· 7 years ago · Aug 07, 2019, 12:37 PM
1#######################################################################################################################################
2======================================================================================================================================
3Hostname www.jobtrain.co.uk ISP Access UK Ltd
4Continent Europe Flag
5GB
6Country United Kingdom Country Code GB
7Region Birmingham Local time 07 Aug 2019 10:53 BST
8City Birmingham Postal Code B14
9IP Address 212.54.140.10 Latitude 52.417
10 Longitude -1.89
11====================================================================================================================================
12#######################################################################################################################################
13> www.jobtrain.co.uk
14Server: 185.93.180.131
15Address: 185.93.180.131#53
16
17Non-authoritative answer:
18Name: www.jobtrain.co.uk
19Address: 212.54.140.10
20>
21#######################################################################################################################################
22 Domain name:
23 jobtrain.co.uk
24
25 Data validation:
26 Nominet was able to match the registrant's name and address against a 3rd party data source on 15-Sep-2017
27
28 Registrar:
29 Mr Chris Poxon t/a UK1 [Tag = UK1]
30 URL: http://www.uk1.co.uk
31
32 Relevant dates:
33 Registered on: 06-Sep-1999
34 Expiry date: 06-Sep-2019
35 Last updated: 07-Sep-2018
36
37 Registration status:
38 Registered until expiry date.
39
40 Name servers:
41 ns1.cyberpass.co.uk 87.84.198.81
42 ns2.cyberpass.co.uk 62.31.67.97
43#######################################################################################################################################
44[+] Target : www.jobtrain.co.uk
45
46[+] IP Address : 212.54.140.10
47
48[+] Headers :
49
50[+] Date : Wed, 07 Aug 2019 10:04:24 GMT
51[+] Server : Apache
52[+] Link : <https://jobtrain.co.uk/wp-json/>; rel="https://api.w.org/", <https://jobtrain.co.uk/>; rel=shortlink
53[+] Upgrade : h2,h2c
54[+] Connection : Upgrade, Keep-Alive
55[+] Keep-Alive : timeout=5, max=100
56[+] Transfer-Encoding : chunked
57[+] Content-Type : text/html; charset=UTF-8
58
59[+] SSL Certificate Information :
60
61[+] businessCategory : Private Organization
62[+] jurisdictionCountryName : GB
63[+] serialNumber : 05032849
64[+] countryName : GB
65[+] stateOrProvinceName : Cheshire
66[+] localityName : Altrincham
67[+] organizationName : Jobtrain Limited
68[+] organizationalUnitName : IT
69[+] commonName : www.jobtrain.co.uk
70[+] countryName : US
71[+] organizationName : DigiCert Inc
72[+] organizationalUnitName : www.digicert.com
73[+] commonName : DigiCert SHA2 Extended Validation Server CA
74[+] Version : 3
75[+] Serial Number : 0E1C496797560817E365F434FA08DADA
76[+] Not Before : Aug 13 00:00:00 2018 GMT
77[+] Not After : Nov 11 12:00:00 2019 GMT
78[+] OCSP : ('http://ocsp.digicert.com',)
79[+] subject Alt Name : (('DNS', 'www.jobtrain.co.uk'), ('DNS', 'jobtrain.co.uk'))
80[+] CA Issuers : ('http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt',)
81[+] CRL Distribution Points : ('http://crl3.digicert.com/sha2-ev-server-g2.crl', 'http://crl4.digicert.com/sha2-ev-server-g2.crl')
82
83[+] Whois Lookup :
84
85[+] NIR : None
86[+] ASN Registry : ripencc
87[+] ASN : 50292
88[+] ASN CIDR : 212.54.128.0/20
89[+] ASN Country Code : GB
90[+] ASN Date : 2010-10-18
91[+] ASN Description : STRATOGEN ==================================, GB
92[+] cidr : 212.54.140.0/23
93[+] name : StratoGen-CO-140
94[+] handle : CJ308-RIPE
95[+] range : 212.54.140.0 - 212.54.141.255
96[+] description : None
97[+] country : US
98[+] state : None
99[+] city : None
100[+] address : 53-54 Princes House, Queens Road, Brighton, East Sussex, BN1 3XB
101[+] postal_code : None
102[+] emails : None
103[+] created : 2016-03-30T20:43:56Z
104[+] updated : 2016-03-30T20:43:56Z
105
106[+] Crawling Target...
107
108[+] Looking for robots.txt........[ Found ]
109[+] Extracting robots Links.......[ 5 ]
110[+] Looking for sitemap.xml.......[ Found ]
111[+] Extracting sitemap Links......[ 72 ]
112[+] Extracting CSS Links..........[ 4 ]
113[+] Extracting Javascript Links...[ 11 ]
114[+] Extracting Internal Links.....[ 1 ]
115[+] Extracting External Links.....[ 33 ]
116[+] Extracting Images.............[ 37 ]
117
118[+] Total Links Extracted : 163
119
120[+] Dumping Links in /opt/FinalRecon/dumps/www.jobtrain.co.uk.dump
121[+] Completed!
122###############################################################################################
123[+] Starting At 2019-08-07 06:04:19.039749
124[+] Collecting Information On: https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1
125[#] Status: 200
126--------------------------------------------------
127[#] Web Server Detected: ,
128[#] X-Powered-By: Jobtrain
129[+] Xss Protection Detected !
130- Cache-Control: private
131- Content-Type: text/html; charset=utf-8
132- Server: ,
133- Set-Cookie: ASP.NET_SessionId=azg4prax4npttn5vfkz5yfnv; path=/; HttpOnly
134- X-AspNet-Version:
135- alternateHostName: www.jobtrain.co.uk
136- X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
137- X-Powered-By: Jobtrain
138- X-XSS-Protection: 1; mode=block
139- X-Content-Type-Options: nosniff
140- Date: Wed, 07 Aug 2019 10:04:24 GMT
141- Content-Length: 19582
142--------------------------------------------------
143[#] Finding Location..!
144[#] as: AS198047 Paragon Internet Group Limited
145[#] city: Slough
146[#] country: United Kingdom
147[#] countryCode: GB
148[#] isp: Paragon Internet Group Limited
149[#] lat: 51.5228
150[#] lon: -0.629228
151[#] org: Paragon Internet Group Limited
152[#] query: 87.247.244.117
153[#] region: ENG
154[#] regionName: England
155[#] status: success
156[#] timezone: Europe/London
157[#] zip: SL1
158--------------------------------------------------
159[+] Detected WAF Presence in web application: ASP.NET Generic Web Application Protection
160--------------------------------------------------
161[#] Starting Reverse DNS
162[!] Found 3 any Domain
163- jobtrain.co.uk
164- oberon.servers.prgn.misp.co.uk
165- pulseadvancedmedia.co.uk
166--------------------------------------------------
167[!] Scanning Open Port
168[#] 21/tcp open ftp
169[#] 53/tcp open domain
170[#] 80/tcp open http
171[#] 110/tcp open pop3
172[#] 143/tcp open imap
173[#] 443/tcp open https
174[#] 465/tcp open smtps
175[#] 587/tcp open submission
176[#] 993/tcp open imaps
177[#] 995/tcp open pop3s
178[#] 3306/tcp open mysql
179--------------------------------------------------
180[+] Collecting Information Disclosure!
181[#] Detecting sitemap.xml file
182[!] sitemap.xml File Found: https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/sitemap.xml
183[#] Detecting robots.txt file
184[!] robots.txt File Found: https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/robots.txt
185[#] Detecting GNU Mailman
186[-] GNU Mailman App Not Detected!?
187--------------------------------------------------
188[+] Crawling Url Parameter On: https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1
189--------------------------------------------------
190[#] Searching Html Form !
191[+] Html Form Discovered
192[#] action: login.aspx?jobid=0
193[#] class: ['JT-ui', 'JT-form', 'JT-hidden']
194[#] id: formLogin
195[#] method: post
196--------------------------------------------------
197[!] Found 2 dom parameter
198[#] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/#
199[#] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/#
200--------------------------------------------------
201[!] 79 Internal Dynamic Parameter Discovered
202[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-57x57.png
203[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-114x114.png
204[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-72x72.png
205[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-144x144.png
206[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-120x120.png
207[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/apple-touch-icon-152x152.png
208[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/favicon-32x32.png
209[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/images/favicons/favicon-16x16.png
210[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/button.min.css
211[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/card.min.css
212[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/checkbox.min.css
213[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/divider.min.css
214[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/dropdown.min.css
215[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/form.min.css
216[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/header.min.css
217[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/icon.min.css
218[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/image.min.css
219[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/input.min.css
220[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/label.min.css
221[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/list.min.css
222[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/menu.min.css
223[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/message.min.css
224[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/reset.min.css
225[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/search.min.css
226[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/segment.min.css
227[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/site.min.css
228[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/site.min.css
229[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/step.min.css
230[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/table.min.css
231[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/tab.min.css
232[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/semantic.min.css
233[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/site/assets/styles/site.min.css
234[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/styles/theme.min.css
235[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/button.min.css
236[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/card.min.css
237[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/checkbox.min.css
238[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/divider.min.css
239[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/dropdown.min.css
240[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/form.min.css
241[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/header.min.css
242[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/icon.min.css
243[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/image.min.css
244[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/input.min.css
245[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/label.min.css
246[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/list.min.css
247[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/menu.min.css
248[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/message.min.css
249[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/reset.min.css
250[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/search.min.css
251[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/segment.min.css
252[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/site.min.css
253[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/site.min.css
254[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/step.min.css
255[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/table.min.css
256[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/components/tab.min.css
257[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/ui/semantic.min.css
258[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/site/assets/styles/site.min.css
259[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//Common/Candidates_Dist/themes/jobtrain/assets/styles/theme.min.css
260[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/ColourOverride.aspx
261[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/styles/custom.css
262[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/vacancies.aspx
263[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/RegisterOptions.aspx
264[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/update.aspx
265[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/vacancies.aspx
266[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/
267[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/RegisterOptions.aspx
268[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/update.aspx
269[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/terms_and_conditions.aspx?jobid=0
270[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=linkedin&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
271[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=googleplus&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
272[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=facebook&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
273[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=xing&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
274[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=twitter&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
275[+] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=hotmail&postProfileUrl=https%3a%2f%2fwww.jobtrain.co.uk%2fteleperformance5%2fLoginWithWidgets.aspx%3fJOBID%3d0
276[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/#
277[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/#
278[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/ForgotPass.aspx?jobid=0
279[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1/terms_and_conditions.aspx
280[+] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1//teleperformance5/ColourOverride.aspx
281--------------------------------------------------
282[-] No external Dynamic Paramter Found!?
283--------------------------------------------------
284[!] 1 Internal links Discovered
285[+] https://www.jobtrain.co.uk
286--------------------------------------------------
287[!] 3 External links Discovered
288[#] http://browsehappy.com/
289[#] http://teleperformanceukcareers.co.uk/
290[#] http://teleperformanceukcareers.co.uk/
291--------------------------------------------------
292[#] Mapping Subdomain..
293[!] Found 7 Subdomain
294- jtrepo.jobtrain.co.uk
295- mail.jobtrain.co.uk
296- jobtrain.co.uk
297- www.jobtrain.co.uk
298- toshibatest.jobtrain.co.uk
299- sdcctest.jobtrain.co.uk
300- dcitytest.jobtrain.co.uk
301--------------------------------------------------
302[!] Done At 2019-08-07 06:04:47.457519
303#######################################################################################################################################
304[i] Scanning Site: https://www.jobtrain.co.uk
305
306
307
308B A S I C I N F O
309====================
310
311
312[+] Site Title: Applicant Tracking System UK | Online Candidate Management | Jobtrain
313[+] IP address: 212.54.140.10
314[+] Web Server: Could Not Detect
315[+] CMS: WordPress
316[+] Cloudflare: Not Detected
317[+] Robots File: Found
318
319-------------[ contents ]----------------
320User-agent: *
321
322Disallow: /jobtrain/
323Disallow: */jobtrain/
324Disallow: /template/
325Disallow: /Attachments/
326Disallow: */jobtrain6/
327-----------[end of contents]-------------
328
329
330
331W H O I S L O O K U P
332========================
333
334
335 Domain name:
336 jobtrain.co.uk
337
338 Data validation:
339 Nominet was able to match the registrant's name and address against a 3rd party data source on 15-Sep-2017
340
341 Registrar:
342 Mr Chris Poxon t/a UK1 [Tag = UK1]
343 URL: http://www.uk1.co.uk
344
345 Relevant dates:
346 Registered on: 06-Sep-1999
347 Expiry date: 06-Sep-2019
348 Last updated: 07-Sep-2018
349
350 Registration status:
351 Registered until expiry date.
352
353 Name servers:
354 ns1.cyberpass.co.uk 87.84.198.81
355 ns2.cyberpass.co.uk 62.31.67.97
356
357 WHOIS lookup made at 11:10:35 07-Aug-2019
358
359--
360
361
362
363
364G E O I P L O O K U P
365=========================
366
367[i] IP Address: 87.247.244.117
368[i] Country: United Kingdom
369[i] State:
370[i] City:
371[i] Latitude: 51.4964
372[i] Longitude: -0.1224
373
374
375
376
377H T T P H E A D E R S
378=======================
379
380
381[i] HTTP/1.1 302 Found
382[i] Cache-Control: private
383[i] Content-Type: text/html; charset=utf-8
384[i] Location: https://jobtrain.co.uk
385[i] Server:
386[i] X-AspNet-Version:
387[i] alternateHostName: www.jobtrain.co.uk
388[i] Server:
389[i] X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
390[i] X-Powered-By: Jobtrain
391[i] X-XSS-Protection: 1; mode=block
392[i] X-Content-Type-Options: nosniff
393[i] Date: Wed, 07 Aug 2019 10:10:37 GMT
394[i] Connection: close
395[i] Content-Length: 139
396[i] HTTP/1.1 200 OK
397[i] Date: Wed, 07 Aug 2019 10:10:38 GMT
398[i] Server: Apache
399[i] Link: <https://jobtrain.co.uk/wp-json/>; rel="https://api.w.org/", <https://jobtrain.co.uk/>; rel=shortlink
400[i] Upgrade: h2,h2c
401[i] Connection: Upgrade, close
402[i] Content-Type: text/html; charset=UTF-8
403
404
405
406
407D N S L O O K U P
408===================
409
410jobtrain.co.uk. 21599 IN SOA ns1.cyberpass.co.uk. charlie.torres.co.uk. 2003021412 28800 7200 2419200 86400
411jobtrain.co.uk. 21599 IN MX 0 jobtrain-co-uk.mail.protection.outlook.com.
412jobtrain.co.uk. 21599 IN NS ns1.cyberpass.co.uk.
413jobtrain.co.uk. 21599 IN NS ns2.cyberpass.co.uk.
414jobtrain.co.uk. 21599 IN TXT "m31gsg8ifoa3uvla5ng2bl0snf"
415jobtrain.co.uk. 21599 IN TXT "MS=ms81175523"
416jobtrain.co.uk. 21599 IN TXT "v=spf1 ip4:85.189.42.33 ip4:109.233.48.186 ip4:109.233.48.189 ip4:109.233.49.212 ip6:2a00:1ea8:0:3:250:56ff:feb6:4bc ip6:2a00:1ea8:0:3:250:56ff:fead:3639 include:spf.protection.outlook.com -all"
417jobtrain.co.uk. 21599 IN A 87.247.244.117
418
419
420
421
422S U B N E T C A L C U L A T I O N
423====================================
424
425Address = 87.247.244.117
426Network = 87.247.244.117 / 32
427Netmask = 255.255.255.255
428Broadcast = not needed on Point-to-Point links
429Wildcard Mask = 0.0.0.0
430Hosts Bits = 0
431Max. Hosts = 1 (2^0 - 0)
432Host Range = { 87.247.244.117 - 87.247.244.117 }
433
434
435
436N M A P P O R T S C A N
437============================
438
439Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 10:10 UTC
440Nmap scan report for jobtrain.co.uk (87.247.244.117)
441Host is up (0.075s latency).
442rDNS record for 87.247.244.117: oberon.servers.prgn.misp.co.uk
443
444PORT STATE SERVICE
44521/tcp open ftp
44622/tcp closed ssh
44723/tcp filtered telnet
44880/tcp open http
449110/tcp open pop3
450143/tcp open imap
451443/tcp open https
4523389/tcp filtered ms-wbt-server
453
454Nmap done: 1 IP address (1 host up) scanned in 1.54 seconds
455
456
457
458S U B - D O M A I N F I N D E R
459==================================
460
461
462[i] Total Subdomains Found : 6
463
464[+] Subdomain: mail.jobtrain.co.uk
465[-] IP: 212.54.128.94
466
467[+] Subdomain: jtrepo.jobtrain.co.uk
468[-] IP: 62.31.67.97
469
470[+] Subdomain: toshibatest.jobtrain.co.uk
471[-] IP: 212.54.140.115
472
473[+] Subdomain: sdcctest.jobtrain.co.uk
474[-] IP: 212.54.140.116
475
476[+] Subdomain: dcitytest.jobtrain.co.uk
477[-] IP: 212.54.140.125
478
479[+] Subdomain: www.jobtrain.co.uk
480[-] IP: 212.54.140.10
481#######################################################################################################################################
482[INFO] ------TARGET info------
483[*] TARGET: https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1
484[*] TARGET IP: 212.54.140.10
485[INFO] NO load balancer detected for www.jobtrain.co.uk...
486[*] DNS servers: ns1.cyberpass.co.uk.
487[*] TARGET server:
488[*] CC: GB
489[*] Country: United Kingdom
490[*] RegionCode: ENG
491[*] RegionName: England
492[*] City: London
493[*] ASN: AS9044
494[*] BGP_PREFIX: 192.0.0.0/3
495[*] ISP: SOLNET BSE Software GmbH, CH
496[INFO] SSL/HTTPS certificate detected
497[*] Issuer: issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA
498[*] Subject: subject=businessCategory = Private Organization, jurisdictionC = GB, serialNumber = 05032849, C = GB, ST = Cheshire, L = Altrincham, O = Jobtrain Limited, OU = IT, CN = www.jobtrain.co.uk
499[INFO] DNS enumeration:
500[*] blog.jobtrain.co.uk 5452555.group5.sites.hubspot.net. group5.sites.hscoscdn00.net. 104.17.133.180 104.17.132.180 104.17.136.180 104.17.135.180 104.17.134.180
501[*] mail.jobtrain.co.uk 212.54.128.94
502[*] support.jobtrain.co.uk ondemand.manageengine.com. 207.224.234.120 117.20.43.131
503[*] test.jobtrain.co.uk 212.54.140.101
504[INFO] Possible abuse mails are:
505[*] abuse@jobtrain.co.uk
506[*] abuse@www.jobtrain.co.uk
507[*] daniel@websolut.pt
508[*] jp.seruca@broadnet.pt
509[*] nfcarrilho@refertelecom.pt
510[INFO] NO PAC (Proxy Auto Configuration) file FOUND
511[INFO] Checking for HTTP status codes recursively from /teleperformance5/update.aspx?Msg=1
512[INFO] Status code Folders
513[*] 200 http://www.jobtrain.co.uk/teleperformance5/
514[ALERT] robots.txt file FOUND in http://www.jobtrain.co.uk/robots.txt
515[INFO] Checking for HTTP status codes recursively from http://www.jobtrain.co.uk/robots.txt
516[INFO] Status code Folders
517[INFO] Starting FUZZing in http://www.jobtrain.co.uk/FUzZzZzZzZz...
518[INFO] Status code Folders
519[ALERT] Look in the source code. It may contain passwords
520[INFO] SAME content in http://www.jobtrain.co.uk/ AND http://212.54.140.10/
521[INFO] Links found from https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1:
522[*] https://www.jobtrain.co.uk/
523[*] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=facebook&postProfileUrl=https://www.jobtrain.co.uk/teleperformance5/LoginWithWidgets.aspx?JOBID=0
524[*] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=googleplus&postProfileUrl=https://www.jobtrain.co.uk/teleperformance5/LoginWithWidgets.aspx?JOBID=0
525[*] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=hotmail&postProfileUrl=https://www.jobtrain.co.uk/teleperformance5/LoginWithWidgets.aspx?JOBID=0
526[*] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=linkedin&postProfileUrl=https://www.jobtrain.co.uk/teleperformance5/LoginWithWidgets.aspx?JOBID=0
527[*] https://www.jobtrain.co.uk/SocialMediaConnector/home/importProfile?&method=twitter&postProfileUrl=https://www.jobtrain.co.uk/teleperformance5/LoginWithWidgets.aspx?JOBID=0
528[*] https://www.jobtrain.co.uk/teleperformance5/ForgotPass.aspx?jobid=0
529[*] https://www.jobtrain.co.uk/teleperformance5/RegisterOptions.aspx
530[*] https://www.jobtrain.co.uk/teleperformance5/terms_and_conditions.aspx
531[*] https://www.jobtrain.co.uk/teleperformance5/terms_and_conditions.aspx?jobid=0
532[*] https://www.jobtrain.co.uk/teleperformance5/update.aspx
533[*] https://www.jobtrain.co.uk/teleperformance5/update.aspx?Msg=1
534[*] https://www.jobtrain.co.uk/teleperformance5/vacancies.aspx
535[*] http://teleperformanceukcareers.co.uk/
536[INFO] GOOGLE has 151,000 results (0.23 seconds) about http://www.jobtrain.co.uk/
537[INFO] Shodan detected the following opened ports on 212.54.140.10:
538[*] 443
539[*] 80
540[*] 8080
541[INFO] ------VirusTotal SECTION------
542[INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
543[INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
544[INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
545[INFO] ------Alexa Rank SECTION------
546[INFO] Percent of Visitors Rank in Country:
547[INFO] Percent of Search Traffic:
548[INFO] Percent of Unique Visits:
549[INFO] Total Sites Linking In:
550[*] Total Sites
551[INFO] Useful links related to www.jobtrain.co.uk - 212.54.140.10:
552[*] https://www.virustotal.com/pt/ip-address/212.54.140.10/information/
553[*] https://www.hybrid-analysis.com/search?host=212.54.140.10
554[*] https://www.shodan.io/host/212.54.140.10
555[*] https://www.senderbase.org/lookup/?search_string=212.54.140.10
556[*] https://www.alienvault.com/open-threat-exchange/ip/212.54.140.10
557[*] http://pastebin.com/search?q=212.54.140.10
558[*] http://urlquery.net/search.php?q=212.54.140.10
559[*] http://www.alexa.com/siteinfo/www.jobtrain.co.uk
560[*] http://www.google.com/safebrowsing/diagnostic?site=www.jobtrain.co.uk
561[*] https://censys.io/ipv4/212.54.140.10
562[*] https://www.abuseipdb.com/check/212.54.140.10
563[*] https://urlscan.io/search/#212.54.140.10
564[*] https://github.com/search?q=212.54.140.10&type=Code
565[INFO] Useful links related to AS9044 - 192.0.0.0/3:
566[*] http://www.google.com/safebrowsing/diagnostic?site=AS:9044
567[*] https://www.senderbase.org/lookup/?search_string=192.0.0.0/3
568[*] http://bgp.he.net/AS9044
569[*] https://stat.ripe.net/AS9044
570[INFO] Date: 07/08/19 | Time: 06:12:21
571[INFO] Total time: 2 minute(s) and 7 second(s)
572#######################################################################################################################################
573Trying "jobtrain.co.uk"
574;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53099
575;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 2, ADDITIONAL: 0
576
577;; QUESTION SECTION:
578;jobtrain.co.uk. IN ANY
579
580;; ANSWER SECTION:
581jobtrain.co.uk. 43200 IN A 87.247.244.117
582jobtrain.co.uk. 43200 IN TXT "MS=ms81175523"
583jobtrain.co.uk. 43200 IN TXT "m31gsg8ifoa3uvla5ng2bl0snf"
584jobtrain.co.uk. 43200 IN TXT "v=spf1 ip4:85.189.42.33 ip4:109.233.48.186 ip4:109.233.48.189 ip4:109.233.49.212 ip6:2a00:1ea8:0:3:250:56ff:feb6:4bc ip6:2a00:1ea8:0:3:250:56ff:fead:3639 include:spf.protection.outlook.com -all"
585jobtrain.co.uk. 43200 IN MX 0 jobtrain-co-uk.mail.protection.outlook.com.
586jobtrain.co.uk. 43200 IN SOA ns1.cyberpass.co.uk. charlie.torres.co.uk. 2003021412 28800 7200 2419200 86400
587jobtrain.co.uk. 43200 IN NS ns2.cyberpass.co.uk.
588jobtrain.co.uk. 43200 IN NS ns1.cyberpass.co.uk.
589
590;; AUTHORITY SECTION:
591jobtrain.co.uk. 43200 IN NS ns1.cyberpass.co.uk.
592jobtrain.co.uk. 43200 IN NS ns2.cyberpass.co.uk.
593
594Received 502 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 271 ms
595#######################################################################################################################################
596; <<>> DiG 9.11.5-P4-5.1-Debian <<>> +trace jobtrain.co.uk
597;; global options: +cmd
598. 85072 IN NS c.root-servers.net.
599. 85072 IN NS g.root-servers.net.
600. 85072 IN NS f.root-servers.net.
601. 85072 IN NS i.root-servers.net.
602. 85072 IN NS j.root-servers.net.
603. 85072 IN NS l.root-servers.net.
604. 85072 IN NS h.root-servers.net.
605. 85072 IN NS e.root-servers.net.
606. 85072 IN NS m.root-servers.net.
607. 85072 IN NS d.root-servers.net.
608. 85072 IN NS a.root-servers.net.
609. 85072 IN NS b.root-servers.net.
610. 85072 IN NS k.root-servers.net.
611. 85072 IN RRSIG NS 8 0 518400 20190820050000 20190807040000 59944 . f+guGx5Rpb3tXRd/lfzX8Zo6WwWouztr/5GVDPgTDIVpDnLhQ/TBE4ih 5dpTVLnagU4WargLeHVh0h94e2wemx3IMl2UxKrPJMao+IEWCu55/9+z WJtQKLPz6XpW/AqDov+g2uCWBhrXybn1m/ldj+sKAA3wiCRkYqbKS6Xn htlJG2SMGPY5fIGDoJ04flxSWbjx7xzdXbDYHyhupwHXnFaRKD3RrsWB 4Px5AycR7dNuv6nBylFK+/TtqR7c4KSHL3G1dIzTelYVCVqkcMcZxZMN sHNSgR8pBbyKL2uX8Pal1J+T7xaW9Ggdhkv31CHc+ZP+rQ3MEPn9MhfA n02A7g==
612;; Received 525 bytes from 185.93.180.131#53(185.93.180.131) in 225 ms
613
614uk. 172800 IN NS nsa.nic.uk.
615uk. 172800 IN NS nsb.nic.uk.
616uk. 172800 IN NS nsc.nic.uk.
617uk. 172800 IN NS nsd.nic.uk.
618uk. 172800 IN NS dns1.nic.uk.
619uk. 172800 IN NS dns2.nic.uk.
620uk. 172800 IN NS dns3.nic.uk.
621uk. 172800 IN NS dns4.nic.uk.
622uk. 86400 IN DS 43876 8 2 A107ED2AC1BD14D924173BC7E827A1153582072394F9272BA37E2353 BC659603
623uk. 86400 IN RRSIG DS 8 1 86400 20190820050000 20190807040000 59944 . sXIk+xgRMgcFpSRnjt6mY8HQHOMrrWDyVd5IoO1f5TZaliP+jyIwmEXZ 7svIfHtu3zH4XkKATVd5bMqLzs5/SreqJ3sYtIMIfKPrJmXxrqdGfrDU AQJn6W4u0VU3hiLfGb5wSDfye+BKoZLL3gyv4Ne6Rh0zqhEiDM1iMom3 meNgKBcBWsHwAn0vEJ3RxczJfvuhwVD7jsyb7z0BBWrk3dskYF80Imrs o32iYvPNvjyNWcIAjNXYql7sWtx1PEKPx3Gf2Agkxx8jFGQvk3SV6/z6 W3n1EJsiIu9uQGJCEYoomUE+q+EXBy+7yCj67TB2+jQ+Z9OLfNq/n21C Bi6p2g==
624;; Received 798 bytes from 2001:7fd::1#53(k.root-servers.net) in 64 ms
625
626jobtrain.co.uk. 172800 IN NS ns1.cyberpass.co.uk.
627jobtrain.co.uk. 172800 IN NS ns2.cyberpass.co.uk.
628G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 1 1 0 - G9HKV8PHGJ1NMH94L9RMIQM0J64UCIPK NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534
629G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG NSEC3 8 3 10800 20190905054433 20190801053612 33621 co.uk. D/JmoL3SxFEtpYde2s8aZt/+1mqB2xaCrP76DIZVHtrWa2e4IdRTHVwZ eVRZFqJ50wL/YTR78aECm0nXmFxtTuix/ivEY+EXCOY1xMEchqNuGYaw viViGK1stgBWdTV/AgbUshIY9nS+A68elrAPULGDSLZNyHAebgjo2UfC AKg=
630TJG2UTB9S4RS007O0BFRJ1I8NS4CUQ9L.co.uk. 10800 IN NSEC3 1 1 0 - TJHCT7CD3RB6B0KA7JMDQL9HD7UMHPAN NS DS RRSIG
631TJG2UTB9S4RS007O0BFRJ1I8NS4CUQ9L.co.uk. 10800 IN RRSIG NSEC3 8 3 10800 20190905160722 20190801150726 33621 co.uk. VfngHqC6we1D42Gcy2lFqTODFEqS6IbwnOquWubHKDMKS3Z+wTUjku+5 iVzKFxVKTqsbZYZ0ETZNl/dtDh1XzLcWWqlLjRbFipHx7OWSN+uV20Vj hsEfzt+hd/PAsnbEi3A4TbkhpJe5w3C5XTutDcTC+BvaiYT42slyLMxC OpU=
632;; Received 672 bytes from 156.154.102.3#53(nsc.nic.uk) in 232 ms
633
634jobtrain.co.uk. 86400 IN A 87.247.244.117
635jobtrain.co.uk. 86400 IN NS ns1.cyberpass.co.uk.
636jobtrain.co.uk. 86400 IN NS ns2.cyberpass.co.uk.
637;; Received 165 bytes from 62.31.67.97#53(ns2.cyberpass.co.uk) in 259 ms
638#######################################################################################################################################
639[*] Performing General Enumeration of Domain: jobtrain.co.uk
640[-] DNSSEC is not configured for jobtrain.co.uk
641[*] SOA ns1.cyberpass.co.uk 87.84.198.81
642[*] NS ns2.cyberpass.co.uk 62.31.67.97
643[*] Bind Version for 62.31.67.97 Not disclosed
644[*] NS ns1.cyberpass.co.uk 87.84.198.81
645[*] Bind Version for 87.84.198.81 Not disclosed
646[*] MX jobtrain-co-uk.mail.protection.outlook.com 104.47.0.36
647[*] MX jobtrain-co-uk.mail.protection.outlook.com 104.47.1.36
648[*] A jobtrain.co.uk 87.247.244.117
649[*] TXT jobtrain.co.uk m31gsg8ifoa3uvla5ng2bl0snf
650[*] TXT jobtrain.co.uk MS=ms81175523
651[*] TXT jobtrain.co.uk v=spf1 ip4:85.189.42.33 ip4:109.233.48.186 ip4:109.233.48.189 ip4:109.233.49.212 ip6:2a00:1ea8:0:3:250:56ff:feb6:4bc ip6:2a00:1ea8:0:3:250:56ff:fead:3639 include:spf.protection.outlook.com -all
652[*] Enumerating SRV Records
653[-] No SRV Records Found for jobtrain.co.uk
654[+] 0 Records Found
655#######################################################################################################################################
656[*] Processing domain jobtrain.co.uk
657[*] Using system resolvers ['185.93.180.131', '194.187.251.67', '38.132.106.139', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
658[+] Getting nameservers
65962.31.67.97 - ns2.cyberpass.co.uk
66087.84.198.81 - ns1.cyberpass.co.uk
661[-] Zone transfer failed
662
663[+] TXT records found
664"m31gsg8ifoa3uvla5ng2bl0snf"
665"MS=ms81175523"
666"v=spf1 ip4:85.189.42.33 ip4:109.233.48.186 ip4:109.233.48.189 ip4:109.233.49.212 ip6:2a00:1ea8:0:3:250:56ff:feb6:4bc ip6:2a00:1ea8:0:3:250:56ff:fead:3639 include:spf.protection.outlook.com -all"
667
668[+] MX records found, added to target list
6690 jobtrain-co-uk.mail.protection.outlook.com.
670
671[*] Scanning jobtrain.co.uk for A records
67287.247.244.117 - jobtrain.co.uk
67340.101.138.24 - autodiscover.jobtrain.co.uk
67440.101.137.8 - autodiscover.jobtrain.co.uk
67540.101.137.56 - autodiscover.jobtrain.co.uk
676104.17.134.180 - blog.jobtrain.co.uk
677104.17.133.180 - blog.jobtrain.co.uk
678104.17.135.180 - blog.jobtrain.co.uk
679104.17.136.180 - blog.jobtrain.co.uk
680104.17.132.180 - blog.jobtrain.co.uk
681212.54.140.150 - client.jobtrain.co.uk
682127.0.0.1 - localhost.jobtrain.co.uk
683212.54.128.94 - mail.jobtrain.co.uk
684207.224.234.120 - support.jobtrain.co.uk
685117.20.43.131 - support.jobtrain.co.uk
686212.54.140.101 - test.jobtrain.co.uk
687212.54.140.10 - www.jobtrain.co.uk
688#######################################################################################################################################
689
690
691
692 AVAILABLE PLUGINS
693 -----------------
694
695 OpenSslCipherSuitesPlugin
696 CertificateInfoPlugin
697 HeartbleedPlugin
698 SessionRenegotiationPlugin
699 CompressionPlugin
700 HttpHeadersPlugin
701 SessionResumptionPlugin
702 OpenSslCcsInjectionPlugin
703 FallbackScsvPlugin
704 RobotPlugin
705 EarlyDataPlugin
706
707
708
709 CHECKING HOST(S) AVAILABILITY
710 -----------------------------
711
712 212.54.140.10:443 => 212.54.140.10
713
714
715
716
717 SCAN RESULTS FOR 212.54.140.10:443 - 212.54.140.10
718 --------------------------------------------------
719
720 * Certificate Information:
721 Content
722 SHA1 Fingerprint: f845cf04d8dac84d3e89f95cc1769c3c2d00ddf4
723 Common Name: www.jobtrain.co.uk
724 Issuer: DigiCert SHA2 Extended Validation Server CA
725 Serial Number: 18756065076265845258522584492089596634
726 Not Before: 2018-08-13 00:00:00
727 Not After: 2019-11-11 12:00:00
728 Signature Algorithm: sha256
729 Public Key Algorithm: RSA
730 Key Size: 2048
731 Exponent: 65537 (0x10001)
732 DNS Subject Alternative Names: ['www.jobtrain.co.uk', 'jobtrain.co.uk']
733
734 Trust
735 Hostname Validation: FAILED - Certificate does NOT match 212.54.140.10
736 Android CA Store (9.0.0_r9): OK - Certificate is trusted
737 iOS CA Store (12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
738 Java CA Store (jdk-11.0.2): OK - Certificate is trusted
739 macOS CA Store (12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
740 Mozilla CA Store (2018-11-22): OK - Certificate is trusted, Extended Validation
741 OPENJDK CA Store (jdk-11.0.2): OK - Certificate is trusted
742 Windows CA Store (2018-12-08): OK - Certificate is trusted
743 Symantec 2018 Deprecation: OK - Not a Symantec-issued certificate
744 Received Chain: www.jobtrain.co.uk --> DigiCert SHA2 Extended Validation Server CA
745 Verified Chain: www.jobtrain.co.uk --> DigiCert SHA2 Extended Validation Server CA --> DigiCert High Assurance EV Root CA
746 Received Chain Contains Anchor: OK - Anchor certificate not sent
747 Received Chain Order: OK - Order is valid
748 Verified Chain contains SHA1: OK - No SHA1-signed certificate in the verified certificate chain
749
750 Extensions
751 OCSP Must-Staple: NOT SUPPORTED - Extension not found
752 Certificate Transparency: WARNING - Only 2 SCTs included but Google recommends 3 or more
753
754 OCSP Stapling
755 NOT SUPPORTED - Server did not send back an OCSP response
756
757 * OpenSSL Heartbleed:
758 OK - Not vulnerable to Heartbleed
759
760 * TLSV1_1 Cipher Suites:
761 Forward Secrecy OK - Supported
762 RC4 OK - Not Supported
763
764 Preferred:
765 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
766 Accepted:
767 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
768 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
769 TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 302 Found - https://jobtrain.co.uk
770 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
771 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
772
773 * TLSV1 Cipher Suites:
774 Forward Secrecy OK - Supported
775 RC4 OK - Not Supported
776
777 Preferred:
778 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
779 Accepted:
780 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
781 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
782 TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 302 Found - https://jobtrain.co.uk
783 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
784 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
785
786 * TLS 1.2 Session Resumption Support:
787 With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
788 With TLS Tickets: NOT SUPPORTED - TLS ticket not assigned.
789
790 * TLSV1_2 Cipher Suites:
791 Forward Secrecy OK - Supported
792 RC4 OK - Not Supported
793
794 Preferred:
795 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 256 bits HTTP 302 Found - https://jobtrain.co.uk
796 Accepted:
797 TLS_RSA_WITH_AES_256_CBC_SHA256 256 bits HTTP 302 Found - https://jobtrain.co.uk
798 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
799 TLS_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 302 Found - https://jobtrain.co.uk
800 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
801 TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 302 Found - https://jobtrain.co.uk
802 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 256 bits HTTP 302 Found - https://jobtrain.co.uk
803 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 302 Found - https://jobtrain.co.uk
804 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 302 Found - https://jobtrain.co.uk
805 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 302 Found - https://jobtrain.co.uk
806
807 * Deflate Compression:
808 OK - Compression disabled
809
810 * SSLV2 Cipher Suites:
811 Server rejected all cipher suites.
812
813 * Session Renegotiation:
814 Client-initiated Renegotiation: OK - Rejected
815 Secure Renegotiation: OK - Supported
816
817 * OpenSSL CCS Injection:
818 OK - Not vulnerable to OpenSSL CCS injection
819
820 * Downgrade Attacks:
821 TLS_FALLBACK_SCSV: VULNERABLE - Signaling cipher suite not supported
822
823 * TLSV1_3 Cipher Suites:
824 Server rejected all cipher suites.
825
826 * SSLV3 Cipher Suites:
827 Server rejected all cipher suites.
828
829 * ROBOT Attack:
830 OK - Not vulnerable
831
832
833 SCAN COMPLETED IN 25.86 S
834 -------------------------
835#######################################################################################################################################
836Domains still to check: 1
837 Checking if the hostname jobtrain.co.uk. given is in fact a domain...
838
839Analyzing domain: jobtrain.co.uk.
840 Checking NameServers using system default resolver...
841 IP: 62.31.67.97 (United Kingdom)
842 HostName: ns2.cyberpass.co.uk Type: NS
843 HostName: 97.67-31-62.static.virginmediabusiness.co.uk Type: PTR
844 IP: 87.84.198.81 (United Kingdom)
845 HostName: ns1.cyberpass.co.uk Type: NS
846 HostName: host81.cyberpass.co.uk Type: PTR
847
848 Checking MailServers using system default resolver...
849 IP: 104.47.1.36 (United States)
850 HostName: jobtrain-co-uk.mail.protection.outlook.com Type: MX
851 HostName: mail-ve1eur010036.inbound.protection.outlook.com Type: PTR
852 IP: 104.47.0.36 (United States)
853 HostName: jobtrain-co-uk.mail.protection.outlook.com Type: MX
854 HostName: mail-he1eur010036.inbound.protection.outlook.com Type: PTR
855
856 Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
857 No zone transfer found on nameserver 62.31.67.97
858 No zone transfer found on nameserver 87.84.198.81
859
860 Checking SPF record...
861 New IP found: 85.189.42.33
862 New IP found: 109.233.48.186
863 New IP found: 109.233.48.189
864 New IP found: 109.233.49.212
865 There are no IPv4 addresses in the SPF. Maybe IPv6.
866 There are no IPv4 addresses in the SPF. Maybe IPv6.
867
868 Checking SPF record...
869 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 207.46.100.0/24, but only the network IP
870 New IP found: 207.46.100.0
871 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 207.46.163.0/24, but only the network IP
872 New IP found: 207.46.163.0
873 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 65.55.169.0/24, but only the network IP
874 New IP found: 65.55.169.0
875 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 157.56.110.0/23, but only the network IP
876 New IP found: 157.56.110.0
877 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 157.55.234.0/24, but only the network IP
878 New IP found: 157.55.234.0
879 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 213.199.154.0/24, but only the network IP
880 New IP found: 213.199.154.0
881 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 213.199.180.128/26, but only the network IP
882 New IP found: 213.199.180.128
883 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 52.100.0.0/14, but only the network IP
884 New IP found: 52.100.0.0
885
886 Checking SPF record...
887 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 157.56.112.0/24, but only the network IP
888 New IP found: 157.56.112.0
889 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 207.46.51.64/26, but only the network IP
890 New IP found: 207.46.51.64
891 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 64.4.22.64/26, but only the network IP
892 New IP found: 64.4.22.64
893 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 40.92.0.0/15, but only the network IP
894 New IP found: 40.92.0.0
895 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 40.107.0.0/16, but only the network IP
896 New IP found: 40.107.0.0
897 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 134.170.140.0/24, but only the network IP
898 New IP found: 134.170.140.0
899
900 Checking SPF record...
901 There are no IPv4 addresses in the SPF. Maybe IPv6.
902 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 23.103.128.0/19, but only the network IP
903 New IP found: 23.103.128.0
904 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 23.103.198.0/23, but only the network IP
905 New IP found: 23.103.198.0
906 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 65.55.88.0/24, but only the network IP
907 New IP found: 65.55.88.0
908 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 104.47.0.0/17, but only the network IP
909 New IP found: 104.47.0.0
910 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 23.103.200.0/21, but only the network IP
911 New IP found: 23.103.200.0
912 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 23.103.208.0/21, but only the network IP
913 New IP found: 23.103.208.0
914 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 23.103.191.0/24, but only the network IP
915 New IP found: 23.103.191.0
916 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 216.32.180.0/23, but only the network IP
917 New IP found: 216.32.180.0
918 WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 94.245.120.64/26, but only the network IP
919 New IP found: 94.245.120.64
920 New hostname found: 2202::/48
921 There are no IPv4 addresses in the SPF. Maybe IPv6.
922
923 Checking 193 most common hostnames using system default resolver...
924 IP: 212.54.140.10 (United Kingdom)
925 HostName: www.jobtrain.co.uk. Type: A
926 IP: 212.54.128.94 (United Kingdom)
927 HostName: mail.jobtrain.co.uk. Type: A
928 IP: 212.54.140.101 (United Kingdom)
929 HostName: test.jobtrain.co.uk. Type: A
930 IP: 207.224.234.120 (United States)
931 HostName: support.jobtrain.co.uk. Type: A
932 IP: 117.20.43.131 (Singapore)
933 HostName: support.jobtrain.co.uk. Type: A
934
935 Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
936 Checking netblock 65.55.169.0
937 Checking netblock 52.100.0.0
938 Checking netblock 212.54.128.0
939 Checking netblock 65.55.88.0
940 Checking netblock 207.224.234.0
941 Checking netblock 207.46.100.0
942 Checking netblock 157.55.234.0
943 Checking netblock 94.245.120.0
944 Checking netblock 216.32.180.0
945 Checking netblock 104.47.0.0
946 Checking netblock 87.84.198.0
947 Checking netblock 23.103.128.0
948 Checking netblock 64.4.22.0
949 Checking netblock 157.56.110.0
950 Checking netblock 23.103.208.0
951 Checking netblock 62.31.67.0
952 Checking netblock 23.103.198.0
953 Checking netblock 207.46.163.0
954 Checking netblock 134.170.140.0
955 Checking netblock 213.199.154.0
956 Checking netblock 212.54.140.0
957 Checking netblock 23.103.191.0
958 Checking netblock 40.107.0.0
959 Checking netblock 85.189.42.0
960 Checking netblock 40.92.0.0
961 Checking netblock 104.47.1.0
962 Checking netblock 109.233.49.0
963 Checking netblock 109.233.48.0
964 Checking netblock 157.56.112.0
965 Checking netblock 207.46.51.0
966 Checking netblock 117.20.43.0
967 Checking netblock 213.199.180.0
968 Checking netblock 23.103.200.0
969
970 Searching for jobtrain.co.uk. emails in Google
971 enquiries@jobtrain.co.uk&
972 jane_doe@jobtrain.co.uk)
973 Indiaenquiries@jobtrain.co.uk
974
975 Checking 36 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
976 Host 65.55.169.0 is up (reset ttl 64)
977 Host 52.100.0.0 is up (reset ttl 64)
978 Host 212.54.128.94 is up (reset ttl 64)
979 Host 65.55.88.0 is up (reset ttl 64)
980 Host 207.224.234.120 is up (reset ttl 64)
981 Host 207.46.100.0 is up (reset ttl 64)
982 Host 157.55.234.0 is up (reset ttl 64)
983 Host 94.245.120.64 is up (reset ttl 64)
984 Host 216.32.180.0 is up (reset ttl 64)
985 Host 104.47.0.36 is up (reset ttl 64)
986 Host 87.84.198.81 is up (reset ttl 64)
987 Host 23.103.128.0 is up (reset ttl 64)
988 Host 64.4.22.64 is up (reset ttl 64)
989 Host 157.56.110.0 is up (reset ttl 64)
990 Host 23.103.208.0 is up (reset ttl 64)
991 Host 62.31.67.97 is up (reset ttl 64)
992 Host 23.103.198.0 is up (reset ttl 64)
993 Host 207.46.163.0 is up (reset ttl 64)
994 Host 134.170.140.0 is up (reset ttl 64)
995 Host 213.199.154.0 is up (reset ttl 64)
996 Host 212.54.140.101 is up (reset ttl 64)
997 Host 23.103.191.0 is up (reset ttl 64)
998 Host 40.107.0.0 is up (reset ttl 64)
999 Host 85.189.42.33 is up (reset ttl 64)
1000 Host 212.54.140.10 is up (reset ttl 64)
1001 Host 40.92.0.0 is up (reset ttl 64)
1002 Host 104.47.1.36 is up (reset ttl 64)
1003 Host 109.233.49.212 is up (reset ttl 64)
1004 Host 109.233.48.186 is up (reset ttl 64)
1005 Host 109.233.48.189 is up (reset ttl 64)
1006 Host 157.56.112.0 is up (reset ttl 64)
1007 Host 207.46.51.64 is up (reset ttl 64)
1008 Host 117.20.43.131 is up (reset ttl 64)
1009 Host 104.47.0.0 is up (reset ttl 64)
1010 Host 213.199.180.128 is up (reset ttl 64)
1011 Host 23.103.200.0 is up (reset ttl 64)
1012
1013 Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
1014 Scanning ip 65.55.169.0 ():
1015 Scanning ip 52.100.0.0 ():
1016 Scanning ip 212.54.128.94 (mail.jobtrain.co.uk.):
1017 Scanning ip 65.55.88.0 ():
1018 Scanning ip 207.224.234.120 (support.jobtrain.co.uk.):
1019 80/tcp open http syn-ack ttl 47 Apache httpd
1020 | http-methods:
1021 |_ Supported Methods: HEAD GET POST OPTIONS
1022 |_http-server-header: Apache
1023 |_http-title: Site doesn't have a title (text/html).
1024 443/tcp open ssl/http syn-ack ttl 48 Apache httpd
1025 | http-methods:
1026 |_ Supported Methods: GET HEAD POST
1027 |_http-server-header: Apache
1028 |_http-title: 400 Bad Request
1029 | ssl-cert: Subject:
1030 | Subject Alternative Name: DNS:*.manageengine.com, DNS:manageengine.com
1031 | Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
1032 | Public Key type: rsa
1033 | Public Key bits: 2048
1034 | Signature Algorithm: sha256WithRSAEncryption
1035 | Not valid before: 2018-02-03T00:00:00
1036 | Not valid after: 2020-02-03T23:59:59
1037 | MD5: 352b 831c 33d6 2340 0483 ba88 f00f 64e6
1038 |_SHA-1: 9c6e b11f 15b1 284b a315 9b07 318f 890f 0394 6298
1039 |_ssl-date: TLS randomness does not represent time
1040 Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (91%)
1041 Scanning ip 207.46.100.0 ():
1042 Scanning ip 157.55.234.0 ():
1043 Scanning ip 94.245.120.64 ():
1044 Scanning ip 216.32.180.0 ():
1045 Scanning ip 104.47.0.36 (mail-he1eur010036.inbound.protection.outlook.com (PTR)):
1046 Scanning ip 87.84.198.81 (host81.cyberpass.co.uk (PTR)):
1047 1723/tcp open pptp syn-ack ttl 53 linux (Firmware: 1)
1048 Device type: general purpose|storage-misc|broadband router|WAP|phone
1049 Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (94%), HP embedded (91%), Asus embedded (88%), Google Android 4.X (87%)
1050 OS Info: Service Info: Host: local
1051 Scanning ip 23.103.128.0 ():
1052 Scanning ip 64.4.22.64 ():
1053 Scanning ip 157.56.110.0 ():
1054 Scanning ip 23.103.208.0 ():
1055 Scanning ip 62.31.67.97 (97.67-31-62.static.virginmediabusiness.co.uk (PTR)):
1056 53/tcp open domain syn-ack ttl 51 (unknown banner: Not disclosed)
1057 | dns-nsid:
1058 |_ bind.version: Not disclosed
1059 | fingerprint-strings:
1060 | DNSVersionBindReqTCP:
1061 | version
1062 | bind
1063 |_ disclosed
1064 1723/tcp open pptp syn-ack ttl 52 linux (Firmware: 1)
1065 OS Info: Service Info: Host: local
1066 Scanning ip 23.103.198.0 ():
1067 Scanning ip 207.46.163.0 ():
1068 Scanning ip 134.170.140.0 ():
1069 Scanning ip 213.199.154.0 ():
1070 Scanning ip 212.54.140.101 (test.jobtrain.co.uk.):
1071 443/tcp open ssl syn-ack ttl 112 Microsoft SChannel TLS
1072 | fingerprint-strings:
1073 | TLSSessionReq:
1074 | Ymg.3
1075 | pXR3
1076 | Arizona1
1077 | Scottsdale1%0#
1078 | Starfield Technologies, Inc.1301
1079 | *http://certs.starfieldtech.com/repository/1402
1080 | +Starfield Secure Certificate Authority - G20
1081 | 180111092500Z
1082 | 210210131640Z0>1!0
1083 | Domain Control Validated1
1084 | *.jobtrain.co.uk0
1085 | %M!x
1086 | -`LsN
1087 | w]zI
1088 | \xd7
1089 | 50301
1090 | +http://crl.starfieldtech.com/sfig2s1-80.crl0c
1091 |_ 0?0=
1092 |_http-server-header: Microsoft-HTTPAPI/2.0
1093 |_http-title: Service Unavailable
1094 | ssl-cert: Subject: commonName=*.jobtrain.co.uk
1095 | Subject Alternative Name: DNS:*.jobtrain.co.uk, DNS:jobtrain.co.uk
1096 | Issuer: commonName=Starfield Secure Certificate Authority - G2/organizationName=Starfield Technologies, Inc./stateOrProvinceName=Arizona/countryName=US
1097 | Public Key type: rsa
1098 | Public Key bits: 2048
1099 | Signature Algorithm: sha256WithRSAEncryption
1100 | Not valid before: 2018-01-11T09:25:00
1101 | Not valid after: 2021-02-10T13:16:40
1102 | MD5: 0f4b 04b1 3448 f9da 32b6 0537 930a b5c2
1103 |_SHA-1: 7377 8762 6277 7ed0 b74a e5df 73f8 bfa3 989a ccb2
1104 OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
1105 Scanning ip 23.103.191.0 ():
1106 Scanning ip 40.107.0.0 ():
1107 Scanning ip 85.189.42.33 ():
1108 Scanning ip 212.54.140.10 (www.jobtrain.co.uk.):
1109 80/tcp open http syn-ack ttl 114 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1110 | http-methods:
1111 |_ Supported Methods: GET HEAD POST OPTIONS
1112 |_http-server-header: <empty>
1113 |_http-title: Did not follow redirect to https://www.jobtrain.co.uk/
1114 443/tcp open ssl/http syn-ack ttl 112 Microsoft IIS httpd 7.5
1115 | http-methods:
1116 | Supported Methods: OPTIONS TRACE GET HEAD POST
1117 |_ Potentially risky methods: TRACE
1118 |_http-title: Did not follow redirect to https://jobtrain.co.uk
1119 | ssl-cert: Subject: commonName=www.jobtrain.co.uk/organizationName=Jobtrain Limited/stateOrProvinceName=Cheshire/countryName=GB
1120 | Subject Alternative Name: DNS:www.jobtrain.co.uk, DNS:jobtrain.co.uk
1121 | Issuer: commonName=DigiCert SHA2 Extended Validation Server CA/organizationName=DigiCert Inc/countryName=US
1122 | Public Key type: rsa
1123 | Public Key bits: 2048
1124 | Signature Algorithm: sha256WithRSAEncryption
1125 | Not valid before: 2018-08-13T00:00:00
1126 | Not valid after: 2019-11-11T12:00:00
1127 | MD5: e12f 4cf1 e4d7 d93b dd3d 6903 8429 ce68
1128 |_SHA-1: f845 cf04 d8da c84d 3e89 f95c c176 9c3c 2d00 ddf4
1129 8080/tcp open http syn-ack ttl 112 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1130 | http-methods:
1131 |_ Supported Methods: GET HEAD POST OPTIONS
1132 |_http-open-proxy: Proxy might be redirecting requests
1133 |_http-server-header: <empty>
1134 |_http-title: Did not follow redirect to https://www.jobtrain.co.uk/
1135 Device type: general purpose|WAP
1136 Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 2008|7|Vista|8.1 (85%)
1137 OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
1138 Scanning ip 40.92.0.0 ():
1139 Scanning ip 104.47.1.36 (mail-ve1eur010036.inbound.protection.outlook.com (PTR)):
1140 Scanning ip 109.233.49.212 ():
1141 5666/tcp open tcpwrapped syn-ack ttl 50
1142 Device type: general purpose|storage-misc|router|media device|WAP|broadband router
1143 Running (JUST GUESSING): Linux 2.6.X|3.X (93%), HP embedded (90%), MikroTik RouterOS 6.X (89%), Infomir embedded (89%), Ubiquiti embedded (89%), Ubiquiti AirOS 5.X (89%)
1144 Scanning ip 109.233.48.186 ():
1145 Scanning ip 109.233.48.189 ():
1146 Scanning ip 157.56.112.0 ():
1147 Scanning ip 207.46.51.64 ():
1148 Scanning ip 117.20.43.131 (support.jobtrain.co.uk.):
1149 80/tcp open http syn-ack ttl 47 Apache httpd
1150 | http-methods:
1151 |_ Supported Methods: GET HEAD POST OPTIONS
1152 | http-robots.txt: 90 disallowed entries (15 shown)
1153 | /products/snmpapi3/ /fault/ /provisioning/ /security/
1154 | /msp/ /products/middleware/product_overview/ /cgi-bin/
1155 | /mbuilder/ /autotest/ /js/ /search_img/ /configuration/
1156 | /services/training/mbuilder/index.html /services/training/mbuilder.html
1157 |_/services/training/details.html
1158 |_http-server-header: Apache
1159 |_http-title: Zoho Corp.
1160 443/tcp open ssl/http syn-ack ttl 49 Apache httpd
1161 | http-methods:
1162 |_ Supported Methods: GET HEAD POST
1163 |_http-server-header: Apache
1164 |_http-title: 400 Bad Request
1165 | ssl-cert: Subject:
1166 | Subject Alternative Name: DNS:*.manageengine.com, DNS:manageengine.com
1167 | Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
1168 | Public Key type: rsa
1169 | Public Key bits: 2048
1170 | Signature Algorithm: sha256WithRSAEncryption
1171 | Not valid before: 2018-02-03T00:00:00
1172 | Not valid after: 2020-02-03T23:59:59
1173 | MD5: 352b 831c 33d6 2340 0483 ba88 f00f 64e6
1174 |_SHA-1: 9c6e b11f 15b1 284b a315 9b07 318f 890f 0394 6298
1175 |_ssl-date: TLS randomness does not represent time
1176 Scanning ip 104.47.0.0 ():
1177 Scanning ip 213.199.180.128 ():
1178 Scanning ip 23.103.200.0 ():
1179 WebCrawling domain's web servers... up to 50 max links.
1180
1181 + URL to crawl: http://support.jobtrain.co.uk.
1182 + Date: 2019-08-07
1183
1184 + Crawling URL: http://support.jobtrain.co.uk.:
1185 + Links:
1186 + Crawling http://support.jobtrain.co.uk.
1187 + Searching for directories...
1188 + Searching open folders...
1189
1190
1191 + URL to crawl: https://support.jobtrain.co.uk.
1192 + Date: 2019-08-07
1193
1194 + Crawling URL: https://support.jobtrain.co.uk.:
1195 + Links:
1196 + Crawling https://support.jobtrain.co.uk.
1197 + Searching for directories...
1198 + Searching open folders...
1199
1200
1201 + URL to crawl: http://www.jobtrain.co.uk.
1202 + Date: 2019-08-07
1203
1204 + Crawling URL: http://www.jobtrain.co.uk.:
1205 + Links:
1206 + Crawling http://www.jobtrain.co.uk. (400 Bad Request)
1207 + Searching for directories...
1208 + Searching open folders...
1209
1210
1211 + URL to crawl: https://www.jobtrain.co.uk.
1212 + Date: 2019-08-07
1213
1214 + Crawling URL: https://www.jobtrain.co.uk.:
1215 + Links:
1216 + Crawling https://www.jobtrain.co.uk.
1217 + Searching for directories...
1218 + Searching open folders...
1219
1220
1221 + URL to crawl: http://www.jobtrain.co.uk.:8080
1222 + Date: 2019-08-07
1223
1224 + Crawling URL: http://www.jobtrain.co.uk.:8080:
1225 + Links:
1226 + Crawling http://www.jobtrain.co.uk.:8080 (400 Bad Request)
1227 + Searching for directories...
1228 + Searching open folders...
1229
1230
1231 + URL to crawl: http://support.jobtrain.co.uk.
1232 + Date: 2019-08-07
1233
1234 + Crawling URL: http://support.jobtrain.co.uk.:
1235 + Links:
1236 + Crawling http://support.jobtrain.co.uk.
1237 + Searching for directories...
1238 + Searching open folders...
1239
1240
1241 + URL to crawl: https://support.jobtrain.co.uk.
1242 + Date: 2019-08-07
1243
1244 + Crawling URL: https://support.jobtrain.co.uk.:
1245 + Links:
1246 + Crawling https://support.jobtrain.co.uk.
1247 + Searching for directories...
1248 + Searching open folders...
1249
1250--Finished--
1251Summary information for domain jobtrain.co.uk.
