CVE-2009-0243

CVE-2009-0243 describes a Windows Autorun/NoDriveTypeAutoRun enforcement vulnerability. The issue arises from improper validation of Autorun.inf and related registry keys, enabling arbitrary code execution when users insert media (CD/DVD/USB/Firewire) or perform actions like mapping a network dri...

CVE-2009-1127

Microsoft Windows kernel Win32k subsystem (Win32k.sys) contains multiple vulnerabilities disclosed under CVE-2009-1127, CVE-2009-2513, and CVE-2009-2514 (MS09-065). The common root cause across the entries is improper validation of arguments passed to kernel/system calls (and related GDI input ha...

CVE-2010-4669

The CVE-2010-4669 entry concerns the IPv6 Neighbor Discovery (ND) router advertisement flood vulnerability. Affected products include the IPv6 stack in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7. The issue arises when an attacker sends many Router Advertise...

CVE-2011-0087

The CVE-2011-0087 issue concerns the Windows kernel-mode driver win32k.sys, where user-mode input is not properly validated. This enables local privilege escalation, potentially allowing an attacker to gain complete control of the affected system. Affected products include Windows XP (SP2/SP3), S...

CVE-2011-0658

CVE-2011-0658 corresponds to Microsoft Windows OLE Automation Remote Code Execution via a malformed WMF in oleaut32.dll. Public sources (MS11-038) and multiple security analyses describe an integer underflow in the WMF parsing path, leading to arbitrary code execution when a user opens a crafted ...

CVE-2011-1230

CVE-2011-1230 affects Windows kernel components, specifically win32k.sys in the kernel-mode drivers. The vulnerability is a NULL pointer de-reference in win32k.sys, leading to local privilege escalation. Affected products include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP1...

CVE-2011-1868

The CVE-2011-1868 issue affects Microsoft Windows DFS (Distributed File System) implementations on Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is improper validation of fields in DFS responses, allowing remote DFS servers to cause arbitrary code execution via crafted responses ...

CVE-2011-3397

This CVE affects the Microsoft Windows Time component (DATIME.DLL) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability allows remote code execution via a crafted web page that leverages an unspecified binary behavior in Internet Explorer. The issue is documented as CVE-2011-3397 ...

CVE-2012-1890

CVE-2012-1890 affects win32k.sys in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1) where keyboard-layout files are not properly validated, enabling local privilege escalation via a memory‑corruption bug in ReadLayoutFile that overwrites a ke...

CVE-2013-1275

The CVE-2013-1275 issue is a race condition in the win32k.sys kernel-mode driver on multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). Exploitation enables local users to gain privileges and read arbitrary kernel memory via a crafted applica...

CVE-2001-0721

The CVE-2001-0721 entry concerns Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP. The flaw allows remote attackers to cause a denial of service (memory consumption or crash) by sending a malformed UPnP request. The affected stack is UPnP handling in Windows, with NETWORK attack vec...

CVE-2002-0694

The CVE-2002-0694 issue is tied to an unchecked buffer in Windows Help (Q323255) that affected Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP. Root cause: a vulnerability in the HTML Help facility could allow a remote attack...

CVE-2005-1980

CVE-2005-1980 corresponds to the MSDTC TIP Denial of Service vulnerability described in Microsoft Security Bulletin MS05-051 (CAN-2005-1980). The flaw affects MSDTC TIP processing, enabling a remote attacker to cause the DTC service to stop responding by sending a crafted TIP message. Microsoft l...

CVE-2006-0376

CVE-2006-0376 affects the 802.11 wireless client in certain Windows family systems (Windows 2000, XP, Server 2003). The vulnerability arises because the client does not warn users when it associates with an ad hoc (peer-to-peer) station, or when a station in ad hoc mode associates with it. This o...

CVE-2006-3440

CVE-2006-3440 is a remote code execution vulnerability in the Winsock API (buffer overflow) affecting Windows 2000 SP4, XP SP1/SP2, XP Pro x64, Windows Server 2003 and Itanium/x64 variants. Exploitation requires convincing a user to open a specially crafted file or visit a crafted website, enabli...

CVE-2008-1440

CVE-2008-1440 is a Windows DoS vulnerability in Pragmatic General Multicast (PGM) caused by improper validation of the PGM option length field. A remote attacker can trigger an infinite loop by sending a crafted PGM packet, rendering affected systems non-responsive and requiring a restart. Affect...

