CVE-2010-3144

CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...

CVE-2011-0675

CVE-2011-0675 is a local privilege-escalation in Windows caused by a use-after-free in win32k.sys (kernel-mode drivers). Affected are Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold/SP1). The root cause is incorrect management of kernel...

CVE-2011-3401

This CVE affects Microsoft Windows Media Player and Windows Media Center (XP SP2/SP3, Vista SP2, Windows 7 SP1). The root cause is memory corruption when parsing specially crafted DVR-MS files, allowing remote code execution with the caller’s privileges. Affected components include ENCDEC.DLL use...

CVE-2013-3863

CVE-2013-3863 is the Windows OLE Property Vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises from parsing crafted OLE objects in files, enabling remote code execution without user interaction (contrary to some variants that require a user action, the core des...

CVE-2007-1212

The CVE-2007-1212 entry concerns a buffer overflow in the Graphics Device Interface (GDI) when processing Enhanced Metafile (EMF) images. Affected products listed in the initial description are Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, SP2; and Windows Vista. The underlying issue is a GDI ...

CVE-2007-1492

CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-2009-4312

CVE-2009-4312 concerns the Microsoft Windows Indeo codec and, per the provided documents, describes an unspecified vulnerability in the Indeo codec on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2 that could allow remote code execution via crafted media content. The OpenVAS entries also refer...

CVE-2010-0719

CVE-2010-0719 affects multiple Windows client/server OSes (Windows 2000, XP, Server 2003, Vista, Server 2008, Windows 7). The root cause is an unspecified API that does not validate arguments, enabling local user privilege to trigger a denial of service (system crash) via a crafted application. T...

CVE-2004-0199

CVE-2004-0199 is a real vulnerability affecting the Help and Support Center in Windows XP and Windows Server 2003 SP1/64-Bit variants. The flaw arises from improper validation of HCP URLs (hcp://), enabling remote code execution when a user visits a crafted page or HTML e-mail that triggers the D...

CVE-2005-2388

CVE-2005-2388 describes a buffer overflow in a USB driver used on Microsoft Windows that could allow an attacker to execute arbitrary code. The provided documents do not specify the affected product name, exact driver version, or root cause details beyond the general buffer overflow. Exploit info...

CVE-2005-3981

Microsoft Windows XP, 2000, and 2003 are affected by a local-privilege issue where a user can kill a writable process by calling CreateRemoteThread on a process opened via OpenProcess, using certain arguments and potentially an invalid start routine address. The underlying cause involves manipula...

CVE-2005-4269

The affected component is mshtml.dll in Microsoft Windows XP, Windows Server 2003, and Internet Explorer 6.0 SP1. The issue arises when mshtml.dll processes button-focus events while a document is reloading, leading to a denial of service (access violation). This is observed in Microsoft Office I...

CVE-2006-0143

The Connected advisory CPAI-2006-171 documents a denial-of-service flaw in Microsoft Windows’ Graphics Rendering Engine (GRE) when parsing certain WMF files. Specifically, a crafted WMF with ExtCreateRegion or ExtEscape calls can trigger a memory read/parse error in GRE, causing the host applicat...

CVE-2006-3445

Summary (CVE-2006-3445) : A memory corruption and heap-based overflow exists in Microsoft Agent when processing specially crafted .ACF files. The flaw occurs in the ReadWideString handling within agentdpv.dll and can be triggered via a remote attack, typically by convincing a user to view a malic...

CVE-2006-4696

CVE-2006-4696 is a remote code execution vulnerability in the Windows Server Service (SMB Rename Vulnerability). It affects Windows 2000 SP4, Windows XP SP2 and earlier, and Windows Server 2003 SP1 and earlier, where a crafted SMB Rename request could cause the Server service to dereference an in...

CVE-2007-0214

CVE-2007-0214 affects the HTML Help ActiveX control (hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2/Professional, and Windows Server 2003 SP1. The vulnerability arises from improper input validation in HTML Help ActiveX methods, leading to a remote code execution flaw if a user visits a specia...

CVE-2007-0933

The CVE-2007-0933 issue affects the D-Link DWL-G650+ wireless driver (version 6.0.0.18, Rev. A1) on Windows XP. It is a buffer overflow in the driver that can be triggered by a beacon frame containing a long TIM Information Element, leading to a denial of service (crash) and potentially arbitrary...

CVE-2011-0039

The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...

CVE-2013-1265

The CVE-2013-1265 entry describes a race condition in the kernel-mode driver win32k.sys that affects multiple Microsoft Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arb...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2002-2324

The CVE-2002-2324 entry concerns Windows XP Professional, where the System Restore directory and possibly other subdirectories within System Volume Information have insecure ACL permissions. The underlying issue is insufficient access controls, allowing local users to access restricted files and ...

CVE-2006-0488

The CVE-2006-0488 entry concerns the VDM (Virtual DOS Machine) emulation environment in Windows 2000, Windows XP SP2, and Windows Server 2003. The issue allows local users to read the first megabyte of memory, potentially exposing sensitive information, as demonstrated by dumper.asm. This describ...

CVE-2006-3351

CVE-2006-3351 is a Windows Explorer vulnerability (explorer.exe) affecting Windows XP/2003 where parsing of .url files with InternetShortcut tags can overflow the stack. A crafted .url file containing a long URL and many file: specifiers may trigger a denial of service and possibly arbitrary code...

CVE-2006-3880

The CVE affects Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003. The issue is a DoS via a continuous stream of TCP port 135 packets carrying incorrect TCP header checksums and random values in certain TCP header fields (demonstrated by the Achilles Windo...

