CVE-2007-1211

CVE-2007-1211 is the WMF/GDI-related vulnerability affecting Windows 2000 SP4, XP SP2, and Windows Server 2003 SP1/SP2 where a crafted WMF triggers an invalid dereference in a kernel structure, enabling user-assisted denial of service (potential persistent restart). The CVE is linked to CVE-2005-...

CVE-2008-3464

CVE-2008-3464 (AFD Kernel Overwrite Vulnerability) is an elevation-of-privilege bug in the Microsoft AFD driver (afd.sys). It arises from improper validation of input passed from user mode to the Windows kernel, allowing a local attacker to execute arbitrary code with kernel privileges. Affected ...

CVE-2009-3673

Microsoft Internet Explorer 7/8 are affected by CVE-2009-3673 (Uninitialized Memory Corruption). A remote code execution vulnerability exists due to improper handling of memory for objects that are uninitialized or deleted, exploitable via a specially crafted web page and potentially via heap spr...

CVE-2010-0235

CVE-2010-0235 is the Windows Kernel Symbolic Link Value Vulnerability. The provided documents confirm a denial-of-service impact (system becomes unresponsive and reboots) caused by improper validation of symbolic link values when created by the Windows kernel. Affected products (per MS10-021 and ...

CVE-2010-1098

The CVE-2010-1098 entry describes a denial-of-service flaw in the ANI parser found in Microsoft Windows prior to 7 on x86, used by Internet Explorer and other apps. A crafted biClrUsed value in the BITMAPINFO header of a .ANI file can cause memory and CPU exhaustion, leading to a DoS condition. A...

CVE-2010-1891

CVE-2010-1891 affects the Windows Client/Server Runtime Subsystem (CSRSS) in the Win32 subsystem on Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability stems from improper memory allocation for transactions when Chinese, Japanese, or Korean locales are enabled, allowing local users ...

CVE-2011-0089

CVE-2011-0089 affects Windows kernel-mode driver win32k.sys across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The issue is improper validation of user-mode data by the Win32k subsystem, enabling local users to gain privileges via a c...

CVE-2011-0660

The CVE-2011-0660 issue is a remote code execution vulnerability in the SMB client of several Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7 SP1). Root cause: the SMB client incorrectly validates crafted SMB responses (SMBv1 or SMBv2), enablin...

CVE-2011-0666

CVE-2011-0666 is a use-after-free vulnerability in the Windows kernel-mode driver win32k.sys affecting Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). The issue arises from incorrect driver object manageme...

CVE-2011-1227

CVE-2011-1227 affects the Windows kernel’s win32k.sys (kernel-mode drivers). The vulnerability is a NULL pointer de-reference in the Win32k subsystem that enables local attackers to gain privileges on multiple Windows versions, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista ...

CVE-2011-1234

CVE-2011-1234 is a use-after-free vulnerability in the Windows kernel-mode driver component win32k.sys that enables local privilege escalation. The issue arises from incorrect driver object management in the kernel, affecting multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, ...

CVE-2011-2018

CVE-2011-2018 affects multiple Windows OS kernels (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP0/SP1). Root cause: the Windows kernel fails to initialize objects properly, enabling a local attacker to gain SYSTEM privileges via a crafted application (Windows Kernel Except...

CVE-2012-2527

CVE-2012-2527 is a use-after-free vulnerability in win32k.sys (kernel-mode drivers) that affects Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows 7 Gold/SP1. The flaw allows local users to gain privileges via a crafted application, wit...

CVE-2013-1267

CVE-2013-1267 describes a race condition in the win32k.sys kernel-mode driver that can be exploited locally to gain privileges and read arbitrary kernel memory. Affected platforms include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1, as indicated in the pr...

CVE-2013-1280

CVE-2013-1280 relates to multiple Windows kernel privilege-escalation vulnerabilities (the Windows kernel’s improper handling of objects in memory). Affected products span Windows XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012 and Windows RT. Root ...

CVE-2013-3878

CVE-2013-3878 describes a local POST- exploitation vulnerability in the LRPC client of Microsoft Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue is a stack-based buffer overflow triggered when an LRPC server sends a crafted LPC port message, allowing an authenticated local attacker to g...

CVE-2003-0909

Concrete details show CVE-2003-0909 (Windows Management Vulnerability) affects Windows XP: a local attacker can create elevated-privilege tasks via eventtriggers.exe or Task Scheduler to execute arbitrary code. The MS04-011 bulletin documents the vulnerability and remediation: exploitation requir...