1252-----------------------------------------
1253 Domain Specific Information:
1254 Email: enquiries@jobtrain.co.uk&
1255 Email: jane_doe@jobtrain.co.uk)
1256 Email: Indiaenquiries@jobtrain.co.uk
1257
1258 Domain Ips Information:
1259 IP: 65.55.169.0
1260 Type: SPF
1261 Is Active: True (reset ttl 64)
1262 IP: 52.100.0.0
1263 Type: SPF
1264 Is Active: True (reset ttl 64)
1265 IP: 212.54.128.94
1266 HostName: mail.jobtrain.co.uk. Type: A
1267 Country: United Kingdom
1268 Is Active: True (reset ttl 64)
1269 IP: 65.55.88.0
1270 Type: SPF
1271 Is Active: True (reset ttl 64)
1272 IP: 207.224.234.120
1273 HostName: support.jobtrain.co.uk. Type: A
1274 Country: United States
1275 Is Active: True (reset ttl 64)
1276 Port: 80/tcp open http syn-ack ttl 47 Apache httpd
1277 Script Info: | http-methods:
1278 Script Info: |_ Supported Methods: HEAD GET POST OPTIONS
1279 Script Info: |_http-server-header: Apache
1280 Script Info: |_http-title: Site doesn't have a title (text/html).
1281 Port: 443/tcp open ssl/http syn-ack ttl 48 Apache httpd
1282 Script Info: | http-methods:
1283 Script Info: |_ Supported Methods: GET HEAD POST
1284 Script Info: |_http-server-header: Apache
1285 Script Info: |_http-title: 400 Bad Request
1286 Script Info: | ssl-cert: Subject:
1287 Script Info: | Subject Alternative Name: DNS:*.manageengine.com, DNS:manageengine.com
1288 Script Info: | Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
1289 Script Info: | Public Key type: rsa
1290 Script Info: | Public Key bits: 2048
1291 Script Info: | Signature Algorithm: sha256WithRSAEncryption
1292 Script Info: | Not valid before: 2018-02-03T00:00:00
1293 Script Info: | Not valid after: 2020-02-03T23:59:59
1294 Script Info: | MD5: 352b 831c 33d6 2340 0483 ba88 f00f 64e6
1295 Script Info: |_SHA-1: 9c6e b11f 15b1 284b a315 9b07 318f 890f 0394 6298
1296 Script Info: |_ssl-date: TLS randomness does not represent time
1297 Script Info: Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (91%)
1298 IP: 207.46.100.0
1299 Type: SPF
1300 Is Active: True (reset ttl 64)
1301 IP: 157.55.234.0
1302 Type: SPF
1303 Is Active: True (reset ttl 64)
1304 IP: 94.245.120.64
1305 Type: SPF
1306 Is Active: True (reset ttl 64)
1307 IP: 216.32.180.0
1308 Type: SPF
1309 Is Active: True (reset ttl 64)
1310 IP: 104.47.0.36
1311 HostName: jobtrain-co-uk.mail.protection.outlook.com Type: MX
1312 HostName: mail-he1eur010036.inbound.protection.outlook.com Type: PTR
1313 Country: United States
1314 Is Active: True (reset ttl 64)
1315 IP: 87.84.198.81
1316 HostName: ns1.cyberpass.co.uk Type: NS
1317 HostName: host81.cyberpass.co.uk Type: PTR
1318 Country: United Kingdom
1319 Is Active: True (reset ttl 64)
1320 Port: 1723/tcp open pptp syn-ack ttl 53 linux (Firmware: 1)
1321 Script Info: Device type: general purpose|storage-misc|broadband router|WAP|phone
1322 Script Info: Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (94%), HP embedded (91%), Asus embedded (88%), Google Android 4.X (87%)
1323 Os Info: Host: local
1324 IP: 23.103.128.0
1325 Type: SPF
1326 Is Active: True (reset ttl 64)
1327 IP: 64.4.22.64
1328 Type: SPF
1329 Is Active: True (reset ttl 64)
1330 IP: 157.56.110.0
1331 Type: SPF
1332 Is Active: True (reset ttl 64)
1333 IP: 23.103.208.0
1334 Type: SPF
1335 Is Active: True (reset ttl 64)
1336 IP: 62.31.67.97
1337 HostName: ns2.cyberpass.co.uk Type: NS
1338 HostName: 97.67-31-62.static.virginmediabusiness.co.uk Type: PTR
1339 Country: United Kingdom
1340 Is Active: True (reset ttl 64)
1341 Port: 53/tcp open domain syn-ack ttl 51 (unknown banner: Not disclosed)
1342 Script Info: | dns-nsid:
1343 Script Info: |_ bind.version: Not disclosed
1344 Script Info: | fingerprint-strings:
1345 Script Info: | DNSVersionBindReqTCP:
1346 Script Info: | version
1347 Script Info: | bind
1348 Script Info: |_ disclosed
1349 Port: 1723/tcp open pptp syn-ack ttl 52 linux (Firmware: 1)
1350 Os Info: Host: local
1351 IP: 23.103.198.0
1352 Type: SPF
1353 Is Active: True (reset ttl 64)
1354 IP: 207.46.163.0
1355 Type: SPF
1356 Is Active: True (reset ttl 64)
1357 IP: 134.170.140.0
1358 Type: SPF
1359 Is Active: True (reset ttl 64)
1360 IP: 213.199.154.0
1361 Type: SPF
1362 Is Active: True (reset ttl 64)
1363 IP: 212.54.140.101
1364 HostName: test.jobtrain.co.uk. Type: A
1365 Country: United Kingdom
1366 Is Active: True (reset ttl 64)
1367 Port: 443/tcp open ssl syn-ack ttl 112 Microsoft SChannel TLS
1368 Script Info: | fingerprint-strings:
1369 Script Info: | TLSSessionReq:
1370 Script Info: | Ymg.3
1371 Script Info: | pXR3
1372 Script Info: | Arizona1
1373 Script Info: | Scottsdale1%0#
1374 Script Info: | Starfield Technologies, Inc.1301
1375 Script Info: | *http://certs.starfieldtech.com/repository/1402
1376 Script Info: | +Starfield Secure Certificate Authority - G20
1377 Script Info: | 180111092500Z
1378 Script Info: | 210210131640Z0>1!0
1379 Script Info: | Domain Control Validated1
1380 Script Info: | *.jobtrain.co.uk0
1381 Script Info: | %M!x
1382 Script Info: | -`LsN
1383 Script Info: | w]zI
1384 Script Info: | \xd7
1385 Script Info: | 50301
1386 Script Info: | +http://crl.starfieldtech.com/sfig2s1-80.crl0c
1387 Script Info: |_ 0?0=
1388 Script Info: |_http-server-header: Microsoft-HTTPAPI/2.0
1389 Script Info: |_http-title: Service Unavailable
1390 Script Info: | ssl-cert: Subject: commonName=*.jobtrain.co.uk
1391 Script Info: | Subject Alternative Name: DNS:*.jobtrain.co.uk, DNS:jobtrain.co.uk
1392 Script Info: | Issuer: commonName=Starfield Secure Certificate Authority - G2/organizationName=Starfield Technologies, Inc./stateOrProvinceName=Arizona/countryName=US
1393 Script Info: | Public Key type: rsa
1394 Script Info: | Public Key bits: 2048
1395 Script Info: | Signature Algorithm: sha256WithRSAEncryption
1396 Script Info: | Not valid before: 2018-01-11T09:25:00
1397 Script Info: | Not valid after: 2021-02-10T13:16:40
1398 Script Info: | MD5: 0f4b 04b1 3448 f9da 32b6 0537 930a b5c2
1399 Script Info: |_SHA-1: 7377 8762 6277 7ed0 b74a e5df 73f8 bfa3 989a ccb2
1400 Os Info: OS: Windows; CPE: cpe:/o:microsoft:windows
1401 IP: 23.103.191.0
1402 Type: SPF
1403 Is Active: True (reset ttl 64)
1404 IP: 40.107.0.0
1405 Type: SPF
1406 Is Active: True (reset ttl 64)
1407 IP: 85.189.42.33
1408 Type: SPF
1409 Is Active: True (reset ttl 64)
1410 IP: 212.54.140.10
1411 HostName: www.jobtrain.co.uk. Type: A
1412 Country: United Kingdom
1413 Is Active: True (reset ttl 64)
1414 Port: 80/tcp open http syn-ack ttl 114 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1415 Script Info: | http-methods:
1416 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
1417 Script Info: |_http-server-header: <empty>
1418 Script Info: |_http-title: Did not follow redirect to https://www.jobtrain.co.uk/
1419 Port: 443/tcp open ssl/http syn-ack ttl 112 Microsoft IIS httpd 7.5
1420 Script Info: | http-methods:
1421 Script Info: | Supported Methods: OPTIONS TRACE GET HEAD POST
1422 Script Info: |_ Potentially risky methods: TRACE
1423 Script Info: |_http-title: Did not follow redirect to https://jobtrain.co.uk
1424 Script Info: | ssl-cert: Subject: commonName=www.jobtrain.co.uk/organizationName=Jobtrain Limited/stateOrProvinceName=Cheshire/countryName=GB
1425 Script Info: | Subject Alternative Name: DNS:www.jobtrain.co.uk, DNS:jobtrain.co.uk
1426 Script Info: | Issuer: commonName=DigiCert SHA2 Extended Validation Server CA/organizationName=DigiCert Inc/countryName=US
1427 Script Info: | Public Key type: rsa
1428 Script Info: | Public Key bits: 2048
1429 Script Info: | Signature Algorithm: sha256WithRSAEncryption
1430 Script Info: | Not valid before: 2018-08-13T00:00:00
1431 Script Info: | Not valid after: 2019-11-11T12:00:00
1432 Script Info: | MD5: e12f 4cf1 e4d7 d93b dd3d 6903 8429 ce68
1433 Script Info: |_SHA-1: f845 cf04 d8da c84d 3e89 f95c c176 9c3c 2d00 ddf4
1434 Port: 8080/tcp open http syn-ack ttl 112 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1435 Script Info: | http-methods:
1436 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
1437 Script Info: |_http-open-proxy: Proxy might be redirecting requests
1438 Script Info: |_http-server-header: <empty>
1439 Script Info: |_http-title: Did not follow redirect to https://www.jobtrain.co.uk/
1440 Script Info: Device type: general purpose|WAP
1441 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 2008|7|Vista|8.1 (85%)
1442 Os Info: OS: Windows; CPE: cpe:/o:microsoft:windows
1443 IP: 40.92.0.0
1444 Type: SPF
1445 Is Active: True (reset ttl 64)
1446 IP: 104.47.1.36
1447 HostName: jobtrain-co-uk.mail.protection.outlook.com Type: MX
1448 HostName: mail-ve1eur010036.inbound.protection.outlook.com Type: PTR
1449 Country: United States
1450 Is Active: True (reset ttl 64)
1451 IP: 109.233.49.212
1452 Type: SPF
1453 Is Active: True (reset ttl 64)
1454 Port: 5666/tcp open tcpwrapped syn-ack ttl 50
1455 Script Info: Device type: general purpose|storage-misc|router|media device|WAP|broadband router
1456 Script Info: Running (JUST GUESSING): Linux 2.6.X|3.X (93%), HP embedded (90%), MikroTik RouterOS 6.X (89%), Infomir embedded (89%), Ubiquiti embedded (89%), Ubiquiti AirOS 5.X (89%)
1457 IP: 109.233.48.186
1458 Type: SPF
1459 Is Active: True (reset ttl 64)
1460 IP: 109.233.48.189
1461 Type: SPF
1462 Is Active: True (reset ttl 64)
1463 IP: 157.56.112.0
1464 Type: SPF
1465 Is Active: True (reset ttl 64)
1466 IP: 207.46.51.64
1467 Type: SPF
1468 Is Active: True (reset ttl 64)
1469 IP: 117.20.43.131
1470 HostName: support.jobtrain.co.uk. Type: A
1471 Country: Singapore
1472 Is Active: True (reset ttl 64)
1473 Port: 80/tcp open http syn-ack ttl 47 Apache httpd
1474 Script Info: | http-methods:
1475 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
1476 Script Info: | http-robots.txt: 90 disallowed entries (15 shown)
1477 Script Info: | /products/snmpapi3/ /fault/ /provisioning/ /security/
1478 Script Info: | /msp/ /products/middleware/product_overview/ /cgi-bin/
1479 Script Info: | /mbuilder/ /autotest/ /js/ /search_img/ /configuration/
1480 Script Info: | /services/training/mbuilder/index.html /services/training/mbuilder.html
1481 Script Info: |_/services/training/details.html
1482 Script Info: |_http-server-header: Apache
1483 Script Info: |_http-title: Zoho Corp.
1484 Port: 443/tcp open ssl/http syn-ack ttl 49 Apache httpd
1485 Script Info: | http-methods:
1486 Script Info: |_ Supported Methods: GET HEAD POST
1487 Script Info: |_http-server-header: Apache
1488 Script Info: |_http-title: 400 Bad Request
1489 Script Info: | ssl-cert: Subject:
1490 Script Info: | Subject Alternative Name: DNS:*.manageengine.com, DNS:manageengine.com
1491 Script Info: | Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
1492 Script Info: | Public Key type: rsa
1493 Script Info: | Public Key bits: 2048
1494 Script Info: | Signature Algorithm: sha256WithRSAEncryption
1495 Script Info: | Not valid before: 2018-02-03T00:00:00
1496 Script Info: | Not valid after: 2020-02-03T23:59:59
1497 Script Info: | MD5: 352b 831c 33d6 2340 0483 ba88 f00f 64e6
1498 Script Info: |_SHA-1: 9c6e b11f 15b1 284b a315 9b07 318f 890f 0394 6298
1499 Script Info: |_ssl-date: TLS randomness does not represent time
1500 IP: 104.47.0.0
1501 Type: SPF
1502 Is Active: True (reset ttl 64)
1503 IP: 213.199.180.128
1504 Type: SPF
1505 Is Active: True (reset ttl 64)
1506 IP: 23.103.200.0
1507 Type: SPF
1508 Is Active: True (reset ttl 64)
1509#######################################################################################################################################
1510Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:56 EDT
1511Nmap scan report for www.jobtrain.co.uk (212.54.140.10)
1512Host is up (0.24s latency).
1513rDNS record for 212.54.140.10: s10-140-54-212.cust.stratogen.net
1514Not shown: 470 filtered ports, 3 closed ports
1515Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
1516PORT STATE SERVICE
151780/tcp open http
1518443/tcp open https
15198080/tcp open http-proxy
1520#######################################################################################################################################
1521Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:56 EDT
1522Nmap scan report for www.jobtrain.co.uk (212.54.140.10)
1523Host is up (0.18s latency).
1524rDNS record for 212.54.140.10: s10-140-54-212.cust.stratogen.net
1525Not shown: 2 filtered ports
1526PORT STATE SERVICE
152753/udp open|filtered domain
152867/udp open|filtered dhcps
152968/udp open|filtered dhcpc
153069/udp open|filtered tftp
153188/udp open|filtered kerberos-sec
1532123/udp open|filtered ntp
1533139/udp open|filtered netbios-ssn
1534161/udp open|filtered snmp
1535162/udp open|filtered snmptrap
1536389/udp open|filtered ldap
1537520/udp open|filtered route
1538######################################################################################################################################
1539Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:56 EDT
1540Nmap scan report for www.jobtrain.co.uk (212.54.140.10)
1541Host is up (0.24s latency).
1542rDNS record for 212.54.140.10: s10-140-54-212.cust.stratogen.net
1543
1544PORT STATE SERVICE VERSION
154580/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1546|_http-server-header: <empty>
1547|_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)
1548| vulscan: VulDB - https://vuldb.com:
1549| [131683] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Win32k memory corruption
1550| [131642] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Active Directory privilege escalation
1551| [127822] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 Kernel information disclosure
1552| [125103] Microsoft Windows Server 2008 SP2 Graphics Component information disclosure
1553| [123853] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel Memory information disclosure
1554| [122858] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 LNK memory corruption
1555| [122833] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI+ memory corruption
1556| [121109] Microsoft Wireless Display Adapter V2 2.0.8350/2.0.8365/2.0.8372 privilege escalation
1557| [120449] Microsoft Forefront Unified Access Gateway 2000 InitParams.aspx Parameter Server-Side Request Forgery
1558| [119469] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel privilege escalation
1559| [116015] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
1560| [114563] Microsoft Office 2007 SP3/2010 SP2/2013/2013 RT SP1 memory corruption
1561| [114528] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI privilege escalation
1562| [114524] Microsoft ASP.NET Core 2.0 denial of service
1563| [114523] Microsoft ASP.NET Core 2.0 Kestrel Web Application privilege escalation
1564| [113257] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
1565| [113256] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
1566| [113255] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
1567| [113247] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
1568| [113246] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
1569| [113245] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 EOT Font Engine information disclosure
1570| [113244] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
1571| [113235] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2016 privilege escalation
1572| [113234] Microsoft Office 2007 SP2/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1573| [113216] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1574| [112285] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1575| [112284] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1576| [112283] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1577| [112282] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1578| [111578] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1579| [111577] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1580| [111576] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1581| [111575] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1582| [111574] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
1583| [111573] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
1584| [111572] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
1585| [111570] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
1586| [111568] Microsoft Excel 2007/2010/2013/2016 memory corruption
1587| [111566] Microsoft Word 2007/2010/2013/2016 memory corruption
1588| [111565] Microsoft Word 2007/2010/2013 Email Message memory corruption
1589| [111563] Microsoft Outlook 2007/2010/2013/2016 Email Message privilege escalation
1590| [111347] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Color Management Icm32.dll information disclosure
1591| [109388] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 memory corruption
1592| [109387] Microsoft ASP.NET Core 2.0 privilege escalation
1593| [109386] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1594| [109385] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature Macro privilege escalation
1595| [109381] Microsoft Office/Word 2007 SP3/2010 SP2 memory corruption
1596| [107703] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1597| [106530] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1598| [106528] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1599| [106515] Microsoft Publisher 2007 SP3/2010 SP2 memory corruption
1600| [106497] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Uniscribe memory corruption
1601| [106476] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1602| [106475] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1603| [105051] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Font Library privilege escalation
1604| [105032] Microsoft Internet Explorer 9/10 on Server 2008/Server 2012 memory corruption
1605| [102513] Microsoft Windows XP SP3/Server 2003 SP2 OLE olecnv32.dll privilege escalation
1606| [102512] Microsoft Windows XP SP3/Server 2003 SP2 rpc privilege escalation
1607| [102511] Microsoft Windows XP SP3/Server 2003 SP2 RDP EsteemAudit privilege escalation
1608| [102447] Microsoft PowerPoint/SharePoint Server 2007 SP3 privilege escalation
1609| [102444] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
1610| [102442] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
1611| [102441] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1612| [102401] Microsoft Windows 7 SP1/Server 2008 R2 SP1 GDI USP10!NextCharInLiga Uniscribe Font information disclosure
1613| [101491] Microsoft Windows up to XP SP3/Server 2003 SP2 Remote Desktop Protocol gpkcsp.dll memory corruption
1614| [101017] Microsoft Office 2007 SP3/2010 SP2/2016 memory corruption
1615| [101012] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2016 memory corruption
1616| [101011] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 ActiveX Object Memory memory corruption
1617| [100854] Microsoft Windows Server 2003 SP2 RRAS ERRATICGOPHER memory corruption
1618| [99904] Microsoft Windows XP SP3/Server 2003 SP2 SmartCard Authentication RDP Packet EsteemAudit privilege escalation
1619| [99698] Microsoft OneNote 2007 SP3/2010 SP2 DLL Loader privilege escalation
1620| [99684] Microsoft Excel 2007 SP3/2010 SP2 Memory information disclosure
1621| [99654] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
1622| [99653] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
1623| [99533] Microsoft Office 2007/2010/2013/2016 RTF Document Necurs Dridex memory corruption
1624| [98561] Microsoft IIS 6.0 on Windows Server 2003 WebDAV ScStoragePathFromUrl Long Header memory corruption
1625| [98092] Microsoft SharePoint Server 2007 SP3 memory corruption
1626| [98088] Microsoft SharePoint Server 2007 SP3 memory corruption
1627| [98087] Microsoft Office 2007 SP3/2010 SP2 memory corruption
1628| [98086] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1629| [98085] Microsoft Excel 2007 SP3 memory corruption
1630| [98084] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
1631| [98083] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
1632| [98078] Microsoft Word/Excel 2007 SP3 memory corruption
1633| [98072] Microsoft Office 2007 SP3/2010 SP2/Word Viewer Graphics Component privilege escalation
1634| [98071] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
1635| [98070] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
1636| [94450] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
1637| [94449] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
1638| [94448] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
1639| [94445] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 information disclosure
1640| [94441] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
1641| [94440] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1642| [94439] Microsoft Office 2007 SP3/2011 privilege escalation
1643| [94438] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
1644| [93542] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
1645| [93541] Microsoft Office 2007 SP3 denial of service
1646| [93539] Microsoft Office 2007/2010 SP2/2011 memory corruption
1647| [93538] Microsoft Office 2007/2010 SP2/2011/2013 SP1 memory corruption
1648| [93537] Microsoft Office 2007/2010 SP2/2011 memory corruption
1649| [93396] Microsoft Office 2007/2010/2011 memory corruption
1650| [93395] Microsoft Office 2007/2010/2011 memory corruption
1651| [93394] Microsoft Office 2007/2010 memory corruption
1652| [92596] Microsoft Windows Vista SP2/7 SP1/Server 2008 SP2/Server 2008 R2 Internet Messaging API File information disclosure
1653| [91554] Microsoft Exchange 2007/2010/2013/2016 Email information disclosure
1654| [91553] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1655| [91552] Microsoft Office 2007/2010/2013/2013 RT/2016 spoofing
1656| [91551] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1657| [91549] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1658| [91548] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1659| [91546] Microsoft Office 2007/2010/2013/2013 RT memory corruption
1660| [91545] Microsoft Office 2007/2010 memory corruption
1661| [91544] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1662| [91542] Microsoft Office 2007/2010/2013/2013 RT/2016 information disclosure
1663| [90707] Microsoft OneNote 2007/2010/2013/2013 RT/2016 information disclosure
1664| [90706] Microsoft Office 2007/2010/2013/2013 RT Graphics memory corruption
1665| [90705] Microsoft Office 2007/2010/2011 memory corruption
1666| [90703] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
1667| [89039] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
1668| [89034] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
1669| [87960] Microsoft Windows Server 2008 R2/Server 2012/Server 2012 R2 Active Directory denial of service
1670| [87955] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
1671| [87954] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
1672| [87953] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
1673| [87939] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL memory corruption
1674| [87938] Microsoft Office 2007 SP3/2010 SP2/2011 information disclosure
1675| [87937] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
1676| [87935] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
1677| [87934] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
1678| [87933] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
1679| [87147] Microsoft Office 2007/2010 memory corruption
1680| [87145] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
1681| [87144] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
1682| [82228] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
1683| [82225] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
1684| [82224] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
1685| [81273] Microsoft Office 2007/2010/2013/2016 memory corruption
1686| [81272] Microsoft Office 2007/2010/2013 memory corruption
1687| [81265] Microsoft Windows Vista SP2/Server 2008 Library Loader memory corruption
1688| [80872] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1689| [80871] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1690| [80869] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
1691| [79506] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Library Loader memory corruption
1692| [79505] Microsoft Office 2007 memory corruption
1693| [79504] Microsoft Office 2007/2010/2013/2016 memory corruption
1694| [79503] Microsoft Office 2007/2010/2013 memory corruption
1695| [79502] Microsoft Office 2007/2010/2011 memory corruption
1696| [79501] Microsoft Office 2007/2010 memory corruption
1697| [79499] Microsoft Windows 7/Server 2008 R2 Uniscribe memory corruption
1698| [79493] Microsoft Windows Vista/Server 2008 Graphics memory corruption
1699| [79190] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
1700| [79189] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
1701| [79187] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 Sandbox privilege escalation
1702| [79167] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Journal memory corruption
1703| [78372] Microsoft Visio 2007 SP3/2010 SP2 UML Data memory corruption
1704| [78371] Microsoft SharePoint Server 2007 SP3/2010 SP2 InfoPath Forms Services XXE information disclosure
1705| [77646] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 EPS Image memory corruption
1706| [77629] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
1707| [77627] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
1708| [77626] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
1709| [77617] Microsoft Office 2007 SP3/2010 SP2 OpenType Font memory corruption
1710| [77252] Microsoft Office 2007 SP3/2010 SP2 Office Graphics Library Font memory corruption
1711| [77038] Microsoft Windows Server 2008 SP2 UDDI Services cross site scripting
1712| [76497] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1 Office Document memory corruption
1713| [76491] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
1714| [76467] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
1715| [76466] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
1716| [76464] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
1717| [76463] Microsoft Excel 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
1718| [76449] Microsoft Windows 8/8.1/Server 2008/Server 2012/Server 2012 R2 Hyper-V memory corruption
1719| [76440] Microsoft SQL Server 2008/2008 R2/2012/2014 Virtual Function Uninitialized Memory memory corruption
1720| [76439] Microsoft SQL Server 2008/2008 R2/2012/2014 Uninitialized Memory memory corruption
1721| [76438] Microsoft SQL Server 2008/2008 R2/2012/2014 Pointer Casting privilege escalation
1722| [75783] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services cross site scripting
1723| [75338] Microsoft SharePoint 2007/2010/2013 Content privilege escalation
1724| [75337] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
1725| [75336] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
1726| [74845] Microsoft Office 2007/2010/2013 Document Use-After-Free memory corruption
1727| [74844] Microsoft Office 2007/2010 Document Use-After-Free memory corruption
1728| [74837] Microsoft Office 2007/2010/2011/2013 RTF Document Use-After-Free privilege escalation
1729| [73979] Microsoft Exchange Server 2003 SP1/2003 CU7 Meeting privilege escalation
1730| [73978] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
1731| [73977] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
1732| [73976] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
1733| [73975] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
1734| [73964] Microsoft SharePoint 2007/2010/2013 cross site scripting
1735| [69158] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
1736| [69157] Microsoft Office 2007/2010/2013 OneTableDocumentStream memory corruption
1737| [69155] Microsoft Excel 2007/2010/2013/- Object memory corruption
1738| [68416] Microsoft Exchange 2007/2010/2013 Outlook Web Access Token spoofing
1739| [68409] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
1740| [68408] Microsoft Excel 2007/2010/2013 memory corruption
1741| [68407] Microsoft Excel 2007/2010 memory corruption
1742| [68405] Microsoft Word 2007/2010 Index Use-After-Free memory corruption
1743| [68195] Microsoft Windows Vista/7/Server 2003/Server 2008 Input Method Editor Sandbox privilege escalation
1744| [68189] Microsoft Windows Server 2003 SP2 TCP/IP Stack Stack-Based memory corruption
1745| [68188] Microsoft Word 2007 File memory corruption
1746| [68187] Microsoft Word 2007 File memory corruption
1747| [68186] Microsoft Word 2007 File memory corruption
1748| [67829] Microsoft Office 2007/2010/2011 Object memory corruption
1749| [67825] Microsoft .NET Framework 2.0/3.5/3.5.1 ASLR privilege escalation
1750| [71337] Microsoft Office 2000/2004/XP memory corruption
1751| [67355] Microsoft OneNote 2007 File Processing privilege escalation
1752| [67354] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 SQL Master Data Services cross site scripting
1753| [67353] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 T-SQL Query Stack-Based memory corruption
1754| [67018] Microsoft Windows Server 2008/Server 2012/Server 2012 R2 Service Bus AMQP Message denial of service
1755| [13545] Microsoft Word 2007 Embedded Font memory corruption
1756| [13397] Microsoft Windows XP/2000/Server 2003 DHCP Response DHCP ACK spoofing
1757| [13462] Microsoft Visual Studio 2002/2003/2005/2010 Debug Interface msdia.dll PDB File memory corruption
1758| [13229] Microsoft Office 2007/2010/2013 Common Control Library MSCOMCTL.OCX privilege escalation
1759| [13227] Microsoft Office 2007/2010/2013 Chinese Grammar Checker Library privilege escalation
1760| [13226] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
1761| [13225] Microsoft SharePoint Server 2007/2010/2013 cross site scripting
1762| [13224] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
1763| [12859] Microsoft Word 2003 Office Document Stack-Based memory corruption
1764| [12852] Microsoft Publisher 2003/2007 Publisher File pubconv.dll memory corruption
1765| [12845] Microsoft Word 2003 Office File Stack-Based memory corruption
1766| [12844] Microsoft Word 2007/2010 Office File memory corruption
1767| [12843] Microsoft Office 2007/2010/2011/2013 XML Parser Nested Entities Memory Consumption denial of service
1768| [12687] Microsoft Word/Office/Outlook 2003/2007/2010/2013 RTF Document memory corruption
1769| [12530] Microsoft Windows XP/Vista/Server 2003/Server 2008/Server 2012 Security Account Manager Lockout privilege escalation
1770| [12266] Microsoft .NET Framework 2.0 SP2/3.5.1 ASLR Bypass privilege escalation
1771| [12070] Apple Pages 2.0/2.0.1/2.0.2/5.0/5.0.1 on Mac Microsoft Word Document memory corruption
1772| [11950] Microsoft Office Compability Pack/Word 2007 SP3 File memory corruption
1773| [11949] Microsoft Word Viewer/Office Compatibility Pack/Word 2003 SP3/2007 SP3 File memory corruption
1774| [11448] Microsoft Office 2007/2010 Address Space Layout Randomization privilege escalation
1775| [11151] Microsoft Outlook 2007/2010/2013/- S/MIME Certificate Metadata Expansion memory corruption
1776| [11149] Microsoft Office 2003/2007/2010/2013/- WordPerfect Document epsimp32.flt memory corruption
1777| [11148] Microsoft Office 2003/2007 WordPerfect Document epsimp32.flt memory corruption
1778| [11146] Microsoft Office 2003/2007 epsimp32.flt memory corruption
1779| [11230] Microsoft Word 2003 DOC Document Embedded Image denial of service
1780| [11081] Microsoft Windows Vista/Server 2008 TIFF Image memory corruption
1781| [10648] Microsoft Word 2007 Word File memory corruption
1782| [10647] Microsoft Word 2003 Word File memory corruption
1783| [10643] Microsoft SharePoint Server 2007/2010/2013 Input Sanitizer memory corruption
1784| [10642] Microsoft SharePoint Server 2007/2010 Content Display in Frames privilege escalation
1785| [10247] Microsoft SharePoint Server 2007/2010/2013 Online Cloud cross site scripting
1786| [10245] Microsoft Office 2003/2007/2010 Word File memory corruption
1787| [10244] Microsoft Office 2003 SP3 Word File memory corruption
1788| [10243] Microsoft Office 2003/2007 Word File memory corruption
1789| [10242] Microsoft Office 2007 Word File memory corruption
1790| [10241] Microsoft Office 2007 Word File memory corruption
1791| [10240] Microsoft Office 2003/2007/2010 Word File memory corruption
1792| [10239] Microsoft Office 2003/2007 Word File memory corruption
1793| [10238] Microsoft Excel 2003/2007 XML External Entity Data information disclosure
1794| [10237] Microsoft Excel 2003/2007/2010 XML External Entity Data information disclosure
1795| [10236] Microsoft Word/Office 2003/2007 XML External Entity Data information disclosure
1796| [10234] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
1797| [10232] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
1798| [10231] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
1799| [10230] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
1800| [10229] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
1801| [10228] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
1802| [10227] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
1803| [10192] Microsoft Windows XP SP3/Vista/7/2000/Server 2003 SP2 Windows Theme File privilege escalation
1804| [10191] Microsoft Windows XP/Server 2003 OLE Object privilege escalation
1805| [10190] Microsoft Windows Vista/7/8/Server 2008 Active Directory denial of service
1806| [10189] Microsoft Outlook 2007/2010 S/MIME privilege escalation
1807| [9941] Microsoft Windows XP/Server 2003 Unicode Scripts Processor USP10.DLL Uniscribe Font memory corruption
1808| [9929] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services Unspecified Account information disclosure
1809| [9715] Microsoft PowerPoint 2007 DirectShow Runtime quartz.dll GetMaxSampleSize denial of service
1810| [9397] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Array privilege escalation
1811| [9394] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 on 64-bit Array memory corruption
1812| [9393] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Permission privilege escalation
1813| [8738] Microsoft Visio 2003 SP3/2007 SP3/2010 SP1 XML Parser File information disclosure
1814| [8737] Microsoft Word 2003 SP3 Shape Data Parser File memory corruption
1815| [8736] Microsoft Publisher 2003 SP3 PUB File memory corruption
1816| [8735] Microsoft Publisher 2003 SP3/2007 SP3/2010 SP1 PUB File memory corruption
1817| [8734] Microsoft Publisher 2003 SP3 PUB File memory corruption
1818| [8733] Microsoft Publisher 2003 SP3 PUB File memory corruption
1819| [8732] Microsoft Publisher 2003 SP3 PUB File memory corruption
1820| [8731] Microsoft Publisher 2003 SP3 PUB File memory corruption
1821| [8730] Microsoft Publisher 2003 SP3 PUB File memory corruption
1822| [8729] Microsoft Publisher 2003 SP3 PUB File memory corruption
1823| [8728] Microsoft Publisher 2003 SP3 PUB File memory corruption
1824| [8727] Microsoft Publisher 2003 SP3 PUB File memory corruption
1825| [8726] Microsoft Publisher 2003 PUB File Eingabe memory corruption
1826| [8723] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 XML File spoofing
1827| [7643] Microsoft Windows Server 2008 R2/Server 2012 NFS Server NULL Pointer Dereference denial of service
1828| [7642] Microsoft Exchange 2007/2010 Outlook Web Access vspdx.dll) privilege escalation
1829| [7641] Microsoft Windows XP/Vista/Server 2003/Server 2008 DirectShow Quartz.dll memory corruption
1830| [8589] Microsoft System Center Operations Manager 2007 SP1/2007 R2 ViewTypeManager.aspx cross site scripting
1831| [7252] Microsoft System Center Operations Manager 2007 ExecuteTask.aspx cross site scripting
1832| [7251] Microsoft System Center Operations Manager 2007 cross site scripting
1833| [7248] Microsoft Windows 7/Server 2008 R2 Print Spooler privilege escalation
1834| [7121] Microsoft Exchange 2007/2010 RSS Feed denial of service
1835| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
1836| [62914] Microsoft Office 2003 SP3/2007 SP3/2008/2010 SP1/2011 Spreadsheet Use-After-Free memory corruption
1837| [7058] Microsoft Windows 7/Server 2008 R2 DHCPv6 Message denial of service
1838| [6935] Microsoft Office Excel 2003/2007/2010 Input Sanitizer File Stack-based memory corruption
1839| [6934] Microsoft Office Excel 2003/2007/2010 Input Sanitizer memory corruption
1840| [6933] Microsoft Office Excel 2003/2007/2010 SerAuxErrBar File memory corruption
1841| [6929] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Web Proxy Setting Auto-Discovery memory corruption
1842| [6927] Microsoft .NET Framework 2.0 SP2/3.5.1 Trusted Code Function information disclosure
1843| [6918] Microsoft Excel 2007 SP2 Input Sanitizer File memory corruption
1844| [6830] Microsoft Word 2007/2010 File memory corruption
1845| [6819] Microsoft Excel 2007 File memory corruption
1846| [6627] Microsoft Windows 7/Server 2008 R2 Kerberos denial of service
1847| [6626] Microsoft SharePoint/Lync/Infopath 2007/2010 HTML Sanitization cross site scripting
1848| [6622] Microsoft Word 2003/2007/2010/- RTF Document memory corruption
1849| [6621] Microsoft Word 2007 PAPX memory corruption
1850| [62239] Microsoft Systems Management Server 2003 Configuration Manager Reflected cross site scripting
1851| [5945] Microsoft Office 2007/2010 Computer Graphics Metafile memory corruption
1852| [5939] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Print Spooler Service memory corruption
1853| [5938] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Remote Administration Protocol netapi32.dll RAP Request denial of service
1854| [5933] Microsoft SQL Server 2000/2005/2008/2008 R2 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
1855| [5932] Microsoft Office 2003/2007/2010 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
1856| [5654] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 information disclosure
1857| [5653] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
1858| [5652] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
1859| [5650] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
1860| [5649] Microsoft Office 2003/2007/2010 libraries memory corruption
1861| [5645] Microsoft SharePoint 2007/2010/3.0 Reflected cross site scripting
1862| [5643] Microsoft SharePoint 2007/2010 information disclosure
1863| [5642] Microsoft SharePoint 2007 cross site request forgery
1864| [5553] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Font atmfd.dll denial of service
1865| [5524] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
1866| [5518] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 memory corruption
1867| [5362] Microsoft Office 2003/2007 GDI+ memory corruption
1868| [5291] Microsoft Visual Studio 2008 Incremental Linker link.exe ConvertRgImgSymToRgImgSymEx memory corruption
1869| [5268] Microsoft Office 2008 on Mac RTF Pfragment File memory corruption
1870| [5080] Microsoft SQL Server 2005/2008/2008R2 CREATE DATABASE sql injection
1871| [5050] Microsoft Office 2007 WPS Converter Heap-based memory corruption
1872| [5049] Microsoft SQL Server 2000/2005/2008 MSCOMCTL.OCX privilege escalation
1873| [5048] Microsoft Office 2003/2007/2010 MSCOMCTL.OCX privilege escalation
1874| [5046] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Windows Authenticode Signature Verification WinVerifyTrust Signature privilege escalation
1875| [4803] Microsoft Windows Server 2003/Server 2008 DNS Server Domain Resource Record Query Parser denial of service
1876| [4802] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Protocol denial of service
1877| [4798] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Service memory corruption
1878| [60205] Microsoft .NET Framework 2.0 SP2/3.5.1 Heap-based memory corruption
1879| [4642] Microsoft .NET Framework 2.0 SP2/3.5.1/4 XAML Browser Application memory corruption
1880| [60065] Microsoft Windows 2000 mod_sql unknown vulnerability
1881| [4535] Microsoft Windows XP/Server 2003 Object Packager packager.exe privilege escalation
1882| [4534] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Line21 DirectShow Filter Quartz.dll/Qdvd.dll Media File memory corruption
1883| [4533] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Multimedia Library winmm.dll MIDI File memory corruption
1884| [4507] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 Forms Authentication Redirect
1885| [59666] Microsoft Publisher 2003/2007 "Publisher memory corruption
1886| [4482] Microsoft Word 2007/2010/2011 Document Parser memory corruption
1887| [4480] Microsoft Excel 2003 memory corruption
1888| [4478] Microsoft Windows XP/Server 2003 OLE Objects Memory Management memory corruption
1889| [4477] Microsoft PowerPoint 2007 OfficeArt Use-After-Free memory corruption
1890| [4474] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Active Directory Query memory corruption
1891| [4473] Microsoft Powerpoint 2007/2010 DLL-Loader memory corruption
1892| [4471] Microsoft Office 2003/2007 Publisher Out-of-Bounds memory corruption
1893| [4470] Microsoft Office 2003 SP3 memory corruption
1894| [4453] Microsoft Excel 2003 Record Parser memory corruption
1895| [4446] Microsoft Office 2008/2007 OfficeArt Record Parser memory corruption
1896| [4445] Microsoft Office 2007/2010/2011 Word Document Parser memory corruption
1897| [4438] Microsoft Windows Vista/7/Server 2008 TCP/IP Reference Counter denial of service
1898| [5358] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 TrueType Font Handling memory corruption
1899| [59005] Microsoft Host Integration Server 2004 denial of service
1900| [58492] Microsoft SharePoint Server 2007 Spreadsheet memory corruption
1901| [58491] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
1902| [58490] Microsoft Office Compatibility Pack 2007 Spreadsheet memory corruption
1903| [58489] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
1904| [58488] Microsoft Office 2007/2010 memory corruption
1905| [4412] Microsoft Office 2003/2007 Library Loader Designfehler
1906| [4411] Microsoft Excel 2003 memory corruption
1907| [4409] Microsoft Windows Server 2003/Server 2008 WINS unknown vulnerability
1908| [58240] Microsoft Visio 2003/2007 memory corruption
1909| [58237] Microsoft Visio 2003/2007/2010 memory corruption
1910| [4396] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
1911| [4393] Microsoft Windows Server 2008 DNS Service memory corruption
1912| [4391] Microsoft .NET Framework 2.0 SP2/3.5.1/4 Socket Restriction privilege escalation
1913| [4390] Microsoft Windows Server 2008 Remote Desktop Web Access cross site scripting
1914| [4388] Microsoft Windows Vista/7/Server 2008 File Metadata Parser denial of service
1915| [57691] Microsoft SQL Server 2008 Web Service information disclosure
1916| [57690] Microsoft Excel 2002/2003 Spreadsheet memory corruption
1917| [57689] Microsoft Excel 2002 Spreadsheet memory corruption
1918| [57688] Microsoft Excel 2002 Spreadsheet memory corruption
1919| [57687] Microsoft Excel 2002/2003/2007 Spreadsheet memory corruption
1920| [57686] Microsoft Excel 2002 Spreadsheet memory corruption
1921| [57685] Microsoft Excel 2002/2003/2007 Array Access memory corruption
1922| [57684] Microsoft Excel 2002/2003/2007/2010 Spreadsheet memory corruption
1923| [4369] Microsoft Excel 2002/2003/2007 memory corruption
1924| [4367] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
1925| [4362] Microsoft Windows Vista/7/Server 2008 denial of service
1926| [57420] Microsoft PowerPoint 2002/2003 memory corruption
1927| [4349] Microsoft Office 2004/2008/2007 Presentation File Parser memory corruption
1928| [4348] Microsoft Powerpoint 2002/2003/2007 memory corruption
1929| [57077] Microsoft Excel 2002 Uninitialized Memory memory corruption
1930| [57078] Microsoft Office 2003/2007/Xp docx unknown vulnerability
1931| [57079] Microsoft PowerPoint 2002/2003/2007/2010 memory corruption
1932| [57076] Microsoft Excel 2002/2003 memory corruption
1933| [57075] Microsoft Excel 2002/2003 memory corruption
1934| [57074] Microsoft Excel 2002 memory corruption
1935| [57073] Microsoft Excel 2002/2003/2007/2010 memory corruption
1936| [4334] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 JIT Compiler memory corruption
1937| [4301] Microsoft Windows Server 2003 SMB Browser Heap-based denial of service
1938| [56475] Microsoft Office 2004/2008 memory corruption
1939| [56414] Microsoft Visio 2002/2003/2007 ELEMENTS.DLL memory corruption
1940| [56413] Microsoft Visio 2002/2003/2007 Exception ORMELEMS.DLL memory corruption
1941| [4298] Microsoft Windows 7/Server 2008 JScript/VBScript Engine information disclosure
1942| [4297] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Compact Font Format Driver privilege escalation
1943| [4296] Microsoft Windows XP/Server 2003 LSASS Authentication Request unknown vulnerability
1944| [4295] Microsoft Windows 7/Server 2008 Kerberos weak authentication
1945| [4294] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys unknown vulnerability
1946| [4293] Microsoft Windows XP/Server 2003 Kerberos CRC32 Checksum privilege escalation
1947| [4292] Microsoft Windows XP/Server 2003 CSRSS Logoff privilege escalation
1948| [4289] Microsoft Excel 2007 Shape Data Parser memory corruption
1949| [4286] Microsoft Powerpoint 2007 OfficeArt Container Parser memory corruption
1950| [4279] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 MHTML cross site scripting
1951| [56176] Microsoft Windows XP/7/Server 2003 fxscover.exe CDrawPoly::Serialize memory corruption
1952| [55772] Microsoft Publisher 2002 pubconv.dll memory corruption
1953| [55771] Microsoft Publisher 2002/2003/2010 memory corruption
1954| [55765] Microsoft Office 2003/Xp Integer memory corruption
1955| [55764] Microsoft Office 2003/Xp memory corruption
1956| [55750] Microsoft Publisher 2002/2003 pubconv.dll memory corruption
1957| [55749] Microsoft Publisher 2002/2003/2007/2010 pubconv.dll memory corruption
1958| [55748] Microsoft Publisher 2002/2003/2007 pubconv.dll memory corruption
1959| [4230] Microsoft Exchange 2007 on 64-bit RPC store.exe MAPI Request denial of service
1960| [4229] Microsoft SharePoint 2007 Document Conversion Launcher Service Eingabeung\xC3\xBCltigkeit
1961| [4228] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
1962| [4224] Microsoft Windows Vista/7/Server 2008 Consent User Interface privilege escalation
1963| [4231] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys GreEnableEUDC denial of service
1964| [55420] Microsoft Office 2007/2010 memory corruption
1965| [55419] Microsoft Office 2004/2008/2011/Xp memory corruption
1966| [55412] Microsoft PowerPoint Viewer 2007 memory corruption
1967| [55411] Microsoft PowerPoint 2002/2003 memory corruption
1968| [4204] Microsoft Windows Server 2008 Color Control Panel Eingabeung\xC3\xBCltigkeit
1969| [54995] Microsoft Office 2004/2008 memory corruption
1970| [54994] Microsoft Office 2004/2008 Out-of-Bounds memory corruption
1971| [54993] Microsoft Office Compatibility Pack 2007 memory corruption
1972| [54992] Microsoft Excel 2002 memory corruption
1973| [54991] Microsoft Office 2004 Future memory corruption
1974| [54990] Microsoft Office 2004 memory corruption
1975| [54989] Microsoft Office 2004/2008 memory corruption
1976| [54988] Microsoft Excel 2002 memory corruption
1977| [54987] Microsoft Excel 2002 memory corruption
1978| [54986] Microsoft Excel 2002/2003 memory corruption
1979| [54985] Microsoft Office Compatibility Pack 2003/2004/2007/2008 memory corruption
1980| [54984] Microsoft Office 2004/2008 memory corruption
1981| [54983] Microsoft Excel 2002 Integer memory corruption
1982| [54980] Microsoft Word 2002/2003 memory corruption
1983| [54979] Microsoft Word 2002 memory corruption
1984| [54978] Microsoft Word 2002 memory corruption
1985| [54977] Microsoft Word 2002 Heap-based memory corruption
1986| [54976] Microsoft Word 2002 memory corruption
1987| [54975] Microsoft Word 2002 memory corruption
1988| [54974] Microsoft Word 2002 memory corruption
1989| [54973] Microsoft Word 2002 memory corruption
1990| [54972] Microsoft Word 2002 memory corruption
1991| [54971] Microsoft Word 2002 memory corruption
1992| [4197] Microsoft SharePoint 2007/3.0 cross site scripting
1993| [4196] Microsoft Word 2002/2003/2007/2010 Stack-based memory corruption
1994| [4194] Microsoft Windows Vista/7/Server 2008 SChannel Client Certificate Request denial of service
1995| [54774] Microsoft Word 2003 word_crash_11.8326.8324_poc.doc denial of service
1996| [54757] Microsoft SharePoint Server 2007 HTML Sanitization SafeHTML cross site scripting
1997| [4186] Microsoft Outlook 2002/2003/2007 Content Parser Heap-based memory corruption
1998| [54584] Microsoft Visual C++ 2005 AtlTraceTool8.exe unknown vulnerability
1999| [54554] Microsoft Groove 2007 mso.dll memory corruption
2000| [4187] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack Ipv4SetEchoRequestCreate() denial of service
2001| [54322] Microsoft Word 2002/2003 memory corruption
2002| [54321] Microsoft Office Compatibility Pack 2007 memory corruption
2003| [54320] Microsoft Office Compatibility Pack 2007 memory corruption
2004| [54319] Microsoft Office Compatibility Pack 2007 memory corruption
2005| [54318] Microsoft .NET Framework 2.0 SP1/2.0 SP2/3.5/3.5 SP1/3.5.1 Interfaces memory corruption
2006| [4165] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
2007| [4162] Microsoft Windows Vista/7/Server 2008 Kernel memory corruption
2008| [4159] Microsoft Excel 2002/2003 SXDB PivotTable Cache Data Record memory corruption
2009| [4149] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Shell Shortcut Parser memory corruption
2010| [54083] Microsoft Access 2003 ActiveX Control ACCWIZ.dll memory corruption
2011| [4146] Microsoft Outlook 2002/2003/2007 SMB Attachment PR_ATTACH_METHOD memory corruption
2012| [4145] Microsoft Access 2003/2007 ActiveX ACCWIZ.dll memory corruption
2013| [54617] Microsoft Outlook Web Access up to 2007 cross site request forgery
2014| [4151] Microsoft Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel memory corruption
2015| [53591] Microsoft Windows Server 2003 GetServerName cross site scripting
2016| [53505] Microsoft Excel 2002/2007 memory corruption
2017| [53501] Microsoft Excel 2002 memory corruption
2018| [53500] Microsoft Excel 2002 memory corruption
2019| [53499] Microsoft Excel 2002 memory corruption
2020| [53495] Microsoft Excel 2002/2003/2007 memory corruption
2021| [53494] Microsoft Excel 2002 Stack-based memory corruption
2022| [53504] Microsoft Excel 2002 memory corruption
2023| [53503] Microsoft Excel 2002 Stack-Based memory corruption
2024| [53502] Microsoft Excel 2002 Heap-based memory corruption
2025| [53498] Microsoft Excel 2002 Stack-based memory corruption
2026| [53497] Microsoft Excel 2002 memory corruption
2027| [53496] Microsoft Excel 2002 memory corruption
2028| [53493] Microsoft Excel 2002/2003/2007 memory corruption
2029| [4133] Microsoft Office 2003/2007/Xp COM Object Instantiator memory corruption
2030| [53366] Microsoft ASP.NET 2.0 cross site scripting
2031| [53385] Microsoft Exchange Server 2007 Outlook Web Access cross site scripting
2032| [53164] Microsoft Office 2003/2007/Xp ActiveX Control VBE6.DLL memory corruption
2033| [53054] Microsoft VISIO 2002/2003/2007 VISIODWG.DLL memory corruption
2034| [4125] Microsoft SharePoint 2007/3.0 help.aspx cross site scripting
2035| [52777] Microsoft Publisher 2002/2003/2007 memory corruption
2036| [52773] Microsoft Visio 2002/2003/2007 memory corruption
2037| [52772] Microsoft Visio 2002/2003/2007 memory corruption
2038| [4107] Microsoft Windows 7/Server 2008 Kernel denial of service
2039| [4103] Microsoft Windows Server 2003 Media Services Stack-based memory corruption
2040| [52543] Microsoft Virtual PC 2007 unknown vulnerability
2041| [52148] Microsoft Office 2004/2008/2007 Uninitialized Memory memory corruption
2042| [52147] Microsoft Office 2004/2008/2007 Spreadsheet Uninitialized Memory memory corruption
2043| [52146] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
2044| [52145] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
2045| [52144] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
2046| [52143] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
2047| [4090] Microsoft Excel 2002/2003/2007 memory corruption
2048| [52036] Microsoft Windows 2000 MsgBox memory corruption
2049| [51995] Microsoft SharePoint Server up to 2006 cross site scripting
2050| [51810] Microsoft Office 2004/Xp MSO.DLL memory corruption
2051| [51802] Microsoft PowerPoint 2003 Stack-based memory corruption
2052| [51801] Microsoft PowerPoint 2003 Stack-based memory corruption
2053| [51800] Microsoft PowerPoint 2002/2003 Use-After-Free memory corruption
2054| [51799] Microsoft PowerPoint 2002/2003 memory corruption
2055| [51798] Microsoft PowerPoint 2002/2003 Heap-based memory corruption
2056| [4082] Microsoft Powerpoint 2002 memory corruption
2057| [54550] Microsoft PowerPoint 2007 rpawinet.dll memory corruption
2058| [54556] Microsoft Visio 2003 mfc71enu.dll unknown vulnerability
2059| [51497] Microsoft Windows Live Messenger 2009 ActiveX Control msnmsgr.exe denial of service
2060| [51133] Microsoft Windows 2000 SP4/XP SP2/SP3/Server 2003 SP2 memory corruption
2061| [51074] Microsoft Office 2002/2003 Integer memory corruption
2062| [4069] Microsoft Project 2007/2003 Project Memory Validator memory corruption
2063| [50794] Microsoft Office 2004/2008 Spreadsheet memory corruption
2064| [50793] Microsoft Office 2004/2008 Spreadsheet memory corruption
2065| [50792] Microsoft Office 2004/2008 Spreadsheet memory corruption
2066| [50791] Microsoft Office 2004/2008 Spreadsheet memory corruption
2067| [50790] Microsoft Office 2004/2008 Spreadsheet Heap-based memory corruption
2068| [50788] Microsoft Office 2004/2008 Spreadsheet memory corruption
2069| [50787] Microsoft Office 2004/2008 Spreadsheet memory corruption
2070| [50786] Microsoft Windows 2000 llssrv.exe memory corruption
2071| [50789] Microsoft Office 2004/2008 Spreadsheet memory corruption
2072| [4056] Microsoft Word 2002/2003 File Information Block Parser Stack-based memory corruption
2073| [50660] Microsoft SharePoint Server 2007 unknown vulnerability
2074| [50443] Microsoft Office Powerpoint 2007 Integer memory corruption
2075| [50432] Microsoft .NET Framework 2.0/2.0 SP1/2.0 SP2/3.5/3.5 SP1 memory corruption
2076| [49866] Microsoft Windows Server 2003 memory corruption
2077| [4031] Microsoft Windows Vista/Server 2008 SMB Processor EducatedScholar memory corruption
2078| [4030] Microsoft Windows Vista/Server 2008 Wireless LAN AutoConfig Service Heap-based memory corruption
2079| [4029] Microsoft Windows 2000/XP TCP/IP Window Size denial of service
2080| [49745] Microsoft Windows Server 2003 denial of service
2081| [49394] Microsoft Windows Server 2003 memory corruption
2082| [49198] Microsoft Visual Studio 2005 information disclosure
2083| [49047] Microsoft Virtual Server 2005 privilege escalation
2084| [49046] Microsoft Windows Server 2003 quartz.dll memory corruption
2085| [49045] Microsoft Windows Server 2003 quartz.dll memory corruption
2086| [49044] Microsoft ISA Server 2006 privilege escalation
2087| [3999] Microsoft Office 2007 Pointer memory corruption
2088| [4000] Microsoft Office 2003/Xp/Sp3 Web Components memory corruption
2089| [48894] Microsoft Windows Server 2003 msvidctl.dll memory corruption
2090| [48572] Microsoft Office Powerpoint 2002 FL21WIN.DLL memory corruption
2091| [48517] Microsoft Windows 2000 Memory Leak memory corruption
2092| [48516] Microsoft Windows Server 2008 unknown vulnerability
2093| [48512] Microsoft Windows Server 2008 unknown vulnerability
2094| [48515] Microsoft Office Word Viewer 2003 memory corruption
2095| [48514] Microsoft Office Word Viewer 2003 Stack-based memory corruption
2096| [48554] Microsoft Excel 2000/2003/2007 memory corruption
2097| [48157] Microsoft Office PowerPoint 2002 Sound memory corruption
2098| [48156] Microsoft Office PowerPoint 2000 Stack-based memory corruption
2099| [48154] Microsoft Office PowerPoint 2002 Sound PP7X32.DLL memory corruption
2100| [48152] Microsoft Office PowerPoint 2002 PP4X32.DLL memory corruption
2101| [48150] Microsoft Office PowerPoint 2002 Sound memory corruption
2102| [48147] Microsoft Office PowerPoint 2002 Sound memory corruption
2103| [48146] Microsoft Office PowerPoint 2002 Integer memory corruption
2104| [48155] Microsoft Office PowerPoint 2002 Notes Container Heap-based memory corruption
2105| [48153] Microsoft Office PowerPoint 2002 Sound memory corruption
2106| [48151] Microsoft Office PowerPoint 2002 Stack-based memory corruption
2107| [48149] Microsoft Office PowerPoint 2002 memory corruption
2108| [48148] Microsoft Office PowerPoint 2002 Sound memory corruption
2109| [3974] Microsoft Powerpoint 2000/2002/2003 Sound Data Stack-based memory corruption
2110| [3973] Microsoft Powerpoint 2000/2002/2003 Notes Container Stack-based memory corruption
2111| [3972] Microsoft Powerpoint 2000/2002/2003 BuildList memory corruption
2112| [3971] Microsoft Powerpoint 2000/2002/2003 Object Stack-based memory corruption
2113| [3970] Microsoft Powerpoint 2000/2002/2003 Paragraph Stack-based memory corruption
2114| [3969] Microsoft Powerpoint 2000/2002/2003 Atom Stack-based memory corruption
2115| [47719] Microsoft Windows 2000 Stack-based memory corruption
2116| [47720] Microsoft Internet Security And Acceleration Server 2006 Forms Authentication cookieauth.dll cross site scripting
2117| [47716] Microsoft Office Converter Pack 2003 WPFT632.CNV memory corruption
2118| [47715] Microsoft Windows 2000 Wordpad memory corruption
2119| [47718] Microsoft Excel 2000/2002/2003/2007 Spreadsheet memory corruption
2120| [3960] Microsoft Windows XP/2000/Server 2003 DirectShow MJPEG memory corruption
2121| [3952] Microsoft ISA Server 2004/2006 denial of service
2122| [3946] Microsoft PowerPoint 2004/2000/2002/2003 memory corruption
2123| [47091] Microsoft Windows Server 2008 unknown vulnerability
2124| [47090] Microsoft Windows Server 2008 unknown vulnerability
2125| [3939] Microsoft Windows 2000 DNS Designfehler
2126| [3938] Microsoft Windows 2000 SSL weak authentication
2127| [3937] Microsoft Windows 2000 memory corruption
2128| [3932] Microsoft Excel 2004/2000/2002/2003/2007 Object Reference Designfehler
2129| [46620] Microsoft Windows Live Messenger 2009 msnmsgr.exe denial of service
2130| [46455] Microsoft Exchange Server 2007 denial of service
2131| [46454] Microsoft Exchange Server 2007 memory corruption
2132| [46453] Microsoft Visio 2002/2003/2007 memory corruption
2133| [46452] Microsoft Visio 2002/2003/2007 memory corruption
2134| [46451] Microsoft Visio 2002/2003/2007 memory corruption
2135| [46327] Microsoft Word 2007 information disclosure
2136| [45758] Microsoft Money 2006 ActiveX Control prtstb06.dll denial of service
2137| [45381] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
2138| [45380] Microsoft Windows Vista SP1/Server 2008 Search memory corruption
2139| [45379] Microsoft Office SharePoint Server 2007 denial of service
2140| [3896] Microsoft SQL Server up to 2005 sp_replwritetovarbin memory corruption
2141| [3892] Microsoft Excel 2000/2002/2003 Formula memory corruption
2142| [3891] Microsoft Excel 2000/2002/2003 memory corruption
2143| [3890] Microsoft Excel 2000/2002/2003 NAME Index memory corruption
2144| [3889] Microsoft Word 2000/2002/2003/2007 Table Property Stack-based memory corruption
2145| [3888] Microsoft Word 2000/2002/2003/2007 RTF Stylesheet memory corruption
2146| [3887] Microsoft Word 2000/2002/2003/2007 memory corruption
2147| [3886] Microsoft Word 2000/2002/2003/2007 ControlWord Heap-based memory corruption
2148| [3885] Microsoft Word 2000/2002/2003/2007 memory corruption
2149| [3884] Microsoft Word 2000/2002/2003/2007 memory corruption
2150| [3883] Microsoft Word 2000/2002/2003/2007 RTF Heap-based memory corruption
2151| [3882] Microsoft Word 2000/2002/2003/2007 LFO memory corruption
2152| [3880] Microsoft Visual Basic up to 2003 ActiveX Control Mschrt20.ocx memory corruption
2153| [3879] Microsoft Visual Basic up to 2003 ActiveX Control mscomct2.ocx memory corruption
2154| [3878] Microsoft Visual Basic up to 2003 ActiveX Control mshflxgd.ocx memory corruption
2155| [3877] Microsoft Visual Basic up to 2003 ActiveX Control msflxgrd.ocx memory corruption
2156| [3876] Microsoft Visual Basic up to 2003 ActiveX Control msdatgrd.ocx memory corruption
2157| [45197] Microsoft Windows 2000 nskey.dll memory corruption
2158| [45063] Microsoft Windows Server 2003 Active Directory unknown vulnerability
2159| [45040] Microsoft .NET Framework 2.0.50727 Code Access Security unknown vulnerability
2160| [44855] DjVu Activex Control For Microsoft Office 2000 3.0 ActiveX Control DjVu_ActiveX_MSOffice.dll memory corruption
2161| [44665] Microsoft Peachtree Accounting 2004 ActiveX Control PAWWeb11.ocx unknown vulnerability
2162| [44589] Microsoft Exchange Server 2003 Outlook Web Access unknown vulnerability
2163| [3845] Microsoft Windows 2000 SP4 Active Directory memory corruption
2164| [44533] Microsoft Windows 2000 mqsvc.exe memory corruption
2165| [3844] Microsoft Excel 2003 REPT memory corruption
2166| [3843] Microsoft Excel up to 2007 BIFF File Heap-based memory corruption
2167| [3842] Microsoft Excel 2003 VBA Performance Cache Stack-based Eingabeung\xC3\xBCltigkeit
2168| [44405] Microsoft Digital Image 2006 ActiveX Control PipPPush.DLL unknown vulnerability
2169| [44047] Microsoft SQL Server 2000 ActiveX Control SQLVDIRLib.SQLVDirControl memory corruption
2170| [43981] Microsoft Organization Chart 2.00 orgchart.exe memory corruption
2171| [43957] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
2172| [43956] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
2173| [43955] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
2174| [43952] Microsoft Office 2003/2007/Xp URI memory corruption
2175| [43676] Microsoft Windows XP/Vista/2000/Server 2003 memory corruption
2176| [43675] Microsoft Windows XP/Vista/2000/Server 2003 of memory corruption
2177| [43662] Microsoft Office Powerpoint Viewer up to 2003 memory corruption
2178| [43661] Microsoft Office Powerpoint Viewer 2003 memory corruption
2179| [43660] Microsoft Office Powerpoint Viewer 2003 Integer memory corruption
2180| [43657] Microsoft Office 2000/2003/Xp memory corruption
2181| [43654] Microsoft SharePoint Server 2007 memory corruption
2182| [43653] Microsoft Office 2000/2002/2004/2008 memory corruption
2183| [43652] Microsoft Office 2000/2002/2003/2004/2008 memory corruption
2184| [3797] Microsoft Windows Vista/Server 2008 IPsec Policy Designfehler
2185| [3796] Microsoft Office 2000 WPG memory corruption
2186| [3795] Microsoft Office 2000/2003/Xp BMP Image BMPIMP32.FLT memory corruption
2187| [3794] Microsoft Office 2000/2003/Xp PICT bits_per_pixel memory corruption
2188| [3793] Microsoft Office 2000/2003/Xp PICT memory corruption
2189| [3792] Microsoft Office 2000 EPS File memory corruption
2190| [3783] Microsoft Word 2002 memory corruption
2191| [43103] Microsoft Exchange Srv 2007 Sp1 Outlook Web Access cross site scripting
2192| [43102] Microsoft Windows 2000 SP4/Server 2003 SP2/Server 2008 DNS Cache privilege escalation
2193| [3778] Microsoft Exchange 2003/2007 Outlook Web Access cross site scripting
2194| [3777] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
2195| [43087] Microsoft Office Snapshot Viewer ActiveX up to Office 2003 Snapshot Viewer ActiveX Control snapview.ocx memory corruption
2196| [43096] Microsoft Publisher 2003/2007 Crypto API unknown vulnerability
2197| [42816] Microsoft Word 2000/2003 memory corruption
2198| [42732] Microsoft Windows XP/Vista/Server 2003 denial of service
2199| [42731] Microsoft Windows Server 2003 denial of service
2200| [3732] Microsoft Windows 2000/Server 2003 WINS memory corruption
2201| [3701] Microsoft Word 2003 CSS Heap-based memory corruption
2202| [3700] Microsoft Word 2003 RTF Document Heap-based memory corruption
2203| [42065] Microsoft SharePoint Server 2.0 Rich Text Editor cross site scripting
2204| [41881] Microsoft Office 2003/2007/2007 Sp1/Xp memory corruption
2205| [41880] Microsoft Project 2000/2002/2003 memory corruption
2206| [41879] Microsoft Windows 2000/Server 2003/Vista Stack-based memory corruption
2207| [41878] Microsoft Windows 2000/Server 2003/Vista spoofing
2208| [41877] Microsoft Windows Server 2003 vbscript.dll memory corruption
2209| [3671] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 memory corruption
2210| [3670] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 Object memory corruption
2211| [41455] Microsoft Office 2000/2003/2004/Xp memory corruption
2212| [41454] Microsoft Excel 2000/2002/2003/2007 memory corruption
2213| [41453] Microsoft Excel 2000/2002/2003 memory corruption
2214| [41452] Microsoft Excel 2000/2002/2003/2007 memory corruption
2215| [41451] Microsoft Excel 2000/2002/2003 memory corruption
2216| [41450] Microsoft Excel 2000 memory corruption
2217| [41449] Microsoft Excel 2000/2002/2003 memory corruption
2218| [41448] Microsoft Office 2000/Xp Office Web Components memory corruption
2219| [3648] Microsoft Excel 2003 memory corruption
2220| [3647] Microsoft Outlook up to 2007 mailto URI memory corruption
2221| [41003] Microsoft Office 2000/2003/2004/Xp memory corruption
2222| [41002] Microsoft Office 2000/2003/Xp memory corruption
2223| [41001] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
2224| [41000] Microsoft Works 2005/8.0 memory corruption
2225| [40998] Microsoft Publisher 2000/2002/2003 memory corruption
2226| [40994] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
2227| [40987] Microsoft Windows 2000 denial of service
2228| [40736] Microsoft ActiveX 2.0 ActiveX Control privilege escalation
2229| [3552] Microsoft Excel 2000/2002/2003 File memory corruption
2230| [40242] Microsoft Publisher 2000/2002/2003/2007 Crash denial of service
2231| [40020] Microsoft Office 2007 ZIP Container unknown vulnerability
2232| [39769] Microsoft Windows 2000 cryptgenrandom weak encryption
2233| [39749] Microsoft Windows 2000 msjet40.dll memory corruption
2234| [39655] Microsoft Windows Server 2003 spoofing
2235| [39324] Microsoft Windows Mobile 2005 SMS unknown vulnerability
2236| [3373] Microsoft Word 2000/2002 memory corruption
2237| [38999] Microsoft Windows Server 2003 explorer.exe denial of service
2238| [38899] Microsoft ISA Server 2004 information disclosure
2239| [38728] Microsoft SQL Server 2005 Enterprise Manager sqldmo.dll memory corruption
2240| [38326] Microsoft Windows 2000 attemptwrite memory corruption
2241| [3241] Microsoft Excel 2000/2003/2004/XP SP3 rtWnDesk memory corruption
2242| [3223] Microsoft Windows XP/Server 2003 URI Eingabeung\xC3\xBCltigkeit
2243| [3212] Microsoft DirectX February 2006 RLE Compression Targa Files Heap-based memory corruption
2244| [37739] Microsoft Excel 2000/2002/2003/2004/2007 memory corruption
2245| [37738] Microsoft Office 2002/2003 memory corruption
2246| [3176] Microsoft Excel 2000/2002/2003/2007 File Attribute memory corruption
2247| [3175] Microsoft Excel 2000/2002/2003/2007 Active Worksheet memory corruption
2248| [3174] Microsoft Excel 2000/2002/2003/2007 Version Information memory corruption
2249| [3172] Microsoft Office Publisher 2007 Pointer memory corruption
2250| [37566] Microsoft Excel 2003 unknown vulnerability
2251| [37526] Microsoft Windows 2000/Server 2003 denial of service
2252| [37248] Microsoft Visio 2002 Packaging memory corruption
2253| [37251] Microsoft Windows 2000 memory corruption
2254| [3119] Microsoft Visio 2002 Object memory corruption
2255| [3118] Microsoft Visio 2002 Data memory corruption
2256| [37093] Microsoft Windows Server 2003 Error Message unknown vulnerability
2257| [37010] Microsoft Office 2000 ActiveX Control ouactrl.ocx memory corruption
2258| [36628] Microsoft Word 2000/2002/2003/2004 winword.exe memory corruption
2259| [36616] Microsoft Works 2004/2005/2006 memory corruption
2260| [36621] Microsoft Exchange Server 2000 Integer denial of service
2261| [36620] Microsoft Exchange Server 2000 Outlook Web Access cross site scripting
2262| [36619] Microsoft Exchange Server 2000/2003/2007 memory corruption
2263| [36618] Microsoft Exchange Server 2000 NULL Pointer Dereference denial of service
2264| [36617] Microsoft Excel 2000/2002/2003/2004 memory corruption
2265| [36623] Microsoft BizTalk Server 2004 ActiveX Control capicom.dll memory corruption
2266| [3067] Microsoft Office 2000/2003/2004/2007/Xp Drawing Object memory corruption
2267| [3065] Microsoft Excel 2000/2002/2003/2007 Filter Stack-based memory corruption
2268| [3064] Microsoft Excel 2000/2002/2003/2004/2007 set Font memory corruption
2269| [3063] Microsoft Excel 2000/2002/2003/2007 BIFF Record Stack-based memory corruption
2270| [3012] Microsoft Windows 2000/Server 2003 DNS Service Stack-based memory corruption
2271| [36039] Microsoft Content Management Server 2001 memory corruption
2272| [36052] Microsoft Windows 2000 Heap-based memory corruption
2273| [36051] Microsoft Word 2007 file798-1.doc memory corruption
2274| [36050] Microsoft Word 2007 file789-1.doc memory corruption
2275| [36040] Microsoft Content Management Server 2001 cross site scripting
2276| [3004] Microsoft Windows up to 2003/XP URL Parser memory corruption
2277| [36041] Microsoft .NET Framework 2.0.50727.42 cross site scripting
2278| [2990] Microsoft Windows 2000/XP/Vista Animated Cursor Stack-based memory corruption
2279| [36515] Microsoft Windows 2000/XP/Server 2003 memory corruption
2280| [35846] Microsoft Windows 2000/Server 2003 Default Configuration information disclosure
2281| [35373] Microsoft Excel 2003 denial of service
2282| [35372] Microsoft Office 2003 denial of service
2283| [35206] Microsoft Windows XP/Server 2003 Crash denial of service
2284| [35161] Microsoft ISA Server 2004 unknown vulnerability
2285| [35236] Microsoft Publisher 2007 memory corruption
2286| [2939] Microsoft Word 2000 memory corruption
2287| [34994] Microsoft Windows 2000 OLE Dialog memory corruption
2288| [34993] Microsoft Office 2000/2003/Xp memory corruption
2289| [35001] Microsoft Office 2000/2003/2004/Xp memory corruption
2290| [35000] Microsoft Word 2000/2002/2003 memory corruption
2291| [2933] Microsoft Windows XP SP2/2000 SP4/Server 2003 SP1 OLE Dialog Stack-based memory corruption
2292| [2894] Microsoft Office 2000/2003/2004/Xp Undefined String Format String
2293| [2884] Microsoft Word 2000/2002/2003 memory corruption
2294| [34321] Microsoft Office 2000/2003/2004/Xp Spreadsheet Heap-based memory corruption
2295| [34320] Microsoft Office 2000/2003/2004/Xp memory corruption
2296| [34319] Microsoft Office 2000/2003/2004/Xp memory corruption
2297| [34318] Microsoft Office 2000/2003/2004/Xp memory corruption
2298| [34322] Microsoft Office 2000/2003/Xp memory corruption
2299| [2811] Microsoft Windows 2000/XP/Server 2003 VML Vector Markup Language Integer memory corruption
2300| [2810] Microsoft Outlook 2000/2002/2003 Office Saved Search OSS File memory corruption
2301| [2809] Microsoft Outlook 2000/2002/2003 Header denial of service
2302| [2808] Microsoft Outlook 2000/2002/2003 Meeting VEVENT memory corruption
2303| [2807] Microsoft Excel 2000/2002/2003 XLS File memory corruption
2304| [34126] Microsoft Office 2003 memory corruption
2305| [34122] Microsoft Office Web Components 2000 memory corruption
2306| [2789] Microsoft Windows 2000/XP RPC Request NetrWkstaUserEnum() denial of service
2307| [2765] Microsoft Project Server 2003 pdsrequest.asp weak authentication
2308| [33851] Microsoft Word 2000/2002/2003 12122006-djtest.doc memory corruption
2309| [2739] Microsoft Windows 2000 Remote Installation Service Fehlende Authentifizierung
2310| [2738] Microsoft Windows 2000/XP/Server 2003 SNMP memory corruption
2311| [2737] Microsoft Windows XP/Server 2003 Manifest denial of service
2312| [33766] Microsoft Word 2000/2002/2003 memory corruption
2313| [2718] Microsoft Word 2000/2002/2003 DOC Document memory corruption
2314| [2717] Microsoft Windows 2000 Print Spooler Memory Consumption denial of service
2315| [2689] Microsoft Windows up to 2000 SP4 Active Directory denial of service
2316| [2688] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware denial of service
2317| [2687] Microsoft Windows 2000/XP/Server 2003 Agent ActiveX ACF File Heap-based memory corruption
2318| [2686] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware memory corruption
2319| [2684] Microsoft Windows 2000/XP Workstation Service Stack-based memory corruption
2320| [2659] Microsoft Windows 2000/XP GDI Crash Designfehler
2321| [2655] Microsoft Windows 2000/XP/Server 2003 XML Core Services Designfehler
2322| [33067] Microsoft Visual Studio .net 2005 ActiveX Control wmiscriptutils.dll memory corruption
2323| [2610] Microsoft PowerPoint 2003 PPT Document NULL Pointer Dereference denial of service
2324| [32693] Microsoft Word 2004 memory corruption
2325| [32686] Microsoft Office 2000/2001/2003/2004 Integer memory corruption
2326| [32690] Microsoft Office 2000/2003/2004/Xp memory corruption
2327| [32676] Microsoft Office 2000/2001/2003/2004 memory corruption
2328| [32675] Microsoft Office 2000/2003/2004/Xp memory corruption
2329| [32694] Microsoft Windows 2000 memory corruption
2330| [32689] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2331| [32688] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2332| [32687] Microsoft Word 2000/2002 memory corruption