CVE-2006-5586

CVE-2006-5586 is a GDI-based local privilege-elevation vulnerability in the Graphics Rendering Engine of Microsoft Windows 2000 SP4 and Windows XP SP2 (and related Windows variants). The flaw stems from processing invalid application window sizes when rendering layered windows, allowing a logged-...

CVE-2006-6602

CVE-2006-6602 affects explorer.exe in Microsoft Windows XP SP2 (Windows Explorer 6.00.2900.2180). A user-assisted remote attacker can cause a denial of service by presenting a crafted WMV file. Affected component: Windows Explorer. The connected documents provide the vulnerability description and...

CVE-2007-3463

Microsoft Windows XP SP2 local privilege escalation CVE-2007-3463 allows a user who has a RunAs session to terminate arbitrary processes of another user, demonstrated by taskkill. Root cause relates to RunAs/UAC being treated as convenience features, not security boundaries. The connected sources...

CVE-2007-3724

CVE-2007-3724 : The Windows XP kernel process scheduler does not use the kernel’s process statistics and instead bases scheduling on CPU billing gathered from periodic sampling ticks, which results in preferential treatment of “interactive” processes that sleep voluntarily. This behavior can allo...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

CVE-2011-2600

The CVE-2011-2600 issue affects the GPU support in Windows XP, where rendering time is not properly restricted. This enables remote denial of service (system crash) via WebGL vectors using (1) shader programs or (2) complex 3D geometry, demonstrated by visiting lots-of-polys-example.html in the K...

CVE-2013-1270

CVE-2013-1270 is a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and the reading of arbitrary kernel memory. Affected products include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 (SP2–R2 SP1), and ...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

CVE-2002-2117

Microsoft Windows XP is affected by CVE-2002-2117, where remote attackers can cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). The Red Hat and NVD entries describe the same impact. No concrete remediation or patch details are provided in the connected documents; PT-2...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2005-0051

CVE-2005-0051 concerns the Windows Server service (srvsvc.dll) on Windows XP SP1/SP2, where an anonymous logon over a named pipe can disclose authentication-related information about users accessing shared resources. The vulnerability enables remote information disclosure without code execution. ...

CVE-2005-4697

The CVE-2005-4697 entry concerns the Microsoft Wireless Zero Configuration (WZCS) system. It states that local users can access WEP keys and WPA PMKs via WZCQueryInterface in wzcsapi.dll, due to exposure through this API. Affected software/component: Microsoft WZCS and wzcsapi.dll; vulnerability ...

CVE-2006-1475

CVE-2006-1475 affects Windows XP SP2: Windows Firewall fails to produce application alerts when an executable is launched via NTFS Alternate Data Streams (ADS) filename:stream syntax. Root cause is the ADS filename:stream handling bypassing the normal firewall alert mechanism, enabling a local at...

CVE-2006-5585

CVE-2006-5585 is a local privilege-elevation vulnerability in the Client-Server Run-time Subsystem (CSRSS) of Microsoft Windows XP SP2 and Windows Server 2003. The issue arises from improper processing/validation of embedded file manifests by CSRSS, which could let a logged-on attacker run a craf...

CVE-2006-6723

The CVE-2006-6723 issue affects the Workstation service in Microsoft Windows 2000 SP4 and Windows XP SP2, where a crafted NetrWkstaUserEnum RPC request with a large maxlen value can cause a denial of service through memory consumption. The root cause is tied to how the Workstation service process...

CVE-2007-2374

Technical details are not publicly available in the provided documents; no affected products, vulnerable components, vectors, or fixes are specified. Monitor for updates.

CVE-2009-1511

This entry concerns CVE-2009-1511: a vulnerability in Microsoft GDI+ PNG parsing on Windows XP SP3 . The issue arises when processing a PNG image containing a specific large btChunkLen value, which can trigger an infinite loop in GDI+ and lead to a remote denial of service . The affected componen...

CVE-2003-0306

Summary: CVE-2003-0306 is a buffer overflow in Windows XP’s EXPLORER.EXE triggered by a specially crafted desktop.ini containing a long .ShellClassInfo parameter, allowing arbitrary code execution as the logged-in XP user. The issue is detailed in multiple sources and is tied to the MS03-027 bull...

CVE-2003-0897

The CVE-2003-0897 entry describes a local code-execution vulnerability in Windows XP related to CommCtl32.dll. The flaw arises when an attacker can send BCM_GETTEXTMARGIN or BCM_SETTEXTMARGIN button control messages to privileged applications, enabling arbitrary code execution on the affected sys...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2007-2219

CVE-2007-2219 is a remote code-execution flaw in the Win32 API present on Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. The vulnerability stems from improper validation of parameters passed to a Win32 API function, enabling an attacker to execute arbitrary code by convincing a user to view a...

CVE-2001-1571

The CVE-2001-1571 entry concerns the Windows XP Remote Desktop client, where the Remote Desktop user name is sent in cleartext. This behavior could allow an attacker to sniff and obtain terminal server user account names over the network. The connected Red Hat and CVE references reiterate the sam...

CVE-2002-0974

The CVE-2002-0974 entry documents a vulnerability in the Windows XP Help and Support Center where a remote attacker can cause deletion of arbitrary files by visiting a crafted link to the hcp: protocol that accesses uplddrvinfo.htm. Affected product is Windows XP Help and Support Center; the unde...

CVE-2002-2105

CVE-2002-2105 affects Microsoft Windows XP. A local attacker can prevent the system from booting by corrupting the explorer.exe.manifest file, per the description. The entry specifies a local access vector, low complexity, no authentication required, and a partial impact on availability with no c...

CVE-2009-0119

CVE-2009-0119 affects Microsoft Windows XP SP3. A buffer overflow in handling a crafted .chm file can allow remote attackers to cause memory corruption and application crash, with possible arbitrary code execution. Documented impact includes denial of service and potential code execution; no expl...