CVE-2006-3209

The CVE concerns Microsoft Windows XP Task Scheduler (at.exe): each scheduled process can be spawned with SYSTEM permissions, enabling local privilege escalation. Affected component is the Task Scheduler on Windows XP; the underlying issue is that scheduled processes inherit SYSTEM-level rights, ...

CVE-2006-6601

The CVE-2006-6601 entry concerns Windows Media Player 10.0.0.4036 on Windows XP SP2. Affected component: MIDI (.MID) file handling. Root cause: a malformed header chunk (no track chunks) in a MIDI file, with potential issues in the number of tracks or time division fields set to 0, enabling a use...

CVE-2001-0860

The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...

CVE-2004-2176

The CVE-2004-2176 entry concerns the Internet Connection Firewall (ICF) in Windows XP SP2. The issue arises because ICF is configured by default to trust sessmgr.exe, enabling local users to use sessmgr.exe to open a local listening port that bypasses ICF access controls. Documents do not provide...

CVE-2002-2283

Microsoft Windows XP with Fast User Switching (FUS) enabled is affected. When a user is removed from the administrator group, the system does not remove the "show processes from all users" privilege, allowing that user to view processes of other users. The description documents this vulnerability...

CVE-2004-2365

CVE-2004-2365 affects Windows XP and Windows Server 2003. The issue is a memory leak in the operating system that allows a local user to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. The provided documents...

CVE-2005-2765

The CVE-2005-2765 entry concerns the Windows Firewall UI not properly displaying certain malformed Windows Registry entries. The underlying issue is an information-hiding condition that could enable attackers with already elevated (administrator) privileges to obscure activity when monitoring exc...

CVE-2006-4066

The CVE-2006-4066 entry affects the Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2. The vulnerability allows context-dependent attackers to cause a denial of service (application crash) by feeding images that trigger a divide-by-zero error, demonstrated via an I...

CVE-2008-0322

The CVE-2008-0322 issue affects the I2O Utility Filter driver (i2omgmt.sys) version 5.1.2600.2180 on Windows XP. The .\

CVE-2009-0119

CVE-2009-0119 affects Microsoft Windows XP SP3. A buffer overflow in handling a crafted .chm file can allow remote attackers to cause memory corruption and application crash, with possible arbitrary code execution. Documented impact includes denial of service and potential code execution; no expl...

CVE-2005-1792

The connected Seebug document confirms CVE-2005-1792 affects Microsoft Windows XP via the WMI service. The vulnerability allows remote attackers to trigger a denial-of-service by causing memory leaks and system unresponsiveness because security contexts are created faster than RPC cache entries c...

CVE-2010-3140

The vulnerability CVE-2010-3140 affects Windows XP SP3, specifically an untrusted search path in Windows Internet Connection Settings. The issue can allow local users, and possibly remote attackers, to run arbitrary code via a Trojan horse schannel.dll located in the same folder as an ISP file, e...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...