2333| [32685] Microsoft Office 2000/2001/2003/2004 memory corruption
2334| [2601] Microsoft Windows XP/Server 2003 IPv6 Stack denial of service
2335| [2600] Microsoft Windows XP/Server 2003 IPv6 Stack TCP denial of service
2336| [2599] Microsoft Windows XP/Server 2003 IPv6 Stack ICMP denial of service
2337| [2598] Microsoft Windows XP/Server 2003 Object Packager Designfehler
2338| [2597] Microsoft Office 2003/Xp Smart-Tag Parser memory corruption
2339| [2596] Microsoft Office 2000/2003/2004/Xp Value Read memory corruption
2340| [2595] Microsoft Office 2000/2001/2003/2004 Diagram Value memory corruption
2341| [2594] Microsoft Office 2000/2001/2003/2004 Document memory corruption
2342| [2593] Microsoft ASP.NET 2.0 cross site scripting
2343| [2571] Microsoft PowerPoint up to 2003 Document memory corruption
2344| [2554] Microsoft PowerPoint 2000 memory corruption
2345| [2522] Microsoft Windows 2000/XP/Server 2003 Indexing Service cross site scripting
2346| [2521] Microsoft Publisher 2000/2002/2003 PUB File Stack-based memory corruption
2347| [2508] Microsoft Word 2000 memory corruption
2348| [2478] Microsoft Internet Explorer up to 6 on Win 2000 HTTP 1.1 Compression Heap-based memory corruption
2349| [31692] Microsoft PowerPoint 2000/2001/2002/2003 memory corruption
2350| [2436] Microsoft Windows 2000/XP/Server 2003 Kernel memory corruption
2351| [2435] Microsoft Windows 2000/XP/Server 2003 Exception memory corruption
2352| [2434] Microsoft Windows 2000/XP/Server 2003 Winlogon race condition
2353| [2433] Microsoft Windows 2000 Management Console cross site scripting
2354| [2432] Microsoft Windows 2000/XP/Server 2003 DNS Resolver Heap-based memory corruption
2355| [2431] Microsoft Windows 2000/XP/Server 2003 Winsock API memory corruption
2356| [2430] Microsoft Windows 2000/XP/Server 2003 RPC ELV memory corruption
2357| [2426] Microsoft Windows 2000/XP/Server 2003 WMF File gdi32.dll denial of service
2358| [2415] Microsoft Windows 2000/XP/Server 2003 SMB File srv.sys denial of service
2359| [31527] Microsoft Internet Explorer 6.0 on Win 2000 ActiveX Object Stack-Based denial of service
2360| [31358] Microsoft PowerPoint 2003 powerpnt.exe denial of service
2361| [31354] Microsoft PowerPoint 2003 memory corruption
2362| [31351] Microsoft ISA Server 2004 Filters unknown vulnerability
2363| [2382] Microsoft PowerPoint up to 2003 Presentation Open/Close memory corruption
2364| [2378] Microsoft PowerPoint 2000/2002/2003 Document Parser memory corruption
2365| [31318] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2366| [31317] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2367| [31316] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2368| [31313] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2369| [31312] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2370| [31311] Microsoft Excel 2000/2002/2003/XP memory corruption
2371| [31310] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
2372| [31237] Microsoft Office 2000/2003/Xp memory corruption
2373| [31235] Microsoft Office 2000/2003/Xp memory corruption
2374| [2371] Microsoft NET Framework up to 2.0 URL Validator unknown vulnerability
2375| [2370] Microsoft Windows 2000/XP/Server 2003 Server Protocol Driver Server Message Block Heap-based memory corruption
2376| [2369] Microsoft Windows 2000/XP/Server 2003 Server Service Mailslot Heap-based memory corruption
2377| [2367] Microsoft Office 2000/2003/XP Document String memory corruption
2378| [2366] Microsoft Windows 2000/XP/Server 2003 DHCP Client memory corruption
2379| [2365] Microsoft Office 2000/2003/XP PNG Image memory corruption
2380| [2364] Microsoft Office 2000/2003/XP GIF Image memory corruption
2381| [31233] Microsoft Office 2000/2003/Xp mso.dll lscreateline memory corruption
2382| [31238] Microsoft Internet Explorer 6.0 on Win 2000 Crash denial of service
2383| [2357] Microsoft Excel up to 2003 on Asian System Document Repair Style memory corruption
2384| [31133] Microsoft Windows XP/Server 2003 explorer.exe memory corruption
2385| [2325] Microsoft Excel up to 2003 Hyperlink hlink.dll Long Hyperlink memory corruption
2386| [2324] Microsoft Excel 2000/2002/2003/2004 XLS File memory corruption
2387| [30801] Microsoft Windows up to 2000 Connection Manager Stack-based memory corruption
2388| [2312] Microsoft Exchange 2000 Outlook Web Access cross site scripting
2389| [2311] Microsoft Windows 2000/XP/Server 2003 MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk memory corruption
2390| [2310] Microsoft Windows 2000 RPC spoofing
2391| [2309] Microsoft Windows 2000/XP/Server 2003 Routing and Remote Access Service RPC Request memory corruption
2392| [2308] Microsoft PowerPoint 2000/2002/2003/2004 PPT Document memory corruption
2393| [2307] Microsoft Windows 2000/XP/Server 2003 JScript Object memory corruption
2394| [2306] Microsoft Windows 2000/XP/Server 2003 IP Source Routing memory corruption
2395| [2305] Microsoft Windows XP/Server 2003 ART Image Heap-based memory corruption
2396| [2294] Microsoft Word up to 2003 DOC Document Backdoor Designfehler
2397| [2275] Microsoft Windows XP/Server 2003 mhtml URI inetcomm.dll memory corruption
2398| [2253] Microsoft Word up to 2003 Backdoor memory corruption
2399| [2221] Microsoft Windows 2000/XP CHM Archive itss.dll memory corruption
2400| [30131] Microsoft Windows NT 4.0/XP/2000/Server 2003 Distributed Transaction Coordinator Crash denial of service
2401| [2218] Microsoft Windows 2000/XP/Server 2003 MSDTC Heap-based denial of service
2402| [2217] Microsoft Exchange 2000/2003 Calender Collaboration Data Object memory corruption
2403| [2190] Microsoft Office 2003 mailto URI unknown vulnerability
2404| [2147] Microsoft Windows 2000/XP/Server 2003 COM Object memory corruption
2405| [2135] Microsoft FrontPage Server Extensions 2002 cross site scripting
2406| [29524] Microsoft ISA Server 2004 unknown vulnerability
2407| [134750] Microsoft ASP.NET Core 2.1/2.2 denial of service
2408| [134745] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
2409| [134744] Microsoft Windows up to Server 2019 GDI information disclosure
2410| [134743] Microsoft SharePoint Server 2013 SP1/2016 cross site scripting
2411| [134742] Microsoft SharePoint Enterprise Server 2016/2019 cross site scripting
2412| [134741] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2413| [134740] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
2414| [134739] Microsoft SharePoint Foundation 2010 SP2/2013 SP2 cross site scripting
2415| [134738] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2416| [134737] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2417| [134736] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
2418| [134735] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2419| [134734] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2420| [134733] Microsoft Windows up to Server 2019 Unified Write Filter privilege escalation
2421| [134731] Microsoft Windows up to Server 2019 Symlink privilege escalation
2422| [134729] Microsoft Windows up to Server 2019 Storage Service privilege escalation
2423| [134725] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2424| [134724] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2425| [134723] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2426| [134722] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2427| [134721] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2428| [134720] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2429| [134719] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2430| [134718] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2431| [134717] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2432| [134716] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2433| [134715] Microsoft Windows up to Server 2019 Win32k memory corruption
2434| [134714] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2435| [134713] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2436| [134712] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2437| [134710] Microsoft Windows up to Server 2019 GDI information disclosure
2438| [134709] Microsoft Windows up to Server 2019 Kernel privilege escalation
2439| [134706] Microsoft Windows up to Server 2019 Error Reporting privilege escalation
2440| [134704] Microsoft SQL Server 2017 Analysis Services information disclosure
2441| [134701] Microsoft Windows up to Server 2019 Windows Defender Application Control privilege escalation
2442| [134700] Microsoft Windows up to Server 2019 Diagnostic Hub privilege escalation
2443| [134699] Microsoft Windows up to Server 2019 NDIS ndis.sys memory corruption
2444| [134698] Microsoft Windows up to Server 2019 OLE memory corruption
2445| [134697] Microsoft Office/Word 2016/2019/365 ProPlus memory corruption
2446| [134684] Microsoft Windows up to Server 2019 DHCP Server memory corruption
2447| [134678] Microsoft Windows up to Server 2019 GDI+ memory corruption
2448| [133236] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2449| [133235] Microsoft Azure DevOps Server 2019 privilege escalation
2450| [133234] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2451| [133232] Microsoft Azure DevOps Server 2019 cross site scripting
2452| [133229] Microsoft Azure DevOps Server 2019 cross site scripting
2453| [133224] Microsoft Exchange Server 2013 CU22/2016 CU11/2016 CU12/2019/2019 CU1 Outlook Web Access privilege escalation
2454| [133223] Microsoft Azure DevOps Server 2019 Content Security Policy privilege escalation
2455| [133222] Microsoft Windows up to Server 2019 Remote Registry Service memory corruption
2456| [133221] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2457| [133220] Microsoft Windows up to Server 2019 GDI Memory information disclosure
2458| [133219] Microsoft Windows up to Server 2019 Win32k Memory information disclosure
2459| [133218] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2460| [133217] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2461| [133216] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
2462| [133215] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
2463| [133214] Microsoft Windows up to Server 2019 AppX Deployment Service privilege escalation
2464| [133213] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
2465| [133212] Microsoft Windows up to Server 2019 Terminal Services Memory information disclosure
2466| [133211] Microsoft Windows up to Server 2019 Task Scheduler information disclosure
2467| [133209] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
2468| [133206] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016/2019 cross site scripting
2469| [133205] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
2470| [133204] Microsoft Office/Excel up to 2019 memory corruption
2471| [133203] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2472| [133202] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2473| [133201] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2474| [133200] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
2475| [133199] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
2476| [133198] Microsoft Exchange Server up to 2019 CU1 Outlook Web Access cross site scripting
2477| [133197] Microsoft ASP.NET Core 2.2 Request denial of service
2478| [133196] Microsoft Windows up to Server 2019 Win32k information disclosure
2479| [133195] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
2480| [133194] Microsoft Windows up to Server 2019 GDI Memory information disclosure
2481| [133193] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
2482| [133192] Microsoft Windows up to Server 2019 OLE Automation privilege escalation
2483| [133189] Microsoft Windows up to Server 2019 CSRSS memory corruption
2484| [133188] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
2485| [133187] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
2486| [133186] Microsoft Windows up to Server 2019 TCP/IP Stack Fragmented IP Packet information disclosure
2487| [133185] Microsoft Windows up to Server 2019 Win32k memory corruption
2488| [133184] Microsoft Office 2016 for Mac/2019/365 ProPlus Graphics Component memory corruption
2489| [133183] Microsoft Windows up to Server 2019 Win32k memory corruption
2490| [133182] Microsoft Windows up to Server 2019 Win32k memory corruption
2491| [133181] Microsoft Office/Excel/PowerPoint up to 2019 URL Document Code Execution
2492| [133180] Microsoft Windows up to Server 2019 MS XML Code Execution
2493| [133179] Microsoft Windows up to Server 2019 MS XML Code Execution
2494| [133177] Microsoft Windows up to Server 2019 Device Guard luafv.sys privilege escalation
2495| [133174] Microsoft Windows up to Server 2019 GDI+ privilege escalation
2496| [133173] Microsoft Windows up to Server 2019 IOleCvt Interface privilege escalation
2497| [133166] Microsoft Windows up to Server 2019 MS XML Code Execution
2498| [133165] Microsoft Windows up to Server 2019 MS XML Code Execution
2499| [133164] Microsoft Windows up to Server 2019 MS XML Code Execution
2500| [133163] Microsoft Windows up to Server 2019 MS XML Code Execution
2501| [133162] Microsoft Windows up to Server 2019 MS XML Code Execution
2502| [131687] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 3.2/2018 Updated 1.2 cross site scripting
2503| [131685] Microsoft Windows up to Server 2019 SMB information disclosure
2504| [131684] Microsoft Visual Studio 2017 Version 15.9 C++ Redistributable Installer privilege escalation
2505| [131681] Microsoft Windows up to Server 2019 Win32k memory corruption
2506| [131679] Microsoft Windows up to Server 2019 Kernel information disclosure
2507| [131675] Microsoft SharePoint 2013 SP1/2016 cross site scripting
2508| [131674] Microsoft Windows up to Server 2019 Win32k information disclosure
2509| [131673] Microsoft Windows up to Server 2019 Kernel information disclosure
2510| [131672] Microsoft Windows up to Server 2019 GDI information disclosure
2511| [131671] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
2512| [131668] Microsoft Windows up to Server 2019 AppX Deployment Server privilege escalation
2513| [131667] Microsoft Windows up to Server 2019 Comctl32.dll memory corruption
2514| [131663] Microsoft Windows up to Server 2019 Print Spooler information disclosure
2515| [131658] Microsoft Windows up to Server 2019 information disclosure
2516| [131657] Microsoft Windows up to Server 2019 denial of service
2517| [131656] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
2518| [131653] Microsoft Windows up to Server 2019 SMB information disclosure
2519| [131652] Microsoft Windows up to Server 2019 SMB information disclosure
2520| [131651] Microsoft Windows up to Server 2019 Kernel information disclosure
2521| [131650] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V denial of service
2522| [131649] Microsoft Windows up to Server 2019 Kernel memory corruption
2523| [131648] Microsoft Windows up to Server 2019 Hyper-V denial of service
2524| [131644] Microsoft Windows up to Server 2019 Hyper-V denial of service
2525| [131638] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2526| [131632] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
2527| [131631] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
2528| [131630] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
2529| [131629] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
2530| [131628] Microsoft Windows up to Server 2019 ActiveX memory corruption
2531| [131619] Microsoft Windows up to Server 2019 MS XML privilege escalation
2532| [131334] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
2533| [131333] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
2534| [131330] Microsoft Exchange Server 2010 SP3 UR26/2013 CU22/2016 CU12/2019 CU1 privilege escalation
2535| [131329] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 information disclosure
2536| [131328] Microsoft Windows up to Server 2016 Kernel information disclosure
2537| [130832] Microsoft 2013 SP1 spoofing
2538| [130828] Microsoft Exchange Server 2010 SP3/2013 CU22/2016 CU12/2019 CU1 EWS privilege escalation
2539| [130826] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
2540| [130825] Microsoft Office up to 2019 Connectivity Engine memory corruption
2541| [130824] Microsoft Office up to 2019 Connectivity Engine memory corruption
2542| [130823] Microsoft Office up to 2019 Connectivity Engine privilege escalation
2543| [130822] Microsoft Office up to 2019 Connectivity Engine privilege escalation
2544| [130821] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2545| [130820] Microsoft Windows up to Server 2012 R2 GDI information disclosure
2546| [130818] Microsoft Windows up to Server 2019 GDI information disclosure
2547| [130817] Microsoft Windows up to Server 2019 Storage Service privilege escalation
2548| [130814] Microsoft Windows up to Server 2019 privilege escalation
2549| [130809] Microsoft Windows up to Server 2019 Defender Firewall Security privilege escalation
2550| [130808] Microsoft Windows up to Server 2019 information disclosure
2551| [130807] Microsoft Windows up to Server 2019 Hyper-V information disclosure
2552| [130806] Microsoft Windows up to Server 2019 SMB privilege escalation
2553| [130805] Microsoft Windows up to Server 2019 Device Guard privilege escalation
2554| [130804] Microsoft Windows up to Server 2019 Device Guard privilege escalation
2555| [130803] Microsoft Windows up to Server 2019 SMB privilege escalation
2556| [130802] Microsoft Windows up to Server 2019 Win32k information disclosure
2557| [130801] Microsoft Windows up to Server 2019 Device Guard privilege escalation
2558| [130800] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2559| [130799] Microsoft Windows up to Server 2016 Win32k memory corruption
2560| [130798] Microsoft Windows up to Server 2019 GDI information disclosure
2561| [130797] Microsoft Windows up to Server 2019 GDI information disclosure
2562| [130796] Microsoft Windows up to Server 2019 GDI information disclosure
2563| [130793] Microsoft Windows up to Server 2019 GDI information disclosure
2564| [130792] Microsoft Windows up to Server 2019 HID information disclosure
2565| [130791] Microsoft Windows up to Server 2019 HID information disclosure
2566| [130790] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2567| [130789] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2568| [130788] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2569| [130787] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2570| [130786] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2571| [130785] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus Security Feature Phishing spoofing
2572| [130784] Microsoft Windows up to Server 2019 GDI+ memory corruption
2573| [130782] Microsoft Windows up to Server 2019 DHCP Server memory corruption
2574| [130781] Microsoft Windows up to Server 2019 GDI+ memory corruption
2575| [129847] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 1.2/2018 Update 3.2 information disclosure
2576| [129846] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
2577| [129845] Microsoft Skype for Business 2015 CU 8 Request cross site scripting
2578| [128765] Microsoft Visual Studio 2017 Version 15.9 C++ Construct privilege escalation
2579| [128764] Microsoft Exchange Server 2010 SP3/2013 CU21/2016 CU10/2016 CU11/2019 PowerShell API information disclosure
2580| [128762] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus Word memory corruption
2581| [128761] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2582| [128760] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2583| [128759] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2584| [128758] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2585| [128757] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2586| [128756] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2587| [128755] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2588| [128754] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2589| [128753] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2590| [128752] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2591| [128751] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
2592| [128750] Microsoft Windows up to Server 2019 Runtime privilege escalation
2593| [128749] Microsoft Windows up to Server 2019 Kernel information disclosure
2594| [128747] Microsoft ASP.NET Core 2.1 Web Request denial of service
2595| [128746] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
2596| [128745] Microsoft Office up to 2019 Word Macro information disclosure
2597| [128744] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
2598| [128743] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
2599| [128742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
2600| [128741] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2601| [128740] Microsoft SharePoint Enterprise Server 2013 SP1 cross site scripting
2602| [128739] Microsoft Windows up to Server 2019 Kernel information disclosure
2603| [128738] Microsoft Windows up to Server 2019 Subsystem for Linux information disclosure
2604| [128737] Microsoft Windows up to Server 2019 COM Desktop Broker privilege escalation
2605| [128736] Microsoft Windows up to Server 2019 Kernel information disclosure
2606| [128735] Microsoft ASP.NET Core 2.1/2.2 Web Request denial of service
2607| [128733] Microsoft Windows up to Server 2019 Authentication Request privilege escalation
2608| [128732] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus MSHTML Engine privilege escalation
2609| [128729] Microsoft Visual Studio 2010 SP1/2012 Update 5 vscontent File information disclosure
2610| [128728] Microsoft Windows up to Server 2019 Kernel information disclosure
2611| [128727] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
2612| [128726] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
2613| [128725] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
2614| [128718] Microsoft Windows up to Server 2019 Hyper-V memory corruption
2615| [128717] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V memory corruption
2616| [127925] Microsoft SharePoint Enterprise Server 2016 Web Request cross site scripting
2617| [127882] Microsoft Dynamics NAV 2016/2017 Web Request cross site scripting
2618| [127881] Microsoft Windows 10 1809/Server 2019 Object denial of service
2619| [127880] Microsoft Windows up to Server 2019 Win32k Object memory corruption
2620| [127828] Microsoft Windows up to Server 2019 Win32k memory corruption
2621| [127827] Microsoft Windows 10 1809/Server 2019 DirectX information disclosure
2622| [127826] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Win32k ASLR privilege escalation
2623| [127825] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 privilege escalation
2624| [127824] Microsoft Excel up to 2019 Out-of-Bounds memory corruption
2625| [127823] Microsoft Windows up to Server 2012 R2 Kernel information disclosure
2626| [127821] Microsoft Windows up to Server 2019 Connected User Experiences and Telemetry Service denial of service
2627| [127820] Microsoft Windows up to Server 2019 Kernel memory corruption
2628| [127819] Microsoft Exchange Server 2016 CU10/2016 CU11 Profile Data privilege escalation
2629| [127817] Microsoft Excel up to 2019 information disclosure
2630| [127816] Microsoft Windows up to Server 2019 GDI information disclosure
2631| [127815] Microsoft Windows up to Server 2019 GDI information disclosure
2632| [127814] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 Search cross site request forgery
2633| [127812] Microsoft Windows up to Server 2019 Remote Procedure Call information disclosure
2634| [127809] Microsoft PowerPoint 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus memory corruption
2635| [127806] Microsoft Outlook up to 2019 memory corruption
2636| [127805] Microsoft Excel up to 2019 memory corruption
2637| [127804] Microsoft Excel up to 2019 memory corruption
2638| [127803] Microsoft Windows up to Server 2019 Text-To-Speech memory corruption
2639| [127801] Microsoft Windows up to Server 2019 DNS Server privilege escalation
2640| [126938] Microsoft Team Foundation Server 2018 Update 1.1/2018 Update 3 Code Execution
2641| [126755] Microsoft .NET Core 2.1 privilege escalation
2642| [126754] Microsoft Skype for Business/Lync Server 2013 SP1/2016 Emoji denial of service
2643| [126750] Microsoft Windows up to Server 2019 ALPC privilege escalation
2644| [126749] Microsoft Exchange Server 2010/2013/2016/2019 privilege escalation
2645| [126748] Microsoft Office 2019/365 ProPlus Outlook Message information disclosure
2646| [126747] Microsoft SharePoint Enterprise Server 2013 SP1 Folder information disclosure
2647| [126746] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
2648| [126745] Microsoft Project 2010 SP2/2013 SP1/2016 memory corruption
2649| [126744] Microsoft Office up to 2019 Word memory corruption
2650| [126743] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
2651| [126742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
2652| [126739] Microsoft Windows up to Server 2012 R2 Win32k information disclosure
2653| [126737] Microsoft Windows up to Server 2012 R2 DirectX information disclosure
2654| [126736] Microsoft Windows up to Server 2019 Win32k memory corruption
2655| [126735] Microsoft Windows up to Server 2019 DirectX privilege escalation
2656| [126734] Microsoft Office 2019/365 ProPlus information disclosure
2657| [126733] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DirectX memory corruption
2658| [126730] Microsoft Windows up to Server 2019 Active Directory Federation Services cross site scripting
2659| [126728] Microsoft Office/SharePoint 2010 SP2 Word memory corruption
2660| [126727] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
2661| [126726] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
2662| [126725] Microsoft Windows up to Server 2019 DirectX memory corruption
2663| [126722] Microsoft Windows up to Server 2019 PowerShell privilege escalation
2664| [126718] Microsoft Windows up to Server 2016 Search memory corruption
2665| [126717] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2019 memory corruption
2666| [126716] Microsoft Office up to 2019 Excel memory corruption
2667| [126715] Microsoft Office 2016/2019/365 ProPlus Excel memory corruption
2668| [126714] Microsoft Windows up to Server 2019 PowerShell unknown vulnerability
2669| [126713] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
2670| [126712] Microsoft Windows up to Server 2016 Graphics Component memory corruption
2671| [126711] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
2672| [125123] Microsoft Windows up to Server 2019 Codecs Library information disclosure
2673| [125122] Microsoft Windows up to Server 2016 TCP/IP information disclosure
2674| [125121] Microsoft Windows up to Server 2019 DirectX memory corruption
2675| [125120] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
2676| [125119] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
2677| [125116] Microsoft Exchange Server 2013 CU21/2016 CU10 privilege escalation
2678| [125115] Microsoft Windows up to Server 2019 Theme API privilege escalation
2679| [125114] Microsoft Windows up to Server 2019 Windows Shell privilege escalation
2680| [125113] Microsoft Windows up to Server 2019 Kernel memory corruption
2681| [125111] Microsoft Windows up to Server 2019 Device Guard Code Integrity Policy privilege escalation
2682| [125110] Microsoft Windows up to Server 2019 DNS Global Blocklist privilege escalation
2683| [125109] Microsoft Windows up to Server 2019 NTFS privilege escalation
2684| [125108] Microsoft Windows up to Server 2019 Filter Manager memory corruption
2685| [125107] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2686| [125106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2687| [125105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2688| [125104] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2689| [125102] Microsoft Office/Word 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
2690| [125100] Microsoft Office/Powerpoint 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
2691| [125099] Microsoft Office/Excel up to 2019 Protected View memory corruption
2692| [125098] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
2693| [125097] Microsoft Windows up to Server 2019 DirectX Graphics memory corruption
2694| [125096] Microsoft Windows up to Server 2019 Win32k memory corruption
2695| [125095] Microsoft Exchange Server 2013 CU21/2016 CU10 Outlook Web Access cross site scripting
2696| [125093] Microsoft Windows up to Server 2019 Hyper-V memory corruption
2697| [125092] Microsoft Windows up to Server 2019 Hyper-V memory corruption
2698| [125091] Microsoft Windows up to Server 2019 MS XML privilege escalation
2699| [124371] Microsoft Exchange Server up to 2010 SP3 Outlook Web Access /owa/auth/logon.aspx Parameter Server-Side Request Forgery
2700| [124217] Microsoft Windows Server 2012/Server 2016 Active Directory Federation Services /adfs/ls Server-Side Request Forgery
2701| [123995] Microsoft Lync 2011 on Mac Security Feature Messages Download privilege escalation
2702| [123881] Microsoft Windows up to Server 2016 Sandbox privilege escalation
2703| [123874] Microsoft Windows up to Server 2016 Kernel information disclosure
2704| [123872] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 SMB information disclosure
2705| [123868] Microsoft Windows up to Server 2016 Hyper-V denial of service
2706| [123864] Microsoft Windows up to Server 2016 Hyper-V information disclosure
2707| [123862] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2013 RT SP1/2016 cross site scripting
2708| [123861] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
2709| [123860] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2710| [123859] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
2711| [123851] Microsoft Windows up to Server 2016 ALPC privilege escalation
2712| [123849] Microsoft Windows up to Server 2016 SMB denial of service
2713| [123846] Microsoft Office 2016 on Win/Mac memory corruption
2714| [123844] Microsoft Word 2013 SP1/2013 RT SP1/2016 PDF File memory corruption
2715| [123843] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2716| [123842] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2717| [123830] Microsoft Windows up to Server 2016 Hyper-V memory corruption
2718| [123828] Microsoft Windows up to Server 2016 Win32k Graphics privilege escalation
2719| [123827] Microsoft Windows up to Server 2016 Image memory corruption
2720| [123825] Microsoft Windows up to Server 2016 MSXML Parser privilege escalation
2721| [123823] Microsoft Windows up to Server 2016 Hyper-V privilege escalation
2722| [122887] Microsoft Office 2016 on Mac AutoUpdate memory corruption
2723| [122886] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
2724| [122885] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
2725| [122884] Microsoft Windows up to Server 2016 Win32k memory corruption
2726| [122883] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
2727| [122875] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
2728| [122874] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2729| [122873] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R information disclosure
2730| [122872] Microsoft SharePoint Enterprise Server 2013 SP1/2016 information disclosure
2731| [122871] Microsoft PowerPoint 2010 SP2 memory corruption
2732| [122870] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R memory corruption
2733| [122861] Microsoft Windows up to Server 2016 Microsoft COM for Windows privilege escalation
2734| [122850] Microsoft Visual Studio 2015 Update 3/2017/2017 Version 15.8 Diagnostic Hub privilege escalation
2735| [122849] Microsoft Windows up to Server 2016 Diagnostic Hub privilege escalation
2736| [122848] Microsoft Windows Security Feature 2FA weak authentication
2737| [122834] Microsoft Windows up to Server 2016 LNK memory corruption
2738| [122825] Microsoft Windows up to Server 2016 Graphics memory corruption
2739| [122823] Microsoft SQL Server 2016 SP1/2016 SP2/2017 memory corruption
2740| [121208] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R Attachment privilege escalation
2741| [121118] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2742| [121116] Microsoft Windows up to Server 2016 Sandbox privilege escalation
2743| [121114] Microsoft Access 2013 SP1/2016/2016 C2R memory corruption
2744| [121111] Microsoft Windows up to Server 2016 Kernel memory corruption
2745| [121110] Microsoft Windows up to Server 2016 Wordpad privilege escalation
2746| [121107] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll denial of service
2747| [121106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
2748| [121105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2749| [121098] Microsoft Office 2016/2016 C2R memory corruption
2750| [121092] Microsoft Windows up to Server 2016 FTP Server denial of service
2751| [121090] Microsoft Visual Studio up to 2017 Version 15.8 Preview privilege escalation
2752| [119479] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016 memory corruption
2753| [119477] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016 information disclosure
2754| [119476] Microsoft Publisher 2010 SP2 OLE Object PUB File privilege escalation
2755| [119475] Microsoft Outlook 2010 SP2/2013 RT SP1/2013 SP1/2016 Attachment privilege escalation
2756| [119474] Microsoft Windows up to Server 2016 GDI information disclosure
2757| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
2758| [119468] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2759| [119467] Microsoft Windows up to Server 2016 Hypervisor privilege escalation
2760| [119465] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2761| [119464] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2762| [119463] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2763| [119461] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2764| [119460] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2765| [119459] Microsoft Windows up to Server 2016 memory corruption
2766| [119457] Microsoft Windows up to Server 2016 Desktop Bridge privilege escalation
2767| [119456] Microsoft Windows up to Server 2016 Kernel information disclosure
2768| [119455] Microsoft Windows up to Server 2016 denial of service
2769| [119454] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
2770| [119452] Microsoft Windows up to Server 2016 HIDParser memory corruption
2771| [119448] Microsoft Windows up to Server 2016 Code Integrity Module denial of service
2772| [119447] Microsoft Windows up to Server 2016 NTFS privilege escalation
2773| [119441] Microsoft Windows up to Server 2016 Media Foundation memory corruption
2774| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
2775| [119436] Microsoft Windows up to Server 2016 memory corruption
2776| [119431] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
2777| [118120] Microsoft Office 2016 on Mac XML Data Code Execution
2778| [117561] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1 Web Request cross site scripting
2779| [117560] Microsoft Exchange Server up to 2016 CU9 Code Execution memory corruption
2780| [117559] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access Web Request cross site scripting
2781| [117558] Microsoft Windows up to Server 2016 Code Execution memory corruption
2782| [117507] Microsoft Infopath 2013 SP1 memory corruption
2783| [117505] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
2784| [117504] Microsoft Office 2010 SP2 information disclosure
2785| [117503] Microsoft Exchange Server 2013 CU19/2013 CU20/2016 CU8/2016 CU9 Outlook Web Access cross site scripting
2786| [117502] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
2787| [117501] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2788| [117500] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access cross site scripting
2789| [117499] Microsoft Exchange Server up to 2016 CU9 information disclosure
2790| [117498] Microsoft Office 2016 C2R Security Feature privilege escalation
2791| [117497] Microsoft SharePoint Enterprise Server 2010/2013 SP1/2016 cross site scripting
2792| [117480] Microsoft Windows up to Server 2016 COM Serialized privilege escalation
2793| [117473] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2794| [117472] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2795| [117471] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2796| [117470] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2797| [117469] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2798| [117468] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2799| [117444] Microsoft Windows up to Server 2016 Hyper-V vSMB memory corruption
2800| [117443] Microsoft Windows up to Server 2016 Hyper-V memory corruption
2801| [117442] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
2802| [116132] Microsoft Office 2016 Memory information disclosure
2803| [116051] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2804| [116050] Microsoft SharePoint Enterprise Server 2010 SP2/2013/2016 cross site scripting
2805| [116049] Microsoft SharePoint Enterprise Server 2013/2016 privilege escalation
2806| [116048] Microsoft Windows up to Server 2016 DirectX Graphics Kernel Subsystem memory corruption
2807| [116047] Microsoft Windows up to Server 2016 OpenType Font Driver atmfd.dll memory corruption
2808| [116046] Microsoft SharePoint Enterprise Server 2013/2016 Share cross site scripting
2809| [116045] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2810| [116039] Microsoft Windows up to Server 2016 Remote Desktop Protocol denial of service
2811| [116031] Microsoft Windows up to Server 2016 Kernel ASLR information disclosure
2812| [116030] Microsoft Windows up to Server 2016 SNMP Service denial of service
2813| [116026] Microsoft Windows up to Server 2016 Kernel information disclosure
2814| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
2815| [116023] Microsoft Office up to 2016 C2R information disclosure
2816| [116022] Microsoft Excel 2010 SP2 memory corruption
2817| [116020] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Active Directory privilege escalation
2818| [116019] Microsoft Windows up to Server 2016 Kernel information disclosure
2819| [116018] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2820| [116017] Microsoft Excel up to 2016 C2R memory corruption
2821| [116016] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Graphics memory corruption
2822| [116014] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
2823| [116013] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1 memory corruption
2824| [116008] Microsoft Windows up to Server 2016 Graphics memory corruption
2825| [116007] Microsoft Windows up to Server 2016 Graphics memory corruption
2826| [116006] Microsoft Windows up to Server 2016 Graphics memory corruption
2827| [116005] Microsoft Windows up to Server 2016 Graphics memory corruption
2828| [116004] Microsoft Windows up to Server 2016 Graphics memory corruption
2829| [116003] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
2830| [115994] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
2831| [115804] Microsoft Windows up to Server 2016 Malware Protection Engine privilege escalation
2832| [114579] Microsoft Exchange Server up to 2017 CU8 Outlook Web Access information disclosure
2833| [114574] Microsoft SharePoint Enterprise Server 2016 privilege escalation
2834| [114573] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2835| [114571] Microsoft Exchange Server 2016 CU7/2016 CU8 Outlook Web Access information disclosure
2836| [114570] Microsoft Exchange Server 2010 SP3/2013 CU18/2013 CU19/2016 CU7/2016 CU8 Outlook Web Access Fake privilege escalation
2837| [114565] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Kernel information disclosure
2838| [114564] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2839| [114562] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2840| [114560] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2841| [114559] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2842| [114558] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2843| [114557] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2844| [114556] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2845| [114555] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2846| [114554] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2847| [114553] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2848| [114552] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2849| [114551] Microsoft Excel up to 2016 C2R Security Feature privilege escalation
2850| [114549] Microsoft Access 2010 SP2/2013 SP1/2016 memory corruption
2851| [114548] Microsoft Windows up to Server 2016 CNG Security Feature cng.sys privilege escalation
2852| [114547] Microsoft Windows up to Server 2016 Kernel information disclosure
2853| [114546] Microsoft Windows up to Server 2016 Kernel information disclosure
2854| [114545] Microsoft Windows up to Server 2016 Kernel information disclosure
2855| [114544] Microsoft Windows up to Server 2016 Kernel information disclosure
2856| [114543] Microsoft Windows up to Server 2016 Kernel information disclosure
2857| [114542] Microsoft Windows up to Server 2016 Kernel information disclosure
2858| [114541] Microsoft Windows up to Server 2016 Kernel information disclosure
2859| [114540] Microsoft Windows up to Server 2016 Kernel information disclosure
2860| [114536] Microsoft Windows up to Server 2016 CredSSP privilege escalation
2861| [114535] Microsoft Windows up to Server 2016 Hyper-V denial of service
2862| [114531] Microsoft Windows up to Server 2016 Windows Installer privilege escalation
2863| [114530] Microsoft Windows up to Server 2016 GDI privilege escalation
2864| [114529] Microsoft Windows up to Server 2016 GDI privilege escalation
2865| [114527] Microsoft Windows up to Server 2016 Kernel information disclosure
2866| [114526] Microsoft Windows up to Server 2016 Kernel information disclosure
2867| [114525] Microsoft Windows up to Server 2016 Kernel information disclosure
2868| [114522] Microsoft Windows 10 1607/10 1703/Server 2016 Desktop Bridge privilege escalation
2869| [114521] Microsoft Windows up to Server 2016 Video Control privilege escalation
2870| [114520] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge privilege escalation
2871| [114518] Microsoft Windows up to Server 2016 Remote Assistance information disclosure
2872| [114517] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge VFS privilege escalation
2873| [114516] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
2874| [113835] Microsoft Identity Manager 2016 SP1 cross site scripting
2875| [113264] Microsoft Windows 8.1/RT 8.1/Server 2012 R2 SMBv2/SMBv3 denial of service
2876| [113260] Microsoft Windows up to Server 2016 Kernel memory corruption
2877| [113259] Microsoft Windows 10/Server 2016/Server 1709 NTFS privilege escalation
2878| [113254] Microsoft Windows up to Server 2016 Kernel information disclosure
2879| [113253] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
2880| [113252] Microsoft Windows up to Server 2016 Kernel memory corruption
2881| [113250] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
2882| [113249] Microsoft Windows up to Server 2016 Kernel memory corruption
2883| [113248] Microsoft Windows up to Server 2016 Kernel information disclosure
2884| [113243] Microsoft Windows 10/Server 2016 MultiPoint Management privilege escalation
2885| [113242] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
2886| [113241] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
2887| [113240] Microsoft Windows 10/Server 2016/Server 1709 AppContainer privilege escalation
2888| [113237] Microsoft SharePoint Enterprise Server 2016 cross site scripting
2889| [113236] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2890| [113233] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Uninitialized Memory information disclosure
2891| [113232] Microsoft Excel 2016 memory corruption
2892| [113230] Microsoft Windows up to Server 2016 Scripting Engine information disclosure
2893| [113229] Microsoft Windows up to Server 2016 StructuredQuery memory corruption
2894| [111580] Microsoft Office 2016 on Mac Email Attachment spoofing
2895| [111571] Microsoft SharePoint Enterprise Server 2013/2016 Access cross site scripting
2896| [111567] Microsoft Office 2010/2013/2016 memory corruption
2897| [111564] Microsoft Word 2016 memory corruption
2898| [111562] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
2899| [111561] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
2900| [128730] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
2901| [111358] Microsoft Windows up to Server 2016 IPsec denial of service
2902| [110553] Microsoft Office 2016 C2R information disclosure
2903| [110552] Microsoft SharePoint Enterprise Server 2016 Web Request privilege escalation
2904| [110551] Microsoft Excel 2016 C2R memory corruption
2905| [110550] Microsoft PowerPoint 2013 SP1/2013 RT SP1/2016 information disclosure
2906| [110549] Microsoft Exchange Server 2016 CU6/2016 CU7 Outlook Web Access privilege escalation
2907| [110547] Microsoft Windows up to Server 2016 its:// Protocol information disclosure
2908| [110531] Microsoft Windows 10/Server 2016 Device Guard privilege escalation
2909| [110522] Microsoft Windows up to Server 2016 RRAS privilege escalation
2910| [110350] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
2911| [110318] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
2912| [109391] Microsoft SharePoint Enterprise Server 2016 Project Server cross site request forgery
2913| [109389] Microsoft Excel 2016 Click-to-Run memory corruption
2914| [109360] Microsoft Windows up to Server 2016 Windows Search denial of service
2915| [107759] Microsoft Windows up to Server 2016 SMB denial of service
2916| [107757] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2917| [107756] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2918| [107753] Microsoft Windows 10/Server 2016 SMB privilege escalation
2919| [107744] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
2920| [107741] Microsoft Outlook 2016 Secure Connection Mail information disclosure
2921| [107740] Microsoft Windows up to Server 2016 Graphics memory corruption
2922| [107739] Microsoft Windows up to Server 2016 Graphics memory corruption
2923| [107738] Microsoft Windows up to Server 2016 Search information disclosure
2924| [107734] Microsoft Windows 10/Server 2016 SMB privilege escalation
2925| [107732] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
2926| [107730] Microsoft Windows up to Server 2016 Search Remote memory corruption
2927| [107729] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2928| [107728] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2929| [107727] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
2930| [107724] Microsoft Windows up to Server 2016 Text Services Framework memory corruption
2931| [107723] Microsoft Windows up to Server 2016 SMB information disclosure
2932| [107698] Microsoft Office 2016 memory corruption
2933| [107593] InFocus Mondopad 2.2.08 Excel Spreadsheet Microsoft Office Document Credentials information disclosure
2934| [106544] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
2935| [106531] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
2936| [106529] Microsoft PowerPoint 2016 memory corruption
2937| [106523] Microsoft Windows up to Server 2016 PDF Library memory corruption
2938| [106518] Microsoft Edge on Win10/Server 2016 memory corruption
2939| [106516] Microsoft Windows up to Server 2016 PDF Library memory corruption
2940| [106498] Microsoft Windows up to Server 2016 Shell privilege escalation
2941| [106496] Microsoft Windows up to Server 2016 Uniscribe information disclosure
2942| [106495] Microsoft Windows up to Server 2012 R2 Uniscribe memory corruption
2943| [106492] Microsoft Windows Server 2012/Server 2012 R2/Server 2016 DHCP Service memory corruption
2944| [106489] Microsoft Windows up to Server 2016 Graphics Win32k win32k!fsc_CalcGrayRow memory corruption
2945| [106474] Microsoft Office 2016 memory corruption
2946| [106473] Microsoft SharePoint Server 2013 SP1 cross site scripting
2947| [106472] Microsoft Windows up to Server 2016 Bluetooth Driver Object BlueBorne spoofing
2948| [106470] Microsoft Excel 2011 on Mac memory corruption
2949| [106455] Microsoft Exchange Server 2013/2016 information disclosure
2950| [106454] Microsoft Windows up to Server 2016 Windows NetBT Session Services race condition memory corruption
2951| [105048] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
2952| [105047] Microsoft Edge on Win10/Server 2016 Scripting Engine EntryCall memory corruption
2953| [105046] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
2954| [105040] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
2955| [105038] Microsoft Edge on Win10/Server 2016 Javascript Engine Out-of-Bounds memory corruption
2956| [105037] Microsoft Edge on Win10/Server 2016 Javascript Engine PreVisitCatch memory corruption
2957| [105035] Microsoft SharePoint Server 2010 SP2 cross site scripting
2958| [105033] Microsoft Edge 38.14393.1066.0 on Win10/Server 2016 Use-After-Free information disclosure
2959| [105029] Microsoft Edge on Win10/Server 2016 Javascript Engine ProcessLinkFailedAsmJsModule memory corruption
2960| [105027] Microsoft Edge on Win10/Server 2016 _SelectValueInternal information disclosure
2961| [105024] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
2962| [105023] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
2963| [105017] Microsoft Windows up to Server 2016 Error Reporting information disclosure
2964| [105013] Microsoft Windows 10 1607/10 1703/Server 2016 Hyper-V denial of service
2965| [105011] Microsoft Windows up to Server 2016 Windows Search memory corruption
2966| [105010] Microsoft Windows up to Server 2016 Win32k memory corruption
2967| [105009] Microsoft Windows up to Server 2016 Input Method Editor memory corruption
2968| [105008] Microsoft SQL Server 2012/2014/2016 Analysis Services information disclosure
2969| [104990] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
2970| [104989] Microsoft Windows up to Server 2016 NetBIOS denial of service
2971| [104584] Microsoft Outlook up to 2016 C2R Document File privilege escalation
2972| [104583] Microsoft Outlook up to 2016 C2R Email memory corruption
2973| [104582] Microsoft Outlook up to 2016 C2R Object memory corruption
2974| [103468] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 Open Redirect
2975| [103446] Microsoft Windows up to Server 2016 Search Object privilege escalation
2976| [103445] Microsoft Windows up to Server 2016 Wordpad privilege escalation
2977| [103444] Microsoft Windows up to Server 2016 Explorer denial of service
2978| [103442] Microsoft Windows 10/Server 2016 HoloLens WiFi Packet privilege escalation
2979| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
2980| [103431] Microsoft Windows up to Server 2016 PowerShell PSObject Object privilege escalation
2981| [103429] Microsoft Windows up to Server 2016 Kerberos weak authentication
2982| [103426] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
2983| [103425] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
2984| [103420] Microsoft Windows up to Server 2016 Kerberos Bypass privilege escalation
2985| [103417] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
2986| [102544] Microsoft Edge on Win10/Server 2016 Fetch API information disclosure
2987| [102543] Microsoft Edge on Win10/Server 2016 Javascript XML DOM Object information disclosure
2988| [102463] Microsoft Project Server 2013 SP1 cross site scripting
2989| [102460] Microsoft Outlook 2016 on Mac HTML spoofing
2990| [102448] Microsoft SharePoint Enterprise Server 2016 Reflected cross site scripting
2991| [102446] Microsoft Office up to 2016 privilege escalation
2992| [102445] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 privilege escalation
2993| [102443] Microsoft Office up to 2016 privilege escalation
2994| [102412] Microsoft Windows up to Server 2016 PDF information disclosure
2995| [102397] Microsoft Outlook 2010 SP1/2013 SP1/2016 DLL Loader privilege escalation
2996| [102396] Microsoft Office 2013 SP1/2016 DLL Loader privilege escalation
2997| [102386] Microsoft Windows up to Server 2012 R2 Uniscribe privilege escalation
2998| [102385] Microsoft Windows up to Server 2016 Font Library privilege escalation
2999| [102376] Microsoft Windows up to Server 2016 CAB File privilege escalation
3000| [102375] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
3001| [102374] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
3002| [102373] Microsoft Windows up to Server 2016 Uniscribe Font USP10!MergeLigRecords memory corruption
3003| [101817] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
3004| [101816] Microsoft Windows up to Server 2016 Malware Protection Engine setCaller memory corruption
3005| [101815] Microsoft Windows up to Server 2016 Malware Protection Engine Use-After-Free memory corruption
3006| [101814] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
3007| [101813] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
3008| [101812] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
3009| [101811] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
3010| [101810] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
3011| [101028] Microsoft Windows 10/Server 2016 Hyper-V vSMB privilege escalation
3012| [101020] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
3013| [101019] Microsoft Skype for Business 2016 memory corruption
3014| [101018] Microsoft SharePoint 2010 SP2/2013 SP1/2016 memory corruption
3015| [101016] Microsoft PowerPoint 2011 on Mac memory corruption
3016| [101015] Microsoft PowerPoint 2011 on Mac memory corruption
3017| [101014] Microsoft Office 2010 SP2/2016 memory corruption
3018| [101013] Microsoft Office 2010 SP2/2016 memory corruption
3019| [101002] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
3020| [101001] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
3021| [101000] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
3022| [100999] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
3023| [100918] Microsoft Windows 8/8.1/10/Server 2012/Server 2016 Malware Protection Service Type Confusion privilege escalation
3024| [99697] Microsoft SharePoint Server 2010 SP1/2010 SP2 Excel Services cross site scripting
3025| [99683] Microsoft Windows 10 1607/10 1703/Server 2012 R2/Server 2016 Active Directory Lockout privilege escalation
3026| [99682] Microsoft Outlook 2011 on Mac HTML Tag Validator spoofing
3027| [99681] Microsoft Windows up to Server 2016 OLE Integrity-Level Check privilege escalation
3028| [99667] Microsoft Windows 10/Server 2016 Active Directory Service Unresponsive denial of service
3029| [98272] Microsoft Windows up to 10/Server 2016 Local Session privilege escalation
3030| [98096] Microsoft Exchange 2013 SP1 privilege escalation
3031| [98095] Microsoft Lync for Mac 2011 Certificate Validation weak authentication
3032| [98094] Microsoft SharePoint Server 2013 SP1 cross site scripting
3033| [98093] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
3034| [98091] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
3035| [98090] Microsoft SharePoint Server 2010 SP2/2013 SP1 information disclosure
3036| [98089] Microsoft Office Web Apps 2013 SP1 memory corruption
3037| [98082] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 denial of service
3038| [98081] Microsoft Excel up to 2016 information disclosure
3039| [98080] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
3040| [98079] Microsoft Word 2016 memory corruption
3041| [98076] Microsoft Lync/Skype for Business 2010/2013/2016 Graphics Component privilege escalation
3042| [98075] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
3043| [98074] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
3044| [98073] Microsoft Office 2010 SP2/Word Viewer Graphics Component information disclosure
3045| [98069] Microsoft Windows up to Server 2012 R2 Color Management memory corruption
3046| [98056] Microsoft Windows up to Server 2016 DNS Query information disclosure
3047| [98054] Microsoft Windows up to Server 2016 SMBv2/SMBv3 NULL Pointer Dereference memory corruption
3048| [98017] Microsoft Windows up to Server 2016 PDF memory corruption
3049| [98015] Microsoft Windows 10/Server 2016 Hyper-V denial of service
3050| [98013] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
3051| [98007] Microsoft Windows 10/Server 2016 Hyper-V Network Switch denial of service
3052| [98006] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
3053| [96521] Microsoft Windows 8.1/10/Server 2012/Server 2016 SMB Response mrxsmb20.sys denial of service
3054| [95781] Microsoft PowerPoint 2016 Java Embedded Object privilege escalation
3055| [95125] Microsoft Word/SharePoint Enterprise Server 2016 Document privilege escalation
3056| [94451] Microsoft Office 2011 memory corruption
3057| [94447] Microsoft Office 2010 SP2 memory corruption
3058| [94446] Microsoft Office 2016 memory corruption
3059| [94444] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL Loader memory corruption
3060| [94443] Microsoft Office up to 2016 information disclosure
3061| [94442] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
3062| [93964] Microsoft Windows 7 Excel Starter 2010 XXE information disclosure
3063| [93543] Microsoft SQL Server 2016 FILESTREAM Path privilege escalation
3064| [93540] Microsoft Excel 2010 SP2/2011/2016 memory corruption
3065| [93416] Microsoft SQL Server up to 2012 SP3/2014 SP2/2016 Server Agent atxcore.dll privilege escalation
3066| [93415] Microsoft SQL Server 2016 MDS API cross site scripting
3067| [93414] Microsoft SQL Server up to 2012 SP3 RDBMS Engine privilege escalation
3068| [93413] Microsoft SQL Server up to 2014 SP2/2016 RDBMS Engine privilege escalation
3069| [93412] Microsoft SQL Server 2016 RDBMS Engine privilege escalation
3070| [93393] Microsoft Office up to 2016 memory corruption
3071| [93392] Microsoft Office up to 2016 memory corruption
3072| [93391] Microsoft Office up to 2016 memory corruption
3073| [93389] Microsoft Windows up to Server 2016 Media Foundation memory corruption
3074| [93388] Microsoft Windows up to Server 2016 Animation Manager Stylesheets memory corruption
3075| [92587] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 Transaction Manager privilege escalation
3076| [92584] Microsoft Office up to 2016 memory corruption
3077| [91571] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
3078| [91570] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
3079| [91556] Microsoft Exchange 2016 Meeting Invation cross site scripting
3080| [91555] Microsoft Exchange 2013/2016 Link spoofing
3081| [91550] Microsoft Office 2016 memory corruption
3082| [91547] Microsoft Office 2010 memory corruption
3083| [91543] Microsoft Office up to 2016 memory corruption
3084| [91541] Microsoft Office 2013/2016 APP-V ASLR privilege escalation
3085| [90711] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF privilege escalation
3086| [90710] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 Netlogon privilege escalation
3087| [90704] Microsoft Office 2013/2013 RT/2016 memory corruption
3088| [89043] Microsoft Office up to 2016 memory corruption
3089| [89041] Microsoft Office up to 2016 memory corruption
3090| [89040] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 memory corruption
3091| [89038] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature privilege escalation
3092| [89037] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
3093| [87961] Microsoft Windows up to Server 2012 R2 Search denial of service
3094| [87959] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
3095| [87958] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF memory corruption
3096| [87957] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
3097| [87956] Microsoft Exchange 2013/2016 Oracle Outside In Libraries information disclosure
3098| [87944] Microsoft Windows Server 2012/Server 2012 R2 Virtual PCI Memory information disclosure
3099| [87940] Microsoft Windows Server 2012/Server 2012 R2 DNS Server Use-After-Free memory corruption
3100| [87936] Microsoft Office up to 2016 memory corruption
3101| [87166] Microsoft Windows up to Server 2012 R2 DirectX Graphics Kernel Subsystem privilege escalation
3102| [87156] Microsoft Windows 8.1/RT 8.1/10/Server 2012 R2 Shell memory corruption
3103| [87149] Microsoft Office up to 2016 memory corruption
3104| [87148] Microsoft Office 2010 Graphics memory corruption
3105| [87146] Microsoft Office 2011/2013/2013 RT/2016 memory corruption
3106| [82229] Microsoft Excel 2010 SP2 Office Document memory corruption
3107| [82223] Microsoft Windows 8.1/10/Server 2012 R2 Hyper-V Memory information disclosure
3108| [82222] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Memory information disclosure
3109| [82221] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Hyper-V privilege escalation
3110| [81274] Microsoft Office up to 2016 memory corruption
3111| [81270] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
3112| [81269] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
3113| [81268] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
3114| [80886] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
3115| [80885] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP memory corruption
3116| [80878] Microsoft Windows Server 2012 R2 Active Directory Federation Service denial of service
3117| [80874] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP privilege escalation
3118| [80870] Microsoft Office up to 2016 memory corruption
3119| [80868] Microsoft Office up to 2016 memory corruption
3120| [80867] Microsoft Office up to 2016 memory corruption
3121| [80865] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 DLL Loader memory corruption
3122| [80860] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Reader memory corruption
3123| [80859] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
3124| [80231] Microsoft Excel up to 2016 Office Document memory corruption
3125| [80229] Microsoft Exchange Server 2013 SP1/2013 CU 10/2013 CU 11/2016 Outlook Web Access cross site scripting
3126| [80228] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
3127| [80227] Microsoft Exchange Server 2013 SP1/2013 CU 10/2016 Outlook Web Access cross site scripting
3128| [80226] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
3129| [80218] Microsoft Office up to 2016 ASLR privilege escalation
3130| [80217] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
3131| [80216] Microsoft Office up to 2016 Office Document memory corruption
3132| [80206] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
3133| [128763] Microsoft Exchange Server 2016 CU10/2016 CU11/2019 memory corruption
3134| [79508] Microsoft Windows up to Server 2012 R2 Library Loader memory corruption
3135| [79500] Microsoft Office 2010/2011/2016 memory corruption
3136| [79183] Microsoft Windows up to Server 2012 R2 IPsec denial of service
3137| [79173] Microsoft Windows up to Server 2012 R2 Graphics information disclosure
3138| [79117] Microsoft Outlook 2011/2016 on Mac HTML spoofing
3139| [78375] Microsoft SharePoint Server/SharePoint Foundation 2013 SP1 cross site scripting
3140| [77645] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
3141| [77644] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
3142| [77638] Microsoft Lync Server 2013 cross site scripting
3143| [77628] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
3144| [77612] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access Stack-Based information disclosure
3145| [77050] Microsoft Office up to 2016 memory corruption
3146| [77037] Microsoft Windows Server 2012/Server 2012 R2 System Center Operations Manager cross site scripting
3147| [76461] Microsoft Windows up to Server 2012 R2 Domain-Controller Communication Credentials information disclosure
3148| [76460] Microsoft Windows 7 SP1/8/Server 2012 RDP Server Service memory corruption
3149| [76448] Microsoft Windows 8.1/Server 2012 R2 Hyper-V memory corruption
3150| [75793] Microsoft Exchange Server 2013 CU8 cross site scripting
3151| [75792] Microsoft Exchange Server 2013 SP1 CU8 cross site request forgery
3152| [75791] Microsoft Office 2013 SP1 Office Document Uninitialized Memory memory corruption
3153| [75787] Microsoft Exchange Server 2013 SP1 CU8 Same Origin Policy privilege escalation
3154| [75786] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
3155| [66976] Microsoft Access 2010 VBA Datatype denial of service
3156| [74848] Microsoft SharePoint Foundation/SharePoint Server 2013 SP1 cross site scripting
3157| [74842] Microsoft Windows 8.1/Server 2012 R2 Hyper-V denial of service
3158| [74836] Microsoft Project Server 2010 SP2/2013 SP1 cross site scripting
3159| [74835] Microsoft Office 2011 on Mac Use-After-Free cross site scripting
3160| [74834] Microsoft Windows Server 2012 R2 Active Directory Federation Services 3.0 privilege escalation
3161| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
3162| [74393] Microsoft SharePoint Server 2013 Foundation cross site scripting
3163| [73967] Microsoft Office up to 2013 SP1 Office File memory corruption
3164| [73966] Microsoft Office up to 2013 SP1 RTF File memory corruption
3165| [73965] Microsoft Office up to 2013 SP1 Use-After-Free memory corruption
3166| [73961] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 Remote Desktop Protocol Object Management denial of service
3167| [69162] Microsoft System Center Virtual Machine Manager 2012 privilege escalation
3168| [69160] Microsoft Windows up to Server 2012 Process privilege escalation
3169| [69156] Microsoft Office 2010 Object memory corruption
3170| [68593] Microsoft Windows up to Server 2012 Network Location Awareness Service privilege escalation
3171| [68417] Microsoft Exchange 2013 Outlook Web Access Token spoofing
3172| [68191] Microsoft SharePoint 2010 cross site scripting
3173| [67828] Microsoft ASP.NET MVC 2/3/4/5/5.1 System.Web.Mvc.dll cross site scripting
3174| [67518] Microsoft Lync 2013 denial of service
3175| [67517] Microsoft Lync 2013 Script Reflected cross site scripting
3176| [67516] Microsoft Lync 2010/2013 denial of service
3177| [67362] Microsoft Windows up to Server 2012 R2 Remote Procedure Call privilege escalation
3178| [67360] Microsoft SharePoint 2013 App Permission Management cross site scripting
3179| [13549] Microsoft Windows 7/8/8.1/Server 2012 Remote Desktop Protocol weak encryption
3180| [13547] Microsoft Lync 2010/2013 Meeting cross site scripting
3181| [13228] Microsoft Office 2013 Document privilege escalation
3182| [68577] Microsoft ASP.NET 2014.3.1209 Telerik UI RadAsyncUpload directory traversal
3183| [12267] Microsoft Forefront Security for Exchange Server 2010 Mail memory corruption
3184| [12263] Microsoft Windows up to Server 2012 Direct2D 2D Geometric Figure memory corruption
3185| [12238] Microsoft Windows 8/Server 2012/RT IPv6 denial of service
3186| [12185] Microsoft .NET Framework 2/4 HMAC weak authentication
3187| [12183] Microsoft .NET Framework 2/4 DTD denial of service
3188| [11673] Microsoft Windows Live Movie Maker 2011 WAV File denial of service
3189| [11468] Microsoft Exchange 2010/2013 cross site scripting
3190| [11466] Microsoft Office 2013 File Response information disclosure
3191| [11457] Microsoft SharePoint Server/Office Web Apps 2010 SP1/2010 SP2/2013 W3WP Service Account privilege escalation
3192| [11150] Microsoft Windows 8/Server 2012 Hyper-V Data Structure Value Crash privilege escalation
3193| [11004] Microsoft Windows Server 2012 R2 RDP Restricted Admin Mode weak authentication
3194| [10250] Microsoft SharePoint Server up to 2013 W3WP Process denial of service
3195| [10249] Microsoft SharePoint 2010/2003/2007/2.0/3.0 Workflow memory corruption
3196| [10248] Microsoft SharePoint Server up to 2013 cross site scripting
3197| [9943] Microsoft Windows Server 2012 NAT Driver ICMP Packet denial of service
3198| [8739] Microsoft Windows Essentials up to 2012 Windows Writer Eingabe information disclosure
3199| [8725] Microsoft Lync 2010/2013 Use-After-Free memory corruption
3200| [8722] Microsoft Windows 8/Server 2012/RT HTTP.sys denial of service
3201| [8206] Microsoft SharePoint Server 2010 SP1 HTML Sanitization Component cross site scripting
3202| [8203] Microsoft Windows up to 2012 AD LDAP Query denial of service
3203| [8200] Microsoft SharePoint Server 2013 ACL information disclosure
3204| [7971] Microsoft Office for Mac 2011 up to 14.3.1 on Mac HTML5 Mail Message Parser File information disclosure
3205| [7969] Microsoft OneNote 2010 SP1 ONE File information disclosure
3206| [7968] Microsoft SharePoint Server 2010 SP1 Input Validator Eingabe Crash denial of service
3207| [7967] Microsoft SharePoint Server 2010 SP1 User Account Eingabe Crash information disclosure
3208| [7966] Microsoft SharePoint Server 2010 SP1 Eingabe Crash cross site scripting
3209| [7965] Microsoft SharePoint Server 2010 SP1 User Account Callback URL privilege escalation
3210| [7964] Microsoft Visio 2010 Tree Object Type File memory corruption
3211| [7343] Microsoft Lync 2012 HTTP Format String
3212| [7258] Microsoft Windows up to 8/Server 2012 SSL/TLS race condition
3213| [7230] Microsoft Excel 2010 SP1 on 32-bit XLS File Formatting Information Crash denial of service
3214| [6831] Microsoft Office Picture Manager 2010 File memory corruption
3215| [62720] EMC NetWorker Module for Microsoft Applications up to 2.2.0 memory corruption
3216| [6624] Microsoft SQL Server up to 2012 Report Manager cross site scripting
3217| [62238] Microsoft Visual Studio Team Foundation Server 2010 cross site scripting
3218| [5946] Microsoft Visio/Visio Viewer up to 2010 SP1 File memory corruption
3219| [5644] Microsoft SharePoint 2010 scriptesx.ashx cross site scripting
3220| [5641] Microsoft SharePoint 2010 cross site scripting
3221| [60943] Microsoft Dynamics AX 2012 Enterprise Portal cross site scripting
3222| [12311] Microsoft Lync 2010 Search race condition
3223| [60570] Microsoft Forefront Unified Access Gateway 2010 information disclosure
3224| [60569] Microsoft Forefront Unified Access Gateway 2010 spoofing
3225| [60208] Microsoft Visio Viewer 2010 memory corruption
3226| [60207] Microsoft Visio Viewer 2010 memory corruption
3227| [60206] Microsoft Visio Viewer 2010 memory corruption
3228| [4640] Microsoft SharePoint 2010 inplview.aspx cross site scripting
3229| [4636] Microsoft SharePoint 2010 wizardlist.aspx cross site scripting
3230| [4635] Microsoft SharePoint 2010 themeweb.aspx cross site scripting
3231| [59008] Microsoft Forefront Unified Access Gateway 2010 Crash denial of service
3232| [58995] Microsoft Forefront Unified Access Gateway 2010 memory corruption
3233| [58994] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
3234| [58993] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
3235| [4424] Microsoft Host Integration Server up to 2010 denial of service
3236| [4420] Microsoft Forefront Unified Access Gateway 2010 memory corruption
3237| [58487] Microsoft SharePoint Foundation 2010 cross site scripting
3238| [58486] Microsoft SharePoint Foundation 2010 Reflected cross site scripting
3239| [58485] Microsoft SharePoint Foundation 2010 EditForm.aspx cross site scripting
3240| [4414] Microsoft SharePoint 2010 cross site scripting
3241| [4413] Microsoft SharePoint 2010/2007/3.0 XML/XLS Designfehler
3242| [91971] Microsoft Skype 2.2.x/5.2.x/5.3.x denial of service
3243| [57693] Microsoft Forefront Threat Management Gateway 2010 NSPLookupServiceNext memory corruption
3244| [4332] Microsoft PowerPoint 2010/2007 memory corruption
3245| [56028] Microsoft Data Access Components 2.8 memory corruption
3246| [55777] Microsoft Windows Movie Maker 2.6 memory corruption
3247| [55424] Microsoft Forefront Unified Access Gateway 2010 Signurl.asp cross site scripting
3248| [55415] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
3249| [55414] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
3250| [55413] Microsoft Forefront Unified Access Gateway 2010 spoofing
3251| [54341] Microsoft Windows Movie Maker 2.1 memory corruption
3252| [54549] Microsoft PowerPoint 2010 pptimpconv.dll memory corruption
3253| [4009] Microsoft NET Framework 2.x/3.x denial of service
3254| [45681] Microsoft Internet Explorer 8 Beta 2 privilege escalation
3255| [45449] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
3256| [45448] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
3257| [45446] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
3258| [2927] Microsoft Data Access Components 2.x ADODB.Connection ActiveX Control memory corruption
3259| [32692] Microsoft XML Core Services up to 2.6 memory corruption
3260| [32691] Microsoft XML Core Services up to 2.6 memory corruption
3261| [29608] Microsoft Data Access Components 2.7 memory corruption
3262|
3263| MITRE CVE - https://cve.mitre.org:
3264| [CVE-2013-3661] The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
3265| [CVE-2013-3660] The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
3266| [CVE-2013-3174] DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."
