Page 2 of 37 results (0.007 seconds)

CVSS: 9.3EPSS: 96%CPEs: 28EXPL: 1

CVE-2009-0553 – Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)

https://notcve.org/view.php?id=CVE-2009-0553

15 Apr 2009 — Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." Microsoft Internet Explorer 6 SP1, 6 y 7 en Windows XP SP2 y SP3, 6 y 7 en Windows Server 2003 SP1 y SP2, 7 en Windows... • https://www.exploit-db.com/exploits/8479 • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 1

CVE-2009-0078 – Microsoft Windows XP/Vista/2003/2008 - WMI Service Isolation Privilege Escalation

https://notcve.org/view.php?id=CVE-2009-0078

15 Apr 2009 — The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability." El proveedor Windows Management Instrumentat... • https://www.exploit-db.com/exploits/32891 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 10.0EPSS: 70%CPEs: 15EXPL: 0

CVE-2009-0086

https://notcve.org/view.php?id=CVE-2009-0086

15 Apr 2009 — Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability." Desbordamiento inferior de entero en Windows HTTP Services (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vis... • http://osvdb.org/53620 • CWE-189: Numeric Errors •

CVSS: 9.8EPSS: 54%CPEs: 44EXPL: 0

CVE-2009-0550

https://notcve.org/view.php?id=CVE-2009-0550

15 Apr 2009 — Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008; allows remote web servers to capture and replay NTLM credentials, and execute arbitrary code, via vectors related to absence of a "credential-reflection protections"... • http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx •

CVSS: 9.3EPSS: 86%CPEs: 28EXPL: 0

CVE-2009-0551

https://notcve.org/view.php?id=CVE-2009-0551

15 Apr 2009 — Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Tr... • http://osvdb.org/53624 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 47%CPEs: 29EXPL: 0

CVE-2009-0554

https://notcve.org/view.php?id=CVE-2009-0554

15 Apr 2009 — Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." Microsoft Internet Explorer v5.01 SP4, v6 SP1, v6 y v7 en Windows XP SP2 y SP3, v6 y v7 en Windows Server 20... • http://secunia.com/advisories/34678 • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2009-0082

https://notcve.org/view.php?id=CVE-2009-0082

10 Mar 2009 — The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability." El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no maneja adecuadamente la validación, lo que permite a usuarios locales ganar privile... • http://osvdb.org/52523 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2009-0083

https://notcve.org/view.php?id=CVE-2009-0083

10 Mar 2009 — The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability." El kernel en Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 no gestiona adecuadamente los punteros inválidos, lo que permite a usuarios locales ganar privilegios a través de una aplicación que inicia el uso de un punter... • http://osvdb.org/52524 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 80%CPEs: 15EXPL: 0

CVE-2009-0081

https://notcve.org/view.php?id=CVE-2009-0081

10 Mar 2009 — The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability." La implementación de la interfaz gráfica de dispositivos (GDI) en Microsoft Wind... • http://osvdb.org/52522 • CWE-20: Improper Input Validation •

CVSS: 7.4EPSS: 92%CPEs: 15EXPL: 0

CVE-2009-0085

https://notcve.org/view.php?id=CVE-2009-0085

10 Mar 2009 — The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability." El compone... • http://osvdb.org/52521 • CWE-287: Improper Authentication •