key in plaintext in the memory of the explorer process, enabling attackers with local memory access to extr...

CVE-2006-4702

CVE-2006-4702 is a remote code execution vulnerability in the Windows Media Format Runtime used by Windows Media Player 6.4 and Windows XP SP2, Server 2003 and SP1. The root cause is an unchecked buffer overrun while processing ASF files, allowing a crafted ASF file to execute arbitrary code with...