3267| [CVE-2013-3173] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overwrite Vulnerability."
3268| [CVE-2013-3172] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to cause a denial of service (system hang) via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."
3269| [CVE-2013-3171] The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."
3270| [CVE-2013-3167] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."
3271| [CVE-2013-3154] The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."
3272| [CVE-2013-3138] Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
3273| [CVE-2013-3136] The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
3274| [CVE-2013-3134] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."
3275| [CVE-2013-3133] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
3276| [CVE-2013-3132] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Delegate Reflection Bypass Vulnerability."
3277| [CVE-2013-3131] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
3278| [CVE-2013-1345] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Vulnerability."
3279| [CVE-2013-1340] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."
3280| [CVE-2013-1339] The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
3281| [CVE-2013-1336] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."
3282| [CVE-2013-1335] Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
3283| [CVE-2013-1334] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."
3284| [CVE-2013-1332] dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."
3285| [CVE-2013-1331] Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
3286| [CVE-2013-1329] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
3287| [CVE-2013-1328] Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
3288| [CVE-2013-1327] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
3289| [CVE-2013-1323] Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
3290| [CVE-2013-1322] Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
3291| [CVE-2013-1321] Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
3292| [CVE-2013-1320] Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
3293| [CVE-2013-1319] Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
3294| [CVE-2013-1318] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
3295| [CVE-2013-1317] Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."
3296| [CVE-2013-1316] Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."
3297| [CVE-2013-1302] Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
3298| [CVE-2013-1301] Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
3299| [CVE-2013-1300] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."
3300| [CVE-2013-1295] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "CSRSS Memory Corruption Vulnerability."
3301| [CVE-2013-1294] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
3302| [CVE-2013-1293] The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application that leverages improper handling of objects in memory, aka "NTFS NULL Pointer Dereference Vulnerability."
3303| [CVE-2013-1292] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
3304| [CVE-2013-1291] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 Gold and SP1, and Windows 8 allows local users to cause a denial of service (reboot) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability" or "Win32k Font Parsing Vulnerability."
3305| [CVE-2013-1287] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1286.
3306| [CVE-2013-1286] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.
3307| [CVE-2013-1285] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1286 and CVE-2013-1287.
3308| [CVE-2013-1283] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
3309| [CVE-2013-1281] The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
3310| [CVE-2013-1280] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Reference Count Vulnerability."
3311| [CVE-2013-1279] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1278.
3312| [CVE-2013-1278] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1279.
3313| [CVE-2013-1277] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3314| [CVE-2013-1276] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3315| [CVE-2013-1275] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3316| [CVE-2013-1274] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3317| [CVE-2013-1273] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3318| [CVE-2013-1272] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3319| [CVE-2013-1271] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3320| [CVE-2013-1270] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3321| [CVE-2013-1269] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3322| [CVE-2013-1268] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3323| [CVE-2013-1267] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3324| [CVE-2013-1266] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3325| [CVE-2013-1265] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3326| [CVE-2013-1264] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3327| [CVE-2013-1263] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3328| [CVE-2013-1262] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3329| [CVE-2013-1261] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3330| [CVE-2013-1260] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3331| [CVE-2013-1259] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3332| [CVE-2013-1258] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3333| [CVE-2013-1257] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3334| [CVE-2013-1256] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3335| [CVE-2013-1255] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3336| [CVE-2013-1254] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3337| [CVE-2013-1253] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3338| [CVE-2013-1252] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3339| [CVE-2013-1251] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3340| [CVE-2013-1250] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3341| [CVE-2013-1249] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3342| [CVE-2013-1248] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
3343| [CVE-2013-0095] Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability."
3344| [CVE-2013-0077] Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
3345| [CVE-2013-0076] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."
3346| [CVE-2013-0075] The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
3347| [CVE-2013-0073] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."
3348| [CVE-2013-0013] The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability."
3349| [CVE-2013-0011] The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulnerability."
3350| [CVE-2013-0010] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
3351| [CVE-2013-0009] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.
3352| [CVE-2013-0008] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."
3353| [CVE-2013-0004] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability."
3354| [CVE-2013-0003] Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."
3355| [CVE-2013-0002] Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."
3356| [CVE-2013-0001] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka "System Drawing Information Disclosure Vulnerability."
3357| [CVE-2012-5672] Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
3358| [CVE-2012-4791] Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
3359| [CVE-2012-4786] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
3360| [CVE-2012-4776] The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."
3361| [CVE-2012-4774] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted (1) file name or (2) subfolder name that triggers use of unallocated memory as the destination of a copy operation, aka "Windows Filename Parsing Vulnerability."
3362| [CVE-2012-2897] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."
3363| [CVE-2012-2556] The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."
3364| [CVE-2012-2553] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
3365| [CVE-2012-2552] Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
3366| [CVE-2012-2551] The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."
3367| [CVE-2012-2543] Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1
3368| [CVE-2012-2539] Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
3369| [CVE-2012-2536] Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
3370| [CVE-2012-2530] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
3371| [CVE-2012-2529] Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Windows Kernel Integer Overflow Vulnerability."
3372| [CVE-2012-2528] Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
3373| [CVE-2012-2527] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
3374| [CVE-2012-2524] Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
3375| [CVE-2012-2520] Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
3376| [CVE-2012-2519] Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
3377| [CVE-2012-1896] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
3378| [CVE-2012-1895] The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
3379| [CVE-2012-1893] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability."
3380| [CVE-2012-1890] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability."
3381| [CVE-2012-1887] Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
3382| [CVE-2012-1886] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
3383| [CVE-2012-1885] Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
3384| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
3385| [CVE-2012-1867] Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."
3386| [CVE-2012-1866] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability."
3387| [CVE-2012-1865] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864.
3388| [CVE-2012-1864] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865.
3389| [CVE-2012-1863] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
3390| [CVE-2012-1862] Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."
3391| [CVE-2012-1860] Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."
3392| [CVE-2012-1858] The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
3393| [CVE-2012-1856] The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
3394| [CVE-2012-1855] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."
3395| [CVE-2012-1854] Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3396| [CVE-2012-1851] Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
3397| [CVE-2012-1850] The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability."
3398| [CVE-2012-1848] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."
3399| [CVE-2012-1847] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3400| [CVE-2012-1537] Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
3401| [CVE-2012-1528] Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability."
3402| [CVE-2012-1527] Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability."
3403| [CVE-2012-1459] The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
3404| [CVE-2012-1457] The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
3405| [CVE-2012-1453] The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
3406| [CVE-2012-1443] The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
3407| [CVE-2012-1420] The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
3408| [CVE-2012-1194] The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
3409| [CVE-2012-0185] Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
3410| [CVE-2012-0184] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3411| [CVE-2012-0183] Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
3412| [CVE-2012-0182] Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
3413| [CVE-2012-0181] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."
3414| [CVE-2012-0180] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."
3415| [CVE-2012-0179] Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."
3416| [CVE-2012-0178] Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."
3417| [CVE-2012-0177] Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."
3418| [CVE-2012-0175] The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."
3419| [CVE-2012-0174] Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."
3420| [CVE-2012-0173] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.
3421| [CVE-2012-0167] Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
3422| [CVE-2012-0165] GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."
3423| [CVE-2012-0163] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
3424| [CVE-2012-0161] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
3425| [CVE-2012-0160] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
3426| [CVE-2012-0159] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview
3427| [CVE-2012-0158] The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3428| [CVE-2012-0157] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."
3429| [CVE-2012-0156] DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability."
3430| [CVE-2012-0154] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."
3431| [CVE-2012-0152] The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
3432| [CVE-2012-0151] The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
3433| [CVE-2012-0150] Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."
3434| [CVE-2012-0149] afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
3435| [CVE-2012-0148] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
3436| [CVE-2012-0143] Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
3437| [CVE-2012-0142] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3438| [CVE-2012-0141] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
3439| [CVE-2012-0015] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
3440| [CVE-2012-0014] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."
3441| [CVE-2012-0013] Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."
3442| [CVE-2012-0009] Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
3443| [CVE-2012-0008] Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
3444| [CVE-2012-0006] The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability."
3445| [CVE-2012-0005] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."
3446| [CVE-2012-0004] Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
3447| [CVE-2012-0003] Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."
3448| [CVE-2012-0002] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."
3449| [CVE-2012-0001] The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
3450| [CVE-2011-5046] The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."
3451| [CVE-2011-4434] Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
3452| [CVE-2011-3417] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
3453| [CVE-2011-3416] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
3454| [CVE-2011-3415] Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
3455| [CVE-2011-3414] The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
3456| [CVE-2011-3413] Microsoft PowerPoint 2007 SP2
3457| [CVE-2011-3412] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."
3458| [CVE-2011-3411] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."
3459| [CVE-2011-3410] Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."
3460| [CVE-2011-3408] Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability."
3461| [CVE-2011-3406] Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability."
3462| [CVE-2011-3403] Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."
3463| [CVE-2011-3402] Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."
3464| [CVE-2011-3400] Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
3465| [CVE-2011-3397] The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."
3466| [CVE-2011-3396] Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."
3467| [CVE-2011-2019] Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
3468| [CVE-2011-2018] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
3469| [CVE-2011-2016] Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
3470| [CVE-2011-2014] The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability."
3471| [CVE-2011-2013] Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."
3472| [CVE-2011-2011] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
3473| [CVE-2011-2008] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
3474| [CVE-2011-2007] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
3475| [CVE-2011-2005] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
3476| [CVE-2011-2004] Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.
3477| [CVE-2011-2003] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."
3478| [CVE-2011-2002] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka "Win32k TrueType Font Type Translation Vulnerability."
3479| [CVE-2011-1991] Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability."
3480| [CVE-2011-1990] Microsoft Excel 2007 SP2
3481| [CVE-2011-1989] Microsoft Excel 2003 SP3 and 2007 SP2
3482| [CVE-2011-1988] Microsoft Excel 2003 SP3 and 2007 SP2
3483| [CVE-2011-1987] Array index error in Microsoft Excel 2003 SP3 and 2007 SP2
3484| [CVE-2011-1986] Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
3485| [CVE-2011-1985] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability."
3486| [CVE-2011-1984] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
3487| [CVE-2011-1983] Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."
3488| [CVE-2011-1982] Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
3489| [CVE-2011-1980] Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability."
3490| [CVE-2011-1979] Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
3491| [CVE-2011-1978] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."
3492| [CVE-2011-1976] Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
3493| [CVE-2011-1975] Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
3494| [CVE-2011-1974] NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
3495| [CVE-2011-1972] Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
3496| [CVE-2011-1971] The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."
3497| [CVE-2011-1970] The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
3498| [CVE-2011-1968] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability."
3499| [CVE-2011-1967] Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."
3500| [CVE-2011-1966] The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
3501| [CVE-2011-1965] Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."
3502| [CVE-2011-1894] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
3503| [CVE-2011-1893] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
3504| [CVE-2011-1892] Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
3505| [CVE-2011-1888] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
3506| [CVE-2011-1887] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
3507| [CVE-2011-1885] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
3508| [CVE-2011-1884] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3509| [CVE-2011-1883] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3510| [CVE-2011-1882] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3511| [CVE-2011-1881] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
3512| [CVE-2011-1880] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
3513| [CVE-2011-1879] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3514| [CVE-2011-1878] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3515| [CVE-2011-1877] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
3516| [CVE-2011-1876] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3517| [CVE-2011-1875] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3518| [CVE-2011-1874] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
3519| [CVE-2011-1873] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."
3520| [CVE-2011-1872] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
3521| [CVE-2011-1871] Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."
3522| [CVE-2011-1870] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability."
3523| [CVE-2011-1869] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
3524| [CVE-2011-1868] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
3525| [CVE-2011-1508] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."
3526| [CVE-2011-1284] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability."
3527| [CVE-2011-1283] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability."
3528| [CVE-2011-1282] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability."
3529| [CVE-2011-1281] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability."
3530| [CVE-2011-1280] The XML Editor in Microsoft InfoPath 2007 SP2 and 2010
3531| [CVE-2011-1279] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."
3532| [CVE-2011-1278] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."
3533| [CVE-2011-1277] Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
3534| [CVE-2011-1276] Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
3535| [CVE-2011-1275] Microsoft Excel 2002 SP3
3536| [CVE-2011-1274] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
3537| [CVE-2011-1273] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3538| [CVE-2011-1272] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
3539| [CVE-2011-1270] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
3540| [CVE-2011-1269] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
3541| [CVE-2011-1268] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
3542| [CVE-2011-1267] The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
3543| [CVE-2011-1264] Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
3544| [CVE-2011-1263] Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
3545| [CVE-2011-1253] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Class Inheritance Vulnerability."
3546| [CVE-2011-1252] Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
3547| [CVE-2011-1249] The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
3548| [CVE-2011-1248] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."
3549| [CVE-2011-1247] Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Active Accessibility Insecure Library Loading Vulnerability."
3550| [CVE-2011-1242] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3551| [CVE-2011-1241] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3552| [CVE-2011-1240] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3553| [CVE-2011-1239] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3554| [CVE-2011-1238] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3555| [CVE-2011-1237] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3556| [CVE-2011-1236] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3557| [CVE-2011-1235] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3558| [CVE-2011-1234] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3559| [CVE-2011-1233] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3560| [CVE-2011-1232] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3561| [CVE-2011-1231] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3562| [CVE-2011-1230] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3563| [CVE-2011-1229] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3564| [CVE-2011-1228] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3565| [CVE-2011-1227] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3566| [CVE-2011-1226] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3567| [CVE-2011-1225] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3568| [CVE-2011-0980] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."
3569| [CVE-2011-0979] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3570| [CVE-2011-0978] Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
3571| [CVE-2011-0977] Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
3572| [CVE-2011-0976] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
3573| [CVE-2011-0677] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3574| [CVE-2011-0676] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
3575| [CVE-2011-0675] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3576| [CVE-2011-0674] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3577| [CVE-2011-0672] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3578| [CVE-2011-0671] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3579| [CVE-2011-0670] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3580| [CVE-2011-0667] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3581| [CVE-2011-0666] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3582| [CVE-2011-0665] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3583| [CVE-2011-0664] Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
3584| [CVE-2011-0662] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
3585| [CVE-2011-0661] The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
3586| [CVE-2011-0660] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
3587| [CVE-2011-0658] Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."
3588| [CVE-2011-0657] DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
3589| [CVE-2011-0656] Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3590| [CVE-2011-0655] Microsoft PowerPoint 2007 SP2 and 2010
3591| [CVE-2011-0654] Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.
3592| [CVE-2011-0107] Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
3593| [CVE-2011-0105] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
3594| [CVE-2011-0104] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
3595| [CVE-2011-0103] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."
3596| [CVE-2011-0101] Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, doubly-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
3597| [CVE-2011-0098] Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3598| [CVE-2011-0097] Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3599| [CVE-2011-0096] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
3600| [CVE-2011-0093] ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
3601| [CVE-2011-0092] The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
3602| [CVE-2011-0091] Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
3603| [CVE-2011-0090] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
3604| [CVE-2011-0089] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
3605| [CVE-2011-0088] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability."
3606| [CVE-2011-0087] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."
3607| [CVE-2011-0086] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability."
3608| [CVE-2011-0043] Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
3609| [CVE-2011-0042] SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
3610| [CVE-2011-0041] Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
3611| [CVE-2011-0040] The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
3612| [CVE-2011-0039] The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
3613| [CVE-2011-0034] Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted parameter values in an OpenType font, aka "OpenType Font Stack Overflow Vulnerability."
3614| [CVE-2011-0033] The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
3615| [CVE-2011-0032] Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
3616| [CVE-2011-0031] The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
3617| [CVE-2011-0030] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
3618| [CVE-2011-0028] WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."
3619| [CVE-2010-5082] Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."
3620| [CVE-2010-4701] Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
3621| [CVE-2010-4669] The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
3622| [CVE-2010-4562] Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
3623| [CVE-2010-4398] Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
3624| [CVE-2010-4182] Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown
3625| [CVE-2010-3974] fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."
3626| [CVE-2010-3970] Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."
3627| [CVE-2010-3966] Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."
3628| [CVE-2010-3965] Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
3629| [CVE-2010-3964] Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
3630| [CVE-2010-3963] Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability."
3631| [CVE-2010-3961] The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."
3632| [CVE-2010-3960] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."
3633| [CVE-2010-3959] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."
3634| [CVE-2010-3958] The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."
3635| [CVE-2010-3957] Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."
3636| [CVE-2010-3956] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."
3637| [CVE-2010-3955] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."
3638| [CVE-2010-3954] Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."
3639| [CVE-2010-3946] Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."
3640| [CVE-2010-3945] Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
3641| [CVE-2010-3944] win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
3642| [CVE-2010-3943] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."
3643| [CVE-2010-3942] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."
3644| [CVE-2010-3941] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."
3645| [CVE-2010-3940] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."
3646| [CVE-2010-3939] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."
3647| [CVE-2010-3937] Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."
3648| [CVE-2010-3338] The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
3649| [CVE-2010-3337] Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.
3650| [CVE-2010-3336] Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."
3651| [CVE-2010-3335] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."
3652| [CVE-2010-3334] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
3653| [CVE-2010-3333] Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
3654| [CVE-2010-3332] Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."
3655| [CVE-2010-3324] The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
3656| [CVE-2010-3243] Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."
3657| [CVE-2010-3242] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
3658| [CVE-2010-3241] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
3659| [CVE-2010-3240] Microsoft Excel 2002 SP3 and 2007 SP2
3660| [CVE-2010-3239] Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
3661| [CVE-2010-3238] Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
3662| [CVE-2010-3237] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
3663| [CVE-2010-3236] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
3664| [CVE-2010-3235] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
3665| [CVE-2010-3234] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
3666| [CVE-2010-3233] Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
3667| [CVE-2010-3232] Microsoft Excel 2003 SP3 and 2007 SP2
3668| [CVE-2010-3231] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
3669| [CVE-2010-3230] Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
3670| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
3671| [CVE-2010-3227] Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."
3672| [CVE-2010-3223] The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
3673| [CVE-2010-3222] Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability."
3674| [CVE-2010-3221] Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
3675| [CVE-2010-3220] Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
3676| [CVE-2010-3219] Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
3677| [CVE-2010-3218] Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."
3678| [CVE-2010-3217] Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
3679| [CVE-2010-3216] Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."
3680| [CVE-2010-3215] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."
3681| [CVE-2010-3214] Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010
3682| [CVE-2010-3213] Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
3683| [CVE-2010-3200] MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc.
3684| [CVE-2010-3190] Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1
3685| [CVE-2010-3148] Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
3686| [CVE-2010-3147] Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
3687| [CVE-2010-3146] Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability."
3688| [CVE-2010-3144] Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or INS file, aka "Internet Connection Signup Wizard Insecure Library Loading Vulnerability."
3689| [CVE-2010-3142] Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
3690| [CVE-2010-2750] Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."
3691| [CVE-2010-2748] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."
3692| [CVE-2010-2747] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
3693| [CVE-2010-2746] Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
3694| [CVE-2010-2744] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."
3695| [CVE-2010-2742] The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."
3696| [CVE-2010-2741] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
3697| [CVE-2010-2740] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."
3698| [CVE-2010-2739] Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.
3699| [CVE-2010-2738] The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
3700| [CVE-2010-2729] The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability."
3701| [CVE-2010-2728] Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."
3702| [CVE-2010-2573] Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."
3703| [CVE-2010-2572] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
3704| [CVE-2010-2571] Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."
3705| [CVE-2010-2570] Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."
3706| [CVE-2010-2569] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."
3707| [CVE-2010-2568] Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
3708| [CVE-2010-2567] The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the-middle attackers to execute arbitrary code via a malformed response, aka "RPC Memory Corruption Vulnerability."
3709| [CVE-2010-2566] The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."
3710| [CVE-2010-2563] The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter, aka "WordPad Word 97 Text Converter Memory Corruption Vulnerability."
3711| [CVE-2010-2562] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."
3712| [CVE-2010-2555] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."
3713| [CVE-2010-2554] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
3714| [CVE-2010-2552] Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (system hang) via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."
3715| [CVE-2010-2551] The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 packet, aka "SMB Variable Validation Vulnerability."
3716| [CVE-2010-2550] The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."
3717| [CVE-2010-2549] Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
3718| [CVE-2010-2265] Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.
3719| [CVE-2010-2091] Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
3720| [CVE-2010-2084] Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.
3721| [CVE-2010-1903] Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability."
3722| [CVE-2010-1902] Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
3723| [CVE-2010-1901] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
3724| [CVE-2010-1900] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
3725| [CVE-2010-1898] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
3726| [CVE-2010-1897] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
3727| [CVE-2010-1896] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability."
3728| [CVE-2010-1895] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."
3729| [CVE-2010-1894] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
3730| [CVE-2010-1893] Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."
3731| [CVE-2010-1892] The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability."
3732| [CVE-2010-1891] The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability."
3733| [CVE-2010-1890] The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability."
3734| [CVE-2010-1889] Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."
3735| [CVE-2010-1887] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability."
3736| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
3737| [CVE-2010-1885] The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."
3738| [CVE-2010-1883] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."
3739| [CVE-2010-1882] Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
3740| [CVE-2010-1881] The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
3741| [CVE-2010-1880] Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
3742| [CVE-2010-1735] The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
3743| [CVE-2010-1734] The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
3744| [CVE-2010-1690] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
3745| [CVE-2010-1689] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
3746| [CVE-2010-1263] Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
3747| [CVE-2010-1257] Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2
3748| [CVE-2010-1255] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."
3749| [CVE-2010-1253] Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2
3750| [CVE-2010-1252] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
3751| [CVE-2010-1251] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
3752| [CVE-2010-1250] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
3753| [CVE-2010-1249] Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.
3754| [CVE-2010-1248] Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
3755| [CVE-2010-1247] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.
3756| [CVE-2010-1246] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."
3757| [CVE-2010-1245] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
3758| [CVE-2010-1225] The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."
3759| [CVE-2010-1175] Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."
3760| [CVE-2010-0917] Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution when the F1 key is pressed, a different vulnerability than CVE-2010-0483.
3761| [CVE-2010-0824] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and CVE-2010-1245.
3762| [CVE-2010-0823] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
3763| [CVE-2010-0822] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."
3764| [CVE-2010-0821] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
3765| [CVE-2010-0820] Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2
3766| [CVE-2010-0819] Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability."
3767| [CVE-2010-0818] The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability."
3768| [CVE-2010-0817] Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.
3769| [CVE-2010-0815] VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."
3770| [CVE-2010-0814] The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."
3771| [CVE-2010-0812] Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
3772| [CVE-2010-0811] Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability."
3773| [CVE-2010-0810] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
3774| [CVE-2010-0719] An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
3775| [CVE-2010-0487] The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."
3776| [CVE-2010-0486] The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."
3777| [CVE-2010-0485] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."
3778| [CVE-2010-0484] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."
3779| [CVE-2010-0483] vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
3780| [CVE-2010-0482] The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."
3781| [CVE-2010-0481] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
3782| [CVE-2010-0480] Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."
3783| [CVE-2010-0479] Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."
3784| [CVE-2010-0478] Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
3785| [CVE-2010-0477] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
3786| [CVE-2010-0476] The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."
3787| [CVE-2010-0278] A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
3788| [CVE-2010-0270] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
3789| [CVE-2010-0269] The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."
3790| [CVE-2010-0268] Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
3791| [CVE-2010-0266] Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
3792| [CVE-2010-0265] Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
3793| [CVE-2010-0264] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."
3794| [CVE-2010-0263] Microsoft Office Excel 2007 SP1 and SP2
3795| [CVE-2010-0262] Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
3796| [CVE-2010-0261] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
3797| [CVE-2010-0260] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2
3798| [CVE-2010-0258] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3799| [CVE-2010-0257] Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."
3800| [CVE-2010-0256] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
3801| [CVE-2010-0254] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
3802| [CVE-2010-0252] The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
3803| [CVE-2010-0250] Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."
3804| [CVE-2010-0249] Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4
3805| [CVE-2010-0243] Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
3806| [CVE-2010-0242] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
3807| [CVE-2010-0241] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."
3808| [CVE-2010-0240] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."
3809| [CVE-2010-0239] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
3810| [CVE-2010-0238] Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."
3811| [CVE-2010-0237] The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
3812| [CVE-2010-0236] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."
3813| [CVE-2010-0235] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."
3814| [CVE-2010-0234] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."
3815| [CVE-2010-0233] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."
3816| [CVE-2010-0232] The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
3817| [CVE-2010-0231] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
3818| [CVE-2010-0035] The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."
3819| [CVE-2010-0034] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
3820| [CVE-2010-0033] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
3821| [CVE-2010-0032] Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
3822| [CVE-2010-0031] Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
3823| [CVE-2010-0030] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
3824| [CVE-2010-0029] Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
3825| [CVE-2010-0028] Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
3826| [CVE-2010-0027] The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
3827| [CVE-2010-0026] The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."
3828| [CVE-2010-0025] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
3829| [CVE-2010-0024] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."
3830| [CVE-2010-0023] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
3831| [CVE-2010-0022] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
3832| [CVE-2010-0021] Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
3833| [CVE-2010-0020] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
3834| [CVE-2010-0018] Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4
3835| [CVE-2010-0017] Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
3836| [CVE-2010-0016] The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
3837| [CVE-2009-4313] ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.
3838| [CVE-2009-4312] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe.
3839| [CVE-2009-4311] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.
3840| [CVE-2009-4310] Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file.
3841| [CVE-2009-4309] Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.
3842| [CVE-2009-4210] The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.
3843| [CVE-2009-3830] The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
3844| [CVE-2009-3678] Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."
3845| [CVE-2009-3677] The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka "MS-CHAP Authentication Bypass Vulnerability."
3846| [CVE-2009-3676] The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
3847| [CVE-2009-3675] LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."
3848| [CVE-2009-3450] Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.
3849| [CVE-2009-3135] Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."
3850| [CVE-2009-3134] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3851| [CVE-2009-3133] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability."
3852| [CVE-2009-3132] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3853| [CVE-2009-3131] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3854| [CVE-2009-3130] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability."
3855| [CVE-2009-3129] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3856| [CVE-2009-3128] Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."
3857| [CVE-2009-3127] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability."
3858| [CVE-2009-3126] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability."
3859| [CVE-2009-3103] Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
3860| [CVE-2009-3020] win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232. NOTE: some of these details are obtained from third party information.
3861| [CVE-2009-2653] ** DISPUTED ** The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend.'
3862| [CVE-2009-2532] Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."
3863| [CVE-2009-2526] Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."
3864| [CVE-2009-2524] Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability."
3865| [CVE-2009-2523] The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."
3866| [CVE-2009-2519] The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."
3867| [CVE-2009-2517] The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
3868| [CVE-2009-2516] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."
3869| [CVE-2009-2515] Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka "Windows Kernel Integer Underflow Vulnerability."
3870| [CVE-2009-2514] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability."
3871| [CVE-2009-2513] The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability."
3872| [CVE-2009-2511] Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability."
3873| [CVE-2009-2510] The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncation in X.509 Common Name Vulnerability," a related issue to CVE-2009-2408.
3874| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
3875| [CVE-2009-2508] The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability."
3876| [CVE-2009-2507] A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory Corruption in Indexing Service Vulnerability."
3877| [CVE-2009-2506] Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3
3878| [CVE-2009-2505] The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."
3879| [CVE-2009-2504] Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "GDI+ .NET API Vulnerability."
3880| [CVE-2009-2503] GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability."
3881| [CVE-2009-2502] Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
3882| [CVE-2009-2501] Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."
3883| [CVE-2009-2500] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability."
3884| [CVE-2009-2498] Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
3885| [CVE-2009-2497] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."
3886| [CVE-2009-2496] Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
3887| [CVE-2009-2495] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
3888| [CVE-2009-2494] The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability."
3889| [CVE-2009-2493] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1
3890| [CVE-2009-1930] The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.
3891| [CVE-2009-1929] Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2
3892| [CVE-2009-1928] Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2
3893| [CVE-2009-1926] Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."
3894| [CVE-2009-1925] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."
3895| [CVE-2009-1924] Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."
3896| [CVE-2009-1923] Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
3897| [CVE-2009-1922] The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."
3898| [CVE-2009-1546] Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability."
3899| [CVE-2009-1545] Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka "Malformed AVI Header Vulnerability."
3900| [CVE-2009-1544] Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability."
3901| [CVE-2009-1542] The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."
3902| [CVE-2009-1539] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability."
3903| [CVE-2009-1538] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
3904| [CVE-2009-1537] Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
3905| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
3906| [CVE-2009-1534] Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
3907| [CVE-2009-1533] Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
3908| [CVE-2009-1491] McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
3909| [CVE-2009-1216] Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA)
3910| [CVE-2009-1141] Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
3911| [CVE-2009-1139] Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
3912| [CVE-2009-1138] The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.
3913| [CVE-2009-1137] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.
3914| [CVE-2009-1136] The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."
3915| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
3916| [CVE-2009-1134] Excel in 2007 Microsoft Office System SP1 and SP2
3917| [CVE-2009-1133] Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
3918| [CVE-2009-1132] Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
3919| [CVE-2009-1131] Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability."
3920| [CVE-2009-1130] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
3921| [CVE-2009-1129] Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
3922| [CVE-2009-1128] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
3923| [CVE-2009-1127] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability."
3924| [CVE-2009-1126] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
3925| [CVE-2009-1125] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability."
3926| [CVE-2009-1124] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."
3927| [CVE-2009-1123] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
3928| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
3929| [CVE-2009-1043] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
3930| [CVE-2009-1011] Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow.
3931| [CVE-2009-0901] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1
3932| [CVE-2009-0568] The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."
3933| [CVE-2009-0566] Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
3934| [CVE-2009-0565] Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2
3935| [CVE-2009-0563] Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3936| [CVE-2009-0562] The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."
3937| [CVE-2009-0561] Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
3938| [CVE-2009-0560] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
3939| [CVE-2009-0559] Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."
3940| [CVE-2009-0558] Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."
3941| [CVE-2009-0557] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
3942| [CVE-2009-0556] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
3943| [CVE-2009-0554] Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
3944| [CVE-2009-0553] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
3945| [CVE-2009-0552] Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
3946| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
3947| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
3948| [CVE-2009-0549] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
3949| [CVE-2009-0320] Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack."
3950| [CVE-2009-0239] Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."
3951| [CVE-2009-0238] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
3952| [CVE-2009-0235] Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."
3953| [CVE-2009-0234] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger "unnecessary lookups," aka "DNS Server Response Validation Vulnerability."
3954| [CVE-2009-0233] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka "DNS Server Query Validation Vulnerability."
3955| [CVE-2009-0232] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow Vulnerability."
3956| [CVE-2009-0231] The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."
3957| [CVE-2009-0230] The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
3958| [CVE-2009-0229] The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
3959| [CVE-2009-0228] Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a a crafted ShareName in a response to an RPC request, related to "printing data structures," aka "Buffer Overflow in Print Spooler Vulnerability."
3960| [CVE-2009-0227] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137.
3961| [CVE-2009-0226] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.
3962| [CVE-2009-0225] Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
3963| [CVE-2009-0224] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
3964| [CVE-2009-0223] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
3965| [CVE-2009-0222] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
3966| [CVE-2009-0221] Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."
3967| [CVE-2009-0220] Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
3968| [CVE-2009-0202] Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
3969| [CVE-2009-0102] Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
3970| [CVE-2009-0100] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
3971| [CVE-2009-0099] The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."
3972| [CVE-2009-0098] Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."
3973| [CVE-2009-0097] Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
3974| [CVE-2009-0096] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
3975| [CVE-2009-0095] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
3976| [CVE-2009-0094] The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.
3977| [CVE-2009-0093] Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.
3978| [CVE-2009-0091] Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
3979| [CVE-2009-0090] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."
3980| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
3981| [CVE-2009-0088] The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."
3982| [CVE-2009-0087] Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2
3983| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
3984| [CVE-2009-0085] The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."
3985| [CVE-2009-0083] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."
3986| [CVE-2009-0082] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability."
3987| [CVE-2009-0081] The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."
3988| [CVE-2009-0079] The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
3989| [CVE-2009-0078] The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability."
3990| [CVE-2008-7217] Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
3991| [CVE-2008-6819] win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.
3992| [CVE-2008-6219] nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.
3993| [CVE-2008-6063] Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.
3994| [CVE-2008-5912] An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
3995| [CVE-2008-5823] An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.
3996| [CVE-2008-5416] Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier
3997| [CVE-2008-5232] Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown
3998| [CVE-2008-5112] The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.
3999| [CVE-2008-5100] The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.
4000| [CVE-2008-5044] Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
4001| [CVE-2008-4844] Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
4002| [CVE-2008-4841] The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.
4003| [CVE-2008-4837] Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4004| [CVE-2008-4835] SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."
4005| [CVE-2008-4834] Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."
4006| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
4007| [CVE-2008-4295] Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
4008| [CVE-2008-4269] The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."
4009| [CVE-2008-4268] The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
4010| [CVE-2008-4266] Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3
4011| [CVE-2008-4265] Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."
4012| [CVE-2008-4264] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4013| [CVE-2008-4261] Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
4014| [CVE-2008-4256] The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability."
4015| [CVE-2008-4255] Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability."
4016| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
4017| [CVE-2008-4250] The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
4018| [CVE-2008-4114] srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
4019| [CVE-2008-4110] Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
4020| [CVE-2008-4038] Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."
4021| [CVE-2008-4037] Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
4022| [CVE-2008-4036] Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."
4023| [CVE-2008-4032] Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
4024| [CVE-2008-4031] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4025| [CVE-2008-4030] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4026| [CVE-2008-4028] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4027| [CVE-2008-4027] Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4028| [CVE-2008-4026] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4029| [CVE-2008-4025] Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
4030| [CVE-2008-4024] Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
4031| [CVE-2008-4023] Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."
4032| [CVE-2008-4019] Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
4033| [CVE-2008-3956] orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
4034| [CVE-2008-3704] Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."
4035| [CVE-2008-3648] nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
4036| [CVE-2008-3636] Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.
4037| [CVE-2008-3479] Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
4038| [CVE-2008-3477] Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability."
4039| [CVE-2008-3471] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
4040| [CVE-2008-3466] Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
4041| [CVE-2008-3465] Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
4042| [CVE-2008-3464] afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."
4043| [CVE-2008-3460] WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
4044| [CVE-2008-3068] Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
4045| [CVE-2008-3021] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
4046| [CVE-2008-3020] Microsoft Office 2000 SP3 and XP SP3
4047| [CVE-2008-3019] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
4048| [CVE-2008-3018] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
4049| [CVE-2008-3015] Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."
4050| [CVE-2008-3014] Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability."
4051| [CVE-2008-3013] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
4052| [CVE-2008-3012] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability."
4053| [CVE-2008-3009] Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
4054| [CVE-2008-3007] Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
4055| [CVE-2008-3006] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
4056| [CVE-2008-3005] Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
4057| [CVE-2008-3004] Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3
4058| [CVE-2008-3003] Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
4059| [CVE-2008-2752] Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.
4060| [CVE-2008-2540] Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
4061| [CVE-2008-2463] The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
4062| [CVE-2008-2252] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."
4063| [CVE-2008-2251] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled Exception Vulnerability." NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510.
4064| [CVE-2008-2250] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
4065| [CVE-2008-2249] Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow Vulnerability."
4066| [CVE-2008-2246] Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
4067| [CVE-2008-2245] Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file.
4068| [CVE-2008-2244] Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
4069| [CVE-2008-1898] A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
4070| [CVE-2008-1888] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
4071| [CVE-2008-1547] Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.
4072| [CVE-2008-1457] The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
4073| [CVE-2008-1456] Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.
4074| [CVE-2008-1455] A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1
4075| [CVE-2008-1454] Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
4076| [CVE-2008-1451] The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
4077| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
4078| [CVE-2008-1445] Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.
4079| [CVE-2008-1444] Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
4080| [CVE-2008-1441] Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
4081| [CVE-2008-1440] Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."
4082| [CVE-2008-1436] Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
4083| [CVE-2008-1435] Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."
4084| [CVE-2008-1434] Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
4085| [CVE-2008-1092] Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
4086| [CVE-2008-1091] Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."
4087| [CVE-2008-1090] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."
4088| [CVE-2008-1089] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."
4089| [CVE-2008-1088] Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."
4090| [CVE-2008-1087] Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
4091| [CVE-2008-1086] The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.
4092| [CVE-2008-1084] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
4093| [CVE-2008-1083] Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
4094| [CVE-2008-0121] A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."
4095| [CVE-2008-0120] Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
4096| [CVE-2008-0119] Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."
4097| [CVE-2008-0118] Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
4098| [CVE-2008-0117] Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
4099| [CVE-2008-0116] Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
4100| [CVE-2008-0115] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
4101| [CVE-2008-0114] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
4102| [CVE-2008-0113] Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
4103| [CVE-2008-0112] Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
4104| [CVE-2008-0111] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
4105| [CVE-2008-0110] Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
4106| [CVE-2008-0109] Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
4107| [CVE-2008-0108] Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."
4108| [CVE-2008-0106] Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
4109| [CVE-2008-0105] Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."
4110| [CVE-2008-0104] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."
4111| [CVE-2008-0103] Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."
4112| [CVE-2008-0102] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."
4113| [CVE-2008-0088] Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
4114| [CVE-2008-0087] The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.
4115| [CVE-2008-0086] Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
4116| [CVE-2008-0083] The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
4117| [CVE-2008-0081] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
4118| [CVE-2008-0080] Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.
4119| [CVE-2008-0020] Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015.
4120| [CVE-2008-0015] Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
4121| [CVE-2008-0011] Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."
4122| [CVE-2007-6753] Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
4123| [CVE-2007-6357] Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
4124| [CVE-2007-6329] Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
4125| [CVE-2007-6043] The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
4126| [CVE-2007-6026] Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
4127| [CVE-2007-5587] Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
4128| [CVE-2007-5352] Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
4129| [CVE-2007-5348] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."
4130| [CVE-2007-4991] The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
4131| [CVE-2007-4916] Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
4132| [CVE-2007-4814] Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
4133| [CVE-2007-3930] Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.
4134| [CVE-2007-3924] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape
4135| [CVE-2007-3899] Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."
4136| [CVE-2007-3898] The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
4137| [CVE-2007-3896] The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
4138| [CVE-2007-3890] Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
4139| [CVE-2007-3670] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
4140| [CVE-2007-3490] Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
4141| [CVE-2007-3300] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.
4142| [CVE-2007-3040] Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
4143| [CVE-2007-3039] Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
4144| [CVE-2007-3036] Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
4145| [CVE-2007-3034] Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
4146| [CVE-2007-3030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
4147| [CVE-2007-3029] Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
4148| [CVE-2007-3028] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.
4149| [CVE-2007-2999] Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
4150| [CVE-2007-2967] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.
4151| [CVE-2007-2966] Buffer overflow in the LHA decompresion component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
4152| [CVE-2007-2903] Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
4153| [CVE-2007-2593] The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
4154| [CVE-2007-2581] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
4155| [CVE-2007-2374] Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
4156| [CVE-2007-2228] rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
4157| [CVE-2007-2224] Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
4158| [CVE-2007-2221] Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
4159| [CVE-2007-2219] Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.
4160| [CVE-2007-2218] Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
4161| [CVE-2007-2217] Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.
4162| [CVE-2007-1911] Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow.
4163| [CVE-2007-1910] Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.
4164| [CVE-2007-1765] Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038
4165| [CVE-2007-1756] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".
4166| [CVE-2007-1754] PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
4167| [CVE-2007-1748] Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
4168| [CVE-2007-1747] Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.
4169| [CVE-2007-1645] Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812.
4170| [CVE-2007-1537] \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
4171| [CVE-2007-1512] Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
4172| [CVE-2007-1347] Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
4173| [CVE-2007-1239] Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
4174| [CVE-2007-1238] Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file.
4175| [CVE-2007-1215] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
4176| [CVE-2007-1214] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
4177| [CVE-2007-1213] The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
4178| [CVE-2007-1212] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
4179| [CVE-2007-1211] Unspecified kernel GDI functions in Microsoft Windows 2000 SP4
4180| [CVE-2007-1205] Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
4181| [CVE-2007-1203] Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.
4182| [CVE-2007-1202] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
4183| [CVE-2007-1201] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
4184| [CVE-2007-1117] Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
4185| [CVE-2007-1090] Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.
4186| [CVE-2007-1083] Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
4187| [CVE-2007-0948] Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
4188| [CVE-2007-0947] Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
4189| [CVE-2007-0946] Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.
4190| [CVE-2007-0945] Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4
4191| [CVE-2007-0944] Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
4192| [CVE-2007-0942] Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
4193| [CVE-2007-0940] Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
4194| [CVE-2007-0939] Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."
4195| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
4196| [CVE-2007-0936] Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."
4197| [CVE-2007-0934] Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption.
4198| [CVE-2007-0913] Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues.
4199| [CVE-2007-0870] Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.
4200| [CVE-2007-0843] The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
4201| [CVE-2007-0811] Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.
4202| [CVE-2007-0671] Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
4203| [CVE-2007-0612] Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll
4204| [CVE-2007-0515] Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.
4205| [CVE-2007-0351] Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
4206| [CVE-2007-0221] Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
4207| [CVE-2007-0220] Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
4208| [CVE-2007-0216] wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."
4209| [CVE-2007-0215] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.
4210| [CVE-2007-0214] The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
4211| [CVE-2007-0213] Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
4212| [CVE-2007-0211] The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
4213| [CVE-2007-0209] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.
4214| [CVE-2007-0208] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
4215| [CVE-2007-0069] Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."
4216| [CVE-2007-0066] The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
4217| [CVE-2007-0065] Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.
4218| [CVE-2007-0064] Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
4219| [CVE-2007-0043] The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
4220| [CVE-2007-0042] Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
4221| [CVE-2007-0041] The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
4222| [CVE-2007-0040] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
4223| [CVE-2007-0039] The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.
4224| [CVE-2007-0038] Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765
4225| [CVE-2007-0035] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."
4226| [CVE-2007-0034] Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
4227| [CVE-2007-0033] Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
4228| [CVE-2007-0031] Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.
4229| [CVE-2007-0030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
4230| [CVE-2007-0029] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability."
4231| [CVE-2007-0028] Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.
4232| [CVE-2007-0027] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
4233| [CVE-2007-0026] The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
4234| [CVE-2007-0025] The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
4235| [CVE-2007-0024] Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."
4236| [CVE-2006-7210] Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
4237| [CVE-2006-7192] Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.
4238| [CVE-2006-7027] Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.
4239| [CVE-2006-6723] The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.
4240| [CVE-2006-6696] Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
4241| [CVE-2006-6617] projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
4242| [CVE-2006-6561] Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.
4243| [CVE-2006-6456] Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
4244| [CVE-2006-6296] The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.
4245| [CVE-2006-6134] Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
4246| [CVE-2006-6133] Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
4247| [CVE-2006-5994] Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
4248| [CVE-2006-5758] The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
4249| [CVE-2006-5586] The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."
4250| [CVE-2006-5585] The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."
4251| [CVE-2006-5584] The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
4252| [CVE-2006-5583] Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."
4253| [CVE-2006-5574] Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.
4254| [CVE-2006-5296] PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.
4255| [CVE-2006-4854] ** REJECT ** Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E. NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009.
4256| [CVE-2006-4704] Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
4257| [CVE-2006-4702] Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
4258| [CVE-2006-4696] Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
4259| [CVE-2006-4695] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."
4260| [CVE-2006-4694] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow.
4261| [CVE-2006-4693] Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651.
4262| [CVE-2006-4692] Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
4263| [CVE-2006-4691] Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
4264| [CVE-2006-4689] Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
4265| [CVE-2006-4688] Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
4266| [CVE-2006-4534] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
4267| [CVE-2006-4495] Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
4268| [CVE-2006-4274] ** REJECT ** Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJ_MDROPPER.BH. NOTE: on 20060822, it was determined that TROJ_MDROPPER.BH was exploiting CVE-2006-0009, so this is not a new vulnerability.
4269| [CVE-2006-4219] The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.
4270| [CVE-2006-4183] Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
4271| [CVE-2006-4071] Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
4272| [CVE-2006-3992] Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
4273| [CVE-2006-3942] The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research
4274| [CVE-2006-3897] Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
4275| [CVE-2006-3880] ** DISPUTED ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
4276| [CVE-2006-3877] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
4277| [CVE-2006-3876] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.
4278| [CVE-2006-3875] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.
4279| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
4280| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
4281| [CVE-2006-3868] Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.
4282| [CVE-2006-3867] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875.
4283| [CVE-2006-3864] Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.
4284| [CVE-2006-3841] Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
4285| [CVE-2006-3660] Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
4286| [CVE-2006-3656] Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
4287| [CVE-2006-3655] Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
4288| [CVE-2006-3652] Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. NOTE: as of 20060715, this could not be reproduced by third parties.
4289| [CVE-2006-3651] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
4290| [CVE-2006-3650] Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
4291| [CVE-2006-3649] Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
4292| [CVE-2006-3648] Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
4293| [CVE-2006-3647] Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
4294| [CVE-2006-3643] Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability."
4295| [CVE-2006-3590] mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
4296| [CVE-2006-3510] The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
4297| [CVE-2006-3493] Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.
4298| [CVE-2006-3449] Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."
4299| [CVE-2006-3448] Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
4300| [CVE-2006-3445] Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
4301| [CVE-2006-3444] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
4302| [CVE-2006-3443] Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."
4303| [CVE-2006-3441] Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
4304| [CVE-2006-3440] Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
4305| [CVE-2006-3439] Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
4306| [CVE-2006-3436] Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
4307| [CVE-2006-3435] PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
4308| [CVE-2006-3434] Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
4309| [CVE-2006-3431] Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.
4310| [CVE-2006-3059] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
4311| [CVE-2006-2492] Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
4312| [CVE-2006-2389] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
4313| [CVE-2006-2388] Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
4314| [CVE-2006-2387] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
4315| [CVE-2006-2380] Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
4316| [CVE-2006-2379] Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
4317| [CVE-2006-2378] Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
4318| [CVE-2006-2374] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
4319| [CVE-2006-2373] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
4320| [CVE-2006-2372] Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.
4321| [CVE-2006-2371] Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
4322| [CVE-2006-2370] Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
4323| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
4324| [CVE-2006-2094] Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.
4325| [CVE-2006-2055] Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
4326| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
4327| [CVE-2006-1651] ** DISPUTED ** Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."
4328| [CVE-2006-1540] MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll
4329| [CVE-2006-1316] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.
4330| [CVE-2006-1315] The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability."
4331| [CVE-2006-1314] Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
4332| [CVE-2006-1313] Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
4333| [CVE-2006-1311] The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1
4334| [CVE-2006-1309] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
4335| [CVE-2006-1308] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.
4336| [CVE-2006-1306] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
4337| [CVE-2006-1305] Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
4338| [CVE-2006-1304] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
4339| [CVE-2006-1302] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."
4340| [CVE-2006-1301] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.
4341| [CVE-2006-1300] Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
4342| [CVE-2006-1257] The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
4343| [CVE-2006-1193] Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
4344| [CVE-2006-1184] Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
4345| [CVE-2006-0988] The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
4346| [CVE-2006-0935] Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
4347| [CVE-2006-0187] By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.
4348| [CVE-2006-0034] Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
4349| [CVE-2006-0033] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
4350| [CVE-2006-0032] Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
4351| [CVE-2006-0031] Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
4352| [CVE-2006-0030] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
4353| [CVE-2006-0029] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
4354| [CVE-2006-0028] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
4355| [CVE-2006-0023] Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
4356| [CVE-2006-0022] Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
4357| [CVE-2006-0021] Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
4358| [CVE-2006-0020] An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
4359| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
4360| [CVE-2006-0013] Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
4361| [CVE-2006-0012] Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
4362| [CVE-2006-0010] Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
4363| [CVE-2006-0009] Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
4364| [CVE-2006-0008] The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
4365| [CVE-2006-0007] Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
4366| [CVE-2006-0006] Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
4367| [CVE-2006-0004] Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
4368| [CVE-2006-0002] Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
4369| [CVE-2006-0001] Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
4370| [CVE-2005-4717] Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
4371| [CVE-2005-4269] mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.
4372| [CVE-2005-4131] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
4373| [CVE-2005-3981] ** DISPUTED ** NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE.
4374| [CVE-2005-3945] The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
4375| [CVE-2005-3644] PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
4376| [CVE-2005-3177] CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
4377| [CVE-2005-3176] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
4378| [CVE-2005-3175] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
4379| [CVE-2005-3174] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
4380| [CVE-2005-3173] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
4381| [CVE-2005-3172] The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
4382| [CVE-2005-3171] Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
4383| [CVE-2005-3170] The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
4384| [CVE-2005-3169] Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
4385| [CVE-2005-3168] The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
4386| [CVE-2005-2122] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
4387| [CVE-2005-2120] Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
4388| [CVE-2005-2118] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
4389| [CVE-2005-2117] Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
4390| [CVE-2005-1985] The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
4391| [CVE-2005-1984] Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
4392| [CVE-2005-1983] Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
4393| [CVE-2005-1982] Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
4394| [CVE-2005-1981] Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
4395| [CVE-2005-1907] The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
4396| [CVE-2005-1683] Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
4397| [CVE-2005-1218] The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
4398| [CVE-2005-1216] Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
4399| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
4400| [CVE-2005-1208] Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
4401| [CVE-2005-1207] Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
4402| [CVE-2005-1206] Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
4403| [CVE-2005-1205] The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
4404| [CVE-2005-1052] Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
4405| [CVE-2005-0921] Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
4406| [CVE-2005-0820] Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
4407| [CVE-2005-0738] Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
4408| [CVE-2005-0564] Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
4409| [CVE-2005-0558] Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.
4410| [CVE-2005-0551] Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
4411| [CVE-2005-0550] Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
4412| [CVE-2005-0545] Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.
4413| [CVE-2005-0063] The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
4414| [CVE-2005-0061] The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
4415| [CVE-2005-0060] Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
4416| [CVE-2005-0059] Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
4417| [CVE-2005-0058] Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.
4418| [CVE-2005-0048] Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
4419| [CVE-2004-2527] The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
4420| [CVE-2004-2482] Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
4421| [CVE-2004-2365] Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
4422| [CVE-2004-2339] ** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
4423| [CVE-2004-1080] The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
4424| [CVE-2004-0963] Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
4425| [CVE-2004-0897] The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
4426| [CVE-2004-0892] Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
4427| [CVE-2004-0846] Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
4428| [CVE-2004-0840] The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
4429| [CVE-2004-0728] The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
4430| [CVE-2004-0726] The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.
4431| [CVE-2004-0575] Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
4432| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
4433| [CVE-2004-0573] Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
4434| [CVE-2004-0540] Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
4435| [CVE-2004-0503] Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
4436| [CVE-2004-0379] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
4437| [CVE-2004-0284] Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
4438| [CVE-2004-0214] Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
4439| [CVE-2004-0211] The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
4440| [CVE-2004-0210] The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
4441| [CVE-2004-0209] Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
4442| [CVE-2004-0208] The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
4443| [CVE-2004-0207] "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
4444| [CVE-2004-0206] Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
4445| [CVE-2004-0204] Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
4446| [CVE-2004-0202] IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
4447| [CVE-2004-0201] Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
4448| [CVE-2004-0199] Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
4449| [CVE-2004-0124] The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
4450| [CVE-2004-0121] Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
4451| [CVE-2004-0120] The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
4452| [CVE-2004-0116] An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
4453| [CVE-2003-1378] Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
4454| [CVE-2003-1106] The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
4455| [CVE-2003-0908] The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
4456| [CVE-2003-0906] Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
4457| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
4458| [CVE-2003-0839] Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
4459| [CVE-2003-0825] The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
4460| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
4461| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
4462| [CVE-2003-0821] Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
4463| [CVE-2003-0820] Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
4464| [CVE-2003-0819] Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
4465| [CVE-2003-0818] Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
4466| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
4467| [CVE-2003-0806] Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
4468| [CVE-2003-0719] Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
4469| [CVE-2003-0665] Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
4470| [CVE-2003-0664] Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
4471| [CVE-2003-0662] Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
4472| [CVE-2003-0660] The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval.