CVE-2004-1306

The connected advisories confirm a heap-based buffer overflow in winhlp32.exe that can be triggered by a crafted .hlp file, exposing remote code execution on affected Windows versions: Windows NT, Windows 2000 (SP4), Windows XP (SP2), and Windows Server 2003. Root cause: unsafe handling during ph...

CVE-2005-0551

CVE-2005-0551 corresponds to a local privilege-elevation vulnerability in CSRSS (Client Server Runtime Subsystem) via WINSRV.DLL handling a console window FaceName string. A stack-based buffer overflow in CONSOLE_STATE_INFO (FaceName[32]) can be triggered by a crafted console window, enabling a l...

CVE-2006-1591

CVE-2006-1591 describes a heap-based buffer overflow in Microsoft Windows Help winhlp32.exe caused by improper parsing of malformed .hlp files. The vulnerability permits user-assisted attackers to execute arbitrary code by crafting an embedded image data payload within a Windows Help (.hlp) file....

CVE-2006-3442

This CVE affects Microsoft Windows XP (XP SP1/SP2) with the MSMQ/ Pragmatic General Multicast (PGM) implementation. The root cause is an invalid memory access/buffer overflow in PGM within MSMQ, enabling a remote attacker to execute code on a vulnerable system by sending a specially crafted multi...

CVE-2008-1445

CVE-2008-1445 corresponds to a denial-of-service vulnerability in Active Directory affecting Windows 2000 Server SP4, Windows XP Professional SP2/SP3, Windows Server 2003 SP1/SP2, and Windows Server 2008. The issue arises from insufficient validation of specially crafted LDAP requests, allowing r...

CVE-2009-4309

CVE-2009-4309 describes a heap-based buffer overflow in the Intel Indeo41 codec used by Windows Media Player, affecting Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The flaw arises from missing bounds checking on a size field in the IV41/movi record of an IV41 stream, permitting remote atta...

CVE-2009-4311

CVE-2009-4311 describes an unspecified vulnerability in Microsoft's Indeo codec used by Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2, enabling remote code execution via crafted media content. Connected documents reference multiple SoCs (OpenVAS/NVD) and Microsoft security advisories (KB95575...

CVE-2011-0043

CVE-2011-0043 affects Kerberos in Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is use of weak hashing (CRC32) in service tickets, enabling local privilege escalation by a crafted service ticket. Public mitigations are documented in MS11-013, which addresses Kerberos-related elev...

CVE-2011-0674

CVE-2011-0674 is a use-after-free in the Windows kernel-mode driver win32k.sys that allows local privilege escalation. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 SP2/R2, and Windows 7 SP1. Root cause: incorrect management of k...

CVE-2011-1233

The CVE-2011-1233 issue affects Windows kernel (win32k.sys) across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7 Gold/SP1). The vulnerability is a NULL pointer de-reference in win32k.sys that enables local privilege escalation via a craft...

CVE-2013-1256

CVE-2013-1256 describes a race condition in the Windows kernel-mode driver win32k.sys that allows local privilege escalation and reading arbitrary kernel memory. Affected products span Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows 7...

CVE-2013-1258

CVE-2013-1258 is a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The vulnerability allows local users to gain privileges and read arbitrary kernel memory via a crafted application. Mul...

CVE-2013-1264

CVE-2013-1264 describes a race condition in the Windows kernel driver win32k.sys that enables local privilege escalation and the potential to read arbitrary kernel memory. Affected products/versions include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 ...

CVE-2013-1271

CVE-2013-1271 is a race condition in the Windows kernel-mode driver win32k.sys that allows local users to gain privileges and read arbitrary kernel memory. Affected products/versions include Windows XP SP2-SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Win...

CVE-2001-1200

CVE-2001-1200 affects Microsoft Windows XP. The vulnerability allows local users to bypass a locked screen and execute programs associated with hot keys. The NVD entry lists a local attack vector with low complexity and complete impact to confidentiality, integrity, and availability (base score 7...

CVE-2002-0692

The CVE-2002-0692 issue concerns a buffer overflow in Microsoft FrontPage Server Extensions’ SmartHTML interpreter (shtml.dll). FPSE 2000 is affected by denial of service (CPU consumption); FPSE 2002 can allow remote code execution via a crafted web-file request. The vulnerability is tied to the ...

