CVE-2013-1276

CVE-2013-1276 : A race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1) enables a local user to gain privileges and read arbitrary kernel memory via a crafted application. Multiple connected so...

CVE-2007-4677

CVE-2007-4677 : A heap-based buffer/boundary overflow in Apple QuickTime prior to 7.3 occurs while parsing the color table atom (CTAB) in QuickTime movie files. The vulnerability stems from an invalid color table size during CTAB RGB value processing, leading to heap corruption and potential arbi...

CVE-2007-5145

CVE-2007-5145 concerns multiple buffer overflows in Windows XP system DLLs (ntdll.dll; kernel32.dll) triggered by long strings in the File Properties fields (author, title, subject, comment). The issue involves improper handling of extended file attributes via FILE_INFORMATION_CLASS calls (e.g., ...

CVE-2010-1888

CVE-2010-1888 is a Windows kernel privilege-escalation vulnerability described as a race condition in NtCreateThread during thread initialization, which could allow a local user to gain higher privileges on affected Windows versions (notably Windows XP SP3). The issue centers on how the CONTEXT-r...

CVE-2011-0675

CVE-2011-0675 is a local privilege-escalation in Windows caused by a use-after-free in win32k.sys (kernel-mode drivers). Affected are Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold/SP1). The root cause is incorrect management of kernel...

CVE-2011-1228

CVE-2011-1228 affects Microsoft Windows kernel-mode driver component win32k.sys. A NULL pointer de-reference in win32k allowed local attackers to gain kernel-level privileges on affected OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7 Gold/SP1). The issue is...

CVE-2011-1232

CVE-2011-1232 affects Windows kernel-Mode drivers (win32k.sys) across XP SP2-SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/SP1, and Windows 7 Gold/SP1. Root cause: NULL pointer dereference in Win32k subsystem allows a crafted application to escalate privileges from local user to ke...

CVE-2011-1243

The CVE-2011-1243 issue affects the Windows Messenger ActiveX control (msgsc.dll) in Windows XP SP2/SP3. The vulnerability allows remote code execution via unspecified vectors that corrupt the system state. Affected product/component: Windows Messenger ActiveX in msgsc.dll. Root cause: control co...

CVE-2011-1879

CVE-2011-1879 is a local privilege-escalation in Win32k.sys (kernel-mode driver) caused by incorrect driver object management leading to a use-after-free. Affects Windows XP (SP2, SP3), Server 2003 (SP2), Vista (SP1, SP2), Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). Successful...

CVE-2012-1866

CVE-2012-1866 concerns a local privilege escalation in the Windows kernel-mode drivers, specifically the win32k.sys component. The issue arises from improper handling of user-mode input passed to kernel-mode driver objects, enabling a local attacker to gain elevated privileges via a crafted appli...

CVE-2013-1261

CVE-2013-1261 describes a race condition in the win32k.sys kernel‑mode driver that can enable local privilege escalation and allow an attacker to read arbitrary kernel memory. Affected products include various Windows versions listed in the initial document (XP SP2/SP3, Server 2003 SP2, Vista SP2...

CVE-2013-1268

CVE-2013-1268 is a race-condition flaw in the Windows kernel-mode driver win32k.sys that enables local privilege escalation. A crafted user-space application can trigger the vulnerability to gain privileges and read arbitrary kernel memory. Affected Windows versions include XP SP2/SP3, Server 200...

CVE-2002-1327

CVE-2002-1327 corresponds to a buffer overflow in the Windows Shell function used to extract audio file attributes (MP3/WMA) on Microsoft Windows XP. The flaw can be triggered remotely by a crafted audio file or through certain user interactions (folder browsing, web/HTML contexts) and could allo...

CVE-2002-2028

The CVE-2002-2028 entry concerns the Windows screensaver on Windows NT 4.0, 2000, XP, and 2002. The issue is that the screensaver does not verify whether a domain account has already been locked when a valid password is supplied, enabling easier brute-force attempts by users with physical access....

CVE-2004-0474

CVE-2004-0474 affects Help Center (HelpCtr.exe). A remote attacker can supply an http:// or file:// URL as the topic parameter in an hcp:// URL to read or execute arbitrary files. The provided documents do not specify affected versions, exploitation status, or remediation steps.