4473| [CVE-2003-0533] Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
4474| [CVE-2003-0526] Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
4475| [CVE-2003-0506] Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
4476| [CVE-2003-0505] Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
4477| [CVE-2003-0496] Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
4478| [CVE-2003-0352] Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
4479| [CVE-2003-0345] Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
4480| [CVE-2003-0232] Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
4481| [CVE-2003-0231] Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
4482| [CVE-2003-0230] Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
4483| [CVE-2003-0227] The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
4484| [CVE-2003-0118] SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
4485| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
4486| [CVE-2003-0110] The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
4487| [CVE-2003-0109] Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
4488| [CVE-2003-0011] Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
4489| [CVE-2003-0007] Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
4490| [CVE-2003-0003] Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
4491| [CVE-2003-0002] Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
4492| [CVE-2002-2101] Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
4493| [CVE-2002-2100] Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
4494| [CVE-2002-1984] Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
4495| [CVE-2002-1981] Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.
4496| [CVE-2002-1933] The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
4497| [CVE-2002-1932] Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
4498| [CVE-2002-1876] Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
4499| [CVE-2002-1873] Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
4500| [CVE-2002-1872] Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
4501| [CVE-2002-1776] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
4502| [CVE-2002-1712] Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
4503| [CVE-2002-1256] The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
4504| [CVE-2002-1255] Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
4505| [CVE-2002-1214] Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
4506| [CVE-2002-1184] The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
4507| [CVE-2002-1145] The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
4508| [CVE-2002-1141] An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."
4509| [CVE-2002-1140] The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
4510| [CVE-2002-1138] Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
4511| [CVE-2002-1137] Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
4512| [CVE-2002-1123] Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
4513| [CVE-2002-1117] Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
4514| [CVE-2002-1056] Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
4515| [CVE-2002-0982] Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
4516| [CVE-2002-0975] Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.
4517| [CVE-2002-0863] Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
4518| [CVE-2002-0861] Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
4519| [CVE-2002-0860] The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
4520| [CVE-2002-0859] Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
4521| [CVE-2002-0729] Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
4522| [CVE-2002-0727] The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
4523| [CVE-2002-0724] Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".
4524| [CVE-2002-0721] Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
4525| [CVE-2002-0719] SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
4526| [CVE-2002-0718] Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
4527| [CVE-2002-0700] Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
4528| [CVE-2002-0699] Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
4529| [CVE-2002-0695] Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
4530| [CVE-2002-0694] The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
4531| [CVE-2002-0693] Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
4532| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
4533| [CVE-2002-0650] The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
4534| [CVE-2002-0649] Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
4535| [CVE-2002-0645] SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
4536| [CVE-2002-0644] Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
4537| [CVE-2002-0643] The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
4538| [CVE-2002-0642] The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
4539| [CVE-2002-0641] Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
4540| [CVE-2002-0624] Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
4541| [CVE-2002-0623] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
4542| [CVE-2002-0622] The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
4543| [CVE-2002-0621] Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
4544| [CVE-2002-0620] Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
4545| [CVE-2002-0619] The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
4546| [CVE-2002-0618] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
4547| [CVE-2002-0617] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
4548| [CVE-2002-0616] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."
4549| [CVE-2002-0597] LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
4550| [CVE-2002-0444] Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
4551| [CVE-2002-0443] Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
4552| [CVE-2002-0373] The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
4553| [CVE-2002-0371] Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
4554| [CVE-2002-0368] The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
4555| [CVE-2002-0224] The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
4556| [CVE-2002-0187] Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
4557| [CVE-2002-0186] Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
4558| [CVE-2002-0154] Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
4559| [CVE-2002-0152] Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
4560| [CVE-2002-0055] SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
4561| [CVE-2002-0054] SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
4562| [CVE-2002-0050] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
4563| [CVE-2002-0049] Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
4564| [CVE-2002-0034] The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
4565| [CVE-2002-0018] In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
4566| [CVE-2001-1533] ** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE.
4567| [CVE-2001-1451] Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
4568| [CVE-2001-1319] Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
4569| [CVE-2001-1099] The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
4570| [CVE-2001-0986] SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
4571| [CVE-2001-0718] Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
4572| [CVE-2001-0666] Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
4573| [CVE-2001-0658] Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
4574| [CVE-2001-0628] Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
4575| [CVE-2001-0547] Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
4576| [CVE-2001-0546] Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
4577| [CVE-2001-0542] Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
4578| [CVE-2001-0538] Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
4579| [CVE-2001-0509] Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
4580| [CVE-2001-0505] Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
4581| [CVE-2001-0504] Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activites such as mail relaying.
4582| [CVE-2001-0501] Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
4583| [CVE-2001-0351] Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.
4584| [CVE-2001-0350] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
4585| [CVE-2001-0349] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
4586| [CVE-2001-0348] Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.
4587| [CVE-2001-0347] Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
4588| [CVE-2001-0346] Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.
4589| [CVE-2001-0345] Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
4590| [CVE-2001-0344] An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
4591| [CVE-2001-0340] An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
4592| [CVE-2001-0261] Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
4593| [CVE-2001-0245] Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
4594| [CVE-2001-0244] Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
4595| [CVE-2001-0240] Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
4596| [CVE-2001-0239] Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
4597| [CVE-2001-0237] Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
4598| [CVE-2001-0146] IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
4599| [CVE-2001-0048] The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.
4600| [CVE-2001-0005] Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
4601| [CVE-2001-0003] Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
4602| [CVE-2000-1218] The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
4603| [CVE-2000-1217] Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
4604| [CVE-2000-1209] The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
4605| [CVE-2000-1139] The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
4606| [CVE-2000-1088] The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
4607| [CVE-2000-1087] The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
4608| [CVE-2000-1086] The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
4609| [CVE-2000-1085] The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
4610| [CVE-2000-1079] Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
4611| [CVE-2000-0942] The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
4612| [CVE-2000-0854] When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
4613| [CVE-2000-0771] Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
4614| [CVE-2000-0765] Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
4615| [CVE-2000-0756] Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
4616| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
4617| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
4618| [CVE-2000-0637] Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
4619| [CVE-2000-0621] Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
4620| [CVE-2000-0597] Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
4621| [CVE-2000-0331] Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
4622| [CVE-2000-0277] Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
4623| [CVE-2013-2557] The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
4624| [CVE-2013-2556] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
4625| [CVE-2013-2554] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787.
4626| [CVE-2013-2553] Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0912.
4627| [CVE-2013-2552] Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
4628| [CVE-2013-2551] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
4629| [CVE-2013-1347] Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
4630| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
4631| [CVE-2013-1290] Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."
4632| [CVE-2013-1289] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
4633| [CVE-2013-1284] Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
4634| [CVE-2013-0096] Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
4635| [CVE-2013-0086] Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."
4636| [CVE-2013-0085] Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."
4637| [CVE-2013-0084] Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."
4638| [CVE-2013-0083] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
4639| [CVE-2013-0080] Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."
4640| [CVE-2013-0079] Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
4641| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
4642| [CVE-2012-4969] Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
4643| [CVE-2012-4792] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
4644| [CVE-2012-3456] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
4645| [CVE-2012-3455] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
4646| [CVE-2012-2290] The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel.
4647| [CVE-2012-2284] The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
4648| [CVE-2012-1945] Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
4649| [CVE-2012-1894] Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability."
4650| [CVE-2012-1892] Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
4651| [CVE-2012-1891] Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
4652| [CVE-2012-1888] Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
4653| [CVE-2012-1876] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
4654| [CVE-2012-1861] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
4655| [CVE-2012-1859] Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."
4656| [CVE-2012-1857] Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."
4657| [CVE-2012-1849] Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."
4658| [CVE-2012-1545] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
4659| [CVE-2012-1436] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
4660| [CVE-2012-1435] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \50\4B\4C\49\54\45 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
4661| [CVE-2012-1434] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
4662| [CVE-2012-1433] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
4663| [CVE-2012-0447] Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
4664| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
4665| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
4666| [CVE-2012-0145] Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
4667| [CVE-2012-0144] Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
4668| [CVE-2012-0138] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
4669| [CVE-2012-0137] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
4670| [CVE-2012-0136] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
4671| [CVE-2012-0020] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
4672| [CVE-2012-0019] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
4673| [CVE-2012-0018] Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."
4674| [CVE-2012-0017] Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."
4675| [CVE-2011-4695] Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
4676| [CVE-2011-2012] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
4677| [CVE-2011-2010] The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
4678| [CVE-2011-1969] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
4679| [CVE-2011-1897] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
4680| [CVE-2011-1896] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
4681| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
4682| [CVE-2011-1891] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
4683| [CVE-2011-1890] Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."
4684| [CVE-2011-1889] The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
4685| [CVE-2011-1417] Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
4686| [CVE-2011-1347] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
4687| [CVE-2011-1346] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
4688| [CVE-2011-1345] Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
4689| [CVE-2011-1265] The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."
4690| [CVE-2011-0653] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
4691| [CVE-2011-0647] The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
4692| [CVE-2011-0627] Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
4693| [CVE-2011-0037] Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
4694| [CVE-2011-0027] Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
4695| [CVE-2011-0026] Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."
4696| [CVE-2010-4643] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
4697| [CVE-2010-4253] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
4698| [CVE-2010-4121] ** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only."
4699| [CVE-2010-3967] Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."
4700| [CVE-2010-3962] Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.
4701| [CVE-2010-3936] Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."
4702| [CVE-2010-3889] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
4703| [CVE-2010-3888] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
4704| [CVE-2010-3497] Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)."
4705| [CVE-2010-3454] Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
4706| [CVE-2010-3453] The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.
4707| [CVE-2010-3141] Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
4708| [CVE-2010-2743] The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.
4709| [CVE-2010-2734] Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."
4710| [CVE-2010-2733] Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."
4711| [CVE-2010-2732] Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
4712| [CVE-2010-2564] Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."
4713| [CVE-2010-1184] The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.
4714| [CVE-2010-1118] Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
4715| [CVE-2010-1117] Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
4716| [CVE-2010-0806] Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
4717| [CVE-2010-0716] _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.
4718| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
4719| [CVE-2008-5750] Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
4720| [CVE-2008-5556] ** DISPUTED ** The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design."
4721| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
4722| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
4723| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
4724| [CVE-2008-5552] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
4725| [CVE-2008-5551] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
4726| [CVE-2008-5180] Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
4727| [CVE-2008-4211] Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."
4728| [CVE-2007-5351] Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."
4729| [CVE-2007-2729] Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
4730| [CVE-2007-1534] DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.
4731| [CVE-2007-0341] Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
4732| [CVE-2006-5559] The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.
4733| [CVE-2006-4686] Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
4734| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
4735| [CVE-2006-1359] Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
4736| [CVE-2006-0761] Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.
4737| [CVE-2006-0753] Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
4738| [CVE-2006-0544] urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.
4739| [CVE-2006-0003] Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
4740| [CVE-2005-1929] Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product.
4741| [CVE-2005-0852] Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.
4742| [CVE-2004-1322] Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
4743| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
4744| [CVE-2003-0903] Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
4745| [CVE-2003-0353] Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
4746| [CVE-2002-1918] Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
4747| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
4748| [CVE-2002-1015] RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
4749| [CVE-2002-0697] Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
4750| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
4751| [CVE-2001-1218] Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
4752| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
4753| [CVE-1999-1097] Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
4754|
4755| SecurityFocus - https://www.securityfocus.com/bid/:
4756| [83154] Microsoft Windows 2000 Server CVE-2004-0540 Remote Security Vulnerability
4757| [45297] Microsoft Exchange Server 2007 Infinite Loop Remote Denial of Service Vulnerability
4758| [43419] Microsoft Excel 2002 Memory Corruption Vulnerability
4759| [43189] Microsoft Visual C++ 2008 Redistributable Package DLL Loading Arbitrary Code Execution Vulnerability
4760| [42742] Microsoft PowerPoint 2007 Multiple DLL Loading Arbitrary Code Execution Vulnerability
4761| [42695] Microsoft Groove 2007 'mso.dll' DLL Loading Arbitrary Code Execution Vulnerability
4762| [42681] Microsoft Visio 2003 'mfc71enu.dll' DLL Loading Arbitrary Code Execution Vulnerability
4763| [41843] Microsoft Outlook Web Access for Exchange Server 2003 Cross Site Request Forgery Vulnerability
4764| [39776] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
4765| [37196] RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities
4766| [36940] RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
4767| [36633] RETIRED: Microsoft October 2009 Advance Notification Multiple Vulnerabilities
4768| [36239] RETIRED: Microsoft September 2009 Advance Notification Multiple Vulnerabilities
4769| [35974] RETIRED: Microsoft August 2009 Advance Notification Multiple Vulnerabilities
4770| [35617] RETIRED: Microsoft July 2009 Advance Notification Multiple Vulnerabilities
4771| [35213] RETIRED: Microsoft June 2009 Advance Notification Multiple Vulnerabilities
4772| [34867] RETIRED: Microsoft May 2009 Advance Notification Multiple Vulnerabilities
4773| [34532] Microsoft IAG 2007 ActiveX Control Multiple Stack Based Buffer Overflow Vulnerabilities
4774| [34469] Microsoft Word 2000 WordPerfect Converter Remote Code Execution Vulnerability
4775| [34450] RETIRED: Microsoft April 2009 Advance Notification Multiple Vulnerabilities
4776| [34005] RETIRED: Microsoft March 2009 Advance Notification Multiple Vulnerabilities
4777| [33639] RETIRED: Microsoft February 2009 Advance Notification Multiple Vulnerabilities
4778| [33170] RETIRED: Microsoft January 2009 Advance Notification Multiple Vulnerabilities
4779| [32632] RETIRED: Microsoft December 2008 Advance Notification Multiple Vulnerabilities
4780| [32153] Retired: Microsoft November 2008 Advance Notification Multiple Vulnerabilities
4781| [31667] Retired: Microsoft October 2008 Advance Notification Multiple Vulnerabilities
4782| [31129] RETIRED: Microsoft SQL Server 2000 'sqlvdir.dll' ActiveX Buffer Overflow Vulnerability
4783| [31014] RETIRED: Microsoft September 2008 Advance Notification Multiple Vulnerabilities
4784| [30593] RETIRED: Microsoft August 2008 Advance Notification Multiple Vulnerabilities
4785| [30075] RETIRED: Microsoft July 2008 Advance Notification Multiple Vulnerabilities
4786| [29576] RETIRED: Microsoft June 2008 Advance Notification Multiple Vulnerabilities
4787| [29108] RETIRED: Microsoft May 2008 Advance Notification Multiple Vulnerabilities
4788| [28598] RETIRED: Microsoft April 2008 Advance Notification Multiple Vulnerabilities
4789| [28124] Retired: Microsoft March 2008 Advance Notification Multiple Vulnerabilities
4790| [27674] RETIRED: Microsoft February 2008 Advance Notification Multiple Vulnerabilities
4791| [27119] RETIRED: Microsoft January 2008 Advance Notification Multiple Vulnerabilities
4792| [26739] RETIRED: Microsoft December 2007 Advance Notification Multiple Vulnerabilities
4793| [26414] Microsoft Forms 2.0 ActiveX Control Memory Access Violation Denial of Service Vulnerabilities
4794| [26380] Retired: Microsoft November 2007 Advance Notification Multiple Vulnerabilities
4795| [25991] RETIRED: Microsoft Office 2000 and XP Unspecified Word Document Handling DoS Vulnerability
4796| [25922] RETIRED: Microsoft October 2007 Advance Notification Multiple Vulnerabilities
4797| [25573] RETIRED: Microsoft September 2007 Advance Notification Multiple Vulnerabilities
4798| [25247] Retired: Microsoft August 2007 Advance Notification Multiple Vulnerabilities
4799| [24771] Retired: Microsoft July 2007 Advance Notification Multiple Vulnerabilities
4800| [24366] RETIRED: Microsoft June 2007 Advance Notification Multiple Vulnerabilities
4801| [24118] Microsoft Office 2000 UA OUACTRL.OCX ActiveX Control Buffer Overflow Vulnerability
4802| [23800] RETIRED: Microsoft May 2007 Advance Notification Multiple Vulnerabilities
4803| [23380] Microsoft Word 2007 WWLib.DLL Unspecified Document File Buffer Overflow Vulnerability
4804| [23335] RETIRED: Microsoft April 2007 Advance Notification Multiple Vulnerabilities
4805| [22716] Microsoft Office 2003 Denial of Service Vulnerability
4806| [22567] Microsoft Word 2000/2002 Document Stream Remote Code Execution Vulnerability
4807| [22328] RETIRED: Microsoft Word 2003 Unspecified Code Execution Vulnerability
4808| [22225] Microsoft Word 2000 Malformed Function Code Execution Vulnerability
4809| [21611] Microsoft Project Server 2003 PDSRequest.ASP XML Request Information Disclosure Vulnerability
4810| [21495] Microsoft Windows 2000 Remote Installation Service Remote Code Execution Vulnerability
4811| [20843] Microsoft Visual Studio 2005 WMI Object Broker Remote Code Execution Vulnerability
4812| [19636] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
4813| [19388] Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
4814| [17134] Microsoft Commerce Server 2002 Authentication Bypass Vulnerability
4815| [16634] Microsoft PowerPoint 2000 Remote Information Disclosure Vulnerability
4816| [14772] Microsoft Exchange Server 2003 Exchange Information Store Denial Of Service Vulnerability
4817| [14093] Microsoft Update Rollup 1 for Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
4818| [13564] Microsoft SQL Server 2000 Multiple Vulnerabilities
4819| [13008] Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability
4820| [12972] Microsoft Windows Server 2003 Service Pack 1 Released - Multiple Vulnerabilities Fixed
4821| [12913] Microsoft Outlook 2002 Connector For IBM Lotus Domino Policy Bypass Vulnerability
4822| [12824] Microsoft InfoPath 2003 Insecure Information Storage Vulnerability
4823| [12641] Microsoft Windows 2000 Group Policy Bypass Vulnerability
4824| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
4825| [11820] Microsoft Windows 2000 Resource Kit W3Who.DLL Multiple Remote Vulnerabilities
4826| [11446] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
4827| [11387] Microsoft Windows 2003 Services Default SACL Access Right Weakness
4828| [10901] Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
4829| [10693] Microsoft Windows 2000 Media Player Control Media Preview Script Execution Vulnerability
4830| [10484] Microsoft ISA Server 2000 FTP Bounce Filtering Vulnerability
4831| [10480] Microsoft ISA Server 2000 Site And Content Rule Bypass Vulnerability
4832| [10440] Microsoft Windows 2000 Domain Expired Account Security Policy Violation Weakness
4833| [10369] Microsoft Outlook 2003 Media File Script Execution Vulnerability
4834| [10307] Microsoft Outlook 2003 Predictable File Location Weakness
4835| [10114] Microsoft Windows 2000 Domain Controller LDAP Denial Of Service Vulnerability
4836| [9409] Microsoft Exchange Server 2003 Outlook Web Access Random Mailbox Access Vulnerability
4837| [9408] Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability
4838| [9118] Microsoft Exchange Server 2003 Outlook Web Access Lowered Security Settings Weakness
4839| [8833] Microsoft Windows 2000 TroubleShooter ActiveX Control Buffer Overflow Vulnerability
4840| [8522] Multiple Microsoft Windows 2003 Stack Protection Implementation Weaknesses
4841| [8397] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
4842| [8104] Microsoft Windows 2000 Unauthorized RPC Connection Weakness
4843| [8098] Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
4844| [8093] Microsoft Windows 2000 Active Directory Forest Origin Validation Vulnerability
4845| [8090] Microsoft Windows 2000 ShellExecute() Buffer Overflow Vulnerability
4846| [8089] Microsoft Windows 2000 Unspecified Cryptnet.DLL Memory Leakage Vulnerability
4847| [8086] Microsoft Windows 2000 Port Name Buffers Potential Buffer Overflow Vulnerability
4848| [8085] Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
4849| [8083] Microsoft Windows 2000 Domain Controller Spoofing Vulnerability
4850| [8081] Microsoft Windows 2000 USBH_IoctlGetNodeConnectionDriverKeyName Information Disclosure Vulnerability
4851| [8063] Microsoft Commerce Server 2002 Weak Registry Key Permissions Weakness
4852| [8045] Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
4853| [7930] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
4854| [7788] Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability
4855| [7469] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
4856| [7360] Microsoft Windows 2000/XP Registry Editor Custom Permissions Weakness
4857| [7102] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
4858| [6769] Microsoft Windows 2000 RPC Service Privilege Escalation Vulnerability
4859| [6766] Microsoft Windows 2000 NetBIOS Continuation Packets Kernel Memory Leak Vulnerability
4860| [6667] Microsoft Outlook 2002 V1 Exchange Server Security Certificate Information Leakage Vulnerability
4861| [6319] Microsoft Outlook 2002 Email Header Processing Denial of Service Vulnerability
4862| [6030] Microsoft Windows 2000 SNMP Printer Query Denial of Service Vulnerability
4863| [5972] Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness
4864| [5922] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
4865| [5480] Microsoft Windows 2000 Network Connection Manager Privilege Elevation Vulnerability
4866| [5422] Microsoft Content Management Server 2001 SQL Injection Vulnerability
4867| [5421] Microsoft Content Management Server 2001 Arbitrary Upload Location Vulnerability
4868| [5420] Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
4869| [5415] Microsoft Windows 2000 Insecure Default File Permissions Vulnerability
4870| [5413] Microsoft Exchange 2000 Post Authorization License Exhaustion Denial Of Service Vulnerability
4871| [5412] Microsoft Exchange 2000 Multiple MSRPC Denial Of Service Vulnerabilities
4872| [5312] Microsoft SQL Server 2000 Resolution Service Denial of Service Vulnerability
4873| [5311] Microsoft SQL Server 2000 Resolution Service Stack Overflow Vulnerability
4874| [5310] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
4875| [5309] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
4876| [5307] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
4877| [5253] Microsoft Windows 2000 Narrator Password Disclosure Vulnerability
4878| [5205] Microsoft SQL Server 2000 Incorrect Registry Key Permissions Vulnerability
4879| [5111] Microsoft Commerce Server 2000 OWC Package Installer Local Command Execution Vulnerability
4880| [5014] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
4881| [4881] Microsoft Exchange 2000 Malformed Mail Attribute DoS Vulnerability
4882| [4853] Microsoft Commerce Server 2000 Profile Service Buffer Overflow Vulnerability
4883| [4852] Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability
4884| [4847] Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability
4885| [4797] Microsoft MSDE/SQL Server 2000 Desktop Engine Default Configuration Vulnerability
4886| [4683] Microsoft Windows 2000 / NT Path Precedence Vulnerability
4887| [4532] Microsoft Windows 2000 Lanman Denial of Service Vulnerability
4888| [4438] Microsoft Windows 2000 Group Policy Evasion Vulnerability
4889| [4426] Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
4890| [4287] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
4891| [4256] Microsoft Windows 2000 Password Policy Bypass Vulnerability
4892| [4157] Microsoft Commerce Server 2000 ISAPI Buffer Overflow Vulnerability
4893| [4095] Microsoft Windows 2000 Server Terminal Services Failure To Lock Terminal Vulnerability
4894| [3652] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability
4895| [3481] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
4896| [3479] Microsoft Windows 2000 NTFS With Macintosh Client Directory Permission Vulnerability
4897| [3445] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
4898| [3339] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
4899| [3305] Norton AntiVirus for Microsoft Exchange 2000 Information Disclosure Vulnerability
4900| [3291] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
4901| [3215] Microsoft Windows 2000 IrDA Buffer Overflow Denial of Service Vulnerability
4902| [3185] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
4903| [3184] Microsoft Windows 2000 RunAs User Credentials Exposure Vulnerability
4904| [3146] Microsoft Windows 2000 System File Replacement Vulnerability
4905| [3115] Microsoft Windows NT and 2000 Command Prompt Reboot Vulnerability
4906| [3063] Microsoft Windows 2000 Unauthorized Password Change Vulnerability
4907| [3033] Microsoft Windows 2000 Task Manager Process Termination Vulnerability
4908| [2988] Microsoft Windows 2000 SMTP Improper Authentication Vulnerability
4909| [2929] Microsoft Windows 2000 LDAP SSL Password Modification Vulnerability
4910| [2849] Microsoft Windows 2000 Telnet Privilege Escalation Vulnerability
4911| [2846] Microsoft Windows 2000 Telnet System Call DoS Vulnerability
4912| [2844] Microsoft Windows 2000 Telnet Service DoS Vulnerability
4913| [2843] Microsoft Windows 2000 Telnet Multiple Sessions DoS Vulnerability
4914| [2838] Microsoft Windows 2000 Telnet Username DoS Vulnerability
4915| [2460] Microsoft Windows 2000 Event Viewer Buffer Overflow Vulnerability
4916| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
4917| [2394] Microsoft Windows 2000 Domain Controller DoS Vulnerability
4918| [2341] Microsoft Windows 2000 Network DDE Escalated Privileges Vulnerability
4919| [2326] Microsoft Windows 2000 RDP DoS Vulnerability
4920| [2133] Microsoft Windows 2000 Directory Services Restore Mode Blank Password Vulnerability
4921| [2066] Microsoft Windows NT 4.0 / 2000 SNMP Registry Key Modification Vulnerability
4922| [2018] Microsoft Windows 2000 Telnet Session Timeout DoS Vulnerability
4923| [2007] Microsoft Windows 2000 DNS Memory Leak Vulnerability
4924| [1973] Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
4925| [1958] Microsoft Exchange 2000 Server EUSR_EXSTOREEVENT Account Vulnerability
4926| [1933] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
4927| [1899] Microsoft Windows 2000 ActiveX Control Buffer Overflow Vulnerability
4928| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
4929| [1758] Microsoft Windows 2000 Unattended Install OEMPreinstall Vulnerability
4930| [1753] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
4931| [1748] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
4932| [1745] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
4933| [1729] Microsoft Windows 2000 Simplified Chinese IME Vulnerability
4934| [1695] Microsoft Proxy 2.0 FTP Permissions Bypass Vulnerability
4935| [1692] Microsoft Proxy 2.0 Internal Network Access Vulnerability
4936| [1683] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
4937| [1673] Microsoft Windows 2000 Malformed RPC Packet DoS Vulnerability
4938| [1651] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
4939| [1632] Microsoft Windows 98 / NT 4.0 / 2000 File Extension Validation Vulnerability
4940| [1620] Microsoft Windows 9x / NT 4.0 / 2000 NetBIOS Cache Corruption Vulnerability
4941| [1613] Microsoft Windows 2000 Local Security Policy Corruption Vulnerability
4942| [1566] Microsoft Word 97 / 2000 Mail Merge Code Execution Vulnerability
4943| [1561] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow Vulnerability
4944| [1535] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
4945| [1507] Microsoft Windows NT 4.0 / 2000 Unspecified Executable Path Vulnerability
4946| [1451] Microsoft Excel 97 / 2000 Register.ID Vulnerability
4947| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
4948| [1415] Microsoft Windows 2000 Remote CPU-overload Vulnerability
4949| [1414] Microsoft Windows 2000 Telnet Server DoS Vulnerability
4950| [1399] Microsoft Internet Explorer 5.01 and Excel/Powerpoint 2000 ActiveX Object Execution Vulnerability
4951| [1398] Microsoft Internet Explorer 5.01 and Access 2000 / 97 VBA Code Execution Vulnerability
4952| [1350] Microsoft Windows 2000 Windows Station Access Vulnerability
4953| [1304] Microsoft Windows NT 4.0 / 2000 SMB Write Request DoS Vulnerability
4954| [1301] Microsoft Windows NT 4.0 / 2000 Ignored SMB Response DoS Vulnerability
4955| [1295] Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
4956| [1198] Microsoft Windows 2000 Default SYSKEY Configuration Vulnerability
4957| [1197] Microsoft Office 2000 UA Control Vulnerability
4958| [990] Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
4959| [945] Microsoft SMS 2.0 Default Permissions Vulnerability
4960| [539] Microsoft Windows 2000 EFS Vulnerability
4961| [180] Microsoft Windows April Fools 2001 Vulnerability
4962| [71487] Microsoft December 2014 Advance Notification Multiple Vulnerabilities
4963| [70966] RETIRED: Microsoft November 2014 Advance Notification Multiple Vulnerabilities
4964| [70367] RETIRED: Microsoft October 2014 Advance Notification Multiple Vulnerabilities
4965| [69636] RETIRED: Microsoft September 2014 Advance Notification Multiple Vulnerabilities
4966| [69108] Microsoft August 2014 Advance Notification Multiple Vulnerabilities
4967| [68367] Microsoft July 2014 Advance Notification Multiple Vulnerabilities
4968| [67905] Microsoft June 2014 Advance Notification Multiple Vulnerabilities
4969| [67298] Microsoft May 2014 Advance Notification Multiple Vulnerabilities
4970| [66639] RETIRED: Microsoft April 2014 Advance Notification Multiple Vulnerabilities
4971| [66016] Microsoft March 2014 Notification Multiple Vulnerabilities
4972| [65426] Microsoft February 2014 Notification Multiple Vulnerabilities
4973| [64757] RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
4974| [64083] RETIRED: Microsoft December 2013 Advance Notification Multiple Vulnerabilities
4975| [63604] RETIRED: Microsoft November 2013 Advance Notification Multiple Vulnerabilities
4976| [62797] RETIRED: Microsoft October 2013 Advance Notification Multiple Vulnerabilities
4977| [62228] RETIRED: Microsoft September 2013 Advance Notification Multiple Vulnerabilities
4978| [62181] Microsoft Office Pinyin IME 2010 CVE-2013-3859 Local Privilege Escalation Vulnerability
4979| [61686] Microsoft August 2013 Advance Notification Multiple Vulnerabilities
4980| [60960] RETIRED: Microsoft July 2013 Advance Notification Multiple Vulnerabilities
4981| [60394] Microsoft June 2013 Advance Notification Multiple Vulnerabilities
4982| [59785] RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities
4983| [58881] RETIRED: Microsoft April 2013 Advance Notification Multiple Vulnerabilities
4984| [58380] RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities
4985| [57846] RETIRED: Microsoft February 2013 Advance Notification Multiple Vulnerabilities
4986| [57137] RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities
4987| [56838] RETIRED: Microsoft December 2012 Advance Notification Multiple Vulnerabilities
4988| [56450] RETIRED: Microsoft November 2012 Advance Notification Multiple Vulnerabilities
4989| [56304] Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability
4990| [55794] RETIRED: Microsoft October 2012 Advance Notification Multiple Vulnerabilities
4991| [55472] RETIRED: Microsoft September 2012 Advance Notification Multiple Vulnerabilities
4992| [54944] RETIRED: Microsoft August 2012 Advance Notification Multiple Vulnerabilities
4993| [54318] RETIRED: Microsoft July 2012 Advance Notification Multiple Vulnerabilities
4994| [53862] RETIRED: Microsoft June 2012 Advance Notification Multiple Vulnerabilities
4995| [53372] RETIRED: Microsoft May 2012 Advance Notification Multiple Vulnerabilities
4996| [52910] RETIRED: Microsoft April 2012 Advance Notification Multiple Vulnerabilities
4997| [52366] RETIRED: Microsoft March 2012 Advance Notification Multiple Vulnerabilities
4998| [51944] RETIRED: Microsoft February 2012 Advance Notification Multiple Vulnerabilities
4999| [51289] RETIRED: Microsoft January 2012 Advance Notification Multiple Vulnerabilities
5000| [50980] RETIRED: Microsoft December 2011 Advance Notification Multiple Vulnerabilities
5001| [50513] RETIRED: Microsoft November 2011 Advance Notification Multiple Vulnerabilities
5002| [49994] RETIRED: Microsoft October 2011 Advance Notification Multiple Vulnerabilities
5003| [49515] RETIRED: Microsoft September 2011 Advance Notification Multiple Vulnerabilities
5004| [49017] RETIRED: Microsoft August 2011 Advance Notification Multiple Vulnerabilities
5005| [48616] RETIRED: Microsoft July 2011 Advance Notification Multiple Vulnerabilities
5006| [48235] Microsoft Lync Server 2010 'ReachJoin.aspx' Remote Command Injection Vulnerability
5007| [48193] RETIRED: Microsoft June 2011 Advance Notification Multiple Vulnerabilities
5008| [47725] RETIRED: Microsoft May 2011 Advance Notification Multiple Vulnerabilities
5009| [47255] RETIRED: Microsoft April 2011 Advance Notification Multiple Vulnerabilities
5010| [46675] RETIRED: Microsoft March 2011 Advance Notification Multiple Vulnerabilities
5011| [46132] RETIRED: Microsoft February 2011 Advance Notification Multiple Vulnerabilities
5012| [45696] RETIRED: Microsoft January 2011 Advance Notification Multiple Vulnerabilities
5013| [45307] RETIRED: Microsoft December 2010 Advance Notification Multiple Vulnerabilities
5014| [44649] RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities
5015| [43831] RETIRED: Microsoft October 2010 Advance Notification Multiple Vulnerabilities
5016| [43115] RETIRED: Microsoft September 2010 Advance Notification Multiple Vulnerabilities
5017| [42234] RETIRED: Microsoft August 2010 Advance Notification Multiple Vulnerabilities
5018| [41474] RETIRED: Microsoft July 2010 Advance Notification Multiple Vulnerabilities
5019| [40548] RETIRED: Microsoft June 2010 Advance Notification Multiple Vulnerabilities
5020| [39961] RETIRED: Microsoft May 2010 Advance Notification Multiple Vulnerabilities
5021| [39313] RETIRED: Microsoft April 2010 Advance Notification Multiple Vulnerabilities
5022| [38540] RETIRED: Microsoft March 2010 Advance Notification Multiple Vulnerabilities
5023| [38096] RETIRED: Microsoft February 2010 Advance Notification Multiple Vulnerabilities
5024| [37887] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
5025| [37664] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
5026| [32642] Microsoft Word RTF Malformed Control Word Variant 2 Remote Code Execution Vulnerability
5027|
5028| IBM X-Force - https://exchange.xforce.ibmcloud.com:
5029| [82417] Microsoft Windows Knowledge Base Article 2801261 update is not installed
5030| [82415] Microsoft Windows Knowledge Base Article 2807986 update is not installed
5031| [82410] Microsoft Windows Knowledge Base Article 2809289 update is not installed
5032| [81859] Microsoft Windows Knowledge Base Article 2802968 update is not installed
5033| [81857] Microsoft Windows Knowledge Base Article 2809279 update is not installed
5034| [81668] Microsoft Windows Knowledge Base Article 2800277 update is not installed
5035| [77323] Microsoft Windows Knowledge Base Article 2706045 update is not installed
5036| [75949] Microsoft Windows Knowledge Base Article 2707960 update is not installed
5037| [75942] Microsoft Windows Knowledge Base Article 2706726 update is not installed
5038| [75934] Microsoft Windows Knowledge Base Article 2709162 update is not installed
5039| [75926] Microsoft Windows Knowledge Base Article 2709100 update is not installed
5040| [75905] Microsoft Windows Knowledge Base Article 2707956 update is not installed
5041| [71991] Microsoft Windows Knowledge Base Article 2607664 update is not installed
5042| [71542] Microsoft Windows Knowledge Base Article 2607702 update is not installed
5043| [70945] Microsoft Windows Knowledge Base Article 2603381 update is not installed
5044| [70150] Microsoft Windows Knowledge Base Article 2607670 update is not installed
5045| [67755] Microsoft Windows Knowledge Base Article 2503665 update is not installed
5046| [67749] Microsoft Windows Knowledge Base Article 2507938 update is not installed
5047| [66845] Microsoft Windows Knowledge Base Article 2506014 update is not installed
5048| [66844] Microsoft Windows Knowledge Base Article 2501584 update is not installed
5049| [66448] Microsoft Windows Knowledge Base Article 2508272 update is not installed
5050| [66442] Microsoft Windows Knowledge Base Article 2509553 update is not installed
5051| [66440] Microsoft Windows Knowledge Base Article 2508429 update is not installed
5052| [66438] Microsoft Windows Knowledge Base Article 2507618 update is not installed
5053| [66430] Microsoft Windows Knowledge Base Article 2503658 update is not installed
5054| [66425] Microsoft Windows Knowledge Base Article 2506223 update is not installed
5055| [65570] Microsoft Windows Knowledge Base Article 2500212 update is not installed
5056| [65568] Microsoft Windows Knowledge Base Article 2508062 update is not installed
5057| [63840] Microsoft Visual C++ 2008 Redistributable Package dynamic-linked library (DLL) code execution
5058| [63780] Microsoft PowerPoint 2007 dynamic-linked library (rpawinet.dll) code execution
5059| [63775] Microsoft Visio 2003 dynamic-linked library (mfc71enu.dll) code execution
5060| [63586] Microsoft Windows Knowledge Base Article 2207559 update is not installed
5061| [63573] Microsoft Windows Knowledge Base Article 2407132 update is not installed
5062| [62797] Microsoft Windows Knowledge Base Article 2305420 update is not installed
5063| [62149] Microsoft Windows Knowledge Base Article 2207566 update is not installed
5064| [62133] Microsoft Windows Knowledge Base Article 2405882 update is not installed
5065| [53980] Microsoft Windows 2000 License Logging Server buffer overflow
5066| [53601] Microsoft Office 2008 for Mac user ID 502 security bypass
5067| [50973] Microsoft Windows Server 2003 and Vista win32k.sys denial of service
5068| [50759] Microsoft Windows 2000 Active Directory LDAP code execution
5069| [48595] Microsoft Word 2007 Email as PDF information disclosure
5070| [46102] Microsoft Windows 2003 SP2 is not installed on the system
5071| [46101] Microsoft Windows 2003 SP1 is not installed on the system
5072| [45186] Microsoft SQL Server 2000 SQLVDIRLib.SQLVDirControl ActiveX control buffer overflow
5073| [37200] Microsoft SQL Server 2000 Service Pack 1 update is not installed
5074| [37198] Microsoft SQL Server 2000 Service Pack 3 update is not installed
5075| [34634] Microsoft Windows Server 2003 Active Directory information disclosure
5076| [34599] Microsoft Windows Server 2003 terminal server security bypass
5077| [34473] Microsoft Office 2000 ActiveX control buffer overflow
5078| [33713] Microsoft Word 2007 multiple unspecified denial of service
5079| [33712] Microsoft Word 2007 wwlib.dll buffer overflow
5080| [32631] Microsoft SQL Server 2000 Service Pack 2 update is not installed
5081| [31821] Microsoft Windows time zone update for year 2007
5082| [31196] Microsoft Office 2003 Brazilian Grammar Checker buffer overflow
5083| [30905] Microsoft Project Server 2003 pdsrequest.asp information disclosure
5084| [29546] Microsoft Windows 2000/2003 user logoff initiated
5085| [29545] Microsoft Windows 2000/2003 system time changed
5086| [29544] Microsoft Windows 2000/2003 system security access removed
5087| [29543] Microsoft Windows 2000/2003 security access granted
5088| [29542] Microsoft Windows 2000/2003 SAM notification package loaded
5089| [29541] Microsoft Windows 2000/2003 primary security token issued
5090| [29540] Microsoft Windows 2000/2003 user password reset successful
5091| [29539] Microsoft Windows 2000/2003 object indirectly accessed
5092| [29538] Microsoft Windows 2000/2003 object handle duplicated
5093| [29537] Microsoft Windows 2000/2003 logon with explicit credentials success
5094| [29536] Microsoft Windows 2000/2003 logon attempt using explicit credentials unsuccessful
5095| [29535] Microsoft Windows 2000/2003 IPSEC policy agent failed
5096| [29534] Microsoft Windows 2000/2003 IPSEC policy agent disabled
5097| [29533] Microsoft Windows 2000/2003 IPSEC policy agent changed
5098| [29532] Microsoft Windows 2000/2003 IKE security association established
5099| [29531] Microsoft Windows 2000/2003 IKE quick mode association ended
5100| [29530] Microsoft Windows 2000/2003 IKE main mode association ended
5101| [29529] Microsoft Windows 2000/2003 IKE association negotiation failed
5102| [29528] Microsoft Windows 2000/2003 IKE association peer authentication failed
5103| [29527] Microsoft Windows 2000/2003 IKE association failed invalid proposal
5104| [29526] Microsoft Windows 2000/2003 IKE association failed authentication parameters
5105| [29525] Microsoft Windows 2000/2003 DPAPI master key backup attempted
5106| [29524] Microsoft Windows 2000/2003 DPAPI key recovery attempted
5107| [29523] Microsoft Windows 2000/2003 DPAPI auditable data unprotected
5108| [29522] Microsoft Windows 2000/2003 administrative group security descriptor set
5109| [29521] Microsoft Windows 2000/2003 account name changed
5110| [29507] Microsoft Office 2003 unspecified PowerPoint NULL pointer dereference denial of service
5111| [28512] Microsoft Internet Explorer multiple Windows 2000 COM object denial of service
5112| [28005] Microsoft Windows 2000 Management Console (MMC) resource file cross-site scripting
5113| [26118] Microsoft Office 2003 mailto: information disclosure
5114| [25330] Microsoft Commerce Server 2002 authfiles/login.asp authentication bypass
5115| [24474] Microsoft Windows 2000 LDAP client accepts untrusted CA
5116| [24473] Microsoft Windows 2000 event ID 565 not logged
5117| [24472] Microsoft Windows 2000 Event ID 1704 records incorrect group policy settings
5118| [24407] Microsoft Windows 2000 SECEDIT command fails to set ACLs correctly
5119| [24405] Microsoft Windows 2000 UPN credentials with trailing dot group policy bypass
5120| [24403] Microsoft Windows 2000 WideCharToMultiByte() incorrect Japanese character conversion
5121| [24402] Microsoft Windows 2000 Terminal Service client IP not logged
5122| [24400] Microsoft Windows 2000 domain authentication can be bypassed by a local administrator
5123| [23066] Microsoft Windows XP and 2000 Server MSRPC memory allocation denial of service
5124| [22318] Microsoft SQL Server 2000 Service Pack 4 update is not installed
5125| [22183] Microsoft Exchange Server 2003 public folder denial of service
5126| [21345] Microsoft Windows 2000 Update Rollup 1 for Service Pack 4 has not been installed
5127| [21315] Microsoft Outlook 2002 connector for Domino bypass restrictions
5128| [19969] Multiple Microsoft Windows Server 2003 Edition printer driver denial of service
5129| [19965] Multiple Microsoft Windows Server 2003 Editions SMB redirector denial of service
5130| [19727] Microsoft Windows 2000 GDI32.DLL denial of service
5131| [19629] Microsoft Exchange Server 2003 folder denial of service
5132| [17826] Microsoft Outlook 2003 CID security bypass
5133| [17624] Microsoft Windows XP and Windows Server 2003 Compressed Folders buffer overflow
5134| [17621] Microsoft Windows 2003 SMTP service code execution
5135| [17560] Microsoft Windows 2000 and XP GDI library denial of service
5136| [17521] Microsoft Windows 2000 Service Pack 4 is not installed
5137| [16913] Microsoft Windows 2003 users with Synchronize directory service data privilege
5138| [16912] Microsoft Windows 2003 groups with Synchronize directory service data privilege
5139| [16909] Microsoft Windows 2003 groups with Remove computer from docking station privilege
5140| [16907] Microsoft Windows 2003 users with Create global objects privilege
5141| [16905] Microsoft Windows 2003 users or groups with Create global objects privilege
5142| [16851] Microsoft Windows 2003 and XP WinKey and U key denial of service
5143| [16704] Microsoft Windows 2000 Media Player control code execution
5144| [16582] Microsoft Windows Server 2003 kernel CPU denial of service
5145| [16572] Microsoft Windows 2003 Users with Impersonate a client after authentication privilege
5146| [16570] Microsoft Windows 2003 Users with Create global objects privilege
5147| [16564] Microsoft Windows 2003 Groups with Create global objects privilege
5148| [16562] Microsoft Windows 2003 Groups with "
5149| [16522] Microsoft Windows 2003 Impersonate a client after authentication privilege
5150| [16521] Microsoft Windows 2003 Deny Logon Through Terminal Services privilege
5151| [16520] Microsoft Windows 2003 Create global objects privilege
5152| [16276] Microsoft Windows 2000 Advanced Server fully qualified domain name security bypass
5153| [16173] Microsoft Outlook 2003 OLE object bypass restricted security zone
5154| [16119] Microsoft Outlook 2000 URL spoofing
5155| [16104] Microsoft Outlook 2003 predictable file location could allow code execution
5156| [16095] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
5157| [15704] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
5158| [15700] Microsoft Windows 2000 Domain Controller LSASS LDAP message denial of service
5159| [15632] Microsoft Windows 2000 Utility Manger allows privilege escalation
5160| [15414] Microsoft Outlook 2002 mailto URL allows execution of code
5161| [15263] Microsoft Windows XP and 2000 Server kernel allows elevated privileges
5162| [15057] Microsoft Windows XP and Windows Server 2003 smbmount Linux client denial of service
5163| [15038] Microsoft Windows 2000 Server Windows Media Services denial of service
5164| [15037] Microsoft Windows Server 2003 WINS /GS flag denial of service
5165| [14178] Microsoft ISA Exchange Server 2003 MS04-002 patch is not installed
5166| [14167] Microsoft ISA Server 2000 H.323 filter buffer overflow
5167| [13426] Microsoft Windows 2000 and XP RPC race condition
5168| [13423] Microsoft Windows 2000 Local Troubleshooter ActiveX control buffer overflow
5169| [13407] Microsoft Windows 2000 Server mqsvc.exe MQLocateBegin packet buffer overflow
5170| [13385] Microsoft Windows Server 2003 "
5171| [13211] Microsoft Windows 2000 and XP URG memory leak
5172| [13171] Microsoft Windows Server 2003 can allow attacker to bypass mechanism used to detect buffer overflows
5173| [13131] Microsoft Windows 2000 Message Queue Manager buffer overflow
5174| [12684] Microsoft Exchange Server OWA Outlook 2003 denial of service
5175| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
5176| [12620] Microsoft Windows 2000 Server SMTP FILETIME denial of service
5177| [12543] Microsoft Windows 2000 Accessibility Utility Manager could allow an attacker to gain privileges
5178| [12493] Microsoft Windows Shell32.dll 2000 ShellExecute function buffer overflow
5179| [12489] Microsoft Windows 2000 Server Active Directory buffer overflow
5180| [12128] Microsoft Windows 2000 and Windows NT MS03-019 patch is not installed
5181| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
5182| [12048] Microsoft Windows 2000 and Windows Server 2003 LAN Manager hash creation enabled
5183| [11901] Microsoft BizTalk Server 2002 SQL injection
5184| [11900] Microsoft BizTalk Server 2002 HTTP Receiver function buffer overflow
5185| [11816] Microsoft Windows 2000 Terminal Services MSGINA.DLL insecure access permissions
5186| [11696] Microsoft Windows 2000 Terminal Services man-in-the-middle attack
5187| [11617] Microsoft Windows 2000 MS03-007 patch is not installed on the system
5188| [11546] Microsoft Windows 2000 Windows Help Facility .cnt file buffer overflow
5189| [11329] Microsoft Windows NT and 2000 cmd.exe CD path name buffer overflow
5190| [11274] Microsoft Windows 2000 NetBIOS continuation packets denial of service
5191| [11273] Microsoft Windows 2000 RPC service could allow an attacker to gain elevated privileges
5192| [11216] Microsoft Windows NT and 2000 command prompt denial of service
5193| [11141] Microsoft Windows 2000 Terminal Services MSGINA.DLL denial of service
5194| [11133] Microsoft Outlook 2002 using V1 Exchange Server Security certificates transmits plaintext emails
5195| [10843] Microsoft Windows 2000 and XP SMB signing group policy modification
5196| [10431] Microsoft Windows 2000 SNMP LANMAN Extension memory leak denial of service
5197| [10400] Microsoft Windows 2000 RPC TCP port 135 denial of service
5198| [10377] Microsoft Windows XP and 2000 administrative alerts fail when security event log is full
5199| [10199] Microsoft Windows 2000/XP PPTP packet buffer overflow
5200| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
5201| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
5202| [9946] Microsoft Windows 2000 Terminal Services session screensaver fails to lock the console
5203| [9856] Microsoft Windows 2000 NCM handler routine could allow elevated privileges
5204| [9779] Microsoft Windows 2000 weak system partition permissions
5205| [9752] Microsoft Windows 2000 Service Pack 3 is not installed
5206| [9746] Microsoft Windows 2000 HTML Help item parameter buffer overflow
5207| [9625] Microsoft Windows 2000 Narrator allows login information to be audible
5208| [9154] Microsoft Data Engine (MSDE) and Microsoft SQL Server 2000 Desktop Engine have a default blank "
5209| [8867] Microsoft Windows 2000 LanMan denial of service
5210| [8813] Microsoft Windows 2000 Terminal Services allows attacker to bypass group policy settings
5211| [8759] Microsoft Windows 2000 could allow an attacker to block the application of Group Policy settings
5212| [8752] Microsoft Windows NT, 2000, and XP MUP buffer overflow
5213| [8739] Microsoft Windows 2000 DCOM memory leak
5214| [8708] Microsoft Outlook 2000 and 2002 executes embedded script in object tag when replying or forwarding HTML mail
5215| [8402] Microsoft Windows 2000 allows an attacker to bypass password policy
5216| [8307] Microsoft Windows 2000, Windows XP, and Exchange 2000 SMTP data transfer command denial of service
5217| [8304] Microsoft Windows 2000 and Exchange 5.5 SMTP service unauthorized mail privileges
5218| [8254] Microsoft Commerce Server 2000 AuthFilter ISAPI filter buffer overflow
5219| [8199] Microsoft Windows 2000 Terminal Services unlocked client
5220| [8094] Microsoft Windows 2000 and Interix 2.2 Telnet protocol option buffer overflow
5221| [8092] Microsoft Exchange 2000 System Attendant sets incorrect registry permissions
5222| [8043] Microsoft Windows NT, 2000, and XP using NTFS could allow files to be hidden
5223| [8037] Microsoft Windows 2000 empty TCP packet denial of service
5224| [8023] Microsoft Windows NT and Windows 2000 SIDs could allow an attacker to gain elevated privileges in another domain
5225| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
5226| [7667] Microsoft Windows 2000 IKE UDP packet flood denial of service
5227| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
5228| [7538] Microsoft Windows 2000 and XP Terminal services allow an attacker to spoof IP addresses
5229| [7533] Microsoft Windows 2000 RunAs service denial of service
5230| [7532] Microsoft Windows 2000 RunAs service allows local attacker to bypass pipe authentication
5231| [7531] Microsoft Windows 2000 RunAs service reveals sensitive information
5232| [7528] Microsoft Windows NT and Windows 2000 malformed RPC request denial of service
5233| [7409] Microsoft Windows 2000 and Windows XP GDI denial of service
5234| [7302] Microsoft Windows NT and 2000 Terminal Server malformed RDP packet series denial of service
5235| [7008] Microsoft Windows 2000 IrDA device denial of service
5236| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
5237| [6931] Microsoft Windows 2000 without Service Pack 2
5238| [6919] Microsoft Windows 2000 Task Manager does not terminate malicious files with the same name as a system process
5239| [6912] Microsoft Windows NT and 2000 Terminal Server RDP memory leak denial of service
5240| [6876] Microsoft Windows 2000 could allow an attacker to change network passwords
5241| [6803] Microsoft Windows 2000 SMTP service allows mail relaying
5242| [6745] Microsoft Windows 2000 LDAP function could allow domain user password change
5243| [6669] Microsoft Windows 2000 Telnet system call denial of service
5244| [6668] Microsoft Windows 2000 Telnet handle leak denial of service
5245| [6667] Microsoft Windows 2000 Telnet multiple idle sessions denial of service
5246| [6666] Microsoft Windows 2000 Telnet username denial of service
5247| [6665] Microsoft Windows 2000 Telnet service weak domain authentication
5248| [6664] Microsoft Windows 2000 Telnet service predictable pipe names could allow elevation of privileges
5249| [6652] Microsoft Exchange 2000 OWA script execution