CVE-2009-1125

CVE-2009-1125 corresponds to the Windows Driver Class Registration Vulnerability. The Microsoft Windows kernel does not properly validate an argument passed to a Windows kernel system call, enabling local privilege escalation if a crafted user-mode application is run. Affected products include Wi...

CVE-2009-2516

CVE-2009-2516 concerns a Windows kernel vulnerability where the kernel does not properly validate data while parsing PE files. The issue stems from traversing a chain in user-mode data and can trigger a NULL pointer dereference, potentially allowing local privilege escalation and system instabili...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...

CVE-2010-0237

Technical details such as affected products, versions, and fixes for CVE-2010-0237 are not provided in the supplied documents; only the high-level description is present. Monitor for updates.

CVE-2010-0820

CVE-2010-0820 is an LSASS heap overflow vulnerability affecting Active Directory, ADAM, and AD LDS. An authenticated attacker could exploit specially crafted LDAP messages sent to a listening LSASS service to achieve code execution with elevated privileges. The vulnerability impacts multiple Wind...

CVE-2010-3942

CVE-2010-3942 affects Windows kernel-mode driver win32k.sys, where memory allocation for copies from user mode is flawed, enabling local privilege escalation on affected Windows versions (XP SP2/SP3, 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). Connected sources corroborate t...

CVE-2011-0667

CVE-2011-0667 is a local privilege-escalation in the Windows kernel (win32k.sys) caused by a use-after-free in driver object management. A crafted application can abuse this to gain kernel privileges on affected systems, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2...

CVE-2011-1238

CVE-2011-1238 describes a use-after-free bug in the Windows kernel driver component win32k.sys. The issue affects multiple Windows lineages (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold, R2, and R2 SP1, and Windows 7 Gold/SP1) and is triggered by incorrect management of kernel-mod...

CVE-2011-1240

CVE-2011-1240 is a local privilege-escalation in the Windows kernel via the Win32k.sys use-after-free condition. A crafted local attack can abuse incorrect driver object management to execute code with kernel privileges on affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Ser...

CVE-2012-1893

CVE-2012-1893 affects a Windows kernel-mode component, specifically the win32k.sys driver. The vulnerability arises from improper validation of callback parameters when creating a hook procedure, enabling local users to escalate privileges by crafting a malicious application. Affected products in...

CVE-2013-1250

CVE-2013-1250 is a race-condition-based local privilege-escalation flaw in the Windows kernel-mode driver win32k.sys. Affected software (per PT-2013-3009) includes Windows XP SP2–SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2–R2 SP1, and Windows 7 Gold–SP1. The vulnerabi...

CVE-2013-1259

CVE-2013-1259 is a Windows kernel-mode race-condition vulnerability in win32k.sys that allows local privilege escalation and reading arbitrary kernel memory. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, and Windows 7 SP1+. T...

CVE-2013-1279

CVE-2013-1279 is described as a kernel race condition in Microsoft Windows platforms, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability arises from race conditions ...

CVE-2013-3136

CVE-2013-3136 describes a local information-disclosure vulnerability in the Windows kernel on 32-bit Windows XP SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP1, and Windows 8. The issue stems from how the kernel handles unspecified page-fault system calls, allowing a crafted local...

CVE-2013-3167

Win32k.sys in the Windows kernel-mode drivers exposes a local privilege-escalation vulnerability (CVE-2013-3167) by improperly handling in-memory objects. A crafted user-mode/application can exploit this to gain kernel-level privileges. Affected products include Windows XP (SP2/SP3), Windows Serv...

CVE-2013-3865

Win32k Multiple Fetch Vulnerability (CVE-2013-3865) affects multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, Windows RT). It allows local privilege escalation through a crafted application affecting win32k.sys in kernel-mode drivers...

CVE-2013-3866

CVE-2013-3866 is a Windows kernel‑mode driver privilege escalation in Win32k.sys affecting multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, Server 2012, Windows RT). The root cause is a crafted application that allows local users to gain...

CVE-2004-0208

CVE-2004-0208 is a local privilege-elevation vulnerability in the Windows kernel/VDM subsystem. The Windows Virtual DOS Machine (VDM) component could allow an authenticated, locally logged-on attacker to gain kernel privileges by executing code in memory areas not properly validated when handling...