CVE-2005-0545

CVE-2005-0545 affects Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 in Active Directory environments. The issue allows local users to bypass group policies that restrict access to hidden drives by using Office 10 applications (Word/Excel) Browse feature or via a flash drive. The vulner...

CVE-2006-3648

CVE-2006-3648 describes an unhandled exception vulnerability in the Windows kernel/execution environment that could enable remote code execution on affected systems. The issue arises from improper exception handling in memory-resident applications, allowing a remote attacker to gain the same priv...

CVE-2007-3751

The connected CERT advisory confirms CVE-2007-3751 affects Apple QuickTime for Java prior to QuickTime 7.3, where untrusted Java applets may gain elevated privileges and allow remote arbitrary code execution. Impact is that a remote, unauthenticated attacker could act with the user’s privileges i...

CVE-2009-4310

CVE-2009-4310 concerns the Intel Indeo41 codec used by Windows Media Player. The issue is a stack-based buffer overflow in IV41 streams within AVI containers that allows remote code execution on Windows 2000 SP4, XP SP2/XP SP3, and Server 2003 SP2 when processing crafted video data. Affected comp...

CVE-2009-4312

CVE-2009-4312 concerns the Microsoft Windows Indeo codec and, per the provided documents, describes an unspecified vulnerability in the Indeo codec on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2 that could allow remote code execution via crafted media content. The OpenVAS entries also refer...

CVE-2010-0379

Mode C: The CVE-2010-0378/CVE-2010-0379 family concerns Adobe Flash Player 6.0.79 in the Macromedia Flash ActiveX control for Windows XP SP2/SP3. The use-after-free vulnerability in CVE-2010-0378 allows remote code execution when unloading a Flash object being accessed by a script, causing memory...

CVE-2010-3144

CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...

CVE-2010-3957

CVE-2010-3957 is a Windows OpenType Font (OTF) driver vulnerability (double-free) affecting Windows XP SP2–SP3, Server 2003 SP2, Vista SP1–SP2, Server 2008 Gold SP2/R2, and Windows 7. The issue resides in the OTF driver’s memory handling while parsing OpenType fonts, enabling local privilege esca...

CVE-2011-1226

The CVE-2011-1226 issue is a local privilege-escalation vulnerability in Windows kernel-mode driver code (win32k.sys) caused by a NULL pointer de-reference. A crafted local application can trigger this in multiple supported OS versions, including Windows XP (SP2–SP3), Windows Server 2003 (SP2), W...

CVE-2011-3401

This CVE affects Microsoft Windows Media Player and Windows Media Center (XP SP2/SP3, Vista SP2, Windows 7 SP1). The root cause is memory corruption when parsing specially crafted DVR-MS files, allowing remote code execution with the caller’s privileges. Affected components include ENCDEC.DLL use...

CVE-2004-1623

The CVE-2004-1623 entry concerns the WAV file property handler in Windows XP SP1, where processing a WAV file with an invalid header (fmt chunk length = 0xFFFFFFFF) can cause an infinite loop in Explorer, leading to a denial of service. Public sources confirm the affected software as Windows XP S...

CVE-2005-1184

The CVE-2005-1184 entry describes a DoS in the TCP/IP stack across multiple operating systems: a remote attacker sends a TCP packet with the correct sequence number but an incorrect Acknowledgement number, triggering a flood of keep-alive packets and CPU consumption. The impact is listed as Parti...

CVE-2006-4696

CVE-2006-4696 is a remote code execution vulnerability in the Windows Server Service (SMB Rename Vulnerability). It affects Windows 2000 SP4, Windows XP SP2 and earlier, and Windows Server 2003 SP1 and earlier, where a crafted SMB Rename request could cause the Server service to dereference an in...

CVE-2007-1212

The CVE-2007-1212 entry concerns a buffer overflow in the Graphics Device Interface (GDI) when processing Enhanced Metafile (EMF) images. Affected products listed in the initial description are Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, SP2; and Windows Vista. The underlying issue is a GDI ...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-2010-0719

CVE-2010-0719 affects multiple Windows client/server OSes (Windows 2000, XP, Server 2003, Vista, Server 2008, Windows 7). The root cause is an unspecified API that does not validate arguments, enabling local user privilege to trigger a denial of service (system crash) via a crafted application. T...