5250| [6590] Microsoft Windows 2000 debug registers allow attacker to gain elevated privileges
5251| [6506] Microsoft Windows 2000 Server Kerberos denial of service
5252| [6443] Microsoft Windows 2000 catalog file could remove installed hotfixes
5253| [6160] Microsoft Windows 2000 event viewer buffer overflow
5254| [6136] Microsoft Windows 2000 domain controller denial of service
5255| [6035] Microsoft Windows 2000 Server RDP denial of service
5256| [5973] Microsoft Windows 2000 EFS allows local user to recover sensitive data
5257| [5936] Microsoft Windows 2000 Server Directory Service Restore Mode allows user to login with blank password
5258| [5800] Microsoft Windows 2000 Index Service ActiveX controls allow unauthorized access to file information
5259| [5623] Microsoft Windows NT and 2000 Phone Book service buffer overflow
5260| [5598] Microsoft Windows 2000 Telnet daemon could allow a denial of service
5261| [5585] Microsoft Windows 2000 brute force attack
5262| [5502] Microsoft Windows 2000 Indexing Services ixsso.query
5263| [5467] Microsoft Windows 2000 System Monitor ActiveX control buffer overflow
5264| [5399] Microsoft Windows NT and 2000 Network Monitor buffer overflow
5265| [5301] Microsoft Windows 2000 Simplified Chinese IME State Recognition
5266| [5263] Microsoft Office 2000 executes .dll without users knowledge
5267| [5242] Microsoft Windows 2000 Telnet client NTLM authentication weakness
5268| [5222] Microsoft Windows 2000 malformed RPC packet denial of service
5269| [5203] Microsoft Windows 2000 still image service
5270| [5171] Microsoft Windows 2000 Local Security Policy corruption
5271| [5080] Microsoft Office 2000 HTML object tag buffer overflow
5272| [5033] Microsoft Windows 2000 without Service Pack 1
5273| [5031] Microsoft Windows 2000 Service Control Manager named pipe could allow a unauthorized user to gain privileges
5274| [5015] Microsoft Windows NT and 2000 executable path
5275| [4887] Microsoft Windows 2000 Kerberos ticket renewed
5276| [4886] Microsoft Windows 2000 logon session reconnected
5277| [4885] Microsoft Windows 2000 logon session disconnected
5278| [4882] Microsoft Windows 2000 Kerberos pre-authentication failed
5279| [4873] Microsoft Windows 2000 user account mapped for logon
5280| [4872] Microsoft Windows 2000 account logon failed
5281| [4871] Microsoft Windows 2000 account used for logon
5282| [4855] Microsoft Windows 2000 group type change
5283| [4842] Microsoft Internet Explorer and Microsoft Powerpoint 2000 ActiveX object execution
5284| [4841] Microsoft Internet Explorer and Microsoft Access 2000 VBA code execution
5285| [4823] Microsoft Windows 2000 Telnet server binary stream denial of service
5286| [4819] Microsoft Windows 2000 default SYSKEY configuration
5287| [4787] Microsoft Windows 2000 user account locked out
5288| [4786] Microsoft Windows 2000 computer account created
5289| [4785] Microsoft Windows 2000 computer account changed
5290| [4784] Microsoft Windows 2000 computer account deleted
5291| [4714] Microsoft Windows 2000 "
5292| [4589] Microsoft Windows 2000 protected store can be compromised by brute force attack
5293| [4278] Microsoft Windows 2000 unattended install does not secure All Users profile
5294| [4138] Microsoft Windows 2000 system file integrity feature is disabled
5295| [4086] Microsoft Windows 2000 may not start Jaz drives correctly
5296| [4085] Microsoft Windows 2000 non-Gregorial calendar error
5297| [4084] Microsoft Windows 2000 may prevent Adobe FrameMaker files from being saved in some formats
5298| [4083] Microsoft Windows 2000 Terminal Services may damage Office files saved as HTML
5299| [4082] Microsoft Windows 2000 and Iomega parallel port drives display error
5300| [4080] Microsoft Windows 2000 AOL image support
5301| [4079] Microsoft Windows 2000 High Encryption Pack
5302| [3854] Microsoft Office 2000 security setting
5303| [1376] Microsoft Proxy 2.0 denial of service
5304| [86256] Microsoft Windows Knowledge Base Article 2876063 update is not installed
5305| [86097] Microsoft Windows Knowledge Base Article 2859537 update is not installed
5306| [86091] Microsoft Windows Knowledge Base Article 2868623 update is not installed
5307| [86089] Microsoft Windows Knowledge Base Article 2862772 update is not installed
5308| [86075] Microsoft Windows Knowledge Base Article 2850869 update is not installed
5309| [86073] Microsoft Windows Knowledge Base Article 2873872 update is not installed
5310| [86070] Microsoft Windows Knowledge Base Article 2849568 update is not installed
5311| [85245] Microsoft Windows Knowledge Base Article 2848295 update is not installed
5312| [85244] Microsoft Windows Knowledge Base Article 2847927 update is not installed
5313| [85243] Microsoft Windows Knowledge Base Article 2861561 update is not installed
5314| [85236] Microsoft Windows Knowledge Base Article 2850851 update is not installed
5315| [85227] Microsoft Windows Knowledge Base Article 2847883 update is not installed
5316| [85223] Microsoft Windows Knowledge Base Article 2846071 update is not installed
5317| [85205] Microsoft Windows Knowledge Base Article 2845187 update is not installed
5318| [84621] Microsoft Windows Knowledge Base Article 2845690 update is not installed
5319| [84619] Microsoft Windows Knowledge Base Article 2839894 update is not installed
5320| [84617] Microsoft Windows Knowledge Base Article 2839571 update is not installed
5321| [84615] Microsoft Windows Knowledge Base Article 2839229 update is not installed
5322| [84613] Microsoft Windows Knowledge Base Article 2838727 update is not installed
5323| [84156] Microsoft Windows Knowledge Base Article 2847204 update is not installed
5324| [83912] Microsoft Windows Knowledge Base Article 2829254 update is not installed
5325| [83910] Microsoft Windows Knowledge Base Article 2829530 update is not installed
5326| [83898] Microsoft Windows Knowledge Base Article 2830397 update is not installed
5327| [83886] Microsoft Windows Knowledge Base Article 2830399 update is not installed
5328| [83884] Microsoft Windows Knowledge Base Article 2834692 update is not installed
5329| [83882] Microsoft Windows Knowledge Base Article 2834695 update is not installed
5330| [83880] Microsoft Windows Knowledge Base Article 2836440 update is not installed
5331| [83876] Microsoft Windows Knowledge Base Article 2840221 update is not installed
5332| [83192] Microsoft Windows Knowledge Base Article 2817183 update is not installed
5333| [83100] Microsoft Windows Knowledge Base Article 2830914 update is not installed
5334| [83098] Microsoft Windows Knowledge Base Article 2829996 update is not installed
5335| [83093] Microsoft Windows Knowledge Base Article 2828223 update is not installed
5336| [83091] Microsoft Windows Knowledge Base Article 2813170 update is not installed
5337| [83088] Microsoft Windows Knowledge Base Article 2827663 update is not installed
5338| [83086] Microsoft Windows Knowledge Base Article 2823482 update is not installed
5339| [83084] Microsoft Windows Knowledge Base Article 2821818 update is not installed
5340| [83082] Microsoft Windows Knowledge Base Article 2820917 update is not installed
5341| [82600] Microsoft Windows Knowledge Base Article 2813707 update is not installed
5342| [82424] Microsoft Windows Knowledge Base Article 2814124 update is not installed
5343| [82422] Microsoft Windows Knowledge Base Article 2780176 update is not installed
5344| [82401] Microsoft Windows Knowledge Base Article 2813682 update is not installed
5345| [82399] Microsoft Windows Knowledge Base Article 2816264 update is not installed
5346| [81683] Microsoft Windows Knowledge Base Article 2780091 update is not installed
5347| [81681] Microsoft Windows Knowledge Base Article 2784242 update is not installed
5348| [81680] Microsoft Windows Knowledge Base Article 2790113 update is not installed
5349| [81678] Microsoft Windows Knowledge Base Article 2790655 update is not installed
5350| [81676] Microsoft Windows Knowledge Base Article 2790978 update is not installed
5351| [81674] Microsoft Windows Knowledge Base Article 2797052 update is not installed
5352| [81672] Microsoft Windows Knowledge Base Article 2799494 update is not installed
5353| [81666] Microsoft Windows Knowledge Base Article 2778344 update is not installed
5354| [81634] Microsoft Windows Knowledge Base Article 2792100 update is not installed
5355| [81339] Microsoft Windows Knowledge Base Article 2799329 update is not installed
5356| [80875] Microsoft Windows Knowledge Base Article 2756145 update is not installed
5357| [80872] Microsoft Windows Knowledge Base Article 2769324 update is not installed
5358| [80867] Microsoft Windows Knowledge Base Article 2769327 update is not installed
5359| [80865] Microsoft Windows Knowledge Base Article 2769369 update is not installed
5360| [80863] Microsoft Windows Knowledge Base Article 2778930 update is not installed
5361| [80861] Microsoft Windows Knowledge Base Article 2785220 update is not installed
5362| [80365] Microsoft Windows Knowledge Base Article 2761465 update is not installed
5363| [80360] Microsoft Windows Knowledge Base Article 2765809 update is not installed
5364| [80358] Microsoft Windows Knowledge Base Article 2770660 update is not installed
5365| [80356] Microsoft Windows Knowledge Base Article 2780642 update is not installed
5366| [80352] Microsoft Windows Knowledge Base Article 2783534 update is not installed
5367| [80349] Microsoft Windows Knowledge Base Article 2784126 update is not installed
5368| [79693] Microsoft Windows Knowledge Base Article 2745030 update is not installed
5369| [79687] Microsoft Windows Knowledge Base Article 2761451 update is not installed
5370| [79683] Microsoft Windows Knowledge Base Article 2761226 update is not installed
5371| [79679] Microsoft Windows Knowledge Base Article 2758857 update is not installed
5372| [79677] Microsoft Windows Knowledge Base Article 2727528 update is not installed
5373| [78864] Microsoft Windows Knowledge Base Article 2754670 update is not installed
5374| [78862] Microsoft Windows Knowledge Base Article 2743555 update is not installed
5375| [78858] Microsoft Windows Knowledge Base Article 2754849 update is not installed
5376| [78856] Microsoft Windows Knowledge Base Article 2724197 update is not installed
5377| [78853] Microsoft Windows Knowledge Base Article 2741517 update is not installed
5378| [78851] Microsoft Windows Knowledge Base Article 2742319 update is not installed
5379| [78848] Microsoft Windows Knowledge Base Article 2742321 update is not installed
5380| [78760] Microsoft Windows Knowledge Base Article 2744842 update is not installed
5381| [78077] Microsoft Windows Knowledge Base Article 2741528 update is not installed
5382| [78075] Microsoft Windows Knowledge Base Article 2720184 update is not installed
5383| [78071] Microsoft Windows Knowledge Base Article 2748552 update is not installed
5384| [77512] Microsoft Windows Knowledge Base Article 2740358 update is not installed
5385| [77362] Microsoft Windows Knowledge Base Article 2733918 update is not installed
5386| [77360] Microsoft Windows Knowledge Base Article 2733829 update is not installed
5387| [77357] Microsoft Windows Knowledge Base Article 2733594 update is not installed
5388| [77352] Microsoft Windows Knowledge Base Article 2731879 update is not installed
5389| [77350] Microsoft Windows Knowledge Base Article 2731847 update is not installed
5390| [77348] Microsoft Windows Knowledge Base Article 2723135 update is not installed
5391| [77346] Microsoft Windows Knowledge Base Article 2722913 update is not installed
5392| [77342] Microsoft Windows Knowledge Base Article 2720573 update is not installed
5393| [77325] Microsoft Windows Knowledge Base Article 2719584 update is not installed
5394| [76808] Microsoft Windows Knowledge Base Article 2721015 update is not installed
5395| [76725] Microsoft Windows Knowledge Base Article 2722479 update is not installed
5396| [76724] Microsoft Windows Knowledge Base Article 2719177 update is not installed
5397| [76721] Microsoft Windows Knowledge Base Article 2718523 update is not installed
5398| [76718] Microsoft Windows Knowledge Base Article 2698365 update is not installed
5399| [76711] Microsoft Windows Knowledge Base Article 2695502 update is not installed
5400| [76704] Microsoft Windows Knowledge Base Article 2691442 update is not installed
5401| [76702] Microsoft Windows Knowledge Base Article 2655992 update is not installed
5402| [75963] Microsoft Windows Knowledge Base Article 2699988 update is not installed
5403| [75939] Microsoft Windows Knowledge Base Article 2685939 update is not installed
5404| [75928] Microsoft Windows Knowledge Base Article 2711167 update is not installed
5405| [75136] Microsoft Windows Knowledge Base Article 2693777 update is not installed
5406| [75132] Microsoft Windows Knowledge Base Article 2690533 update is not installed
5407| [75130] Microsoft Windows Knowledge Base Article 2688338 update is not installed
5408| [75127] Microsoft Windows Knowledge Base Article 2681578 update is not installed
5409| [75123] Microsoft Windows Knowledge Base Article 2680352 update is not installed
5410| [75116] Microsoft Windows Knowledge Base Article 2597981 update is not installed
5411| [74556] Microsoft Windows Knowledge Base Article 2639185 update is not installed
5412| [74384] Microsoft Windows Knowledge Base Article 2675157 update is not installed
5413| [74378] Microsoft Windows Knowledge Base Article 2671605 update is not installed
5414| [74373] Microsoft Windows Knowledge Base Article 2664258 update is not installed
5415| [74369] Microsoft Windows Knowledge Base Article 2663860 update is not installed
5416| [73543] Microsoft Windows Knowledge Base Article 2671387 update is not installed
5417| [73540] Microsoft Windows Knowledge Base Article 2665364 update is not installed
5418| [73538] Microsoft Windows Knowledge Base Article 2651019 update is not installed
5419| [73536] Microsoft Windows Knowledge Base Article 2651018 update is not installed
5420| [73533] Microsoft Windows Knowledge Base Article 2647170 update is not installed
5421| [73530] Microsoft Windows Knowledge Base Article 2641653 update is not installed
5422| [72887] Microsoft Windows Knowledge Base Article 2663841 update is not installed
5423| [72873] Microsoft Windows Knowledge Base Article 2663830 update is not installed
5424| [72867] Microsoft Windows Knowledge Base Article 2663510 update is not installed
5425| [72857] Microsoft Windows Knowledge Base Article 2661637 update is not installed
5426| [72855] Microsoft Windows Knowledge Base Article 2660465 update is not installed
5427| [72853] Microsoft Windows Knowledge Base Article 2653956 update is not installed
5428| [72851] Microsoft Windows Knowledge Base Article 2654428 update is not installed
5429| [72849] Microsoft Windows Knowledge Base Article 2651026 update is not installed
5430| [72846] Microsoft Windows Knowledge Base Article 2647516 update is not installed
5431| [72841] Microsoft Windows Knowledge Base Article 2645640 update is not installed
5432| [72838] Microsoft Windows Knowledge Base Article 2643719 update is not installed
5433| [72029] Microsoft Windows Knowledge Base Article 2638420 update is not installed
5434| [72003] Microsoft Windows Knowledge Base Article 2646524 update is not installed
5435| [71998] Microsoft Windows Knowledge Base Article 2644615 update is not installed
5436| [71995] Microsoft Windows Knowledge Base Article 2643584 update is not installed
5437| [71994] Microsoft Windows Knowledge Base Article 2636391 update is not installed
5438| [71565] Microsoft Windows Knowledge Base Article 2648048 update is not installed
5439| [71562] Microsoft Windows Knowledge Base Article 2640241 update is not installed
5440| [71560] Microsoft Windows Knowledge Base Article 2640045 update is not installed
5441| [71558] Microsoft Windows Knowledge Base Article 2639417 update is not installed
5442| [71557] Microsoft Windows Knowledge Base Article 2639142 update is not installed
5443| [71554] Microsoft Windows Knowledge Base Article 2633171 update is not installed
5444| [71552] Microsoft Windows Knowledge Base Article 2624667 update is not installed
5445| [71550] Microsoft Windows Knowledge Base Article 2620712 update is not installed
5446| [71548] Microsoft Windows Knowledge Base Article 2618451 update is not installed
5447| [71546] Microsoft Windows Knowledge Base Article 2618444 update is not installed
5448| [71538] Microsoft Windows Knowledge Base Article 2590602 update is not installed
5449| [70951] Microsoft Windows Knowledge Base Article 2630837 update is not installed
5450| [70949] Microsoft Windows Knowledge Base Article 2620704 update is not installed
5451| [70947] Microsoft Windows Knowledge Base Article 2617657 update is not installed
5452| [70943] Microsoft Windows Knowledge Base Article 2588516 update is not installed
5453| [70152] Microsoft Windows Knowledge Base Article 2623699 update is not installed
5454| [70140] Microsoft Windows Knowledge Base Article 2652016 update is not installed
5455| [70130] Microsoft Windows Knowledge Base Article 2586448 update is not installed
5456| [70115] Microsoft Windows Knowledge Base Article 2567053 update is not installed
5457| [69501] Microsoft Windows Knowledge Base Article 2587634 update is not installed
5458| [69498] Microsoft Windows Knowledge Base Article 2587505 update is not installed
5459| [69492] Microsoft Windows Knowledge Base Article 2571621 update is not installed
5460| [69490] Microsoft Windows Knowledge Base Article 2570947 update is not installed
5461| [68840] Microsoft Windows Knowledge Base Article 2451858 update is not installed
5462| [68833] Microsoft Windows Knowledge Base Article 2567943 update is not installed
5463| [68831] Microsoft Windows Knowledge Base Article 2570222 update is not installed
5464| [68829] Microsoft Windows Knowledge Base Article 2567951 update is not installed
5465| [68827] Microsoft Windows Knowledge Base Article 2578230 update is not installed
5466| [68825] Microsoft Windows Knowledge Base Article 2546250 update is not installed
5467| [68823] Microsoft Windows Knowledge Base Article 2559049 update is not installed
5468| [68816] Microsoft Windows Knowledge Base Article 2556532 update is not installed
5469| [68814] Microsoft Windows Knowledge Base Article 2560656 update is not installed
5470| [68812] Microsoft Windows Knowledge Base Article 2560978 update is not installed
5471| [68809] Microsoft Windows Knowledge Base Article 2562485 update is not installed
5472| [68806] Microsoft Windows Knowledge Base Article 2566454 update is not installed
5473| [68804] Microsoft Windows Knowledge Base Article 2563894 update is not installed
5474| [68801] Microsoft Windows Knowledge Base Article 2567680 update is not installed
5475| [68315] Microsoft Windows Knowledge Base Article 2555917 update is not installed
5476| [68299] Microsoft Windows Knowledge Base Article 2566220 update is not installed
5477| [68283] Microsoft Windows Knowledge Base Article 2560847 update is not installed
5478| [67955] Microsoft Windows Knowledge Base Article 2530548 update is not installed
5479| [67943] Microsoft Windows Knowledge Base Article 2544521 update is not installed
5480| [67762] Microsoft Windows Knowledge Base Article 2543893 update is not installed
5481| [67759] Microsoft Windows Knowledge Base Article 2544893 update is not installed
5482| [67757] Microsoft Windows Knowledge Base Article 2476490 update is not installed
5483| [67753] Microsoft Windows Knowledge Base Article 2514842 update is not installed
5484| [67751] Microsoft Windows Knowledge Base Article 2518295 update is not installed
5485| [67737] Microsoft Windows Knowledge Base Article 2520426 update is not installed
5486| [67733] Microsoft Windows Knowledge Base Article 2525694 update is not installed
5487| [67731] Microsoft Windows Knowledge Base Article 2525835 update is not installed
5488| [67728] Microsoft Windows Knowledge Base Article 2535512 update is not installed
5489| [67725] Microsoft Windows Knowledge Base Article 2536275 update is not installed
5490| [67722] Microsoft Windows Knowledge Base Article 2536276 update is not installed
5491| [67718] Microsoft Windows Knowledge Base Article 2537146 update is not installed
5492| [67709] Microsoft Windows Knowledge Base Article 2538814 update is not installed
5493| [67302] Microsoft Windows Knowledge Base Article 2545814 update is not installed
5494| [67101] Microsoft Windows Knowledge Base Article 2524426 update is not installed
5495| [66446] Microsoft Windows Knowledge Base Article 2514666 update is not installed
5496| [66444] Microsoft Windows Knowledge Base Article 2511455 update is not installed
5497| [66436] Microsoft Windows Knowledge Base Article 2497640 update is not installed
5498| [66432] Microsoft Windows Knowledge Base Article 2527308 update is not installed
5499| [66428] Microsoft Windows Knowledge Base Article 2489979 update is not installed
5500| [66423] Microsoft Windows kernel-mode driver (win32k.sys) variant 29 privilege escalation
5501| [66422] Microsoft Windows kernel-mode driver (win32k.sys) variant 28 privilege escalation
5502| [66421] Microsoft Windows kernel-mode driver (win32k.sys) variant 27 privilege escalation
5503| [66420] Microsoft Windows kernel-mode driver (win32k.sys) variant 26 privilege escalation
5504| [66419] Microsoft Windows kernel-mode driver (win32k.sys) variant 25 privilege escalation
5505| [66418] Microsoft Windows kernel-mode driver (win32k.sys) variant 24 privilege escalation
5506| [66417] Microsoft Windows kernel-mode driver (win32k.sys) variant 23 privilege escalation
5507| [66416] Microsoft Windows kernel-mode driver (win32k.sys) variant 22 privilege escalation
5508| [66415] Microsoft Windows kernel-mode driver (win32k.sys) variant 21 privilege escalation
5509| [66414] Microsoft Windows kernel-mode driver (win32k.sys) variant 20 privilege escalation
5510| [66396] Microsoft Windows kernel-mode driver (win32k.sys) variant 2 privilege escalation
5511| [66394] Microsoft Windows Knowledge Base Article 2485663 update is not installed
5512| [65588] Microsoft Windows Knowledge Base Article 2489279 update is not installed
5513| [65581] Microsoft Windows Knowledge Base Article 2510030 update is not installed
5514| [65580] Microsoft Windows Knowledge Base Article 2489283 update is not installed
5515| [65575] Microsoft Windows Knowledge Base Article 2489293 update is not installed
5516| [65573] Microsoft Windows Knowledge Base Article 2494047 update is not installed
5517| [64973] Microsoft Windows Knowledge Base Article 2478960 update is not installed
5518| [64971] Microsoft Windows Knowledge Base Article 2479628 update is not installed
5519| [64927] Microsoft Windows Knowledge Base Article 2393802 update is not installed
5520| [64925] Microsoft Windows Knowledge Base Article 2451879 update is not installed
5521| [64920] Microsoft Windows Knowledge Base Article 2475792 update is not installed
5522| [64918] Microsoft Windows Knowledge Base Article 2476687 update is not installed
5523| [64916] Microsoft Windows Knowledge Base Article 2478953 update is not installed
5524| [64914] Microsoft Windows Knowledge Base Article 2482017 update is not installed
5525| [64910] Microsoft Windows Knowledge Base Article 2483185 update is not installed
5526| [64909] Microsoft Windows Knowledge Base Article 2484015 update is not installed
5527| [64907] Microsoft Windows Knowledge Base Article 2485376 update is not installed
5528| [64905] Microsoft Windows Knowledge Base Article 2489256 update is not installed
5529| [64902] Microsoft Windows Knowledge Base Article 2496930 update is not installed
5530| [64342] Microsoft Windows Knowledge Base Article 2451910 update is not installed
5531| [64339] Microsoft Windows Knowledge Base Article 2478935 update is not installed
5532| [63584] Microsoft Windows Knowledge Base Article 2424434 update is not installed
5533| [63582] Microsoft Windows Knowledge Base Article 2423089 update is not installed
5534| [63580] Microsoft Windows Knowledge Base Article 2436673 update is not installed
5535| [63571] Microsoft Windows Knowledge Base Article 2440591 update is not installed
5536| [63569] Microsoft Windows Knowledge Base Article 2385678 update is not installed
5537| [63566] Microsoft Windows Knowledge Base Article 2442962 update is not installed
5538| [63564] Microsoft Windows Knowledge Base Article 2345316 update is not installed
5539| [63562] Microsoft Windows Knowledge Base Article 2296199 update is not installed
5540| [63558] Microsoft Windows Knowledge Base Article 2416400 update is not installed
5541| [63550] Microsoft Windows Knowledge Base Article 2447961 update is not installed
5542| [63548] Microsoft Windows Knowledge Base Article 2443105 update is not installed
5543| [63546] Microsoft Windows Knowledge Base Article 2455005 update is not installed
5544| [63544] Microsoft Windows Knowledge Base Article 2292970 update is not installed
5545| [62805] Microsoft Windows Knowledge Base Article 2316074 update is not installed
5546| [62793] Microsoft Windows Knowledge Base Article 2293386 update is not installed
5547| [62789] Microsoft Windows Knowledge Base Article 2423930 update is not installed
5548| [62170] Microsoft Windows Knowledge Base Article 2296011 update is not installed
5549| [62166] Microsoft Windows Knowledge Base Article 2294255 update is not installed
5550| [62163] Microsoft Windows Knowledge Base Article 2281679 update is not installed
5551| [62154] Microsoft Windows Knowledge Base Article 2279986 update is not installed
5552| [62147] Microsoft Windows Knowledge Base Article 2160841 update is not installed
5553| [62134] Microsoft Windows Knowledge Base Article 2412048 update is not installed
5554| [62129] Microsoft Windows Knowledge Base Article 2387149 update is not installed
5555| [62126] Microsoft Windows Knowledge Base Article 2378111 update is not installed
5556| [62123] Microsoft Windows Knowledge Base Article 2360937 update is not installed
5557| [62118] Microsoft Windows Knowledge Base Article 2293211 update is not installed
5558| [62104] Microsoft Windows Knowledge Base Article 2360131 update is not installed
5559| [62098] Microsoft Windows Knowledge Base Article 2293194 update is not installed
5560| [62069] Microsoft Windows Knowledge Base Article 2418042 update is not installed
5561| [61519] Microsoft Windows Knowledge Base Article 2121546 update is not installed
5562| [61517] Microsoft Windows Knowledge Base Article 2259922 update is not installed
5563| [61514] Microsoft Windows Knowledge Base Article 2267960 update is not installed
5564| [61510] Microsoft Windows Knowledge Base Article 2315011 update is not installed
5565| [61507] Microsoft Windows Knowledge Base Article 2320113 update is not installed
5566| [61504] Microsoft Windows Knowledge Base Article 2347290 update is not installed
5567| [60736] Microsoft Windows Knowledge Base Article 2265906 update is not installed
5568| [60734] Microsoft Windows Knowledge Base Article 2269638 update is not installed
5569| [60728] Microsoft Windows Knowledge Base Article 2269707 update is not installed
5570| [60724] Microsoft Windows Knowledge Base Article 2286198 update is not installed
5571| [60713] Microsoft Windows Knowledge Base Article 2183461 update is not installed
5572| [60698] Microsoft Windows Knowledge Base Article 2160329 update is not installed
5573| [60686] Microsoft Windows Knowledge Base Article 2115168 update is not installed
5574| [60684] Microsoft Windows Knowledge Base Article 2079403 update is not installed
5575| [60680] Microsoft Windows Knowledge Base Article 2264072 update is not installed
5576| [59901] Microsoft Windows Knowledge Base Article 2229593 update is not installed
5577| [59898] Microsoft Windows Knowledge Base Article 2229593 update is not installed
5578| [58913] Microsoft Windows Knowledge Base Article 2027452 update is not installed
5579| [58891] Microsoft Windows Knowledge Base Article 2028554 update is not installed
5580| [17004] Microsoft Windows XP Service Pack 2 is not installed on the system
5581| [9187] Microsoft Passport SDK 2.1 Component Configuration Document (CCD) permission
5582| [9146] Microsoft Passport SDK 2.1 events reporting disabled
5583| [9068] Microsoft Passport SDK 2.1 registry default permission exposure
5584| [9067] Microsoft Passport SDK 2.1 default test site exposure
5585| [9066] Microsoft Passport SDK 2.1 Adventure Works Sample Site exposure
5586| [9065] Microsoft Passport SDK 2.1 Adventure Works Sample Site global.asa file default permission exposure
5587| [9064] Microsoft Passport SDK 2.1 default time window exposure
5588| [1271] Microsoft IIS version 2 installed
5589| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
5590|
5591| Exploit-DB - https://www.exploit-db.com:
5592| [30756] Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilities
5593| [30749] Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability
5594| [30636] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (2)
5595| [30635] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (1)
5596| [30281] Microsoft .Net Framework <= 2.0 - Multiple Null Byte Injection Vulnerabilities
5597| [29664] Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability
5598| [29660] Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
5599| [29630] Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability
5600| [29524] Microsoft Word 2000 - Malformed Function Code Execution Vulnerability
5601| [28420] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
5602| [28357] Microsoft Windows Explorer 2000/2003/XP Drag and Drop Remote Code Execution Vulnerability
5603| [28227] Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability
5604| [28226] Microsoft PowerPoint 2003 PPT File Closure Memory Corruption
5605| [28225] Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
5606| [28224] Microsoft PowerPoint 2003 mso.dll PPT Processing Unspecified Code Execution
5607| [28198] Microsoft Office 2000/2002 Property Code Execution Vulnerability
5608| [28189] Microsoft Excel 2000-2004 Style Handling and Repair Remote Code Execution Vulnerability
5609| [28087] Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
5610| [28005] Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability
5611| [26690] Microsoft Windows 2000/2003/XP CreateRemoteThread Local Denial of Service Vulnerability
5612| [26517] Microsoft Office PowerPoint 2007 - Crash PoC
5613| [26341] Microsoft Windows 2000/2003/XP MSDTC TIP Denial of Service Vulnerability
5614| [26222] Microsoft Windows 2000/2003/XP Keyboard Event Privilege Escalation Weakness
5615| [25384] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (2)
5616| [25383] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (1)
5617| [25231] Microsoft Windows 2000/2003/XP Graphical Device Interface Library Denial of Service Vulnerability
5618| [25085] Microsoft Office XP 2000/2002 HTML Link Processing Remote Buffer Overflow Vulnerability
5619| [25084] Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability
5620| [25050] Microsoft Windows 2000/2003/XP winhlp32 Phrase Heap Overflow Vulnerability
5621| [25049] Microsoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability
5622| [24686] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
5623| [24277] Microsoft Windows 2000/NT 4 POSIX Subsystem Buffer Overflow Local Privilege Escalation Vulnerability
5624| [24114] Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
5625| [24101] Microsoft Outlook 2003 Predictable File Location Weakness
5626| [23989] Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability
5627| [23796] Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
5628| [23019] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
5629| [22919] Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities
5630| [22883] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (2)
5631| [22882] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)
5632| [22837] Microsoft Windows 2000/NT 4 Media Services NSIISlog.DLL Remote Buffer Overflow
5633| [22782] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
5634| [22591] Microsoft Office Excel 2007 - WriteAV Crash PoC
5635| [22555] Microsoft BizTalk Server 2000/2002 DTA RawCustomSearchField.asp SQL Injection
5636| [22554] Microsoft BizTalk Server 2000/2002 DTA rawdocdata.asp SQL Injection Vulnerability
5637| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
5638| [22528] Microsoft Windows 2000 RegEdit.EXE Registry Key Value Buffer Overflow Vulnerability
5639| [22354] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
5640| [21920] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
5641| [21718] Microsoft SQL 2000/7.0 Agent Jobs Privilege Elevation Vulnerability
5642| [21693] Microsoft SQL Server 2000 User Authentication Remote Buffer Overflow Vulnerability
5643| [21652] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
5644| [21651] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
5645| [21650] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
5646| [21549] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
5647| [21541] Microsoft SQL Server 2000 SQLXML Script Injection Vulnerability
5648| [21540] Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability
5649| [21389] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (2)
5650| [21388] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (1)
5651| [21344] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
5652| [21258] Microsoft Windows 2000/NT 4 NTFS File Hiding Vulnerability
5653| [21246] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (2)
5654| [21245] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (1)
5655| [21172] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (2)
5656| [21171] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)
5657| [21131] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
5658| [21123] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
5659| [21113] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
5660| [21099] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
5661| [21069] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
5662| [20907] Microsoft Windows 2000 Telnet Username DoS Vulnerability
5663| [20802] Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
5664| [20763] Microsoft ISA Server 2000 Web Proxy DoS Vulnerability
5665| [20571] Microsoft Outlook 2000 0/98 0/Express 5.5 Concealed Attachment Vulnerability
5666| [20481] Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability
5667| [20399] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
5668| [20335] Microsoft Indexing Services for Windows 2000/NT 4.0 .htw Cross-Site Scripting Vulnerability
5669| [20305] Microsoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability
5670| [20265] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
5671| [20257] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
5672| [20255] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
5673| [20222] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
5674| [20209] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
5675| [20133] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
5676| [20122] Microsoft Office SharePoint Server 2007 Remote Code Execution
5677| [20096] Microsoft IIS 2.0/3.0/4.0/5.0/5.1 Internal IP Address Disclosure Vulnerability
5678| [20048] Microsoft Windows 2000 Remote CPU-overload Vulnerability
5679| [20047] Microsoft Windows 2000 Telnet Server DoS Vulnerability
5680| [19830] Microsoft Index Server 2.0 '%20' ASP Source Disclosure Vulnerability
5681| [19742] microsoft iis 3.0/4.0,microsoft index server 2.0 - Directory Traversal
5682| [19734] Microsoft Virtual Machine 2000 Series/3000 Series getSystemResource Vulnerability
5683| [19731] microsoft index server 2.0/indexing services for windows 2000 - Directory Traversal
5684| [19728] Microsoft Systems Management Server 2.0 Default Permissions Vulnerability
5685| [19425] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (2)
5686| [19424] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (1)
5687| [19376] Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
5688| [19143] "Microsoft Windows ""April Fools 2001"" Vulnerability"
5689| [19118] Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability
5690| [18334] Microsoft Office 2003 Home/Pro 0day
5691| [18087] MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
5692| [18078] Microsoft Excel 2003 11.8335.8333 Use After Free
5693| [18067] Microsoft Excel 2007 SP2 Buffer Overwrite Exploit
5694| [17305] "Microsoft Windows Vista/Server 2008 ""nsiproxy.sys"" Local Kernel DoS Exploit"
5695| [14971] MOAUB #11 - Microsoft Office Word 2007 sprmCMajority Buffer Overflow
5696| [14782] Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)
5697| [14746] Microsoft Office Groove 2007 DLL Hijacking Exploit (mso.dll)
5698| [14744] Microsoft Visio 2003 DLL Hijacking Exploit (mfc71enu.dll)
5699| [12450] Microsoft SharePoint Server 2007 XSS Vulnerability
5700| [10068] Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution
5701| [4121] Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC
5702| [3973] Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote DoS Exploit
5703| [3690] microsoft office word 2007 - Multiple Vulnerabilities
5704| [3260] Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
5705| [2523] Microsoft Office 2003 PPT Local Buffer Overflow PoC
5706| [2091] Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)
5707| [2001] Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
5708| [1999] Microsoft Word 2000/2003 Hlink Local Buffer Overflow Exploit PoC
5709| [1988] Microsoft Excel 2003 Hlink Local Buffer Overflow Exploit (italian)
5710| [1986] Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit (french)
5711| [1958] Microsoft Excel 2003 Hlink Stack/SEH Buffer Overflow Exploit
5712| [28238] Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Vulnerability MS13-067
5713| [23034] Microsoft URLScan 2.5/ RSA Security SecurID 5.0 Configuration Enumeration Weakness
5714| [22850] Microsoft Office OneNote 2010 Crash PoC
5715| [22679] Microsoft Visio 2010 Crash PoC
5716| [22655] Microsoft Publisher 2013 Crash PoC
5717| [22621] Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability
5718| [22330] Microsoft Office Excel 2010 Crash PoC
5719| [22310] Microsoft Office Publisher 2010 Crash PoC
5720| [22237] Microsoft Office Picture Manager 2010 Crash PoC
5721| [22215] Microsoft Office Word 2010 Crash PoC
5722| [19451] Microsoft Windows 98 a/98 b/98SE,Solaris 2.6 IRDP Vulnerability
5723| [19440] Microsoft Windows NT 4.0/SP 1/SP 2/Sp 3/SP 4/SP 5 Malformed Dialer Entry Vulnerability
5724| [19372] Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability
5725| [17164] Microsoft Reader <= 2.1.1.3143 NULL Byte Write
5726| [17163] Microsoft Reader <= 2.1.1.3143 Array Overflow
5727| [17162] Microsoft Reader <= 2.1.1.3143 Integer Overflow
5728| [17161] Microsoft Reader <= 2.1.1.3143 Heap Overflow
5729| [17160] Microsoft Reader <= 2.1.1.3143 Integer Overflow
5730| [14731] Microsoft Windows Movie Maker <= 2.6.4038.0 DLL Hijacking Exploit (hhctrl.ocx)
5731| [14723] Microsoft Power Point 2010 DLL Hijacking Exploit (pptimpconv.dll)
5732|
5733| OpenVAS (Nessus) - http://www.openvas.org:
5734| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
5735| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
5736| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
5737| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
5738| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
5739| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
5740| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
5741| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
5742| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
5743| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
5744| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
5745| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
5746| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
5747|
5748| SecurityTracker - https://www.securitytracker.com:
5749| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
5750| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
5751| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
5752| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
5753| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
5754| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
5755| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
5756| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
5757| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
5758| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
5759| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
5760| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
5761| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
5762| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
5763| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
5764| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
5765| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
5766| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
5767| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
5768| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
5769| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
5770| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
5771| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
5772| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
5773| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
5774| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
5775| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
5776| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
5777| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
5778| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
5779| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
5780| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
5781| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
5782| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
5783| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
5784| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
5785| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
5786| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
5787| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
5788| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
5789| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
5790| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
5791| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
5792| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
5793| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
5794| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
5795| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
5796| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
5797| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
5798| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
5799| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
5800| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
5801| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
5802| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
5803| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
5804| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
5805| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
5806| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
5807| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
5808|
5809| OSVDB - http://www.osvdb.org:
5810| [90257] Microsoft Windows Server 2003 ICACLS.EXE Permission Inheritance Weakness
5811| [86790] Microsoft Virtual PC 2007 Crafted x86 Instruction Sequence Handling Local DoS
5812| [86061] Microsoft Windows Server 2008 R1 CSRSS ReadConsole / CloseHandle Local DoS
5813| [79442] Microsoft Windows Server 2008 DNS Server Service Cache Update Policy Deleted Domain Name Resolving Weakness
5814| [72670] Microsoft Windows Server 2003 ActiveDirectory BROWSER ELECTION Remote Overflow
5815| [68554] Microsoft Windows Server 2008 Shared Cluster Disks Addition Default Permission Weakness
5816| [62251] Microsoft Windows Server 2008 Hyper-V Crafted Instruction Sequence DoS
5817| [60329] Microsoft Windows 2000 NetBIOS Continuation Packet Remote DoS
5818| [59733] Microsoft Windows 2000 Terminal Services Screensaver Screen Minimization Locking Weakness
5819| [59731] Microsoft Windows 2000 DCOM Client Alter Context Request Remote Information Disclosure
5820| [59730] Microsoft Windows 2000 Terminal Services Disconnect Feature Local Privilege Escalation
5821| [59514] Microsoft Windows 2000 Task Manager Uppercase Process Name Termination Weakness
5822| [59509] Microsoft Windows 2000 Encrypted File System Cleartext Backup File Local Disclosure
5823| [59346] Microsoft Windows 2000 Crafted TCP/UDP Traffic CPU Consumption Remote DoS
5824| [55836] Microsoft ISA Server 2006 Radius OTP Security Bypass
5825| [53663] Microsoft Office Word 2000 WordPerfect 6.x Converter Document Handling Stack Corruption
5826| [50589] Microsoft SQL Server 2000 sp_replwritetovarbin() Stored Procedure Overflow
5827| [37629] Microsoft Windows 2000 RPC Authentication Unspecified Information Disclosure
5828| [37628] Microsoft Windows 2000 RPC Authentication Crafted Request Remote DoS
5829| [36034] Microsoft Office 2000 Controllo ActiveX (OUACTRL.OCX) HelpPopup Method Overflow
5830| [34489] Microsoft Office 2003 Malformed WMF File Handling DoS
5831| [34488] Microsoft Excel 2003 XLS Handling Corrupt Format DoS
5832| [31251] Microsoft Office 2003 Brazilian Portuguese Grammar Checker Arbitrary Code Execution
5833| [29529] Microsoft Windows 2000 creator.dll ActiveX COM Object Memory Corruption
5834| [29528] Microsoft Windows 2000 msdxm.ocx ActiveX COM Object Memory Corruption
5835| [29527] Microsoft Windows 2000 myinfo.dll ActiveX COM Object Memory Corruption
5836| [29526] Microsoft Windows 2000 ciodm.dll ActiveX COM Object Memory Corruption
5837| [28539] Microsoft Word 2000 Unspecified Code Execution
5838| [24121] Microsoft Commerce Server 2002 authfiles/login.asp Authentication Bypass
5839| [24081] Microsoft Outlook 2003 Unspecified Malformed Word Attachment DoS
5840| [23484] Microsoft SQLServer 2000 sp_addalias Procedure Privileged Alias Creation
5841| [23234] Microsoft SQLServer 2000 Unspecified Invalid Client Buffer DoS
5842| [23231] Microsoft SQL Server 2000 SQL Profiler Multiple Method DoS
5843| [23205] Microsoft SQLServer 2000 Crafted Sort Command User Mode Scheduler (UMS) Bypass DoS
5844| [23203] Microsoft SQL Server 2000 Database Name Transact-SQL Statement Privilege Escalation
5845| [23202] Microsoft SQLServer 2000 sysmembers Virtual Table Query Overflow
5846| [23201] Microsoft SQL Server 2000 Dynamic Transact-SQL Statement Disclosure
5847| [23200] Microsoft SQLServer 2000 Encrypted Stored Procedure Dynamic Query Disclosure
5848| [21907] Microsoft Office InfoPath 2003 Mshtml.dll Form Handling DoS
5849| [21598] Microsoft Windows 2000 NetBIOS Port Malformed TCP Packet Parsing Remote DoS
5850| [20256] Microsoft Windows 2000 NTFS Volume Macintosh Client Directory Permission Modification
5851| [20222] Microsoft Windows 2000 runas.exe Named Pipe Spoofing Information Disclosure
5852| [20221] Microsoft Windows 2000 runas.exe Named Pipe Single Thread DoS
5853| [20220] Microsoft Windows 2000 runas.exe Cleartext Authentication Information Disclosure
5854| [20002] Microsoft Windows 2000 CHKDSK Fix Mode File ACL Failure
5855| [20001] Microsoft Windows 2000 Terminal Service Client Connection IP Logging Failure
5856| [20000] Microsoft Windows 2000 Domain Administrator Computer Lock Bypass
5857| [19999] Microsoft Windows 2000 FQDN Domain Login Password Expiry Bypass
5858| [19998] Microsoft Windows 2000 UPN Credentialed Login Group Policy Failure
5859| [19997] Microsoft Windows 2000 WideCharToMultiByte Function String Termination Issue
5860| [19996] Microsoft Windows 2000 Event ID 1704 Group Policy Failure
5861| [19995] Microsoft Windows 2000 SECEDIT Long Folder ACL Set Issue
5862| [19994] Microsoft Windows 2000 audit directory service access 565 Event Logging Failure
5863| [19993] Microsoft Windows 2000 LDAPS CA Trust Issue
5864| [19264] Microsoft Exchange Server 2003 Crafted IMAP4 Folder Listing Request DoS
5865| [17031] Microsoft ISA Server 2000 SecureNAT Traffic Saturation DoS
5866| [15343] Microsoft Windows Server 2003 Malformed HTTP Cookie Header CGI DoS
5867| [15341] Microsoft Windows Server 2003 SMB Redirector Processing DoS
5868| [15340] Microsoft Windows Server 2003 Terminal Service Client Print DoS
5869| [15338] Microsoft Windows Server 2003 Terminal Session Close DoS
5870| [15337] Microsoft Windows Server 2003 CreateProcessWithLogonW() Function Process Disclosure
5871| [15336] Microsoft Windows Server 2003 Shutdown.exe Shut Down Failure
5872| [15335] Microsoft Windows Server 2003 MIT Kerberos Realm Authentication Group Policy Failure
5873| [15334] Microsoft Windows Server 2003 Shared Folder Permission Weakness
5874| [15333] Microsoft Windows Server 2003 EFS File Copy LDAP Connection DoS
5875| [15332] Microsoft Windows Server 2003 Citrix Metaframe Encryption Policy Failure
5876| [15331] Microsoft Windows Server 2003 Home Folder Path Permission Inheritance Failure
5877| [14617] Microsoft Exchange Server 2003 Folder Handling DoS
5878| [14430] Microsoft Commerce Server 2000 Profile Service Affected API Overflow
5879| [13996] Microsoft Windows 2000 IKE Malformed Packet Saturation Remote DoS
5880| [13762] Microsoft 2000 Domain Controller Directory Service Restore Mode Blank Password
5881| [13761] Microsoft Exchange 2000 Malformed URL Request DoS
5882| [13475] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution Variant
5883| [13474] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution
5884| [13441] Microsoft Windows 2000 Security Interface Change Password Option Account Enumeration
5885| [13437] Microsoft Windows 2000 Debug Register Local Privilege Escalation
5886| [13424] Microsoft Windows 2000 Current Password Change Policy Bypass
5887| [13423] Microsoft Windows 2000 Terminal Server SYSVOL Share Connection Saturation Restriction Bypass
5888| [13415] Microsoft Windows 2000 System Root Folder Search Path Permission Weakness
5889| [13410] Microsoft Windows 2000 Accessibility Utility Manager Arbitrary Code Execution
5890| [11958] Microsoft Outlook 2003 Image Rendering Security Policy Bypass
5891| [11945] Microsoft Outlook 2002 IFRAME Tag Embedded URL
5892| [11944] Microsoft Outlook 2002 HREF Tag Embedded JavaScript Execution
5893| [11750] Microsoft Windows 2000 Message Queue Manager Queue Registration Request Overflow DoS
5894| [11712] Microsoft ISA Server 2000 H.323 Filter Overflow
5895| [10633] Microsoft Windows 2000 Protected Store Weak Encryption Default
5896| [9386] Microsoft Windows 2000 msinfo32.exe msinfo_file Variable Overflow
5897| [8243] Microsoft SMS Port 2702 DoS
5898| [7202] Microsoft PowerPoint 2000 File Loader Overflow
5899| [7179] Microsoft Windows 2000 Event Viewer Snap-in Overflow
5900| [6971] Microsoft ISA Server 2000 ICMP Rule Bypass During Startup
5901| [6970] Microsoft ISA Server 2000 Web Publishing Unencrypted Credentials Disclosure
5902| [6969] Microsoft ISA Server 2000 Invalid DNS Request DoS
5903| [6968] Microsoft ISA Server 2000 FTP Port Scan Bounce Weakness
5904| [6967] Microsoft ISA Server 2000 UDP Packet Winsock DoS
5905| [6965] Microsoft ISA Server 2000 SSL Packet DoS
5906| [6964] Microsoft ISA Server 2000 DNS Intrusion Detection Filter DoS
5907| [6515] Microsoft Windows 2000 Domain Expired Account Authentication
5908| [5179] Microsoft Windows 2000 microsoft-ds DoS
5909| [5171] Microsoft Word 2002 Mail Merge Tool Execute Arbitrary Script
5910| [4779] Microsoft Desktop Engine (MSDE) 2000 Stored Procedure SQL Injection
5911| [4778] Microsoft SQL Server 2000 Stored Procedure SQL Injection
5912| [4777] Microsoft Desktop Engine (MSDE) 2000 Database Consistency Checkers (DBCCs) Overflow
5913| [4776] Microsoft SQL Server 2000 Database Consistency Checkers (DBCCs) 2000 Overflow
5914| [4170] Microsoft Windows 2000 Server Media Services TCP Packet Handling Remote DoS
5915| [4168] Microsoft Outlook 2002 mailto URI Script Injection
5916| [3490] Microsoft Exchange 2003 OWA Mailbox Access Information Disclosure
5917| [2705] Microsoft Windows 2000 Windows Troubleshooter ActiveX Overflow
5918| [2655] Microsoft Windows Server 2003 Shell Folders Arbitrary File Access
5919| [2540] Microsoft Windows 2003 Server Buffer Overflow Protection Mechanism Bypass
5920| [2244] Microsoft Windows 2000 ShellExecute() API Let
5921| [2237] Microsoft Windows 2000 Active Directory Lsass.exe Overflow
5922| [1949] Symantec Norton Anti-Virus for Microsoft Exchange 2000 INBOX Path Information Disclosure
5923| [1764] Microsoft Windows 2000 Domain Controller DoS
5924| [1758] Microsoft Windows 2000 Network DDE Escalated Privileges
5925| [1755] Microsoft Windows 2000 RDP Malformed Packet Handling Remote DoS
5926| [1672] Microsoft Windows 2000 Telnet Session Timeout DoS
5927| [1633] Microsoft Windows 2000 System Monitor ActiveX LogFileName Parameter Validation Overflow
5928| [1621] Microsoft Indexing Services for Windows 2000 .htw XSS
5929| [1591] Microsoft Windows 2000 OEMPreinstall Installation Permission Weakness
5930| [1578] Microsoft Windows 2000 Simplified Chinese IME Local Privilege Escalation
5931| [1500] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow
5932| [1437] Microsoft Windows 2000 Telnet Server Binary Zero Parsing Remote DoS
5933| [1399] Microsoft Windows 2000 Windows Station Access
5934| [1328] Microsoft Office 2000 UA Control ActiveX (Ouactrl.ocx) Show Me Function Remote Code Execution
5935| [1297] Microsoft Windows 2000 Active Directory Object Attribute
5936| [1292] Microsoft Windows NT 4.0 / 2000 cmd.exe Buffer Overflow
5937| [773] Microsoft Windows 2000 Group Policy File Lock DoS
5938| [515] Microsoft Windows 2000 LDAP Server Arbitrary User Password Modification
5939| [454] Microsoft Windows 2000 NTLM Domain Account Lockout Policy Bypass
5940| [403] Microsoft Windows 2000 Still Image Service WM_USER Message Local Overflow
5941| [398] Microsoft Windows 2000 Malformed RPC Traffic Local Security Policy Corruption DoS
5942| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
5943| [69085] Microsoft Office 2010 RTF File Handling pFragments Buffer Overflow Arbitrary Code Execution
5944|_
5945Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
5946Device type: general purpose|specialized|phone
5947Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Vista|Phone (89%)
5948OS CPE: cpe:/o:microsoft:windows_server_2008:r2 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows
5949Aggressive OS guesses: Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (88%), Microsoft Windows 7 Professional or Windows 8 (88%), Microsoft Windows 7 SP1 or Windows Server 2008 SP2 or 2008 R2 SP1 (88%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (88%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (88%), Microsoft Windows Vista SP2 (88%)
5950No exact OS matches for host (test conditions non-ideal).
5951Network Distance: 13 hops
5952Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
5953
5954TRACEROUTE (using port 80/tcp)
5955HOP RTT ADDRESS
59561 185.13 ms 10.247.200.1
59572 182.74 ms 213.184.122.97
59583 180.85 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
59594 182.43 ms bzq-219-189-185.cablep.bezeqint.net (62.219.189.185)
59605 182.64 ms bzq-114-65-2.cust.bezeqint.net (192.114.65.2)
59616 239.84 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
59627 240.25 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
59638 244.69 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
59649 245.28 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
596510 241.89 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
596611 240.55 ms s100-54.cust.stratogen.net (109.233.54.100)
596712 245.38 ms s100-54.cust.stratogen.net (109.233.54.100)
596813 241.39 ms s10-140-54-212.cust.stratogen.net (212.54.140.10)
5969
5970########################################################################################################################
5971http://www.jobtrain.co.uk [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://www.jobtrain.co.uk/], Title[Document Moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[sameorigin], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
5972https://www.jobtrain.co.uk/ [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://jobtrain.co.uk], Title[Object moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[ALLOW-FROM https://www.jobtrain.co.uk/], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
5973https://jobtrain.co.uk [200 OK] Apache, Country[UNITED KINGDOM][GB], Email[enquiries@jobtrain.co.uk], Google-Analytics[UA-12529237-3], HTML5, HTTPServer[Apache], IP[87.247.244.117], JQuery, Open-Graph-Protocol[website], Script[application/ld+json,text/javascript], Title[Applicant Tracking System UK | Online Candidate Management | Jobtrain], UncommonHeaders[link,upgrade], WordPress, X-UA-Compatible[IE=9]
5974#############################################################################################################################
5975
5976wig - WebApp Information Gatherer
5977
5978
5979Scanning https://jobtrain.co.uk...
5980___________________________________________________ SITE INFO ____________________________________________________
5981IP Title
598287.247.244.117 Applicant Tracking System UK | Online Candidate Management | Jobtrain
5983
5984____________________________________________________ VERSION _____________________________________________________
5985Name Versions Type
5986WordPress 3.8 | 3.8.1 | 3.8.2 | 3.8.3 | 3.8.4 | 3.8.5 | 3.8.6 | 3.8.7 CMS
5987 3.8.8 | 3.9 | 3.9.1 | 3.9.2 | 3.9.3 | 3.9.4 | 3.9.5 | 3.9.6
5988 4.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.1 | 4.1.1
5989 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5 | 4.2 | 4.2.1 | 4.2.2
5990Apache Platform
5991
5992__________________________________________________ INTERESTING ___________________________________________________
5993URL Note Type
5994/readme.html Readme file Interesting
5995/test.htm Test file Interesting
5996
5997_____________________________________________________ TOOLS ______________________________________________________
5998Name Link Software
5999wpscan https://github.com/wpscanteam/wpscan WordPress
6000CMSmap https://github.com/Dionach/CMSmap WordPress
6001
6002________________________________________________ VULNERABILITIES _________________________________________________
6003Affected #Vulns Link
6004WordPress 3.8 12 http://cvedetails.com/version/162922
6005WordPress 3.8.1 12 http://cvedetails.com/version/162923
6006WordPress 3.8.2 7 http://cvedetails.com/version/176067
6007WordPress 3.8.3 7 http://cvedetails.com/version/176068
6008WordPress 3.8.4 8 http://cvedetails.com/version/176069
6009WordPress 3.9 8 http://cvedetails.com/version/176070
6010WordPress 3.9.1 15 http://cvedetails.com/version/169908
6011WordPress 3.9.2 10 http://cvedetails.com/version/176071
6012WordPress 3.9.3 1 http://cvedetails.com/version/185080
6013WordPress 4.0 9 http://cvedetails.com/version/176072
6014WordPress 4.0.1 1 http://cvedetails.com/version/185081
6015WordPress 4.1 1 http://cvedetails.com/version/185082
6016WordPress 4.1.1 2 http://cvedetails.com/version/185079
6017WordPress 4.2 1 http://cvedetails.com/version/185048
6018WordPress 4.2.1 1 http://cvedetails.com/version/184019
6019WordPress 4.2.2 2 http://cvedetails.com/version/185073
6020
6021__________________________________________________________________________________________________________________
6022Time: 1.5 sec Urls: 580 Fingerprints: 40401
6023#######################################################################################################################################
6024HTTP/1.1 302 Redirect
6025Content-Length: 150
6026Content-Type: text/html; charset=UTF-8
6027Location: https://www.jobtrain.co.uk/
6028Server:
6029alternateHostName: www.jobtrain.co.uk
6030Server:
6031X-Frame-Options: sameorigin
6032X-Powered-By: Jobtrain
6033X-XSS-Protection: 1; mode=block
6034X-Content-Type-Options: nosniff
6035X-ASPNET-VERSION:
6036Date: Wed, 07 Aug 2019 10:58:23 GMT
6037
6038HTTP/1.1 302 Redirect
6039Content-Length: 150
6040Content-Type: text/html; charset=UTF-8
6041Location: https://www.jobtrain.co.uk/
6042Server:
6043alternateHostName: www.jobtrain.co.uk
6044Server:
6045X-Frame-Options: sameorigin
6046X-Powered-By: Jobtrain
6047X-XSS-Protection: 1; mode=block
6048X-Content-Type-Options: nosniff
6049X-ASPNET-VERSION:
6050Date: Wed, 07 Aug 2019 10:58:24 GMT
6051
6052HTTP/1.1 302 Found
6053Cache-Control: private
6054Content-Length: 139
6055Content-Type: text/html; charset=utf-8
6056Location: https://jobtrain.co.uk
6057Server:
6058X-AspNet-Version:
6059alternateHostName: www.jobtrain.co.uk
6060Server:
6061X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
6062X-Powered-By: Jobtrain
6063X-XSS-Protection: 1; mode=block
6064X-Content-Type-Options: nosniff
6065Date: Wed, 07 Aug 2019 10:58:25 GMT
6066
6067HTTP/2 200
6068date: Wed, 07 Aug 2019 10:58:27 GMT
6069server: Apache
6070link: <https://jobtrain.co.uk/wp-json/>; rel="https://api.w.org/", <https://jobtrain.co.uk/>; rel=shortlink
6071content-type: text/html; charset=UTF-8
6072
6073###################################################################################################################################
6074------------------------------------------------------------------------------------------------------------------------
6075
6076[ ! ] Starting SCANNER INURLBR 2.1 at [07-08-2019 06:58:53]
6077[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
6078It is the end user's responsibility to obey all applicable local, state and federal laws.