CVE-2004-0839

CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...

CVE-2005-2126

The CVE-2005-2126 entry concerns a tampering vulnerability in the Windows FTP client. Public documentation (MS05-044/MSKB 905495 and CERT 415828) describes that when Enable Folder View for FTP Sites is enabled and a user initiates an FTP transfer, a remote server can craft file names to cause the...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2006-0005

The CVE-2006-0005 vulnerability is a buffer overflow in the Windows Media Player plug-in (npdsplay.dll) used by non‑Microsoft browsers. When a user views HTML containing an EMBED tag with a long src attribute, it may allow remote code execution in the user’s context. Affected software includes Wi...

CVE-2006-0006

CVE-2006-0006 is a heap-based buffer overflow in Windows Media Player’s bitmap processing. A crafted BMP can trigger an overflow when the file declares a size of 0, allowing remote code execution. Affected products/versions include Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on W...

CVE-2006-0008

The CVE-2006-0008 issue affects the Korean Input Method Editor (IME) on Windows XP SP1/SP2, Windows Server 2003 up to SP1, and Office 2003. A privilege-elevation flaw exists in the Korean IME; an attacker who can log on (locally or via Remote Desktop/Terminal Services) could exploit the ShellAbou...

CVE-2006-3873

CVE-2006-3873 describes a heap-based buffer overflow in URLMON.DLL of Microsoft Internet Explorer 6 SP1 on Windows 2000/XP SP1, exploitable via a long URL in a GZIP-compressed HTTP-redirected web page. The issue is tied to an incomplete fix for CVE-2006-3869 and is mitigated by applying the MS06-...

CVE-2006-5614

CVE-2006-5614 concerns Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2 with Internet Connection Sharing enabled. The vulnerability allows remote attackers to trigger a denial-of-service (svchost.exe crash) by sending a malformed DNS query that leads to a null pointer dere...

CVE-2007-0210

The CVE-2007-0210 entry corresponds to a local privilege-escalation vulnerability in Windows XP SP2’s Windows Image Acquisition (WIA) service caused by an unchecked buffer. A logged-on attacker could gain complete control by starting a crafted application that abuses WIA (no remote/anonymous expl...

CVE-2007-1946

CVE-2007-1946 is described as an integer overflow in Windows Explorer on Windows XP SP1 that could allow denial of service and possibly arbitrary code execution via a crafted BMP image (w4intof.bmp). The connected OpenVAS and FreeBSD VuXML entries reference BMP/image parsing-related overflow issu...

CVE-2007-4675

CVE-2007-4675 summary (Apple QuickTime): A heap-based buffer overflow in the QuickTime VR extension (QTVR) 7.2.0.240, embedded in QuickTime.qts, allows remote code execution when a user opens a specially crafted QTVR movie file. The vulnerability is caused by an unvalidated size field in the pano...

CVE-2008-0088

Summary: CVE-2008-0088 describes a denial-of-service in Microsoft Active Directory and ADAM caused by improper validation of crafted LDAP requests. Affected components include Active Directory on Windows 2000 Server and Windows Server 2003, and ADAM on Windows XP/Server 2003. The underlying root ...

CVE-2010-2740

The CVE-2010-2740 entry corresponds to two Windows OpenType Font (OTF) format driver vulnerabilities (CVE-2010-2740 and CVE-2010-2741) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The OpenType Font (OTF) format driver is vulnerable in how it allocates memory when parsing specially cr...

CVE-2011-0671

The CVE-2011-0671 issue affects Windows kernel-mode driver win32k.sys and is caused by a use-after-free from incorrect driver object management. Affects Windows XP SP2-SP3, Server 2003 SP2, Vista SP1-SP2, Server 2008 Gold/SP2/R2 and R2 SP1, and Windows 7 Gold/SP1. Local privilege escalation is po...

CVE-2011-1283

The CVE-2011-1283 entry concerns the Windows CSRSS component in the Win32 subsystem. The vulnerability arises from an array index check flaw in SrvSetConsoleNumberOfCommand, allowing a local attacker to cause memory corruption and elevate privileges by triggering an incorrect memory assignment fo...

CVE-2011-1869

The CVE-2011-1869 issue affects the Distributed File System (DFS) implementation on multiple Windows platforms (Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2/R2 SP1, Windows 7 Gold/SP1). A crafted DFS referral response can be sent by a remote ...