CVE-2003-0812

CVE-2003-0812 corresponds to a stack-based buffer overflow in the Windows Workstation Service (WKSSVC.DLL) that can be exploited via RPC to achieve remote code execution through NetAddAlternateComputerName logging paths. Affected platforms include Windows 2000 and Windows XP (and 64‑bit edition p...

CVE-2005-4696

CVE-2005-4696 concerns the Microsoft Wireless Zero Configuration system (WZCS). The vulnerability arises because WZCS stores WEP keys and pair‑wise Master Keys (PMKs) for the WPA pre‑shared key in plaintext in the memory of the explorer process, enabling attackers with local memory access to extr...

CVE-2007-1205

CVE-2007-1205 is a remote code execution vulnerability in Microsoft Agent (msagent\agentsvr.exe) on Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1/SP2. The flaw arises from how Microsoft Agent handles certain specially crafted URLs, leading to memory corruption and arbitrary code e...

CVE-2007-5352

CVE-2007-5352 is a local privilege-escalation vulnerability in Microsoft Windows LSASS. The root cause is LSASS’s improper handling of specially crafted LPC requests, which could allow a local attacker to execute code with SYSTEM privileges and take full control of the affected system. Affected p...

CVE-2008-0083

CVE-2008-0083 affects Microsoft VBScript/JScript scripting engines (VBScript.dll and JScript.dll) version 5.1 and 5.6 used in Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. A vulnerability in decoding scripts in Web pages and in memory loading could allow remote code execution through unknown...

CVE-2008-2251

CVE-2008-2251 describes a kernel double-free vulnerability in Windows that allows local privilege escalation when a crafted multi-threaded system-call flow mishandles user-supplied data. Affected products include Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Windows Vista (Gold/SP1), and Win...

CVE-2009-2196

The provided data confirms CVE-2009-2196 affects Apple Safari before 4.0.3. The vulnerability is described as an unspecified issue that allows a remote web server to place an arbitrary website in Safari’s Top Sites view, potentially enabling phishing attacks via unknown vectors. Connected OpenVAS...

CVE-2011-1235

CVE-2011-1235 is a Windows kernel–mode driver use‑after‑free vulnerability in the Win32k subsystem (win32k.sys). Documents confirm a local privilege‑escalation vector via crafted applications that exploit incorrect driver object management, affecting multiple XP/Server 2003/Vista/Server 2008/Wind...

CVE-2011-1884

CVE-2011-1884 describes a use-after-free vulnerability in the Windows kernel‑mode driver component win32k.sys. The flaw arises from incorrect management of driver objects in the Win32k subsystem, enabling a local attacker to gain privileges by running a crafted application. Affected platforms inc...

CVE-2011-1968

CVE-2011-1968 affects the Remote Desktop Protocol (RDP) implementation in Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability arises from improper handling of in-memory RDP packets, enabling an unauthenticated, remote attacker to cause a denial of service (reboot) by triggering acce...

CVE-2013-1253

The CVE concerns a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arbitrary kernel memory via a crafted applic...

CVE-2013-1254

CVE-2013-1254 is a Windows kernel-mode driver (win32k.sys) local privilege-escalation vulnerability. A race condition in win32k.sys allows a local attacker to gain elevated privileges and read arbitrary kernel memory locations. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2...

CVE-2013-1263

CVE-2013-1263 involves a race condition in the Windows kernel‑mode driver win32k.sys that permits local privilege escalation and reading of arbitrary kernel memory. Affected products (per sources) include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 S...

CVE-2013-1266

CVE-2013-1266 is a race-condition vulnerability in the Windows kernel-mode driver win32k.sys that allows local privilege escalation and potential kernel memory disclosure. It affects multiple Windows editions listed in MS13-016 (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows ...

CVE-2013-3197

The CVE-2013-3197 issue affects the NTVDM subsystem in the Windows kernel on 32‑bit Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8. It arises from improper validation of kernel-memory addresses, enabling local privilege escalation...

CVE-2002-0699

The CVE-2002-0699 issue affects the Certificate Enrollment ActiveX Control used by Windows 98/98SE/Millennium/NT 4.0/2000/XP. The root cause is a flaw in the Certificate Enrollment Control that allows remote attackers to delete digital certificates on a user’s system via HTML. OpenVAS entries cor...

CVE-2002-1139

The CVE-2002-1139 issue affects Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP under the Compressed Folders feature. The root cause is that the destination folder is not properly validated during ZIP decompression, allowing an attacker to place an executable in a known location ...