6079Developers assume no liability and are not responsible for any misuse or damage caused by this program
6080
6081[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/www.jobtrain.co.uk/output/inurlbr-www.jobtrain.co.uk ]
6082[ INFO ][ DORK ]::[ site:www.jobtrain.co.uk ]
6083[ INFO ][ SEARCHING ]:: {
6084[ INFO ][ ENGINE ]::[ GOOGLE - www.google.co.il ]
6085
6086[ INFO ][ SEARCHING ]::
6087-[:::]
6088[ INFO ][ ENGINE ]::[ GOOGLE API ]
6089
6090[ INFO ][ SEARCHING ]::
6091-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
6092[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.com.bn ID: 002901626849897788481:cpnctza84gq ]
6093
6094[ INFO ][ SEARCHING ]::
6095-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
6096
6097[ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]
6098
6099
6100 _[ - ]::--------------------------------------------------------------------------------------------------------------
6101|_[ + ] [ 0 / 100 ]-[06:59:14] [ - ]
6102|_[ + ] Target:: [ https://www.jobtrain.co.uk/acorngroup/ ]
6103|_[ + ] Exploit::
6104|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6105|_[ + ] More details:: / - / , ISP:
6106|_[ + ] Found:: UNIDENTIFIED
6107
6108 _[ - ]::--------------------------------------------------------------------------------------------------------------
6109|_[ + ] [ 1 / 100 ]-[06:59:17] [ - ]
6110|_[ + ] Target:: [ https://www.jobtrain.co.uk/bpp/ ]
6111|_[ + ] Exploit::
6112|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6113|_[ + ] More details:: / - / , ISP:
6114|_[ + ] Found:: UNIDENTIFIED
6115
6116 _[ - ]::--------------------------------------------------------------------------------------------------------------
6117|_[ + ] [ 2 / 100 ]-[06:59:20] [ - ]
6118|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/ ]
6119|_[ + ] Exploit::
6120|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6121|_[ + ] More details:: / - / , ISP:
6122|_[ + ] Found:: UNIDENTIFIED
6123
6124 _[ - ]::--------------------------------------------------------------------------------------------------------------
6125|_[ + ] [ 3 / 100 ]-[06:59:23] [ - ]
6126|_[ + ] Target:: [ https://www.jobtrain.co.uk/telent/ ]
6127|_[ + ] Exploit::
6128|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6129|_[ + ] More details:: / - / , ISP:
6130|_[ + ] Found:: UNIDENTIFIED
6131
6132 _[ - ]::--------------------------------------------------------------------------------------------------------------
6133|_[ + ] [ 4 / 100 ]-[06:59:28] [ - ]
6134|_[ + ] Target:: [ https://www.jobtrain.co.uk/bhid/ ]
6135|_[ + ] Exploit::
6136|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6137|_[ + ] More details:: / - / , ISP:
6138|_[ + ] Found:: UNIDENTIFIED
6139
6140 _[ - ]::--------------------------------------------------------------------------------------------------------------
6141|_[ + ] [ 5 / 100 ]-[06:59:33] [ - ]
6142|_[ + ] Target:: [ https://www.jobtrain.co.uk/sigplc/ ]
6143|_[ + ] Exploit::
6144|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6145|_[ + ] More details:: / - / , ISP:
6146|_[ + ] Found:: UNIDENTIFIED
6147
6148 _[ - ]::--------------------------------------------------------------------------------------------------------------
6149|_[ + ] [ 6 / 100 ]-[06:59:37] [ - ]
6150|_[ + ] Target:: [ https://www.jobtrain.co.uk/brakesgroup/ ]
6151|_[ + ] Exploit::
6152|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6153|_[ + ] More details:: / - / , ISP:
6154|_[ + ] Found:: UNIDENTIFIED
6155
6156 _[ - ]::--------------------------------------------------------------------------------------------------------------
6157|_[ + ] [ 7 / 100 ]-[06:59:43] [ - ]
6158|_[ + ] Target:: [ https://www.jobtrain.co.uk/Teleperformance5/ ]
6159|_[ + ] Exploit::
6160|_[ + ] Information Server:: , , IP:212.54.140.10:443
6161|_[ + ] More details:: / - / , ISP:
6162|_[ + ] Found:: UNIDENTIFIED
6163
6164 _[ - ]::--------------------------------------------------------------------------------------------------------------
6165|_[ + ] [ 8 / 100 ]-[06:59:46] [ - ]
6166|_[ + ] Target:: [ https://www.jobtrain.co.uk/clevelandcliniclondon/ ]
6167|_[ + ] Exploit::
6168|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6169|_[ + ] More details:: / - / , ISP:
6170|_[ + ] Found:: UNIDENTIFIED
6171
6172 _[ - ]::--------------------------------------------------------------------------------------------------------------
6173|_[ + ] [ 9 / 100 ]-[06:59:49] [ - ]
6174|_[ + ] Target:: [ https://www.jobtrain.co.uk/citizensadvice/ ]
6175|_[ + ] Exploit::
6176|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6177|_[ + ] More details:: / - / , ISP:
6178|_[ + ] Found:: UNIDENTIFIED
6179
6180 _[ - ]::--------------------------------------------------------------------------------------------------------------
6181|_[ + ] [ 10 / 100 ]-[06:59:52] [ - ]
6182|_[ + ] Target:: [ https://www.jobtrain.co.uk/aldautomotive/ ]
6183|_[ + ] Exploit::
6184|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6185|_[ + ] More details:: / - / , ISP:
6186|_[ + ] Found:: UNIDENTIFIED
6187
6188 _[ - ]::--------------------------------------------------------------------------------------------------------------
6189|_[ + ] [ 11 / 100 ]-[06:59:55] [ - ]
6190|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/ ]
6191|_[ + ] Exploit::
6192|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6193|_[ + ] More details:: / - / , ISP:
6194|_[ + ] Found:: UNIDENTIFIED
6195
6196 _[ - ]::--------------------------------------------------------------------------------------------------------------
6197|_[ + ] [ 12 / 100 ]-[06:59:59] [ - ]
6198|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/ ]
6199|_[ + ] Exploit::
6200|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6201|_[ + ] More details:: / - / , ISP:
6202|_[ + ] Found:: UNIDENTIFIED
6203
6204 _[ - ]::--------------------------------------------------------------------------------------------------------------
6205|_[ + ] [ 13 / 100 ]-[07:00:01] [ - ]
6206|_[ + ] Target:: [ https://www.jobtrain.co.uk/Nordanglia5/ ]
6207|_[ + ] Exploit::
6208|_[ + ] Information Server:: HTTP/1.1 302 Redirect, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6209|_[ + ] More details:: / - / , ISP:
6210|_[ + ] Found:: UNIDENTIFIED
6211
6212 _[ - ]::--------------------------------------------------------------------------------------------------------------
6213|_[ + ] [ 14 / 100 ]-[07:00:05] [ - ]
6214|_[ + ] Target:: [ https://www.jobtrain.co.uk/nissandealerrecruitment/ ]
6215|_[ + ] Exploit::
6216|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6217|_[ + ] More details:: / - / , ISP:
6218|_[ + ] Found:: UNIDENTIFIED
6219
6220 _[ - ]::--------------------------------------------------------------------------------------------------------------
6221|_[ + ] [ 15 / 100 ]-[07:00:08] [ - ]
6222|_[ + ] Target:: [ https://www.jobtrain.co.uk/derbyshirefire/ ]
6223|_[ + ] Exploit::
6224|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6225|_[ + ] More details:: / - / , ISP:
6226|_[ + ] Found:: UNIDENTIFIED
6227
6228 _[ - ]::--------------------------------------------------------------------------------------------------------------
6229|_[ + ] [ 16 / 100 ]-[07:00:14] [ - ]
6230|_[ + ] Target:: [ https://www.jobtrain.co.uk/advance/ ]
6231|_[ + ] Exploit::
6232|_[ + ] Information Server:: , , IP:212.54.140.10:443
6233|_[ + ] More details:: / - / , ISP:
6234|_[ + ] Found:: UNIDENTIFIED
6235
6236 _[ - ]::--------------------------------------------------------------------------------------------------------------
6237|_[ + ] [ 17 / 100 ]-[07:00:17] [ - ]
6238|_[ + ] Target:: [ https://www.jobtrain.co.uk/paperchasecareers/ ]
6239|_[ + ] Exploit::
6240|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6241|_[ + ] More details:: / - / , ISP:
6242|_[ + ] Found:: UNIDENTIFIED
6243
6244 _[ - ]::--------------------------------------------------------------------------------------------------------------
6245|_[ + ] [ 18 / 100 ]-[07:00:20] [ - ]
6246|_[ + ] Target:: [ https://www.jobtrain.co.uk/dret/ ]
6247|_[ + ] Exploit::
6248|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6249|_[ + ] More details:: / - / , ISP:
6250|_[ + ] Found:: UNIDENTIFIED
6251
6252 _[ - ]::--------------------------------------------------------------------------------------------------------------
6253|_[ + ] [ 19 / 100 ]-[07:00:26] [ - ]
6254|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/ ]
6255|_[ + ] Exploit::
6256|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6257|_[ + ] More details:: / - / , ISP:
6258|_[ + ] Found:: UNIDENTIFIED
6259
6260 _[ - ]::--------------------------------------------------------------------------------------------------------------
6261|_[ + ] [ 20 / 100 ]-[07:00:29] [ - ]
6262|_[ + ] Target:: [ https://www.jobtrain.co.uk/southernhousing5/ ]
6263|_[ + ] Exploit::
6264|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6265|_[ + ] More details:: / - / , ISP:
6266|_[ + ] Found:: UNIDENTIFIED
6267
6268 _[ - ]::--------------------------------------------------------------------------------------------------------------
6269|_[ + ] [ 21 / 100 ]-[07:00:34] [ - ]
6270|_[ + ] Target:: [ https://www.jobtrain.co.uk/frontieragriculture/ ]
6271|_[ + ] Exploit::
6272|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6273|_[ + ] More details:: / - / , ISP:
6274|_[ + ] Found:: UNIDENTIFIED
6275
6276 _[ - ]::--------------------------------------------------------------------------------------------------------------
6277|_[ + ] [ 22 / 100 ]-[07:00:37] [ - ]
6278|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/ ]
6279|_[ + ] Exploit::
6280|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6281|_[ + ] More details:: / - / , ISP:
6282|_[ + ] Found:: UNIDENTIFIED
6283
6284 _[ - ]::--------------------------------------------------------------------------------------------------------------
6285|_[ + ] [ 23 / 100 ]-[07:00:43] [ - ]
6286|_[ + ] Target:: [ https://www.jobtrain.co.uk/theritz5/ ]
6287|_[ + ] Exploit::
6288|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6289|_[ + ] More details:: / - / , ISP:
6290|_[ + ] Found:: UNIDENTIFIED
6291
6292 _[ - ]::--------------------------------------------------------------------------------------------------------------
6293|_[ + ] [ 24 / 100 ]-[07:00:48] [ - ]
6294|_[ + ] Target:: [ https://www.jobtrain.co.uk/transact/ ]
6295|_[ + ] Exploit::
6296|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6297|_[ + ] More details:: / - / , ISP:
6298|_[ + ] Found:: UNIDENTIFIED
6299
6300 _[ - ]::--------------------------------------------------------------------------------------------------------------
6301|_[ + ] [ 25 / 100 ]-[07:00:51] [ - ]
6302|_[ + ] Target:: [ https://www.jobtrain.co.uk/agsairports/ ]
6303|_[ + ] Exploit::
6304|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6305|_[ + ] More details:: / - / , ISP:
6306|_[ + ] Found:: UNIDENTIFIED
6307
6308 _[ - ]::--------------------------------------------------------------------------------------------------------------
6309|_[ + ] [ 26 / 100 ]-[07:00:56] [ - ]
6310|_[ + ] Target:: [ https://www.jobtrain.co.uk/dumfriesandgalloway/ ]
6311|_[ + ] Exploit::
6312|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6313|_[ + ] More details:: / - / , ISP:
6314|_[ + ] Found:: UNIDENTIFIED
6315
6316 _[ - ]::--------------------------------------------------------------------------------------------------------------
6317|_[ + ] [ 27 / 100 ]-[07:01:02] [ - ]
6318|_[ + ] Target:: [ https://www.jobtrain.co.uk/jobtrainsolutions/ ]
6319|_[ + ] Exploit::
6320|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6321|_[ + ] More details:: / - / , ISP:
6322|_[ + ] Found:: UNIDENTIFIED
6323
6324 _[ - ]::--------------------------------------------------------------------------------------------------------------
6325|_[ + ] [ 28 / 100 ]-[07:01:08] [ - ]
6326|_[ + ] Target:: [ https://www.jobtrain.co.uk/west-norfolk/ ]
6327|_[ + ] Exploit::
6328|_[ + ] Information Server:: , , IP:212.54.140.10:443
6329|_[ + ] More details:: / - / , ISP:
6330|_[ + ] Found:: UNIDENTIFIED
6331
6332 _[ - ]::--------------------------------------------------------------------------------------------------------------
6333|_[ + ] [ 29 / 100 ]-[07:01:10] [ - ]
6334|_[ + ] Target:: [ https://www.jobtrain.co.uk/socotec-careers/ ]
6335|_[ + ] Exploit::
6336|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6337|_[ + ] More details:: / - / , ISP:
6338|_[ + ] Found:: UNIDENTIFIED
6339
6340 _[ - ]::--------------------------------------------------------------------------------------------------------------
6341|_[ + ] [ 30 / 100 ]-[07:01:14] [ - ]
6342|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/vacancies.aspx ]
6343|_[ + ] Exploit::
6344|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6345|_[ + ] More details:: / - / , ISP:
6346|_[ + ] Found:: UNIDENTIFIED
6347
6348 _[ - ]::--------------------------------------------------------------------------------------------------------------
6349|_[ + ] [ 31 / 100 ]-[07:01:17] [ - ]
6350|_[ + ] Target:: [ https://www.jobtrain.co.uk/jdwilliams5/vacancies.aspx ]
6351|_[ + ] Exploit::
6352|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6353|_[ + ] More details:: / - / , ISP:
6354|_[ + ] Found:: UNIDENTIFIED
6355
6356 _[ - ]::--------------------------------------------------------------------------------------------------------------
6357|_[ + ] [ 32 / 100 ]-[07:01:20] [ - ]
6358|_[ + ] Target:: [ https://www.jobtrain.co.uk/certasenergycareers/vacancies.aspx ]
6359|_[ + ] Exploit::
6360|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6361|_[ + ] More details:: / - / , ISP:
6362|_[ + ] Found:: UNIDENTIFIED
6363
6364 _[ - ]::--------------------------------------------------------------------------------------------------------------
6365|_[ + ] [ 33 / 100 ]-[07:01:23] [ - ]
6366|_[ + ] Target:: [ https://www.jobtrain.co.uk/iomgovjobs/vacancies.aspx ]
6367|_[ + ] Exploit::
6368|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6369|_[ + ] More details:: / - / , ISP:
6370|_[ + ] Found:: UNIDENTIFIED
6371
6372 _[ - ]::--------------------------------------------------------------------------------------------------------------
6373|_[ + ] [ 34 / 100 ]-[07:01:27] [ - ]
6374|_[ + ] Target:: [ https://www.jobtrain.co.uk/thpt/vacancies.aspx ]
6375|_[ + ] Exploit::
6376|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6377|_[ + ] More details:: / - / , ISP:
6378|_[ + ] Found:: UNIDENTIFIED
6379
6380 _[ - ]::--------------------------------------------------------------------------------------------------------------
6381|_[ + ] [ 35 / 100 ]-[07:01:30] [ - ]
6382|_[ + ] Target:: [ https://www.jobtrain.co.uk/lga/Vacancies.aspx ]
6383|_[ + ] Exploit::
6384|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6385|_[ + ] More details:: / - / , ISP:
6386|_[ + ] Found:: UNIDENTIFIED
6387
6388 _[ - ]::--------------------------------------------------------------------------------------------------------------
6389|_[ + ] [ 36 / 100 ]-[07:01:35] [ - ]
6390|_[ + ] Target:: [ https://www.jobtrain.co.uk/dret/vacancies.aspx ]
6391|_[ + ] Exploit::
6392|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6393|_[ + ] More details:: / - / , ISP:
6394|_[ + ] Found:: UNIDENTIFIED
6395
6396 _[ - ]::--------------------------------------------------------------------------------------------------------------
6397|_[ + ] [ 37 / 100 ]-[07:01:39] [ - ]
6398|_[ + ] Target:: [ https://www.jobtrain.co.uk/starcareers/search.aspx ]
6399|_[ + ] Exploit::
6400|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6401|_[ + ] More details:: / - / , ISP:
6402|_[ + ] Found:: UNIDENTIFIED
6403
6404 _[ - ]::--------------------------------------------------------------------------------------------------------------
6405|_[ + ] [ 38 / 100 ]-[07:01:42] [ - ]
6406|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/vacancies.aspx ]
6407|_[ + ] Exploit::
6408|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6409|_[ + ] More details:: / - / , ISP:
6410|_[ + ] Found:: UNIDENTIFIED
6411
6412 _[ - ]::--------------------------------------------------------------------------------------------------------------
6413|_[ + ] [ 39 / 100 ]-[07:01:47] [ - ]
6414|_[ + ] Target:: [ https://www.jobtrain.co.uk/saxonweald/vacancies.aspx ]
6415|_[ + ] Exploit::
6416|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6417|_[ + ] More details:: / - / , ISP:
6418|_[ + ] Found:: UNIDENTIFIED
6419
6420 _[ - ]::--------------------------------------------------------------------------------------------------------------
6421|_[ + ] [ 40 / 100 ]-[07:01:52] [ - ]
6422|_[ + ] Target:: [ https://www.jobtrain.co.uk/teleperformance5/vacancies.aspx ]
6423|_[ + ] Exploit::
6424|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6425|_[ + ] More details:: / - / , ISP:
6426|_[ + ] Found:: UNIDENTIFIED
6427
6428 _[ - ]::--------------------------------------------------------------------------------------------------------------
6429|_[ + ] [ 41 / 100 ]-[07:01:56] [ - ]
6430|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/vacancies.aspx ]
6431|_[ + ] Exploit::
6432|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6433|_[ + ] More details:: / - / , ISP:
6434|_[ + ] Found:: UNIDENTIFIED
6435
6436 _[ - ]::--------------------------------------------------------------------------------------------------------------
6437|_[ + ] [ 42 / 100 ]-[07:01:59] [ - ]
6438|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/vacancies.aspx ]
6439|_[ + ] Exploit::
6440|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6441|_[ + ] More details:: / - / , ISP:
6442|_[ + ] Found:: UNIDENTIFIED
6443
6444 _[ - ]::--------------------------------------------------------------------------------------------------------------
6445|_[ + ] [ 43 / 100 ]-[07:02:02] [ - ]
6446|_[ + ] Target:: [ https://www.jobtrain.co.uk/gam/vacancies.aspx ]
6447|_[ + ] Exploit::
6448|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6449|_[ + ] More details:: / - / , ISP:
6450|_[ + ] Found:: UNIDENTIFIED
6451
6452 _[ - ]::--------------------------------------------------------------------------------------------------------------
6453|_[ + ] [ 44 / 100 ]-[07:02:06] [ - ]
6454|_[ + ] Target:: [ https://www.jobtrain.co.uk/hermescareers/vacancies.aspx ]
6455|_[ + ] Exploit::
6456|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6457|_[ + ] More details:: / - / , ISP:
6458|_[ + ] Found:: UNIDENTIFIED
6459
6460 _[ - ]::--------------------------------------------------------------------------------------------------------------
6461|_[ + ] [ 45 / 100 ]-[07:02:09] [ - ]
6462|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/default.aspx ]
6463|_[ + ] Exploit::
6464|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6465|_[ + ] More details:: / - / , ISP:
6466|_[ + ] Found:: UNIDENTIFIED
6467
6468 _[ - ]::--------------------------------------------------------------------------------------------------------------
6469|_[ + ] [ 46 / 100 ]-[07:02:12] [ - ]
6470|_[ + ] Target:: [ https://www.jobtrain.co.uk/radian5/vacancies.aspx ]
6471|_[ + ] Exploit::
6472|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6473|_[ + ] More details:: / - / , ISP:
6474|_[ + ] Found:: UNIDENTIFIED
6475
6476 _[ - ]::--------------------------------------------------------------------------------------------------------------
6477|_[ + ] [ 47 / 100 ]-[07:02:15] [ - ]
6478|_[ + ] Target:: [ https://www.jobtrain.co.uk/odeon5/vacancies.aspx ]
6479|_[ + ] Exploit::
6480|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6481|_[ + ] More details:: / - / , ISP:
6482|_[ + ] Found:: UNIDENTIFIED
6483
6484 _[ - ]::--------------------------------------------------------------------------------------------------------------
6485|_[ + ] [ 48 / 100 ]-[07:02:19] [ - ]
6486|_[ + ] Target:: [ https://www.jobtrain.co.uk/agsairports/vacancies.aspx ]
6487|_[ + ] Exploit::
6488|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6489|_[ + ] More details:: / - / , ISP:
6490|_[ + ] Found:: UNIDENTIFIED
6491
6492 _[ - ]::--------------------------------------------------------------------------------------------------------------
6493|_[ + ] [ 49 / 100 ]-[07:02:25] [ - ]
6494|_[ + ] Target:: [ https://www.jobtrain.co.uk/theritz5/vacancies.aspx ]
6495|_[ + ] Exploit::
6496|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6497|_[ + ] More details:: / - / , ISP:
6498|_[ + ] Found:: UNIDENTIFIED
6499
6500 _[ - ]::--------------------------------------------------------------------------------------------------------------
6501|_[ + ] [ 50 / 100 ]-[07:02:29] [ - ]
6502|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/vacancies.aspx ]
6503|_[ + ] Exploit::
6504|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6505|_[ + ] More details:: / - / , ISP:
6506|_[ + ] Found:: UNIDENTIFIED
6507
6508 _[ - ]::--------------------------------------------------------------------------------------------------------------
6509|_[ + ] [ 51 / 100 ]-[07:02:32] [ - ]
6510|_[ + ] Target:: [ https://www.jobtrain.co.uk/thecrownestate5/vacancies.aspx ]
6511|_[ + ] Exploit::
6512|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6513|_[ + ] More details:: / - / , ISP:
6514|_[ + ] Found:: UNIDENTIFIED
6515
6516 _[ - ]::--------------------------------------------------------------------------------------------------------------
6517|_[ + ] [ 52 / 100 ]-[07:02:35] [ - ]
6518|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/update.aspx ]
6519|_[ + ] Exploit::
6520|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6521|_[ + ] More details:: / - / , ISP:
6522|_[ + ] Found:: UNIDENTIFIED
6523
6524 _[ - ]::--------------------------------------------------------------------------------------------------------------
6525|_[ + ] [ 53 / 100 ]-[07:02:37] [ - ]
6526|_[ + ] Target:: [ https://www.jobtrain.co.uk/MerseysidePolice/update.aspx ]
6527|_[ + ] Exploit::
6528|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6529|_[ + ] More details:: / - / , ISP:
6530|_[ + ] Found:: UNIDENTIFIED
6531
6532 _[ - ]::--------------------------------------------------------------------------------------------------------------
6533|_[ + ] [ 54 / 100 ]-[07:02:40] [ - ]
6534|_[ + ] Target:: [ https://www.jobtrain.co.uk/brakesgroup/update.aspx ]
6535|_[ + ] Exploit::
6536|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6537|_[ + ] More details:: / - / , ISP:
6538|_[ + ] Found:: UNIDENTIFIED
6539
6540 _[ - ]::--------------------------------------------------------------------------------------------------------------
6541|_[ + ] [ 55 / 100 ]-[07:02:43] [ - ]
6542|_[ + ] Target:: [ https://www.jobtrain.co.uk/BPP/update.aspx ]
6543|_[ + ] Exploit::
6544|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6545|_[ + ] More details:: / - / , ISP:
6546|_[ + ] Found:: UNIDENTIFIED
6547
6548 _[ - ]::--------------------------------------------------------------------------------------------------------------
6549|_[ + ] [ 56 / 100 ]-[07:02:46] [ - ]
6550|_[ + ] Target:: [ https://www.jobtrain.co.uk/hermescareers/update.aspx ]
6551|_[ + ] Exploit::
6552|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6553|_[ + ] More details:: / - / , ISP:
6554|_[ + ] Found:: UNIDENTIFIED
6555
6556 _[ - ]::--------------------------------------------------------------------------------------------------------------
6557|_[ + ] [ 57 / 100 ]-[07:02:49] [ - ]
6558|_[ + ] Target:: [ https://www.jobtrain.co.uk/teleperformance5/update.aspx ]
6559|_[ + ] Exploit::
6560|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6561|_[ + ] More details:: / - / , ISP:
6562|_[ + ] Found:: UNIDENTIFIED
6563
6564 _[ - ]::--------------------------------------------------------------------------------------------------------------
6565|_[ + ] [ 58 / 100 ]-[07:02:52] [ - ]
6566|_[ + ] Target:: [ https://www.jobtrain.co.uk/paperchasecareers/update.aspx ]
6567|_[ + ] Exploit::
6568|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6569|_[ + ] More details:: / - / , ISP:
6570|_[ + ] Found:: UNIDENTIFIED
6571
6572 _[ - ]::--------------------------------------------------------------------------------------------------------------
6573|_[ + ] [ 59 / 100 ]-[07:02:55] [ - ]
6574|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/update.aspx ]
6575|_[ + ] Exploit::
6576|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6577|_[ + ] More details:: / - / , ISP:
6578|_[ + ] Found:: UNIDENTIFIED
6579
6580 _[ - ]::--------------------------------------------------------------------------------------------------------------
6581|_[ + ] [ 60 / 100 ]-[07:02:58] [ - ]
6582|_[ + ] Target:: [ https://www.jobtrain.co.uk/odeon5/update.aspx ]
6583|_[ + ] Exploit::
6584|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6585|_[ + ] More details:: / - / , ISP:
6586|_[ + ] Found:: UNIDENTIFIED
6587
6588 _[ - ]::--------------------------------------------------------------------------------------------------------------
6589|_[ + ] [ 61 / 100 ]-[07:03:01] [ - ]
6590|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/update.aspx ]
6591|_[ + ] Exploit::
6592|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6593|_[ + ] More details:: / - / , ISP:
6594|_[ + ] Found:: UNIDENTIFIED
6595
6596 _[ - ]::--------------------------------------------------------------------------------------------------------------
6597|_[ + ] [ 62 / 100 ]-[07:03:03] [ - ]
6598|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/update.aspx ]
6599|_[ + ] Exploit::
6600|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6601|_[ + ] More details:: / - / , ISP:
6602|_[ + ] Found:: UNIDENTIFIED
6603
6604 _[ - ]::--------------------------------------------------------------------------------------------------------------
6605|_[ + ] [ 63 / 100 ]-[07:03:06] [ - ]
6606|_[ + ] Target:: [ https://www.jobtrain.co.uk/newcastleairport/update.aspx ]
6607|_[ + ] Exploit::
6608|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6609|_[ + ] More details:: / - / , ISP:
6610|_[ + ] Found:: UNIDENTIFIED
6611
6612 _[ - ]::--------------------------------------------------------------------------------------------------------------
6613|_[ + ] [ 64 / 100 ]-[07:03:09] [ - ]
6614|_[ + ] Target:: [ https://www.jobtrain.co.uk/clevelandcliniclondon/Pages/Page2.aspx ]
6615|_[ + ] Exploit::
6616|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6617|_[ + ] More details:: / - / , ISP:
6618|_[ + ] Found:: UNIDENTIFIED
6619
6620 _[ - ]::--------------------------------------------------------------------------------------------------------------
6621|_[ + ] [ 65 / 100 ]-[07:03:12] [ - ]
6622|_[ + ] Target:: [ https://www.jobtrain.co.uk/radian5/update.aspx?jobid=1124 ]
6623|_[ + ] Exploit::
6624|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6625|_[ + ] More details:: / - / , ISP:
6626|_[ + ] Found:: UNIDENTIFIED
6627
6628 _[ - ]::--------------------------------------------------------------------------------------------------------------
6629|_[ + ] [ 66 / 100 ]-[07:03:15] [ - ]
6630|_[ + ] Target:: [ https://www.jobtrain.co.uk/leighacademiestrust/vacancies.aspx?lstlocation=30 ]
6631|_[ + ] Exploit::
6632|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6633|_[ + ] More details:: / - / , ISP:
6634|_[ + ] Found:: UNIDENTIFIED
6635
6636 _[ - ]::--------------------------------------------------------------------------------------------------------------
6637|_[ + ] [ 67 / 100 ]-[07:03:18] [ - ]
6638|_[ + ] Target:: [ https://www.jobtrain.co.uk/Graham/emailafriend.aspx?jobid=227 ]
6639|_[ + ] Exploit::
6640|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6641|_[ + ] More details:: / - / , ISP:
6642|_[ + ] Found:: UNIDENTIFIED
6643
6644 _[ - ]::--------------------------------------------------------------------------------------------------------------
6645|_[ + ] [ 68 / 100 ]-[07:03:21] [ - ]
6646|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/register.aspx?jobid=1791 ]
6647|_[ + ] Exploit::
6648|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6649|_[ + ] More details:: / - / , ISP:
6650|_[ + ] Found:: UNIDENTIFIED
6651
6652 _[ - ]::--------------------------------------------------------------------------------------------------------------
6653|_[ + ] [ 69 / 100 ]-[07:03:24] [ - ]
6654|_[ + ] Target:: [ https://www.jobtrain.co.uk/southernhousing5/register.aspx?jobid=1631 ]
6655|_[ + ] Exploit::
6656|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6657|_[ + ] More details:: / - / , ISP:
6658|_[ + ] Found:: UNIDENTIFIED
6659
6660 _[ - ]::--------------------------------------------------------------------------------------------------------------
6661|_[ + ] [ 70 / 100 ]-[07:03:27] [ - ]
6662|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/register.aspx?jobid=1981 ]
6663|_[ + ] Exploit::
6664|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6665|_[ + ] More details:: / - / , ISP:
6666|_[ + ] Found:: UNIDENTIFIED
6667
6668 _[ - ]::--------------------------------------------------------------------------------------------------------------
6669|_[ + ] [ 71 / 100 ]-[07:03:31] [ - ]
6670|_[ + ] Target:: [ https://www.jobtrain.co.uk/thpt/register.aspx?jobid=188 ]
6671|_[ + ] Exploit::
6672|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6673|_[ + ] More details:: / - / , ISP:
6674|_[ + ] Found:: UNIDENTIFIED
6675
6676 _[ - ]::--------------------------------------------------------------------------------------------------------------
6677|_[ + ] [ 72 / 100 ]-[07:03:34] [ - ]
6678|_[ + ] Target:: [ https://www.jobtrain.co.uk/MerseysidePolice/special-constables/update.aspx ]
6679|_[ + ] Exploit::
6680|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6681|_[ + ] More details:: / - / , ISP:
6682|_[ + ] Found:: UNIDENTIFIED
6683
6684 _[ - ]::--------------------------------------------------------------------------------------------------------------
6685|_[ + ] [ 73 / 100 ]-[07:03:38] [ - ]
6686|_[ + ] Target:: [ https://www.jobtrain.co.uk/cygnetjobs/register.aspx?jobid=0 ]
6687|_[ + ] Exploit::
6688|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6689|_[ + ] More details:: / - / , ISP:
6690|_[ + ] Found:: UNIDENTIFIED
6691
6692 _[ - ]::--------------------------------------------------------------------------------------------------------------
6693|_[ + ] [ 74 / 100 ]-[07:03:41] [ - ]
6694|_[ + ] Target:: [ https://www.jobtrain.co.uk/plymouthcommunityhomes/update.aspx?jobid=166 ]
6695|_[ + ] Exploit::
6696|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6697|_[ + ] More details:: / - / , ISP:
6698|_[ + ] Found:: UNIDENTIFIED
6699
6700 _[ - ]::--------------------------------------------------------------------------------------------------------------
6701|_[ + ] [ 75 / 100 ]-[07:03:43] [ - ]
6702|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/special-constables/home/special-constable.html ]
6703|_[ + ] Exploit::
6704|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6705|_[ + ] More details:: / - / , ISP:
6706|_[ + ] Found:: UNIDENTIFIED
6707
6708 _[ - ]::--------------------------------------------------------------------------------------------------------------
6709|_[ + ] [ 76 / 100 ]-[07:03:46] [ - ]
6710|_[ + ] Target:: [ https://www.jobtrain.co.uk/iomgovjobs/ForgotPass.aspx?jobid=2863&backto=decide ]
6711|_[ + ] Exploit::
6712|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6713|_[ + ] More details:: / - / , ISP:
6714|_[ + ] Found:: UNIDENTIFIED
6715
6716 _[ - ]::--------------------------------------------------------------------------------------------------------------
6717|_[ + ] [ 77 / 100 ]-[07:03:49] [ - ]
6718|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=5009 ]
6719|_[ + ] Exploit::
6720|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6721|_[ + ] More details:: / - / , ISP:
6722|_[ + ] Found:: UNIDENTIFIED
6723
6724 _[ - ]::--------------------------------------------------------------------------------------------------------------
6725|_[ + ] [ 78 / 100 ]-[07:03:52] [ - ]
6726|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1828 ]
6727|_[ + ] Exploit::
6728|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6729|_[ + ] More details:: / - / , ISP:
6730|_[ + ] Found:: UNIDENTIFIED
6731
6732 _[ - ]::--------------------------------------------------------------------------------------------------------------
6733|_[ + ] [ 79 / 100 ]-[07:03:54] [ - ]
6734|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2073 ]
6735|_[ + ] Exploit::
6736|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6737|_[ + ] More details:: / - / , ISP:
6738|_[ + ] Found:: UNIDENTIFIED
6739
6740 _[ - ]::--------------------------------------------------------------------------------------------------------------
6741|_[ + ] [ 80 / 100 ]-[07:03:56] [ - ]
6742|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1746 ]
6743|_[ + ] Exploit::
6744|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6745|_[ + ] More details:: / - / , ISP:
6746|_[ + ] Found:: UNIDENTIFIED
6747
6748 _[ - ]::--------------------------------------------------------------------------------------------------------------
6749|_[ + ] [ 81 / 100 ]-[07:03:59] [ - ]
6750|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=158 ]
6751|_[ + ] Exploit::
6752|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6753|_[ + ] More details:: / - / , ISP:
6754|_[ + ] Found:: UNIDENTIFIED
6755
6756 _[ - ]::--------------------------------------------------------------------------------------------------------------
6757|_[ + ] [ 82 / 100 ]-[07:04:02] [ - ]
6758|_[ + ] Target:: [ https://www.jobtrain.co.uk/corpssecurity/displayjob.aspx?jobid=921 ]
6759|_[ + ] Exploit::
6760|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6761|_[ + ] More details:: / - / , ISP:
6762|_[ + ] Found:: UNIDENTIFIED
6763
6764 _[ - ]::--------------------------------------------------------------------------------------------------------------
6765|_[ + ] [ 83 / 100 ]-[07:04:05] [ - ]
6766|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/displayjob.aspx?jobid=281 ]
6767|_[ + ] Exploit::
6768|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6769|_[ + ] More details:: / - / , ISP:
6770|_[ + ] Found:: UNIDENTIFIED
6771
6772 _[ - ]::--------------------------------------------------------------------------------------------------------------
6773|_[ + ] [ 84 / 100 ]-[07:04:07] [ - ]
6774|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2491 ]
6775|_[ + ] Exploit::
6776|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6777|_[ + ] More details:: / - / , ISP:
6778|_[ + ] Found:: UNIDENTIFIED
6779
6780 _[ - ]::--------------------------------------------------------------------------------------------------------------
6781|_[ + ] [ 85 / 100 ]-[07:04:10] [ - ]
6782|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=3999 ]
6783|_[ + ] Exploit::
6784|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6785|_[ + ] More details:: / - / , ISP:
6786|_[ + ] Found:: UNIDENTIFIED
6787
6788 _[ - ]::--------------------------------------------------------------------------------------------------------------
6789|_[ + ] [ 86 / 100 ]-[07:04:14] [ - ]
6790|_[ + ] Target:: [ https://www.jobtrain.co.uk/citizensadvice/displayjob.aspx?jobid=205 ]
6791|_[ + ] Exploit::
6792|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6793|_[ + ] More details:: / - / , ISP:
6794|_[ + ] Found:: UNIDENTIFIED
6795
6796 _[ - ]::--------------------------------------------------------------------------------------------------------------
6797|_[ + ] [ 87 / 100 ]-[07:04:17] [ - ]
6798|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=5052 ]
6799|_[ + ] Exploit::
6800|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6801|_[ + ] More details:: / - / , ISP:
6802|_[ + ] Found:: UNIDENTIFIED
6803
6804 _[ - ]::--------------------------------------------------------------------------------------------------------------
6805|_[ + ] [ 88 / 100 ]-[07:04:20] [ - ]
6806|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3551 ]
6807|_[ + ] Exploit::
6808|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6809|_[ + ] More details:: / - / , ISP:
6810|_[ + ] Found:: UNIDENTIFIED
6811
6812 _[ - ]::--------------------------------------------------------------------------------------------------------------
6813|_[ + ] [ 89 / 100 ]-[07:04:23] [ - ]
6814|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/displayjob.aspx?jobid=3609 ]
6815|_[ + ] Exploit::
6816|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6817|_[ + ] More details:: / - / , ISP:
6818|_[ + ] Found:: UNIDENTIFIED
6819
6820 _[ - ]::--------------------------------------------------------------------------------------------------------------
6821|_[ + ] [ 90 / 100 ]-[07:04:25] [ - ]
6822|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1991 ]
6823|_[ + ] Exploit::
6824|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6825|_[ + ] More details:: / - / , ISP:
6826|_[ + ] Found:: UNIDENTIFIED
6827
6828 _[ - ]::--------------------------------------------------------------------------------------------------------------
6829|_[ + ] [ 91 / 100 ]-[07:04:29] [ - ]
6830|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/displayjob.aspx?jobid=2168 ]
6831|_[ + ] Exploit::
6832|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6833|_[ + ] More details:: / - / , ISP:
6834|_[ + ] Found:: UNIDENTIFIED
6835
6836 _[ - ]::--------------------------------------------------------------------------------------------------------------
6837|_[ + ] [ 92 / 100 ]-[07:04:31] [ - ]
6838|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1600 ]
6839|_[ + ] Exploit::
6840|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6841|_[ + ] More details:: / - / , ISP:
6842|_[ + ] Found:: UNIDENTIFIED
6843
6844 _[ - ]::--------------------------------------------------------------------------------------------------------------
6845|_[ + ] [ 93 / 100 ]-[07:04:34] [ - ]
6846|_[ + ] Target:: [ https://www.jobtrain.co.uk/bpp/displayjob.aspx?jobid=2689 ]
6847|_[ + ] Exploit::
6848|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6849|_[ + ] More details:: / - / , ISP:
6850|_[ + ] Found:: UNIDENTIFIED
6851
6852 _[ - ]::--------------------------------------------------------------------------------------------------------------
6853|_[ + ] [ 94 / 100 ]-[07:04:37] [ - ]
6854|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3862 ]
6855|_[ + ] Exploit::
6856|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6857|_[ + ] More details:: / - / , ISP:
6858|_[ + ] Found:: UNIDENTIFIED
6859
6860 _[ - ]::--------------------------------------------------------------------------------------------------------------
6861|_[ + ] [ 95 / 100 ]-[07:04:39] [ - ]
6862|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2544 ]
6863|_[ + ] Exploit::
6864|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6865|_[ + ] More details:: / - / , ISP:
6866|_[ + ] Found:: UNIDENTIFIED
6867
6868 _[ - ]::--------------------------------------------------------------------------------------------------------------
6869|_[ + ] [ 96 / 100 ]-[07:04:42] [ - ]
6870|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3730 ]
6871|_[ + ] Exploit::
6872|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6873|_[ + ] More details:: / - / , ISP:
6874|_[ + ] Found:: UNIDENTIFIED
6875
6876 _[ - ]::--------------------------------------------------------------------------------------------------------------
6877|_[ + ] [ 97 / 100 ]-[07:04:44] [ - ]
6878|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3368 ]
6879|_[ + ] Exploit::
6880|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6881|_[ + ] More details:: / - / , ISP:
6882|_[ + ] Found:: UNIDENTIFIED
6883
6884 _[ - ]::--------------------------------------------------------------------------------------------------------------
6885|_[ + ] [ 98 / 100 ]-[07:04:46] [ - ]
6886|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2860 ]
6887|_[ + ] Exploit::
6888|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6889|_[ + ] More details:: / - / , ISP:
6890|_[ + ] Found:: UNIDENTIFIED
6891
6892 _[ - ]::--------------------------------------------------------------------------------------------------------------
6893|_[ + ] [ 99 / 100 ]-[07:04:49] [ - ]
6894|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/displayjob.aspx?jobid=10920 ]
6895|_[ + ] Exploit::
6896|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
6897|_[ + ] More details:: / - / , ISP:
6898|_[ + ] Found:: UNIDENTIFIED
6899
6900[ INFO ] [ Shutting down ]
6901[ INFO ] [ End of process INURLBR at [07-08-2019 07:04:49]
6902[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
6903[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/www.jobtrain.co.uk/output/inurlbr-www.jobtrain.co.uk ]
6904|_________________________________________________________________________________________
6905
6906#####################################################################################################################################
6907tee: /usr/share/sniper/loot/workspace/www.jobtrain.co.uk/output/nmap-www.jobtrain.co.uk-port443: Aucun fichier ou dossier de ce type
6908Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 07:04 EDT
6909Nmap scan report for www.jobtrain.co.uk (212.54.140.10)
6910Host is up (0.24s latency).
6911rDNS record for 212.54.140.10: s10-140-54-212.cust.stratogen.net
6912
6913PORT STATE SERVICE VERSION
6914443/tcp open ssl/http Microsoft IIS httpd 7.5
6915|_http-server-header: <empty>
6916| vulscan: VulDB - https://vuldb.com:
6917| [68404] Microsoft IIS 7.5 Error Message mypage cross site scripting
6918| [6924] Microsoft IIS 7.5 Log File Permission information disclosure
6919| [5623] Microsoft IIS up to 7.5 File Name Tilde privilege escalation
6920| [4234] Microsoft IIS 7.5 FTP Server Telnet IAC Character Heap-based denial of service
6921| [4179] Microsoft IIS 7.5 FastCGI Request Header memory corruption
6922| [98097] Microsoft IIS 7.0/7.5/8.0/8.5/10 /uncpath/ cross site scripting
6923| [6925] Microsoft IIS 7.0/7.5 FTP Command information disclosure
6924| [4484] Microsoft Windows Phone 7.5 SMS Service denial of service
6925|
6926| MITRE CVE - https://cve.mitre.org:
6927| [CVE-2012-2532] Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
6928| [CVE-2012-2531] Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
6929| [CVE-2010-3972] Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
6930| [CVE-2010-2730] Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
6931| [CVE-2010-1899] Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
6932| [CVE-2010-1256] Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
6933| [CVE-2013-0941] EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
6934| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
6935| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
6936| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
6937| [CVE-2009-2521] Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability."
6938| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
6939| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
6940| [CVE-2008-0074] Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
6941| [CVE-2007-2931] Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
6942| [CVE-2007-1278] Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
6943| [CVE-2006-5858] Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.
6944| [CVE-2006-5028] Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.
6945| [CVE-2006-0363] The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program. NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort. Perhaps this issue should not be included in CVE.
6946|
6947| SecurityFocus - https://www.securityfocus.com/bid/:
6948| [55569] Microsoft Windows Phone 7 SSL Certificate 'Common Name' Validation Security Bypass Vulnerability
6949| [28820] Microsoft Works 7 'WkImgSrv.dll' ActiveX Control Remote Code Execution Vulnerability
6950| [28498] Microsoft Internet Explorer 7 Popup Window Address Bar URI Spoofing Vulnerability
6951| [24483] Microsoft Internet Explorer 7 HTTP Authentication International Domain Name Spoofing Weakness
6952| [20728] Microsoft Internet Explorer 7 Popup Window Address Bar Spoofing Weakness
6953| [18736] Microsoft Internet Explorer 7 Denial of Service Vulnerability
6954| [5877] Microsoft SQL Server 7.0/2000 DBCC Buffer Overflow Vulnerability
6955| [4108] Microsoft Visual C++ 7/Visual C++.Net Buffer Overflow Protection Weakness
6956| [1714] Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability
6957| [1444] Microsoft SQL Server 7.0 Stored Procedure Vulnerability
6958| [1281] Microsoft SQL Server 7.0 System Administrator Password Disclosure Vulnerability
6959| [817] Microsoft SQL Server 7.0 NULL Data DoS Vulnerability
6960| [90065] Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0174 Local Privilege Escalation Vulnerability
6961| [86059] Microsoft IIS CVE-1999-0561 Remote Security Vulnerability
6962| [56440] Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability
6963| [56439] Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability
6964| [54276] Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability
6965| [54251] Microsoft IIS File Enumeration Weakness
6966| [53906] Microsoft IIS Authentication Bypass and Source Code Disclosure Vulnerabilities
6967| [45542] Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
6968| [43140] Microsoft IIS Repeated Parameter Request Denial of Service Vulnerability
6969| [43138] Microsoft IIS Request Header Buffer Overflow Vulnerability
6970| [41314] Microsoft IIS 5.1 Alternate Data Stream Authentication Bypass Vulnerability
6971| [40573] Microsoft IIS Authentication Remote Code Execution Vulnerability
6972| [37460] RETIRED: Microsoft IIS Malformed Local Filename Security Bypass Vulnerability
6973| [36276] RETIRED: Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
6974| [36273] Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
6975| [36189] Microsoft IIS FTPd NLST Remote Buffer Overflow Vulnerability
6976| [35232] Microsoft IIS 5.0 WebDAV Authentication Bypass Vulnerability
6977| [34993] Microsoft IIS Unicode Requests to WebDAV Multiple Authentication Bypass Vulnerabilities
6978| [33374] Microsoft IIS HTTP TRACK Method Information Disclosure Vulnerability
6979| [27101] Microsoft IIS File Change Notification Local Privilege Escalation Vulnerability
6980| [21865] Apache And Microsoft IIS Range Denial of Service Vulnerability
6981| [18858] Microsoft IIS ASP Remote Code Execution Vulnerability
6982| [14764] Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
6983| [10706] Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerability
6984| [9660] Microsoft IIS Unspecified Remote Denial Of Service Vulnerability
6985| [9313] Microsoft IIS Failure To Log Undocumented TRACK Requests Vulnerability
6986| [8244] Microsoft Multiple IIS 6.0 Web Admin Vulnerabilities
6987| [8092] Microsoft IIS _VTI_BOT Malicious WebBot Elevated Permissions Vulnerability
6988| [8035] Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerability
6989| [7735] Microsoft IIS WebDAV PROPFIND and SEARCH Method Denial of Service Vulnerability
6990| [7734] Microsoft IIS SSINC.DLL Server Side Includes Buffer Overflow Vulnerability
6991| [7733] Microsoft IIS ASP Header Denial Of Service Vulnerability
6992| [7731] Microsoft IIS Redirection Error Page Cross-Site Scripting Vulnerability
6993| [7492] Microsoft IIS User Existence Disclosure Vulnerability
6994| [6795] Microsoft IIS False Logging Weakness
6995| [6789] Microsoft IIS Malformed HTTP Get Request Denial Of Service Vulnerability
6996| [6072] Microsoft IIS Administrative Pages Cross Site Scripting Vulnerabilities
6997| [6071] Microsoft IIS Script Source Access File Upload Vulnerability
6998| [6070] Microsoft IIS WebDAV Denial Of Service Vulnerability
6999| [6069] Microsoft IIS Out Of Process Privilege Escalation Vulnerability
7000| [6068] Multiple Microsoft IIS Vulnerabilities
7001| [5907] Microsoft IIS Malformed HTTP HOST Header Field Denial Of Service Vulnerability
7002| [5900] Microsoft IIS IDC Extension Cross Site Scripting Vulnerability
7003| [5213] Microsoft IIS SMTP Service Encapsulated SMTP Address Vulnerability
7004| [4855] Microsoft IIS HTR Chunked Encoding Transfer Heap Overflow Vulnerability
7005| [4846] Microsoft IIS 5.0 Denial Of Service Vulnerability
7006| [4543] Microsoft IIS CodeBrws.ASP File Extension Check Out By One Vulnerability
7007| [4525] Microsoft IIS CodeBrws.ASP Source Code Disclosure Vulnerability
7008| [4490] Microsoft IIS Chunked Encoding Heap Overflow Variant Vulnerability
7009| [4487] Microsoft IIS HTTP Redirect Cross Site Scripting Vulnerability
7010| [4486] Microsoft IIS HTTP Error Page Cross Site Scripting Vulnerability
7011| [4485] Microsoft IIS Chunked Encoding Transfer Heap Overflow Vulnerability
7012| [4483] Microsoft IIS Help File Search Cross Site Scripting Vulnerability
7013| [4482] Microsoft IIS FTP Connection Status Request Denial of Service Vulnerability
7014| [4479] Microsoft IIS ISAPI Filter Access Violation Denial of Service Vulnerability
7015| [4478] Microsoft IIS ASP Server-Side Include Buffer Overflow Vulnerability
7016| [4476] Microsoft IIS HTTP Header Field Delimiter Buffer Overflow Vulnerability
7017| [4474] Microsoft IIS HTR ISAPI Extension Buffer Overflow Vulnerability
7018| [4235] Microsoft IIS Authentication Method Disclosure Vulnerability
7019| [4084] Microsoft IIS 5.1 Frontpage Server Extensions File Source Disclosure Vulnerability
7020| [4078] Microsoft IIS 5.1 Frontpage Extensions Path Disclosure Information Vulnerability
7021| [3667] Microsoft IIS False Content-Length Field DoS Vulnerability
7022| [3195] Microsoft IIS MIME Header Denial of Service Vulnerability
7023| [3194] Microsoft IIS WebDAV Invalid Request Denial of Service Vulnerability
7024| [3193] Microsoft IIS 5.0 In-Process Table Privelege Elevation Vulnerability
7025| [3191] Microsoft IIS 4.0 URL Redirection DoS Vulnerability
7026| [3190] Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability
7027| [2977] Microsoft IIS Device File Remote DoS Vulnerability
7028| [2973] Microsoft IIS Device File Local DoS Vulnerability
7029| [2909] Microsoft IIS Unicode .asp Source Code Disclosure Vulnerability
7030| [2719] Microsoft IIS Various Domain User Account Access Vulnerability
7031| [2717] Microsoft IIS FTP Denial of Service Vulnerability
7032| [2690] Microsoft IIS WebDAV 'Propfind' Server Restart Vulnerability
7033| [2674] Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability
7034| [2654] Microsoft IIS Long URL Denial of Service Vulnerability
7035| [2483] Microsoft IIS WebDAV 'Search' Denial of Service Vulnerability
7036| [2453] Microsoft IIS WebDAV Denial of Service Vulnerability
7037| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
7038| [2440] Microsoft IIS Multiple Invalid URL Request DoS Vulnerability
7039| [2313] Microsoft IIS File Fragment Disclosure Vulnerability
7040| [2280] Microsoft IIS 3.0/4.0 Upgrade BDIR.HTR Vulnerability
7041| [2218] Microsoft IIS '../..' Denial of Service Vulnerability
7042| [2144] Microsoft IIS Front Page Server Extension DoS Vulnerability
7043| [2110] Microsoft IIS 4.0 IISADMPWD Proxied Password Attack
7044| [2100] Microsoft IIS Far East Edition DBCS File Disclosure Vulnerability
7045| [2074] Microsoft IIS Appended Dot Script Source Disclosure Vulnerability
7046| [1912] Microsoft IIS Executable File Parsing Vulnerability
7047| [1911] Microsoft IIS 4.0 ISAPI Buffer Overflow Vulnerability
7048| [1832] Microsoft IIS 4.0/5.0 Session ID Cookie Disclosure Vulnerability
7049| [1819] Microsoft IIS 4.0 Pickup Directory DoS Vulnerability
7050| [1818] Microsoft IIS 3.0 newdsn.exe File Creation Vulnerability
7051| [1814] Microsoft IIS 3.0 %2e ASP Source Disclosure Vulnerability
7052| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
7053| [1806] Microsoft IIS and PWS Extended Unicode Directory Traversal Vulnerability
7054| [1756] Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability
7055| [1642] Microsoft NT 4.0 and IIS 4.0 Invalid URL Request DoS Vulnerability
7056| [1595] Microsoft IIS Cross Site Scripting .shtml Vulnerability
7057| [1594] Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability
7058| [1578] Microsoft IIS 5.0 Translate: f Source Disclosure Vulnerability
7059| [1565] Microsoft IIS 4.0/5.0 File Permission Canonicalization Vulnerability
7060| [1499] Microsoft IIS Internal IP Address Disclosure Vulnerability
7061| [1488] Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerability
7062| [1476] Microsoft IIS 3.0 .htr Missing Variable Denial of Service Vulnerability
7063| [1193] Microsoft IIS 4.0/5.0 Malformed Filename Request Vulnerability
7064| [1191] Microsoft IIS 4.0/5.0 Malformed .htr Request Vulnerability
7065| [1190] Microsoft IIS 4.0/5.0 Malformed File Extension DoS Vulnerability
7066| [1101] Microsoft IIS 4.0/5.0 Escaped Characters Vulnerability
7067| [1081] Microsoft IIS UNC Mapped Virtual Host Vulnerability
7068| [1066] Microsoft IIS 4.0 Chunked Transfer Encoding Buffer Overflow Vulnerability
7069| [1065] Microsoft IIS UNC Path Disclosure Vulnerability
7070| [886] Microsoft IIS Escape Character Parsing Vulnerability
7071| [882] Microsoft IIS Virtual Directory Naming Vulnerability
7072| [658] Microsoft IIS FTP NO ACCESS Read/Delete File Vulnerability
7073| [657] Microsoft IIS 4.0 Domain Resolution Vulnerability
7074| [582] Microsoft IIS And PWS 8.3 Directory Name Vulnerability
7075| [190] Microsoft VisualInterDev 6.0 - IIS4- Management With No Authentication Vulnerability
7076|
7077| IBM X-Force - https://exchange.xforce.ibmcloud.com:
7078| [78620] Microsoft Windows Phone 7 domain name spoofing
7079| [66401] Microsoft Windows kernel-mode driver (win32k.sys) variant 7 privilege escalation
7080| [29670] Microsoft Internet Explorer 7 is installed
7081| [76716] Microsoft IIS FTP denial of service
7082| [76664] Microsoft IIS tilde information disclosure
7083| [61513] Microsoft Internet Information Services (IIS) URL authentication bypass
7084| [58864] Microsoft Internet Information Services (IIS) authentication code execution
7085| [55031] Microsoft Internet Information Services (IIS) filenames security bypass
7086| [53034] Microsoft Internet Information Services (IIS) directory listings denial of service
7087| [52915] Microsoft Internet Information Services (IIS) FTP buffer overflow
7088| [52243] Microsoft IIS With .NET Path Disclosure
7089| [52241] Microsoft IIS servervariables_vbscript.asp Information Disclosure
7090| [52240] Microsoft IIS Sample Application Physical Path Disclosure
7091| [52233] Microsoft IIS With .NET Path Disclosure
7092| [50573] Microsoft Internet Information Services (IIS) WebDAV security bypass
7093| [45584] Microsoft IIS adsiis.dll ActiveX control denial of service
7094| [42899] Microsoft IIS HTTP request smuggling
7095| [39235] Microsoft IIS root folders file change notification privilege escalation
7096| [39230] Microsoft IIS HTML encoded ASP code execution
7097| [34434] Microsoft IIS Hit-highlighting security bypass
7098| [34418] Microsoft Internet Information Server (IIS) AUX/.aspx denial of service
7099| [32074] Microsoft IIS iissamples directory present
7100| [31644] Microsoft IIS Web server access.cnf file detected
7101| [31642] Microsoft IIS Web server service.cnf file detected
7102| [31638] Microsoft IIS Web server svcacl.cnf file detected
7103| [31630] Microsoft Internet Information Services IISAdmin directory detected
7104| [27854] Microsoft IIS ASP cache virtual server information disclosure
7105| [26796] Microsoft Internet Information Services (IIS) ASP buffer overflow
7106| [16872] Microsoft Internet Information Server (IIS) ActivePerl command execution
7107| [16656] Microsoft Internet Information Server (IIS) MS04-021 patch is not installed
7108| [16578] Microsoft Internet Information Server (IIS) redirect buffer overflow
7109| [14077] Microsoft Internet Information Server (IIS) fails to properly log HTTP TRACK requests
7110| [13116] Microsoft IIS MS03-018 patch is not installed on the system
7111| [13088] Microsoft IIS running RealSecure Server Sensor ISAPI plug-in denial of service
7112| [12687] Microsoft IIS Remote Administration Tool allows attacker to reset administrative password
7113| [12686] Microsoft IIS Remote Administration Tool could allow an attacker to obtain valid session IDs
7114| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
7115| [12100] Microsoft IIS long WebDAV requests containing XML denial of service
7116| [12099] Microsoft IIS Response.AddHeader denial of service
7117| [12098] Microsoft IIS Server-Side Include (SSI) long file name buffer overflow
7118| [12097] Microsoft IIS redirect error cross-site scripting
7119| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
7120| [11918] Microsoft IIS authentication mechanism could allow an attacker to determine valid user account names
7121| [11537] Microsoft IIS WebDAV service is running on the system
7122| [11533] Microsoft IIS WebDAV long request buffer overflow
7123| [10590] Microsoft Internet Information Server (IIS) MS02-062 patch
7124| [10504] Microsoft IIS script source access could be bypassed to upload .COM files
7125| [10503] Microsoft IIS WebDAV memory allocation denial of service
7126| [10502] Microsoft IIS out-of-process applications could be used to gain elevated privileges
7127| [10501] Microsoft IIS administrative Web pages cross-site scripting
7128| [10370] Microsoft IIS HTTP HOST header denial of service
7129| [10294] Microsoft IIS .idc extension error message cross-site scripting
7130| [10184] Microsoft IIS 5.0 resource utilization denial of service
7131| [9791] Microsoft Exchange IIS license exhaustion denial of service
7132| [9580] Microsoft IIS SMTP service encapsulated addresses could allow mail relaying
7133| [9327] Microsoft IIS ISAPI HTR chunked encoding heap buffer overflow
7134| [9123] Microsoft IIS 5.0 Log Files Directory Permission Exposure
7135| [8853] Microsoft IIS CodeBrws.asp sample script can be used to view arbitrary file source code
7136| [8811] Microsoft IIS MS02-018 patch is not installed on the system
7137| [8804] Microsoft IIS redirected URL error cross-site scripting
7138| [8803] Microsoft IIS HTTP error page cross-site scripting
7139| [8802] Microsoft IIS Help File search cross-site scripting
7140| [8801] Microsoft IIS FTP session status request denial of service
7141| [8800] Microsoft IIS FrontPage Server Extensions and ASP.NET ISAPI filter error handling denial of service
7142| [8799] Microsoft IIS HTR ISAPI ISM.DLL extension buffer overflow
7143| [8798] Microsoft IIS SSI safety check buffer overflow
7144| [8797] Microsoft IIS ASP HTTP header parsing buffer overflow
7145| [8796] Microsoft IIS ASP data transfer heap buffer overflow
7146| [8795] Microsoft IIS ASP chunked encoding heap buffer overflow
7147| [8388] Microsoft Windows NT Server with IIS 4.0 could allow users to bypass "
7148| [8385] Microsoft IIS specially-crafted request reveals IP address
7149| [8382] Microsoft IIS authentication error messages reveal configuration information
7150| [8191] Microsoft IIS 5.1 specially-crafted .cnf file request could reveal file contents
7151| [8174] Microsoft IIS 5.1 .cnf file request could reveal sensitive information
7152| [8056] Microsoft IIS is running on the system
7153| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
7154| [7691] Microsoft IIS HTTP GET request with false "
7155| [7640] Microsoft IIS is present on the system
7156| [7613] Microsoft IIS allows attackers to create fake log entries
7157| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
7158| [7559] Microsoft Index Server installed with IIS 4.0 could allow a local attacker to obtain physical path information
7159| [7558] Microsoft IIS FileSystemObject in showfile.asp could allow remote attackers to read arbitrary files
7160| [7202] Microsoft IIS 4.0/5.0 escaped percent found
7161| [7201] Microsoft IIS 4.0/5.0 malformed double percent sequence
7162| [7199] Microsoft IIS 4.0/5.0 malformed hex sequence
7163| [6995] Microsoft IIS %u Unicode wide character encoding detected
7164| [6994] Microsoft IIS %u Unicode encoding detected
7165| [6985] Microsoft IIS relative path usage in system file process table could allow elevated privileges
7166| [6984] Microsoft IIS specially-crafted SSI directives buffer overflow
7167| [6983] Microsoft IIS invalid MIME header denial of service
7168| [6982] Microsoft IIS WebDAV long invalid request denial of service
7169| [6981] Microsoft IIS URL redirection denial of service
7170| [6963] Microsoft IIS HTTPS connection could reveal internal IP address
7171| [6858] Microsoft IIS cross-site scripting patch denial of service
7172| [6800] Microsoft IIS device file request can crash the ASP processor
7173| [6742] Microsoft IIS reveals .asp source code with Unicode extensions
7174| [6705] Microsoft IIS idq.dll ISAPI extension buffer overflow
7175| [6549] Microsoft IIS WebDAV lock method memory leak can cause a denial of service
7176| [6545] Microsoft IIS FTP weak domain authentication
7177| [6535] Microsoft IIS FTP wildcard processing function denial of service
7178| [6534] Microsoft IIS URL decoding error could allow remote code execution
7179| [6485] Microsoft IIS 5.0 ISAPI Internet Printing Protocol extension buffer overflow
7180| [6205] Microsoft IIS WebDAV denial of service
7181| [6171] Microsoft IIS and Exchange malformed URL request denial of service
7182| [6029] Microsoft IIS CmdAsp could allow remote attackers to gain privileges
7183| [5903] Microsoft IIS 5.0 allows the viewing of files through malformed URL
7184| [5823] Microsoft IIS Web form submission denial of service
7185| [5729] Microsoft IIS Far East editions file disclosure
7186| [5510] Microsoft Internet Information Service (IIS) ISAPI buffer overflow
7187| [5470] Microsoft Internet Information Service (IIS) invalid executable filename passing
7188| [5441] Microsoft IIS .htw cross-site scripting
7189| [5377] Microsoft IIS Unicode translation error allows remote command execution
7190| [5335] Microsoft IIS Index Server directory traversal
7191| [5202] Microsoft IIS invalid URL allows attackers to crash service
7192| [5156] Microsoft IIS Cross-Site Scripting
7193| [5106] Microsoft IIS 4.0 discloses internal IP addresses
7194| [5104] Microsoft IIS allows remote attackers to obtain source code fragments using +.htr
7195| [5071] Microsoft IIS canonicalization error applies incorrect permissions to certain types of files
7196| [4960] Microsoft IIS on Win2kPro security button restriction
7197| [4951] Microsoft IIS absent directory browser argument
7198| [4790] Microsoft IIS \mailroot\pickup directory denial of service
7199| [4757] Microsoft IIS server-side includes (SSI) #exec directive
7200| [4558] Microsoft IIS is installed on a domain controller
7201| [4448] Microsoft IIS ISM.DLL could allow users to read file contents
7202| [4430] Microsoft IIS malformed URL extension data denial of service
7203| [4392] Microsoft IIS could reveal source code of ASP files in some virtual directories
7204| [4302] Microsoft IIS malformed AuthChangUrl request can cause the server to stop servicing requests
7205| [4279] Microsoft IIS escape characters denial of service
7206| [4204] Microsoft IIS virtual UNC share source read
7207| [4183] Microsoft IIS could disclose path of network shares
7208| [4117] Microsoft IIS chunked encoding post or put denial of service
7209| [3986] Microsoft IIS ASP could be used to gain sensitive information
7210| [3892] Microsoft IIS Long URL with excessive forward slashes passed to ASP causes an access violation
7211| [3306] Microsoft IIS could allow remote access to servers marked as Restrict Access
7212| [3115] Microsoft IIS and SiteServer denial of service caused by malformed HTTP requests
7213| [2675] Microsoft IIS 4.0 samples installation on Web server
7214| [2673] Microsoft IIS samples installation on Web server
7215| [2671] Microsoft IIS Passive FTP patch not applied (asp.dll out of date)
7216| [2670] Microsoft IIS Passive FTP patch not applied (wam.dll out of date)
7217| [2669] Microsoft IIS Passive FTP patch not applied (w3svc.dll out of date)
7218| [2668] Microsoft IIS Passive FTP patch not applied (infocomm.dll out of date)
7219| [2662] Microsoft IIS CGI overflow
7220| [2412] Microsoft IIS account is member of Domain Users
7221| [2381] Microsoft IIS and SiteServer Showcode.asp sample file allows remote file viewing
7222| [2302] Microsoft IIS using double-byte code pages could allow remote attackers to retrieve source code
7223| [2282] Microsoft IIS bdir.htr allows remote traversal of directory structure
7224| [2281] Microsoft IIS buffer overflow in HTR requests can allow remote code execution
7225| [2229] Microsoft IIS ExAir sample site denial of service
7226| [2185] Microsoft IIS and Site Server sample programs can be used to remotely view files
7227| [1823] Microsoft IIS long GET request denial of service
7228| [1735] Microsoft IIS with Visual InterDev no authentication
7229| [1656] Microsoft IIS 4.0 allows user to avoid HTTP request logging
7230| [1654] Microsoft IIS remote FTP buffer overflow
7231| [1638] Microsoft IIS crashes processing some GET commands
7232| [1530] Microsoft IIS 3.0 newdsn.exe sample application allows remote creation of arbitrary files
7233| [1368] Microsoft IIS 4.0 allows file execution in the Web site directory
7234| [1273] Microsoft IIS special characters allowed in shell
7235| [1272] Microsoft IIS CGI scripts run as system
7236| [1271] Microsoft IIS version 2 installed
7237| [1270] Microsoft IIS incorrect permissions on restricted item
7238| [1269] Microsoft IIS incorrect Web permissions
7239| [1268] Microsoft IIS SSI #exec enabled
7240| [1216] Microsoft IIS SSL patch not applied
7241| [1215] Microsoft IIS Passive FTP patch not applied
7242| [1212] Microsoft IIS unauthorized ODBC data access with RDS
7243| [1125] Microsoft IIS ASP DATA issue could reveal source code
7244| [949] Microsoft IIS server script debugging enabled
7245| [948] Microsoft IIS samples installed on Web server
7246| [936] Microsoft IIS NTFS insecure permissions
7247| [935] Microsoft IIS executable paths
7248| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
7249| [336] Microsoft IIS ASP dot bug
7250| [256] Microsoft IIS can be remotely crashed by excessively long client requests
7251| [7] Microsoft IIS ASP source visible
7252|
7253| Exploit-DB - https://www.exploit-db.com:
7254| [19033] microsoft iis 6.0 and 7.5 - Multiple Vulnerabilities
7255| [17476] Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]
7256|
7257| OpenVAS (Nessus) - http://www.openvas.org:
7258| [902914] Microsoft IIS GET Request Denial of Service Vulnerability
7259| [902796] Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability
7260| [902694] Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)
7261| [901120] Microsoft IIS Authentication Remote Code Execution Vulnerability (982666)
7262| [900944] Microsoft IIS FTP Server 'ls' Command DOS Vulnerability
7263| [900874] Microsoft IIS FTP Service Remote Code Execution Vulnerabilities (975254)
7264| [900711] Microsoft IIS WebDAV Remote Authentication Bypass Vulnerability
7265| [900567] Microsoft IIS Security Bypass Vulnerability (970483)
7266| [802806] Microsoft IIS Default Welcome Page Information Disclosure Vulnerability
7267| [801669] Microsoft Windows IIS FTP Server DOS Vulnerability
7268| [801520] Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability
7269| [100952] Microsoft IIS FTPd NLST stack overflow
7270| [11443] Microsoft IIS UNC Mapped Virtual Host Vulnerability
7271| [10680] Test Microsoft IIS Source Fragment Disclosure
7272| [903041] Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)
7273| [903037] Microsoft JScript and VBScript Engines Remote Code Execution Vulnerability (2706045)
7274| [903036] Microsoft Windows Networking Components Remote Code Execution Vulnerabilities (2733594)
7275| [903035] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)
7276| [903033] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2718523)
7277| [903026] Microsoft Office Remote Code Execution Vulnerabilities (2663830)
7278| [903017] Microsoft Office Remote Code Execution Vulnerability (2639185)
7279| [903000] Microsoft Expression Design Remote Code Execution Vulnerability (2651018)
7280| [902936] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)
7281| [902934] Microsoft .NET Framework Remote Code Execution Vulnerability (2745030)
7282| [902933] Microsoft Windows Shell Remote Code Execution Vulnerabilities (2727528)
7283| [902932] Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities (2761451)
7284| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
7285| [902930] Microsoft Office Remote Code Execution Vulnerabilities (2720184)
7286| [902923] Microsoft Internet Explorer Multiple Vulnerabilities (2722913)
7287| [902922] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2723135)
7288| [902921] Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)
7289| [902920] Microsoft Office Remote Code Execution Vulnerability (2731879)
7290| [902919] Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)
7291| [902916] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2711167)
7292| [902913] Microsoft Office Remote Code Execution Vulnerabilities-2663830 (Mac OS X)
7293| [902912] Microsoft Office Word Remote Code Execution Vulnerability-2680352 (Mac OS X)
7294| [902911] Microsoft Office Word Remote Code Execution Vulnerability (2680352)
7295| [902910] Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)
7296| [902909] Microsoft Windows Service Pack Missing Multiple Vulnerabilities
7297| [902908] Microsoft Windows DirectWrite Denial of Service Vulnerability (2665364)
7298| [902906] Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)
7299| [902900] Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
7300| [902846] Microsoft Windows TLS Protocol Information Disclosure Vulnerability (2655992)
7301| [902845] Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)
7302| [902842] Microsoft Lync Remote Code Execution Vulnerabilities (2707956)
7303| [902841] Microsoft .NET Framework Remote Code Execution Vulnerability (2706726)
7304| [902839] Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability
7305| [902833] Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
7306| [902832] MS Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
7307| [902829] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2664258)
7308| [902828] Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)
7309| [902818] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
7310| [902817] Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)
7311| [902811] Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities (2651026)
7312| [902807] Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
7313| [902798] Microsoft SMB Signing Enabled and Not Required At Server
7314| [902797] Microsoft SMB Signing Information Disclosure Vulnerability
7315| [902785] Microsoft AntiXSS Library Information Disclosure Vulnerability (2607664)
7316| [902784] Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)
7317| [902783] Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)
7318| [902782] MicroSoft Windows Server Service Remote Code Execution Vulnerability (921883)
7319| [902766] Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)
7320| [902746] Microsoft Active Accessibility Remote Code Execution Vulnerability (2623699)
7321| [902727] Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)
7322| [902708] Microsoft Remote Desktop Protocol Denial of Service Vulnerability (2570222)
7323| [902696] Microsoft Internet Explorer Multiple Vulnerabilities (2761465)
7324| [902693] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)
7325| [902692] Microsoft Office Excel ReadAV Arbitrary Code Execution Vulnerability
7326| [902689] Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
7327| [902688] Microsoft System Center Configuration Manager XSS Vulnerability (2741528)
7328| [902687] Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)
7329| [902686] Microsoft Internet Explorer Multiple Vulnerabilities (2719177)
7330| [902683] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2685939)
7331| [902682] Microsoft Internet Explorer Multiple Vulnerabilities (2699988)
7332| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
7333| [902677] Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)
7334| [902676] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (2688338)
7335| [902670] Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
7336| [902663] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
7337| [902662] MicroSoft SMB Server Trans2 Request Remote Code Execution Vulnerability
7338| [902660] Microsoft SMB Transaction Parsing Remote Code Execution Vulnerability
7339| [902658] Microsoft RDP Server Private Key Information Disclosure Vulnerability
7340| [902649] Microsoft Internet Explorer Multiple Vulnerabilities (2647516)
7341| [902642] Microsoft Internet Explorer Multiple Vulnerabilities (2618444)
7342| [902626] Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)
7343| [902625] Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
7344| [902613] Microsoft Internet Explorer Multiple Vulnerabilities (2559049)
7345| [902609] Microsoft Windows CSRSS Privilege Escalation Vulnerabilities (2507938)
7346| [902598] Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)
7347| [902597] Microsoft Windows Media Remote Code Execution Vulnerability (2648048)
7348| [902596] Microsoft Windows OLE Remote Code Execution Vulnerability (2624667)
7349| [902588] Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability
7350| [902581] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2604930)
7351| [902580] Microsoft Host Integration Server Denial of Service Vulnerabilities (2607670)
7352| [902567] Microsoft Office Remote Code Execution Vulnerabilites (2587634)
7353| [902566] Microsoft Windows WINS Local Privilege Escalation Vulnerability (2571621)