CVE-2013-3863

CVE-2013-3863 is the Windows OLE Property Vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises from parsing crafted OLE objects in files, enabling remote code execution without user interaction (contrary to some variants that require a user action, the core des...

CVE-2005-2388

CVE-2005-2388 describes a buffer overflow in a USB driver used on Microsoft Windows that could allow an attacker to execute arbitrary code. The provided documents do not specify the affected product name, exact driver version, or root cause details beyond the general buffer overflow. Exploit info...

CVE-2006-5586

CVE-2006-5586 is a GDI-based local privilege-elevation vulnerability in the Graphics Rendering Engine of Microsoft Windows 2000 SP4 and Windows XP SP2 (and related Windows variants). The flaw stems from processing invalid application window sizes when rendering layered windows, allowing a logged-...

CVE-2007-1492

CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...

CVE-2011-0039

The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...

CVE-2011-2600

The CVE-2011-2600 issue affects the GPU support in Windows XP, where rendering time is not properly restricted. This enables remote denial of service (system crash) via WebGL vectors using (1) shader programs or (2) complex 3D geometry, demonstrated by visiting lots-of-polys-example.html in the K...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

CVE-2004-0199

CVE-2004-0199 is a real vulnerability affecting the Help and Support Center in Windows XP and Windows Server 2003 SP1/64-Bit variants. The flaw arises from improper validation of HCP URLs (hcp://), enabling remote code execution when a user visits a crafted page or HTML e-mail that triggers the D...

CVE-2005-3981

Microsoft Windows XP, 2000, and 2003 are affected by a local-privilege issue where a user can kill a writable process by calling CreateRemoteThread on a process opened via OpenProcess, using certain arguments and potentially an invalid start routine address. The underlying cause involves manipula...

CVE-2005-4269

The affected component is mshtml.dll in Microsoft Windows XP, Windows Server 2003, and Internet Explorer 6.0 SP1. The issue arises when mshtml.dll processes button-focus events while a document is reloading, leading to a denial of service (access violation). This is observed in Microsoft Office I...

CVE-2006-0143

The Connected advisory CPAI-2006-171 documents a denial-of-service flaw in Microsoft Windows’ Graphics Rendering Engine (GRE) when parsing certain WMF files. Specifically, a crafted WMF with ExtCreateRegion or ExtEscape calls can trigger a memory read/parse error in GRE, causing the host applicat...

CVE-2006-0488

The CVE-2006-0488 entry concerns the VDM (Virtual DOS Machine) emulation environment in Windows 2000, Windows XP SP2, and Windows Server 2003. The issue allows local users to read the first megabyte of memory, potentially exposing sensitive information, as demonstrated by dumper.asm. This describ...

CVE-2006-3351

CVE-2006-3351 is a Windows Explorer vulnerability (explorer.exe) affecting Windows XP/2003 where parsing of .url files with InternetShortcut tags can overflow the stack. A crafted .url file containing a long URL and many file: specifiers may trigger a denial of service and possibly arbitrary code...

CVE-2006-3445

Summary (CVE-2006-3445) : A memory corruption and heap-based overflow exists in Microsoft Agent when processing specially crafted .ACF files. The flaw occurs in the ReadWideString handling within agentdpv.dll and can be triggered via a remote attack, typically by convincing a user to view a malic...

CVE-2007-0214

CVE-2007-0214 affects the HTML Help ActiveX control (hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2/Professional, and Windows Server 2003 SP1. The vulnerability arises from improper input validation in HTML Help ActiveX methods, leading to a remote code execution flaw if a user visits a specia...

CVE-2007-0933

The CVE-2007-0933 issue affects the D-Link DWL-G650+ wireless driver (version 6.0.0.18, Rev. A1) on Windows XP. It is a buffer overflow in the driver that can be triggered by a beacon frame containing a long TIM Information Element, leading to a denial of service (crash) and potentially arbitrary...

CVE-2007-3724

CVE-2007-3724 : The Windows XP kernel process scheduler does not use the kernel’s process statistics and instead bases scheduling on CPU billing gathered from periodic sampling ticks, which results in preferential treatment of “interactive” processes that sleep voluntarily. This behavior can allo...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

CVE-2013-1265

The CVE-2013-1265 entry describes a race condition in the kernel-mode driver win32k.sys that affects multiple Microsoft Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arb...