7354| [902552] Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)
7355| [902551] Microsoft .NET Framework Information Disclosure Vulnerability (2567951)
7356| [902523] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)
7357| [902522] Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)
7358| [902518] Microsoft .NET Framework Security Bypass Vulnerability
7359| [902516] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
7360| [902502] Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)
7361| [902501] Microsoft JScript and VBScript Scripting Engines Remote Code Execution Vulnerability (2514666)
7362| [902496] Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
7363| [902495] Microsoft Office Remote Code Execution Vulnerability (2590602)
7364| [902494] Microsoft Office Excel Remote Code Execution Vulnerability (2640241)
7365| [902493] Microsoft Publisher Remote Code Execution Vulnerabilities (2607702)
7366| [902492] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)
7367| [902487] Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
7368| [902484] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)
7369| [902464] Microsoft Visio Remote Code Execution Vulnerabilities (2560978)
7370| [902463] Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)
7371| [902455] Microsoft Visio Remote Code Execution Vulnerability (2560847)
7372| [902445] Microsoft XML Editor Information Disclosure Vulnerability (2543893)
7373| [902443] Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
7374| [902440] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)
7375| [902430] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)
7376| [902425] Microsoft Windows SMB Accessible Shares
7377| [902423] Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)
7378| [902411] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)
7379| [902410] Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)
7380| [902403] Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability
7381| [902395] Microsoft Bluetooth Stack Remote Code Execution Vulnerability (2566220)
7382| [902378] Microsoft Office Excel Remote Code Execution Vulnerabilities (2537146)
7383| [902377] Microsoft Windows OLE Automation Remote Code Execution Vulnerability (2476490)
7384| [902365] Microsoft GDI+ Remote Code Execution Vulnerability (2489979)
7385| [902364] Microsoft Office Remote Code Execution Vulnerabilites (2489293)
7386| [902351] Microsoft Groove Remote Code Execution Vulnerability (2494047)
7387| [902337] Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)
7388| [902336] Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)
7389| [902325] Microsoft Internet Explorer 'CSS Import Rule' Use-after-free Vulnerability
7390| [902324] Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
7391| [902319] Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)
7392| [902290] Microsoft Windows Active Directory SPN Denial of Service (2478953)
7393| [902289] Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)
7394| [902288] Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)
7395| [902287] Microsoft Visio Remote Code Execution Vulnerabilities (2451879)
7396| [902285] Microsoft Internet Explorer Information Disclosure Vulnerability (2501696)
7397| [902281] Microsoft Windows Data Access Components Remote Code Execution Vulnerabilities (2451910)
7398| [902280] Microsoft Windows BranchCache Remote Code Execution Vulnerability (2385678)
7399| [902277] Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)
7400| [902276] Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)
7401| [902274] Microsoft Publisher Remote Code Execution Vulnerability (2292970)
7402| [902269] Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)
7403| [902265] Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)
7404| [902264] Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)
7405| [902263] Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)
7406| [902262] Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)
7407| [902256] Microsoft Windows win32k.sys Driver 'CreateDIBPalette()' BOF Vulnerability
7408| [902255] Microsoft Visual Studio Insecure Library Loading Vulnerability
7409| [902254] Microsoft Office Products Insecure Library Loading Vulnerability
7410| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
7411| [902246] Microsoft Internet Explorer 'toStaticHTML()' Cross Site Scripting Vulnerability
7412| [902243] Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)
7413| [902232] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (978886)
7414| [902231] Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
7415| [902230] Microsoft .NET Common Language Runtime Remote Code Execution Vulnerability (2265906)
7416| [902229] Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)
7417| [902228] Microsoft Office Word Remote Code Execution Vulnerabilities (2269638)
7418| [902227] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
7419| [902226] Microsoft Windows Shell Remote Code Execution Vulnerability (2286198)
7420| [902217] Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability (978212)
7421| [902210] Microsoft IE cross-domain IFRAME gadgets keystrokes steal Vulnerability
7422| [902193] Microsoft .NET Framework XML HMAC Truncation Vulnerability (981343)
7423| [902192] Microsoft Office COM Validation Remote Code Execution Vulnerability (983235)
7424| [902191] Microsoft Internet Explorer Multiple Vulnerabilities (982381)
7425| [902183] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability
7426| [902178] Microsoft Visual Basic Remote Code Execution Vulnerability (978213)
7427| [902176] Microsoft SharePoint '_layouts/help.aspx' Cross Site Scripting Vulnerability
7428| [902166] Microsoft Internet Explorer 'neutering' Mechanism XSS Vulnerability
7429| [902159] Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability (980232)
7430| [902158] Microsoft Office Publisher Remote Code Execution Vulnerability (981160)
7431| [902157] Microsoft 'ISATAP' Component Spoofing Vulnerability (978338)
7432| [902156] Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)
7433| [902155] Microsoft Internet Explorer Multiple Vulnerabilities (980182)
7434| [902151] Microsoft Internet Explorer Denial of Service Vulnerability - Mar10
7435| [902133] Microsoft Office Excel Multiple Vulnerabilities (980150)
7436| [902117] Microsoft DirectShow Remote Code Execution Vulnerability (977935)
7437| [902116] Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)
7438| [902115] Microsoft Kerberos Denial of Service Vulnerability (977290)
7439| [902114] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)
7440| [902112] Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)
7441| [902095] Microsoft Office Excel Remote Code Execution Vulnerability (2269707)
7442| [902094] Microsoft Windows Kernel Mode Drivers Privilege Elevation Vulnerabilities (2160329)
7443| [902093] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)
7444| [902080] Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)
7445| [902069] Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
7446| [902068] Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
7447| [902067] Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (979559)
7448| [902039] Microsoft Visio Remote Code Execution Vulnerabilities (980094)
7449| [902038] Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)
7450| [902033] Microsoft Windows '.ani' file Denial of Service vulnerability
7451| [902015] Microsoft Paint Remote Code Execution Vulnerability (978706)
7452| [901305] Microsoft Windows IP-HTTPS Component Security Feature Bypass Vulnerability (2765809)
7453| [901304] Microsoft Windows File Handling Component Remote Code Execution Vulnerability (2758857)
7454| [901301] Microsoft Windows Kerberos Denial of Service Vulnerability (2743555)
7455| [901212] Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)
7456| [901211] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)
7457| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
7458| [901209] Microsoft Windows Media Center Remote Code Execution Vulnerabilities (2604926)
7459| [901208] Microsoft Internet Explorer Multiple Vulnerabilities (2586448)
7460| [901205] Microsoft Windows Components Remote Code Execution Vulnerabilities (2570947)
7461| [901193] Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
7462| [901183] Internet Information Services (IIS) FTP Service Remote Code Execution Vulnerability (2489256)
7463| [901180] Microsoft Internet Explorer Multiple Vulnerabilities (2482017)
7464| [901169] Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
7465| [901166] Microsoft Office Remote Code Execution Vulnerabilites (2423930)
7466| [901164] Microsoft Windows SChannel Denial of Service Vulnerability (2207566)
7467| [901163] Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))
7468| [901162] Microsoft Internet Explorer Multiple Vulnerabilities (2360131)
7469| [901161] Microsoft ASP.NET Information Disclosure Vulnerability (2418042)
7470| [901151] Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)
7471| [901150] Microsoft Windows Print Spooler Service Remote Code Execution Vulnerability(2347290)
7472| [901140] Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)
7473| [901139] Microsoft Internet Explorer Multiple Vulnerabilities (2183461)
7474| [901119] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)
7475| [901102] Microsoft Windows Media Services Remote Code Execution Vulnerability (980858)
7476| [901097] Microsoft Internet Explorer Multiple Vulnerabilities (978207)
7477| [901095] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)
7478| [901069] Microsoft Office Project Remote Code Execution Vulnerability (967183)
7479| [901065] Microsoft Windows IAS Remote Code Execution Vulnerability (974318)
7480| [901064] Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)
7481| [901063] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
7482| [901048] Microsoft Windows Active Directory Denial of Service Vulnerability (973309)
7483| [901041] Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
7484| [901012] Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)
7485| [900973] Microsoft Office Word Remote Code Execution Vulnerability (976307)
7486| [900965] Microsoft Windows SMB2 Negotiation Protocol Remote Code Execution Vulnerability
7487| [900964] Microsoft .NET Common Language Runtime Code Execution Vulnerability (974378)
7488| [900963] Microsoft Windows Kernel Privilege Escalation Vulnerability (971486)
7489| [900957] Microsoft Windows Patterns & Practices EntLib DOS Vulnerability
7490| [900956] Microsoft Windows Patterns & Practices EntLib Version Detection
7491| [900929] Microsoft JScript Scripting Engine Remote Code Execution Vulnerability (971961)
7492| [900908] Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)
7493| [900907] Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)
7494| [900898] Microsoft Internet Explorer 'XSS Filter' XSS Vulnerabilities - Nov09
7495| [900897] Microsoft Internet Explorer PDF Information Disclosure Vulnerability - Nov09
7496| [900891] Microsoft Internet Denial Of Service Vulnerability - Nov09
7497| [900887] Microsoft Office Excel Multiple Vulnerabilities (972652)
7498| [900886] Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities (969947)
7499| [900881] Microsoft Windows Indexing Service ActiveX Vulnerability (969059)
7500| [900880] Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)
7501| [900879] Microsoft Windows Media Player ASF Heap Overflow Vulnerability (974112)
7502| [900878] Microsoft Products GDI Plus Code Execution Vulnerabilities (957488)
7503| [900877] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
7504| [900876] Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)
7505| [900873] Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)
7506| [900863] Microsoft Internet Explorer 'window.print()' DOS Vulnerability
7507| [900838] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
7508| [900837] Microsoft DHTML Editing Component ActiveX Remote Code Execution Vulnerability (956844)
7509| [900836] Microsoft Internet Explorer Address Bar Spoofing Vulnerability
7510| [900826] Microsoft Internet Explorer 'location.hash' DOS Vulnerability
7511| [900814] Microsoft Windows WINS Remote Code Execution Vulnerability (969883)
7512| [900813] Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)
7513| [900809] Microsoft Visual Studio ATL Remote Code Execution Vulnerability (969706)
7514| [900808] Microsoft Visual Products Version Detection
7515| [900757] Microsoft Windows Media Player '.AVI' File DOS Vulnerability
7516| [900741] Microsoft Internet Explorer Information Disclosure Vulnerability Feb10
7517| [900740] Microsoft Windows Kernel Could Allow Elevation of Privilege (977165)
7518| [900690] Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)
7519| [900689] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371))
7520| [900670] Microsoft Office Excel Remote Code Execution Vulnerabilities (969462)
7521| [900589] Microsoft ISA Server Privilege Escalation Vulnerability (970953)
7522| [900588] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
7523| [900568] Microsoft Windows Search Script Execution Vulnerability (963093)
7524| [900566] Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)
7525| [900476] Microsoft Excel Remote Code Execution Vulnerabilities (968557)
7526| [900465] Microsoft Windows DNS Memory Corruption Vulnerability - Mar09
7527| [900461] Microsoft MSN Live Messneger Denial of Service Vulnerability
7528| [900445] Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
7529| [900404] Microsoft Windows RTCP Unspecified Remote DoS Vulnerability
7530| [900400] Microsoft Internet Explorer Unicode String DoS Vulnerability
7531| [900391] Microsoft Office Publisher Remote Code Execution Vulnerability (969516)
7532| [900366] Microsoft Internet Explorer Web Script Execution Vulnerabilites
7533| [900365] Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
7534| [900337] Microsoft Internet Explorer Denial of Service Vulnerability - Apr09
7535| [900336] Microsoft Windows Media Player MID File Integer Overflow Vulnerability
7536| [900328] Microsoft Internet Explorer Remote Code Execution Vulnerability (963027)
7537| [900314] Microsoft XML Core Service Information Disclosure Vulnerability
7538| [900303] Microsoft Internet Explorer HTML Form Value DoS Vulnerability
7539| [900299] Microsoft Report Viewer Information Disclosure Vulnerability (2578230)
7540| [900297] Microsoft Windows Kernel Denial of Service Vulnerability (2556532)
7541| [900296] Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)
7542| [900295] Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)
7543| [900294] Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)
7544| [900288] Microsoft Distributed File System Remote Code Execution Vulnerabilities (2535512)
7545| [900287] Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)
7546| [900285] Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)
7547| [900282] Microsoft DNS Resolution Remote Code Execution Vulnerability (2509553)
7548| [900281] Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)
7549| [900280] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2508429)
7550| [900279] Microsoft SMB Client Remote Code Execution Vulnerabilities (2511455)
7551| [900278] Microsoft Internet Explorer Multiple Vulnerabilities (2497640)
7552| [900273] Microsoft Remote Desktop Client Remote Code Execution Vulnerability (2508062)
7553| [900267] Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)
7554| [900266] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (2424434)
7555| [900263] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)
7556| [900262] Microsoft Internet Explorer Multiple Vulnerabilities (2416400)
7557| [900261] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386)
7558| [900248] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (981997)
7559| [900246] Microsoft Media Decompression Remote Code Execution Vulnerability (979902)
7560| [900245] Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)
7561| [900241] Microsoft Outlook Express and Windows Mail Remote Code Execution Vulnerability (978542)
7562| [900240] Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)
7563| [900237] Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)
7564| [900236] Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)
7565| [900235] Microsoft Windows Media Player Could Allow Remote Code Execution (979402)
7566| [900232] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (975561)
7567| [900230] Microsoft Windows SMB Server Multiple Vulnerabilities (971468)
7568| [900229] Microsoft Data Analyzer ActiveX Control Vulnerability (978262)
7569| [900228] Microsoft Office (MSO) Remote Code Execution Vulnerability (978214)
7570| [900227] Microsoft Windows Shell Handler Could Allow Remote Code Execution Vulnerability (975713)
7571| [900223] Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)
7572| [900192] Microsoft Internet Explorer Information Disclosure Vulnerability
7573| [900187] Microsoft Internet Explorer Argument Injection Vulnerability
7574| [900178] Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability
7575| [900173] Microsoft Windows Media Player Version Detection
7576| [900172] Microsoft Windows Media Player 'MIDI' or 'DAT' File DoS Vulnerability
7577| [900170] Microsoft iExplorer '&NBSP
7578| [900131] Microsoft Internet Explorer Denial of Service Vulnerability
7579| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
7580| [900120] Microsoft Organization Chart Remote Code Execution Vulnerability
7581| [900108] Microsoft Windows NSlookup.exe Remote Code Execution Vulnerability
7582| [900097] Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution
7583| [900095] Microsoft ISA Server and Forefront Threat Management Gateway DoS Vulnerability (961759)
7584| [900093] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
7585| [900080] Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
7586| [900079] Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)
7587| [900064] Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)
7588| [900063] Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173)
7589| [900061] Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070)
7590| [900058] Microsoft XML Core Services Remote Code Execution Vulnerability (955218)
7591| [900048] Microsoft Excel Remote Code Execution Vulnerability (956416)
7592| [900047] Microsoft Office nformation Disclosure Vulnerability (957699)
7593| [900046] Microsoft Office Remote Code Execution Vulnerabilities (955047)
7594| [900033] Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities (949785)
7595| [900029] Microsoft Office Filters Could Allow Remote Code Execution Vulnerabilities (924090)
7596| [900028] Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)
7597| [900025] Microsoft Office Version Detection
7598| [900006] Microsoft Word Could Allow Remote Code Execution Vulnerability
7599| [900004] Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
7600| [855384] Solaris Update for snmp/mibiisa 108870-36
7601| [855273] Solaris Update for snmp/mibiisa 108869-36
7602| [803028] Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
7603| [803007] Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)
7604| [802912] Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
7605| [802888] Microsoft Windows Media Service Handshake Sequence DoS Vulnerability
7606| [802886] Microsoft Sidebar and Gadgets Remote Code Execution Vulnerability (2719662)
7607| [802864] Microsoft XML Core Services Remote Code Execution Vulnerability (2719615)
7608| [802774] Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)
7609| [802726] Microsoft SMB Signing Disabled
7610| [802708] Microsoft Internet Explorer Code Execution and DoS Vulnerabilities
7611| [802634] Microsoft Windows Unauthorized Digital Certificates Spoofing Vulnerability (2718704)
7612| [802500] Microsoft Windows TrueType Font Parsing Privilege Elevation Vulnerability
7613| [802468] Compatibility Issues Affecting Signed Microsoft Binaries (2749655)
7614| [802462] Microsoft ActiveSync Null Pointer Dereference Denial Of Service Vulnerability
7615| [802426] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)
7616| [802383] Microsoft Windows Color Control Panel Privilege Escalation Vulnerability
7617| [802379] Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability
7618| [802287] Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability
7619| [802286] Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities
7620| [802260] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
7621| [802203] Microsoft Internet Explorer Cookie Hijacking Vulnerability
7622| [802202] Microsoft Internet Explorer Cookie Hijacking Vulnerability
7623| [802140] Microsoft Explorer HTTPS Sessions Multiple Vulnerabilities (Windows)
7624| [802136] Microsoft Windows Insecure Library Loading Vulnerability (2269637)
7625| [801991] Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability
7626| [801966] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)
7627| [801935] Microsoft Silverlight Multiple Memory Leak Vulnerabilities
7628| [801934] Microsoft Silverlight Version Detection
7629| [801914] Microsoft Windows IPv4 Default Configuration Security Bypass Vulnerability
7630| [801876] Microsoft Internet Explorer 'msxml.dll' Information Disclosure Vulnerability
7631| [801831] Microsoft Internet Explorer Incorrect GUI Display Vulnerability
7632| [801830] Microsoft Internet Explorer 'ReleaseInterface()' Remote Code Execution Vulnerability
7633| [801725] Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)
7634| [801721] Microsoft Active Directory Denial of Service Vulnerability (953235)
7635| [801719] Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)
7636| [801718] Microsoft Windows Vista Information Disclosure Vulnerability (931213)
7637| [801717] Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability
7638| [801716] Microsoft Outlook Express/Windows Mail MHTML URI Handler Information Disclosure Vulnerability (929123)
7639| [801715] Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
7640| [801713] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
7641| [801707] Microsoft Internet Explorer mshtml.dll Remote Memory Corruption Vulnerability (942615)
7642| [801706] Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)
7643| [801705] Microsoft Windows TCP/IP Denial of Service Vulnerability (946456)
7644| [801704] Microsoft Internet Information Services Privilege Elevation Vulnerability (942831)
7645| [801702] Microsoft Internet Explorer HTML Rendering Remote Memory Corruption Vulnerability (944533)
7646| [801701] Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)
7647| [801677] Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerabilities
7648| [801606] Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability
7649| [801598] Microsoft Windows2k3 Active Directory 'BROWSER ELECTION' Buffer Overflow Vulnerability
7650| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
7651| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
7652| [801595] Microsoft Office Excel Axis and Art Object Parsing Remote Code Execution Vulnerabilities
7653| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
7654| [801580] Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities
7655| [801527] Microsoft Windows 32-bit Platforms Unspecified vulnerabilities
7656| [801491] Microsoft 'hxvz.dll' ActiveX Control Memory Corruption Vulnerability (948881)
7657| [801489] Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)
7658| [801488] Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability (947864)
7659| [801487] Microsoft Windows Kernel Usermode Callback Local Privilege Elevation Vulnerability (941693)
7660| [801486] Microsoft Windows Speech Components Voice Recognition Command Execution Vulnerability (950760)
7661| [801485] Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)
7662| [801484] Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)
7663| [801483] Microsoft Windows Search Remote Code Execution Vulnerability (959349)
7664| [801482] Microsoft Windows ASP.NET Denial of Service Vulnerability(970957)
7665| [801481] Microsoft Wireless LAN AutoConfig Service Remote Code Execution Vulnerability (970710)
7666| [801480] Microsoft Web Services on Devices API Remote Code Execution Vulnerability (973565)
7667| [801479] Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)
7668| [801457] Microsoft Windows Address Book Insecure Library Loading Vulnerability
7669| [801456] Microsoft Windows Progman Group Converter Insecure Library Loading Vulnerability
7670| [801349] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability (June-10)
7671| [801348] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability -june 10
7672| [801345] Microsoft .NET 'ASP.NET' Cross-Site Scripting vulnerability
7673| [801344] Microsoft .NET '__VIEWSTATE' Cross-Site Scripting vulnerability
7674| [801342] Microsoft ASP.NET Cross-Site Scripting vulnerability
7675| [801333] Microsoft Windows Kernel 'win32k.sys' Multiple DOS Vulnerabilities
7676| [801330] Microsoft Internet Explorer Cross Site Data Leakage Vulnerability
7677| [801109] Microsoft IE CA SSL Certificate Security Bypass Vulnerability - Oct09
7678| [801090] Microsoft Windows Indeo Codec Multiple Vulnerabilities
7679| [800968] Microsoft SharePoint Team Services Information Disclosure Vulnerability
7680| [800910] Microsoft Internet Explorer Buffer Overflow Vulnerability - Jul09
7681| [800902] Microsoft Internet Explorer XSS Vulnerability - July09
7682| [800872] Microsoft Internet Explorer 'li' Element DoS Vulnerability - Sep09
7683| [800863] Microsoft Internet Explorer XML Document DoS Vulnerability - Aug09
7684| [800862] Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
7685| [800861] Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability
7686| [800845] Microsoft Office Web Components ActiveX Control Code Execution Vulnerability
7687| [800829] Microsoft Video ActiveX Control 'msvidctl.dll' BOF Vulnerability
7688| [800742] Microsoft Internet Explorer Unspecified vulnerability
7689| [800700] Microsoft GDIPlus PNG Infinite Loop Vulnerability
7690| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
7691| [800669] Microsoft Internet Explorer Denial Of Service Vulnerability - July09
7692| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
7693| [800505] Microsoft HTML Help Workshop buffer overflow vulnerability
7694| [800504] Microsoft Windows XP SP3 denial of service vulnerability
7695| [800481] Microsoft SharePoint Cross Site Scripting Vulnerability
7696| [800480] Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability
7697| [800466] Microsoft Windows TLS/SSL Spoofing Vulnerability (977377)
7698| [800461] Microsoft Internet Explorer Information Disclosure Vulnerability (980088)
7699| [800442] Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
7700| [800429] Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)
7701| [800382] Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)
7702| [800347] Microsoft Internet Explorer Clickjacking Vulnerability
7703| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
7704| [800337] Microsoft Internet Explorer NULL Pointer DoS Vulnerability
7705| [800332] Microsoft Windows Live Messenger Information Disclosure Vulnerability
7706| [800331] Microsoft Windows Live Messenger Client Version Detection
7707| [800328] Integer Overflow vulnerability in Microsoft Windows Media Player
7708| [800310] Microsoft Windows Media Services nskey.dll ActiveX BOF Vulnerability
7709| [800267] Microsoft GDIPlus Library File Integer Overflow Vulnerability
7710| [800218] Microsoft Money 'prtstb06.dll' Denial of Service vulnerability
7711| [800217] Microsoft Money Version Detection
7712| [800209] Microsoft Internet Explorer Version Detection (Win)
7713| [800208] Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities
7714| [800083] Microsoft Outlook Express Malformed MIME Message DoS Vulnerability
7715| [800082] Microsoft SQL Server sp_replwritetovarbin() BOF Vulnerability
7716| [800023] Microsoft Windows Image Color Management System Code Execution Vulnerability (952954)
7717| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
7718| [102059] Microsoft Windows Vector Markup Language Buffer Overflow (938127)
7719| [102055] Microsoft Windows GDI Multiple Vulnerabilities (925902)
7720| [102053] Microsoft Windows Vector Markup Language Vulnerabilities (929969)
7721| [102015] Microsoft RPC Interface Buffer Overrun (KB824146)
7722| [101100] Vulnerabilities in Microsoft ATL Could Allow Remote Code Execution (973908)
7723| [101017] Microsoft MS03-018 security check
7724| [101016] Microsoft MS03-022 security check
7725| [101015] Microsoft MS03-034 security check
7726| [101014] Microsoft MS00-078 security check
7727| [101012] Microsoft MS03-051 security check
7728| [101010] Microsoft Security Bulletin MS05-004
7729| [101009] Microsoft Security Bulletin MS06-033
7730| [101007] Microsoft dotNET version grabber
7731| [101006] Microsoft Security Bulletin MS06-056
7732| [101005] Microsoft Security Bulletin MS07-040
7733| [101004] Microsoft MS04-017 security check
7734| [101003] Microsoft MS00-058 security check
7735| [101000] Microsoft MS00-060 security check
7736| [100950] Microsoft DNS server internal hostname disclosure detection
7737| [100624] Microsoft Windows SMTP Server DNS spoofing vulnerability
7738| [100607] Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability
7739| [100596] Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
7740| [100283] Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability
7741| [100062] Microsoft Remote Desktop Protocol Detection
7742| [90024] Windows Vulnerability in Microsoft Jet Database Engine
7743| [80007] Microsoft MS00-06 security check
7744| [13752] Denial of Service (DoS) in Microsoft SMS Client
7745| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
7746| [11874] IIS Service Pack - 404
7747| [11808] Microsoft RPC Interface Buffer Overrun (823980)
7748| [11433] Microsoft ISA Server DNS - Denial Of Service (MS03-009)
7749| [11217] Microsoft's SQL Version Query
7750| [11177] Flaw in Microsoft VM Could Allow Code Execution (810030)
7751| [11146] Microsoft RDP flaws could allow sniffing and DOS(Q324380)
7752| [11142] IIS XSS via IDC error
7753| [11067] Microsoft's SQL Hello Overflow
7754| [11003] IIS Possible Compromise
7755| [10993] IIS ASP.NET Application Trace Enabled
7756| [10991] IIS Global.asa Retrieval
7757| [10936] IIS XSS via 404 error
7758| [10862] Microsoft's SQL Server Brute Force
7759| [10755] Microsoft Exchange Public Folders Information Leak
7760| [10732] IIS 5.0 WebDav Memory Leakage
7761| [10699] IIS FrontPage DoS II
7762| [10695] IIS .IDA ISAPI filter applied
7763| [10674] Microsoft's SQL UDP Info Query
7764| [10673] Microsoft's SQL Blank Password
7765| [10671] IIS Remote Command Execution
7766| [10667] IIS 5.0 PROPFIND Vulnerability
7767| [10661] IIS 5 .printer ISAPI filter applied
7768| [10657] NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability
7769| [10585] IIS FrontPage DoS
7770| [10576] Check for dangerous IIS default files
7771| [10575] Check for IIS .cnf file leakage
7772| [10573] IIS 5.0 Sample App reveals physical path of web root
7773| [10572] IIS 5.0 Sample App vulnerable to cross-site scripting attack
7774| [10537] IIS directory traversal
7775| [10492] IIS IDA/IDQ Path Disclosure
7776| [10491] ASP/ASA source using Microsoft Translate f: bug
7777| [10144] Microsoft SQL TCP/IP listener is running
7778|
7779| SecurityTracker - https://www.securitytracker.com:
7780| [1027751] Microsoft Internet Information Server (IIS) FTP Server Lets Remote Users Obtain Files and Local Users Obtain Passwords
7781| [1027223] Microsoft IIS Web Server Discloses Potentially Sensitive Information to Remote Users
7782| [1024921] Microsoft IIS FTP Server Lets Remote Users Deny Service
7783| [1024496] Microsoft Internet Information Server (IIS) Web Server Stack Overflow in Reading POST Data Lets Remote Users Deny Service
7784| [1023387] Microsoft Internet Information Services (IIS) Filename Extension Parsing Configuration Error May Let Users Bypass Security Controls
7785| [1022792] Microsoft Internet Information Server (IIS) FTP Server Buffer Overflows Let Remote Authenticated Users Execute Arbitrary Code and Deny Service
7786| [1016466] Microsoft Internet Information Server (IIS) Buffer Overflow in Processing ASP Pages Lets Remote Authenticated Users Execute Arbitrary Code
7787| [1015376] Microsoft IIS Lets Remote Users Deny Service or Execute Arbitrary Code With Malformed HTTP GET Requests
7788| [1015049] Microsoft Internet Explorer Drag-and-Drop Timing May Let Remote Users Install Arbitrary Files
7789| [1014777] Microsoft IIS ASP Error Page May Disclose System Information in Certain Cases
7790| [1011633] Microsoft IIS WebDAV XML Message Handler Error Lets Remote Users Deny Service
7791| [1010692] Microsoft IIS 4.0 Buffer Overflow in Redirect Function Lets Remote Users Execute Arbitrary Code
7792| [1010610] Microsoft IIS Web Server May Disclose Private IP Addresses in Certain Cases
7793| [1010079] Microsoft IIS ASP Script Cookie Processing Flaw May Disclose Application Information to Remote Users
7794| [1008563] Microsoft IIS Fails to Log HTTP TRACK Requests
7795| [1007262] Microsoft IIS 6.0 Vulnerabilities Permit Cross-Site Scripting and Password Changing Attacks Against Administrators
7796| [1007059] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Has Another Buffer Overflow That Lets Remote Execute Arbitrary Code
7797| [1006867] Microsoft IIS Buffer Overflow Lets Remote Users With Upload Privileges Execute Code - Remote Users Can Also Crash the Service
7798| [1006866] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Lets Remote Execute Arbitrary Code
7799| [1006704] Microsoft IIS Authentication Manager Discloses Validity of User Names to Remote Users
7800| [1006305] Microsoft IIS Web Server WebDAV Buffer Overflow Lets Remote Users Execute Arbitrary Code
7801| [1005505] Microsoft Internet Information Server (IIS) Script Access Control Bug May Let Remote Authenticated Users Upload Unauthorized Executable Files
7802| [1005504] Microsoft Internet Information Server (IIS) WebDAV Memory Allocation Flaw Lets Remote Users Crash the Server
7803| [1005503] Microsoft Internet Information Server (IIS) Administrative Pages Allow Cross-Site Scripting Attacks
7804| [1005502] Microsoft Internet Information Server (IIS) Out-of-Process Access Control Bug Lets Certain Authenticated Users Gain Full Control of the Server
7805| [1005083] Microsoft Internet Information Server (IIS) Web Server Fails to Properly Validate Client-side Certificates, Allowing Remote Users to Impersonate Other Users or Certificate Issuers
7806| [1004757] Microsoft IIS SMTP Service Encapsulation Bug Lets Remote Users Relay Mail and Send SPAM Via the Service
7807| [1004646] ColdFusion MX Buffer Overflow When Used With Microsoft Internet Information Server (IIS) Lets Remote Users Crash the IIS Web Server or Execute Arbitrary Code
7808| [1004526] Microsoft Internet Information Server (IIS) Heap Overflow in HTR ISAPI Extension While Processing Chunked Encoded Data Lets Remote Users Execute Arbitrary Code
7809| [1004044] Cisco CallManager Affected by Microsoft Internet Information Server (IIS) Bugs
7810| [1004032] Microsoft Internet Information Server (IIS) FTP STAT Command Bug Lets Remote Users Crash Both the FTP and the Web Services
7811| [1004031] Microsoft Internet Information Server (IIS) URL Length Bug Lets Remote Users Crash the Web Service
7812| [1004011] Microsoft Internet Information Server (IIS) Buffer Overflow in ASP Server-Side Include Function May Let Remote Users Execute Arbitrary Code on the Web Server
7813| [1004006] Microsoft Internet Information Server (IIS) Off-By-One Heap Overflow in .HTR Processing May Let Remote Users Execute Arbitrary Code on the Server
7814| [1003224] Microsoft Internet Information Server (IIS) Version 4 Lets Local Users Modify the Log File Undetected
7815| [1002778] Microsoft Internet Information Server (IIS) Lets Remote Users Create Bogus Web Log Entries
7816| [1002733] Microsoft IIS 4.0 Configuration Error May Allow Remote Users to Obtain Physical Directory Path Information
7817| [1002651] Microsoft Internet Information Server (IIS) May Disclose PHP Scripting Source Code
7818| [1002212] Microsoft IIS Web Server Contains Multiple Vulnerabilities That Allow Local Users to Gain System Privileges and Allow Remote Users to Cause the Web Server to Crash
7819| [1002161] Microsoft Internet Information Server (IIS) Web Server Discloses Internal IP Addresses or NetBIOS Host Names to Remote Users
7820| [1001818] Microsoft Internet Information Server (IIS) Web Server Discloses ASP Source Code When Installed on FAT-based Filesystem
7821| [1001576] eEye Digital Security's SecureIIS Application Firewall for Microsoft Web Servers Fails to Filter Certain Web URL Characters, Allowing Remote Users to Bypass the SecureIIS Firewall
7822| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
7823| [1001530] Microsoft IIS Web Server Allows Remote Users to Execute Commands on the Server Due to CGI Decoding Error
7824| [1001483] Microsoft IIS Web Server Lets Remote Users Restart the Web Server with Another Specially Crafted PROPFIND XML Command
7825| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
7826| [1001402] Microsoft IIS Web Server Can Be Effectively Shutdown By Certain Internal-Network Attacks When The Underlying OS Supports User Account Lockouts
7827| [1001116] Microsoft Personal Web Server Contains An Old Internet Information Server (IIS) Vulnerability Allowing Unauthorized Directory Listings and Possible Code Execution For Remote Users
7828| [1001050] Microsoft IIS 5.0 Web Server Can Be Restarted Remotely By Any User
7829| [1028908] Microsoft Active Directory Federation Services Discloses Account Information to Remote Users
7830| [1028905] (Microsoft Issues Fix for Exchange Server) Oracle Fusion Middleware Bugs Let Remote Users Deny Service and Access and Modify Data
7831| [1028904] (Microsoft Issues Fix for Exchange Server) Oracle PeopleSoft Products Bugs Let Remote Users Partially Access and Modify Data and Partially Deny Service
7832| [1028903] Microsoft Windows Unicode Scripts Processor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
7833| [1028902] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
7834| [1028759] (Microsoft Issues Fix for Internet Explorer) Adobe Flash Player Buffer Overflows Let Remote Users Execute Arbitrary Code
7835| [1028756] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
7836| [1028755] Microsoft Silverlight Null Pointer Dereference Lets Remote Users Execute Arbitrary Code
7837| [1028754] Microsoft Windows Defender Pathname Bug Lets Local Users Gain Elevated Privileges
7838| [1028752] Microsoft DirectShow GIF Image Processing Flaw Lets Remote Users Execute Arbitrary Code
7839| [1028751] Microsoft Office TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
7840| [1028750] Microsoft Visual Studio .NET TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
7841| [1028749] Microsoft Lync TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
7842| [1028748] Microsoft Windows GDI+ TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
7843| [1028745] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
7844| [1028651] Microsoft Internet Explorer Multiple Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
7845| [1028650] Microsoft Office Buffer Overflow in PNG Image Processing Lets Remote Users Execute Arbitrary Code
7846| [1028560] Microsoft Visio Discloses Information to Remote Users
7847| [1028558] Microsoft .NET Flaws Let Remote Users Bypass Authentication and Bypass XML File Signature Verification
7848| [1028557] Microsoft Malware Protection Engine Flaw Lets Remote Users Execute Arbitrary Code
7849| [1028553] Microsoft Word RTF Shape Data Parsing Error Lets Remote Users Execute Arbitrary Code
7850| [1028552] Microsoft Publisher Multiple Bugs Let Remote Users Execute Arbitrary Code
7851| [1028551] Microsoft Lync Object Access Flaw Lets Remote Users Execute Arbitrary Code
7852| [1028550] Microsoft Office Communicator Object Access Flaw Lets Remote Users Execute Arbitrary Code
7853| [1028545] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
7854| [1028514] Microsoft Internet Explorer Object Access Bug Lets Remote Users Execute Arbitrary Code
7855| [1028412] Microsoft SharePoint Server Discloses Files to Remote Authenticated Users
7856| [1028411] Microsoft Office Web Apps Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
7857| [1028410] Microsoft InfoPath Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
7858| [1028409] Microsoft Groove Server Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
7859| [1028408] Microsoft SharePoint Input Validation Flaw in HTML Sanitization Component Permits Cross-Site Scripting Attacks
7860| [1028405] Microsoft Active Directory LDAP Processing Flaw Lets Remote Users Deny Service
7861| [1028404] Microsoft Antimalware Client Path Name Flaw Lets Local Users Gain Elevated Privileges
7862| [1028398] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
7863| [1028281] Microsoft Office for Mac HTML Loading Bug Lets Remote Users Obtain Potentially Sensitive Information
7864| [1028279] Microsoft OneNote Buffer Validation Flaw Lets Remote Users Obtain Potentially Sensitive Information
7865| [1028278] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting and Denial of Service Attacks
7866| [1028276] Microsoft Visio Viewer Tree Object Type Confusion Error Lets Remote Users Execute Arbitrary Code
7867| [1028275] Microsoft Internet Explorer Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
7868| [1028273] Microsoft Silverlight Memory Pointer Dereference Lets Remote Users Execute Arbitrary Code
7869| [1028123] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
7870| [1028119] Microsoft DirectShow Media Decompression Flaw Lets Remote Users Execute Arbitrary Code
7871| [1028117] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Access Information Across Domains
7872| [1028116] Microsoft Internet Explorer Vector Markup Language Memory Corruption Error Lets Remote Users Execute Arbitrary Code
7873| [1027949] Microsoft .NET Open Data (OData) Protocol Bug Lets Remote Users Deny Service
7874| [1027948] Microsoft System Center Configuration Manager Input Validation Flaws Permit Cross-Site Scripting Attacks
7875| [1027945] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
7876| [1027943] Microsoft XML Core Services (MSXML) XML Parsing Flaws Let Remote Users Execute Arbitrary Code
7877| [1027934] Microsoft Windows Includes Some Invalid TURKTRUST Certificates
7878| [1027930] Microsoft Internet Explorer CDwnBindInfo Object Reuse Flaw Lets Remote Users Execute Arbitrary Code
7879| [1027870] Microsoft Internet Explorer Discloses Mouse Location to Remote Users
7880| [1027859] Microsoft DirectPlay Heap Overflow Lets Remote Users Execute Arbitrary Code
7881| [1027857] Microsoft Exchange Server RSS Feed Bug Lets Remote Users Deny Service
7882| [1027852] Microsoft Word RTF Parsing Error Lets Remote Users Execute Arbitrary Code
7883| [1027851] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
7884| [1027753] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
7885| [1027752] Microsoft Excel Buffer Overflow, Memory Corruption, and Use-After-Free Errors Let Remote Users Execute Arbitrary Code
7886| [1027749] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
7887| [1027647] EMC NetWorker Module for Microsoft Applications Lets Remote Users Execute Arbitrary Code and Local Users Obtain Passwords
7888| [1027629] Microsoft Office InfoPath HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
7889| [1027628] Microsoft Office Communicator HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
7890| [1027627] Microsoft Lync HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
7891| [1027626] Microsoft SharePoint HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
7892| [1027625] Microsoft Groove Server HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
7893| [1027623] Microsoft SQL Server Input Validation Flaw in Reporting Services Permits Cross-Site Scripting Attacks
7894| [1027621] Microsoft Works Heap Corruption Flaw Lets Remote Users Execute Arbitrary Code
7895| [1027620] Microsoft Kerberos Null Pointer Dereference Lets Remote Users Deny Service
7896| [1027618] Microsoft Word Memory Errors Let Remote Users Execute Arbitrary Code
7897| [1027555] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
7898| [1027538] Microsoft Internet Explorer execCommand Flaw Lets Remote Users Execute Arbitrary Code
7899| [1027512] Microsoft System Center Configuration Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
7900| [1027511] Microsoft Visual Studio Team Foundation Server Input Validation Flaw Permits Cross-Site Scripting Attacks
7901| [1027394] Microsoft Visio Buffer Overflow in Processing DXF Format Files Lets Remote Users Execute Arbitrary Code
7902| [1027393] Microsoft Office CGM Graphics File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
7903| [1027392] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
7904| [1027390] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
7905| [1027389] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7906| [1027385] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7907| [1027384] Microsoft Host Integration Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7908| [1027383] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7909| [1027381] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7910| [1027380] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7911| [1027295] Microsoft SharePoint Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
7912| [1027294] Microsoft Exchange Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
7913| [1027234] Microsoft Office for Mac Folder Permission Flaw Lets Local Users Gain Elevated Privileges
7914| [1027232] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting, Information Disclosure, and URL Redirection Attacks
7915| [1027229] Microsoft Office DLL Loading Error Lets Remote Users Execute Arbitrary Code
7916| [1027228] Microsoft Visual Basic for Applications DLL Loading Error Lets Remote Users Execute Arbitrary Code
7917| [1027227] Microsoft Data Access Components (MDAC) ADO Cachesize Buffer Overflow Lets Remote Users Execute Arbitrary Code
7918| [1027226] Microsoft Internet Explorer Deleted Object Access Bugs Let Remote Users Execute Arbitrary Code
7919| [1027157] Microsoft XML Core Services (MSXML) Object Access Error Lets Remote Users Execute Arbitrary Code
7920| [1027151] Microsoft Dynamics AX Input Validation Flaw Permits Cross-Site Scripting Attacks
7921| [1027150] Microsoft Lync DLL Loading Error Lets Remote Users Execute Arbitrary Code
7922| [1027149] Microsoft .NET Memory Access Bug Lets Remote Users Execute Arbitrary Code
7923| [1027147] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Conduct Cross-Site Scripting Attacks, and Obtain Potentially Sensitive Information
7924| [1027114] Microsoft Windows Includes Some Invalid Certificates
7925| [1027048] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code and Deny Service
7926| [1027043] Microsoft Windows Partition Manager Memory Allocation Error Lets Local Users Gain Elevated Privileges
7927| [1027042] Microsoft Visio Viewer Memory Corruption Error Lets Remote Users Execute Arbitrary Code
7928| [1027041] Microsoft Office Excel File Memory Corruption Errors and Heap Overflows Let Remote Users Execute Arbitrary Code
7929| [1027040] Microsoft Silverlight Double Free Memory Error Lets Remote Users Execute Arbitrary Code
7930| [1027038] Microsoft GDI+ Bugs Let Remote Users Execute Arbitrary Code
7931| [1027036] Microsoft .NET Framework Serialization Bugs Let Remote Users Execute Arbitrary Code
7932| [1027035] Microsoft Word RTF Processing Flaw Lets Remote Users Execute Arbitrary Code
7933| [1026911] Microsoft Office WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
7934| [1026910] Microsoft Works WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
7935| [1026909] Microsoft Forefront Unified Access Gateway Bugs Let Remote Users Obtain Potentially Sensitive Information and Conduct Browser Redirection Attacks
7936| [1026907] Microsoft .NET Parameter Validation Flaw Lets Remote Users Execute Arbitrary Code
7937| [1026905] Microsoft BizTalk Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7938| [1026904] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7939| [1026903] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7940| [1026902] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7941| [1026901] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
7942| [1026900] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7943| [1026899] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
7944| [1026794] Microsoft DirectWrite Unicode Character Processing Flaw Lets Remote Users Deny Service
7945| [1026792] Microsoft Visual Studio Lets Local Users Gain Elevated Privileges
7946| [1026791] Microsoft Expression Design DLL Loading Error Lets Remote Users Execute Arbitrary Code
7947| [1026789] Microsoft DNS Server Lets Remote Users Deny Service
7948| [1026686] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting Attacks
7949| [1026685] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
7950| [1026684] Microsoft Visio Viewer Multiple Bugs Let Remote Users Execute Arbitrary Code
7951| [1026681] Microsoft Silverlight Bugs Let Remote Users Execute Arbitrary Code
7952| [1026680] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
7953| [1026677] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
7954| [1026499] Microsoft Anti-Cross Site Scripting Library Flaw May Permit Cross-Site Scripting Attacks
7955| [1026497] Microsoft Windows ClickOnce Feature Lets Remote Users Execute Arbitrary Code
7956| [1026479] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Commands, Access User Accounts, and Redirect Users
7957| [1026469] Microsoft ASP.NET Hash Table Collision Bug Lets Remote Users Deny Service
7958| [1026416] Microsoft Office IME (Chinese) Lets Local Users Gain Elevated Privileges
7959| [1026414] Microsoft Publisher Multiple Errors Let Remote Users Execute Arbitrary Code
7960| [1026413] Microsoft Internet Explorer DLL Loading Error Lets Remote Users Execute Arbitrary Code and HTML Processing Bugs Let Remote Users Obtain Information
7961| [1026412] Microsoft Active Directory Memory Access Error Lets Remote Authenticated Users Execute Arbitrary Code
7962| [1026411] Microsoft PowerPoint DLL Loading and OfficeArt Object Processing Flaws Let Remote Users Execute Arbitrary Code
7963| [1026410] Microsoft Office Excel File Memory Error Lets Remote Users Execute Arbitrary Code
7964| [1026409] Microsoft Office Use-After-Free Bug Lets Remote Users Execute Arbitrary Code
7965| [1026408] Microsoft Internet Explorer Error in Microsoft Time Component Lets Remote Users Execute Arbitrary Code
7966| [1026294] Microsoft Active Directory CRL Validation Flaw Lets Remote Users Bypass Authentication
7967| [1026271] Microsoft Windows TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
7968| [1026220] Microsoft Publisher 'Pubconv.dll' Memory Corruption Error Lets Remote Users Execute Arbitrary Code
7969| [1026169] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permits Cross-Site Scripting, HTTP Response Splitting, and Denial of Service Attacks
7970| [1026168] Microsoft Host Integration Server Bugs Let Remote Users Deny Service
7971| [1026167] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
7972| [1026164] Microsoft Active Accessibility Component DLL Loading Error Lets Remote Users Execute Arbitrary Code
7973| [1026162] Microsoft .NET Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
7974| [1026161] Microsoft Silverlight Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
7975| [1026160] Microsoft Internet Explorer Multiple Flaws Let Remote Users Execute Arbitrary Code
7976| [1026103] Microsoft Windows SSL/TLS Protocol Flaw Lets Remote Users Decryption Sessions
7977| [1026041] Microsoft Windows Components DLL Loading Error Lets Remote Users Execute Arbitrary Code
7978| [1026040] Microsoft SharePoint Multiple Flaws Permit Cross-Site Scripting and Information Disclosure Attacks
7979| [1026039] Microsoft Office DLL Loading Error and Unspecified Bug Lets Remote Users Execute Arbitrary Code
7980| [1026038] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
7981| [1026037] Microsoft Windows Internet Name Service (WINS) Input Validation Flaw in ECommEndDlg() Lets Local Users Gain Elevated Privileges
7982| [1025937] Microsoft Windows DHCPv6 Processing Flaw Lets Remote Denial of Service to RPC Services
7983| [1025905] Microsoft .NET Socket Trust Validation Error Lets Remote Users Obtain Information and Redirect Certain Network Traffic
7984| [1025903] Microsoft Visual Studio Input Validation Hole Permits Cross-Site Scripting Attacks
7985| [1025902] Microsoft ASP.NET Chart Control Remote File Disclosure
7986| [1025896] Microsoft Visio Memory Corruption Errors Let Remote Users Execute Arbitrary Code
7987| [1025895] Microsoft Data Access Components Insecure Library Loading Lets Remote Users Execute Arbitrary Code
7988| [1025894] Microsoft DNS Server Flaws Let Remote Users Execute Arbitrary Code and Deny Service
7989| [1025893] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
7990| [1025847] Microsoft Internet Explorer Flaw in Processing EUC-JP Encoded Characters Lets Remote Users Conduct Cross-Site Scripting Attacks
7991| [1025763] Microsoft Visio May Load DLLs Unsafely and Remotely Execute Arbitrary Code
7992| [1025760] Microsoft Windows Bluetooth Stack Memory Access Error Lets Remote Users Execute Arbitrary Code
7993| [1025675] Microsoft Word Unspecified Flaw Lets Remote Users Execute Arbitrary Code
7994| [1025655] Microsoft MHTML Input Validation Hole Permits Cross-Site Scripting Attacks
7995| [1025654] Microsoft Internet Explorer Vector Markup Language (VML) Object Access Error Lets Remote Users Execute Arbitrary Code
7996| [1025653] Microsoft Active Directory Input Validation Flaw in Certificate Services Web Enrollment Permits Cross-Site Scripting Attacks
7997| [1025649] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
7998| [1025648] Microsoft SQL Server XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
7999| [1025647] Microsoft Visual Studio XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
8000| [1025646] Microsoft Office InfoPath XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
8001| [1025644] Microsoft Hyper-V VMBus Packet Validation Flaw Lets Local Users Deny Service
8002| [1025643] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
8003| [1025642] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
8004| [1025641] Microsoft .NET JIT Compiler Validation Flaw Lets Remote Users Execute Arbitrary Code
8005| [1025639] Microsoft Distributed File System Bugs Let Remote Users Deny Service and Execute Arbitrary Code
8006| [1025637] Microsoft Forefront Threat Management Gateway Bounds Validation Flaw in Winsock Provider Lets Remote Users Execute Arbitrary Code
8007| [1025636] Microsoft .NET Array Offset Error Lets Remote Users Execute Code
8008| [1025635] Microsoft Silverlight Array Offset Error Lets Remote Users Execute Arbitrary Code
8009| [1025634] Microsoft Windows OLE Automation Underflow Lets Remote Users Execute Arbitrary Code
8010| [1025513] Microsoft PowerPoint Memory Corruption Errors Let Remote Users Execute Arbitrary Code
8011| [1025512] Microsoft Windows Internet Name Service Socket Send Exception Handling Bug Lets Remote Users Execute Arbitrary Code
8012| [1025360] Microsoft Reader Memory Corruption Errors Let Remote Users Execute Arbitrary Code
8013| [1025359] Microsoft MHTML Stack Overflow Lets Remote Users Execute Arbitrary Code
8014| [1025347] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8015| [1025346] Microsoft Foundation Classes May Load DLLs Unsafely and Remotely Execute Arbitrary Code
8016| [1025344] Microsoft WordPad Parsing Error Lets Remote Users Execute Arbitrary Code
8017| [1025343] Microsoft Office DLL Loading and Graphic Object Processing Flaws Let Remote Users Execute Arbitrary Code
8018| [1025340] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
8019| [1025337] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
8020| [1025335] Microsoft GDI+ EMF Image Integer Overflow Lets Remote Users Execute Arbitrary Code
8021| [1025334] Microsoft OpenType Compact Font Format (CFF) Driver Stack Overflow Lets Remote Users Execute Arbitrary Code
8022| [1025333] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
8023| [1025331] Microsoft .NET Stack Corruption Error in JIT Compiler Lets Remote Users Execute Arbitrary Code
8024| [1025330] Microsoft WMITools and Windows Messenger ActiveX Controls Let Remote Users Execute Arbitrary Code
8025| [1025327] Microsoft Internet Explorer Bugs Let Remote Users Obtain Potentially Sensitive Information, Execute Arbitrary Code, and Hijack User Clicks
8026| [1025312] Microsoft Windows Kernel Bug in AFD.sys Lets Local Users Deny Service
8027| [1025248] Microsoft Windows Includes Some Invalid Comodo Certificates
8028| [1025171] Microsoft Groove DLL Loading Error Lets Remote Users Execute Arbitrary Code
8029| [1025170] Microsoft DirectShow DLL Loading Error Lets Remote Users Execute Arbitrary Code
8030| [1025164] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar
8031| [1025117] Microsoft Malware Protection Engine Registry Processing Error Lets Local Users Gain Elevated Privileges
8032| [1025086] Microsoft Active Directory Heap Overflow in Processing BROWSER ELECTION Packets May Let Remote Users Execute Arbitrary Code
8033| [1025049] Microsoft Local Security Authority Subsystem Service (LSASS) Lets Local Users Gain Elevated Privileges
8034| [1025044] Microsoft JScript and VBScript Disclose Information to Remote Users
8035| [1025043] Microsoft Visio Memory Corruption Error in Processing Visio Files Lets Remote Users Execute Arbitrary Code
8036| [1025042] Microsoft Active Directory SPN Collosions May Let Remote Authenticated Users Deny Service
8037| [1025038] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
8038| [1025003] Microsoft MHTML Input Validation Hole May Permit Cross-Site Scripting Attacks
8039| [1024947] Microsoft Data Access Components (MDAC) Memory Corruption Errors in Processing DSN Data and ADO Records Let Remote Users Execute Arbitrary Code
8040| [1024940] Microsoft Internet Explorer Use-After-Free in 'mshtml.dll' May Let Remote Users Execute Arbitrary Code
8041| [1024925] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8042| [1024922] Microsoft Internet Explorer Recursive CSS Import Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8043| [1024888] Microsoft Exchange Server RPC Processing Flaw Lets Remote Authenticated Users Deny Service
8044| [1024887] Microsoft Office Graphics Filters Let Remote Users Execute Arbitrary Code
8045| [1024886] Microsoft SharePoint Input Validation Flaw in Processing SOAP Requests Let Remote Users Execute Arbitrary Code
8046| [1024885] Microsoft Publisher Bugs Let Remote Users Execute Arbitrary Code
8047| [1024884] Microsoft Hyper-V Input Validation Flaw Lets Local Guest Operating System Users Deny Service
8048| [1024879] Microsoft Windows Internet Connection Signup Wizard May Load DLLs Unsafely and Remotely Execute Arbitrary Code
8049| [1024877] Microsoft Windows May Load DLLs Unsafely and Remotely Execute Arbitrary Code
8050| [1024874] Microsoft Windows Task Scheduler Lets Local Users Gain Elevated Privileges
8051| [1024872] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
8052| [1024790] Microsoft Outlook Attachment Processing Flaw Lets Remote Users Deny Service
8053| [1024707] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permit Cross-Site Scripting and URL Redirection Attacks
8054| [1024706] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
8055| [1024705] Microsoft Office Flaws Let Remote Users Execute Arbitrary Code
8056| [1024676] Microsoft Internet Explorer Freed Object Invalid Flag Reference Access Lets Remote Users Execute Arbitrary Code
8057| [1024630] Microsoft Internet Explorer 'window.onerror' Callback Lets Remote Users Obtain Information From Other Domains
8058| [1024559] Microsoft SharePoint Input Validation Hole in SafeHTML Permits Cross-Site Scripting Attacks
8059| [1024558] Microsoft Cluster Service Disk Permission Flaw Lets Local Users Gain Elevated Privileges
8060| [1024557] Microsoft Foundation Classes Library Buffer Overflow in Window Title Lets Remote Users Execute Arbitrary Code
8061| [1024552] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
8062| [1024551] Microsoft Office Word Processing Flaws Let Remote Users Execute Arbitrary Code
8063| [1024546] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Obtain Information, and Conduct Cross-Site Scripting Attacks
8064| [1024543] Microsoft .NET Framework JIT Compiler Memory Access Error Lets Remote Users Execute Arbitrary Code
8065| [1024459] Microsoft ASP.NET Padding Oracle Attack Lets Remote Users Decrypt Data
8066| [1024445] Microsoft Outlook Web Access Authentication Flaw Lets Remote Users Hijack User Sessions
8067| [1024443] Microsoft Local Security Authority Subsystem Service (LSASS) Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
8068| [1024442] Microsoft WordPad Parsing Error in Text Converters Lets Remote Users Execute Arbitrary Code
8069| [1024441] Microsoft Windows RPC Memory Allocation Error Lets Remote Users Execute Arbitrary Code
8070| [1024440] Microsoft Internet Information Services Bugs Let Remote Users Bypass Authentication, Deny Service, and Execute Arbitrary Code
8071| [1024439] Microsoft Outlook Heap Overflow Lets Remote Users Execute Arbitrary Code
8072| [1024438] Microsoft Office Unicode Font Parsing in USP10.DLL Lets Remote Users Execute Arbitrary Code
8073| [1024312] Microsoft Windows Tracing Feature for Services Lets Local Users Gain Elevated Privileges
8074| [1024310] Microsoft Office Excel Flaw Lets Remote Users Execute Arbitrary Code
8075| [1024306] Microsoft Silverlight Memory Corruption Errors Let Remote Users Execute Arbitrary Code
8076| [1024305] Microsoft .NET Framework Virtual Method Delegate Processing Error Lets Remote Users Execute Arbitrary Code
8077| [1024304] Microsoft Cinepak Codec Memory Pointer Error Lets Remote Users Execute Arbitary Code
8078| [1024303] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
8079| [1024302] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
8080| [1024301] Microsoft XML Core Services (MSXML) HTTP Response Processing Flaw Lets Remote Users Execute Arbitrary Code
8081| [1024298] Microsoft Office Word RTF, Word, and HTML Processing Errors Let Remote Users Execute Arbitrary Code
8082| [1024216] Microsoft Windows Shell LNK Shortcut Processing Flaw Lets Users Execute Arbitrary Code
8083| [1024189] Microsoft Office Outlook Validation Error in Processing Attachments Lets Remote Users Execute Arbitrary Code
8084| [1024188] Microsoft Office Access ActiveX Controls Let Remote Users Execute Arbitrary Code
8085| [1024084] Microsoft Help and Support Center URL Escaping Flaw Lets Remote Users Execute Arbitrary Commands
8086| [1024080] Microsoft .NET XML Digital Signature Flaw May Let Remote Users Bypass Authentication
8087| [1024079] Microsoft Internet Information Services Memory Allocation Error Lets Remote Authenticated Users Execute Arbitrary Code
8088| [1024078] Microsoft SharePoint Input Validation Flaw in toStaticHTML API Permits Cross-Site Scripting Attacks
8089| [1024077] Microsoft SharePoint Help Page Processing Bug Lets Remote Users Deny Service
8090| [1024076] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
8091| [1024075] Microsoft Office Open XML File Format Converter for Mac Lets Local Users Gain Elevated Privileges
8092| [1024073] Microsoft Office COM Object Instantiation Error Lets Remote Users Execute Arbitrary Code
8093| [1024070] Microsoft Internet Explorer 8 Developer Tools ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8094| [1024068] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
8095| [1023975] Microsoft Office Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
8096| [1023974] Microsoft Visual Basic for Applications Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
8097| [1023972] Microsoft Outlook Express Integer Overflow in Processing POP3/IMAP Responses Lets Remote Users Execute Arbitrary Code
8098| [1023938] Microsoft Office Visio Buffer Overflow in Processing DXF Files Lets Remote Users Execute Arbitrary Code
8099| [1023932] Microsoft Office SharePoint Input Validation Flaw in 'help.aspx' Permits Cross-Site Scripting Attacks
8100| [1023856] Microsoft Visio Index Calculation and Attribute Validation Flaws Let Remote Users Execute Code
8101| [1023855] Microsoft Exchange May Disclose Message Fragments to Remote Users
8102| [1023854] Microsoft Exchange Error in Parsing MX Records Lets Remote Users Deny Service
8103| [1023853] Microsoft Office Publisher TextBox Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code
8104| [1023848] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
8105| [1023773] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
8106| [1023720] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges
8107| [1023699] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
8108| [1023698] Microsoft Office Excel Bugs Let Remote Users Execute Arbitrary Code
8109| [1023571] Microsoft Windows Protocol Flaw in SSL Renegotiation Lets Remote Users Conduct Man-in-the-Middle Attacks
8110| [1023567] Microsoft Hyper-V Instruction Validation Bug Lets Local Users Deny Service
8111| [1023566] Microsoft Windows Kerberos Ticket-Granting-Ticket Processing Flaw Lets Remote Authenticated Users Deny Service
8112| [1023565] Microsoft Office Buffer Overflow in 'MSO.DLL' Lets Remote Users Execute Arbitrary Code
8113| [1023564] Microsoft Paint Integer Overflow Lets Remote Users Execute Arbitrary Code
8114| [1023563] Microsoft PowerPoint Buffer Overflows and Memory Errors Let Remote Users Execute Arbitrary Code
8115| [1023562] Microsoft DirectShow Heap Overflow Lets Remote Users Execute Arbitrary Code
8116| [1023560] Microsoft Internet Explorer Flaw in Microsoft Data Analyzer ActiveX Control Lets Remote Users Execute Arbitrary Code
8117| [1023542] Microsoft Internet Explorer Discloses Known Files to Remote Users
8118| [1023495] Microsoft Internet Explorer and Windows OS Shell Handler URL Validation Flaw Lets Remote Users Execute Arbitrary Code
8119| [1023494] Microsoft Internet Explorer Cross-Site Scripting Filter Can Be Bypassed
8120| [1023493] Microsoft Internet Explorer Multiple Memory Access Flaws Let Remote Users Execute Arbitrary Code
8121| [1023462] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
8122| [1023432] Microsoft Embedded OpenType Font Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
8123| [1023301] Microsoft Internet Explorer Indeo Codec Bugs Let Remote Users Execute Arbitrary Code
8124| [1023297] Microsoft Local Security Authority Subsystem Service Validation Flaw Lets Remote Users Deny Service
8125| [1023296] Microsoft Active Directory Federation Services Lets Remote Authenticated Users Execute Arbitrary Code and Spoof Web Sites
8126| [1023294] Microsoft Office Word and WordPad Text Converter Memory Errors Let Remote Users Execute Arbitrary Code
8127| [1023293] Microsoft Internet Explorer Memory Access Flaws Let Remote Users Execute Arbitrary Code
8128| [1023292] Microsoft Office Publisher Memory Allocation Validation Flaw Lets Remote Users Execute Arbitrary Code
8129| [1023291] Microsoft Internet Authentication Service Bugs Let Remote Authenticated Users Execute Arbitrary Code or Gain Privileges of the Target User
8130| [1023233] Microsoft Internet Explorer Discloses Local Path Names When Printing Local HTML Files to PDF Files
8131| [1023226] Microsoft Internet Explorer Invalid Pointer Reference in getElementsByTagName() Method Lets Remote Users Execute Arbitrary Code
8132| [1023158] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8133| [1023157] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
8134| [1023156] Microsoft Active Directory Stack Memory Consumption Flaw Lets Remote Users Deny Service
8135| [1023154] Microsoft License Logging Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
8136| [1023153] Microsoft Web Services on Devices API (WSDAPI) Validation Error Lets Remote Users Execute Arbitrary Code
8137| [1023013] Microsoft Crypto API NULL Character Flaw in Common Name Field and ASN.1 Integer Overflow Lets Remote Users Spoof Certficiates
8138| [1023011] Microsoft Indexing Service ActiveX Control Lets Remote Users Execute Arbitrary Code
8139| [1023010] Microsoft Local Security Authority Subsystem Service (LSASS) Integer Underflow Lets Local Users Deny Service
8140| [1023009] Microsoft Silverlight Memory Modification Flaw Lets Remote Users Execute Arbitrary Code
8141| [1023008] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
8142| [1023006] Microsoft GDI+ Overflows Let Remote Users Execute Arbitrary Code
8143| [1023002] Microsoft Internet Explorer Flaws Let Remote Users Execute Arbitrary Code
8144| [1022846] Microsoft Wireless LAN AutoConfig Service Heap Overflow Lets Remote Wireless Users Execute Arbitrary Code
8145| [1022843] Microsoft DHTML Editing Component ActiveX Control Lets Remote Users Execute Arbitrary Code
8146| [1022842] Microsoft JScript Scripting Engine Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8147| [1022716] Microsoft Telnet NTLM Credential Reflection Flaw Lets Remote Users Gain Access
8148| [1022715] Microsoft ASP.NET Request Scheduling Flaw Lets Remote Users Deny Service
8149| [1022712] Microsoft Active Template Library (ATL) Bugs Let Remote Users Execute Arbitrary Code
8150| [1022710] Microsoft Windows Internet Name Service (WINS) Buffer Overflows Let Remote Users Execute Arbitrary Code
8151| [1022708] Microsoft Office Web Components Buffer Overflows in ActiveX Control Let Remote Users Execute Arbitrary Code
8152| [1022611] Microsoft Internet Explorer Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
8153| [1022610] Microsoft Visual Studio Active Template Library Bugs Let Remote Users Execute Arbitrary Code
8154| [1022547] Microsoft Internet Security and Acceleration Server OTP Authentication Bug Lets Remote Users Access Resources
8155| [1022546] Microsoft Office Publisher Pointer Dereference Bug Lets Remote Users Execute Arbitrary Code
8156| [1022545] Microsoft DirectX DirectShow Validation Bugs Let Remote Users Execute Arbitrary Code
8157| [1022544] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges Within a Guest Operating System
8158| [1022535] Microsoft Office Web Components Bug in Spreadsheet ActiveX Control Lets Remote Users Execute Arbitrary Code
8159| [1022514] Microsoft DirectShow Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
8160| [1022369] Microsoft PowerPoint Buffer Overflow in Freelance Translator Lets Remote Users Execute Arbitrary Code
8161| [1022358] Microsoft Internet Information Services WebDAV Bug Lets Remote Users Bypass Authentication
8162| [1022356] Microsoft Word Buffer Overflows Let Remote USers Execute Arbitrary Code
8163| [1022355] Microsoft Office Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
8164| [1022354] Microsoft Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
8165| [1022351] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
8166| [1022350] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
8167| [1022349] Microsoft Active Directory Bugs Let Remote Users Execute Arbitrary Code or Deny Service
8168| [1022330] Microsoft Windows Bug in SETDESKWALLPAPER and GETDESKWALLPAPER Calls Let Local Users Deny Service
8169| [1022299] Microsoft DirectX Bug in DirectShow QuickTime Parser Lets Remote Users Execute Arbitrary Code
8170| [1022240] Microsoft Internet Information Server WebDAV Input Validation Flaw Lets Remote Users Execute Arbitrary Code
8171| [1022205] Microsoft PowerPoint Has Multiple Buffer Overflows and Memory Corruption Bugs That Let Remote Users Execute Arbitrary Code
8172| [1022047] Microsoft Windows SearchPath Function May Let Remote Users Execute Arbitrary Code
8173| [1022046] Microsoft ISA Server Input Validation Flaw in 'cookieauth.dll' Permits Cross-Site Scripting Attacks
8174| [1022045] Microsoft ISA Server TCP State Error Lets Remote Users Deny Service
8175| [1022044] Microsoft Windows Privilege Separation and Access Control Bugs Let Local Users Gain Elevated Privileges
8176| [1022043] Microsoft WordPad and Office Text Converter Bugs Let Remote Users Execute Arbitrary Code
8177| [1022042] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
8178| [1022040] Microsoft DirectX Bug in Decompressing DirectShow MJPEG Content Lets Remote Users Execute Arbitrary Code
8179| [1022039] Microsoft Excel Malformed Object Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
8180| [1021967] Microsoft Office PowerPoint Invalid Object Access Bug Lets Remote Users Execute Arbitrary Code
8181| [1021880] Microsoft Internet Explorer Unspecified Bug Lets Remote Users Execute Arbitrary Code
8182| [1021831] Microsoft DNS Server Bugs Let Remote Users Spoof the DNS Service
8183| [1021830] Microsoft DNS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
8184| [1021829] Microsoft WINS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
8185| [1021744] Microsoft Excel Invalid Object Access Flaw Lets Remote Users Execute Arbitrary Code
8186| [1021702] Microsoft Visio Bugs Let Remote Users Execute Arbitrary Code
8187| [1021701] Microsoft Exchange MAPI Command Literal Processing Bug Lets Remote Users Deny Service
8188| [1021700] Microsoft Exchange Memory Corruption Error in Decoding TNEF Data Lets Remote Users Execute Arbitrary Code
8189| [1021699] Microsoft Internet Explorer Bugs in Handling CSS Sheets and Deleted Objects Lets Remote Users Execute Arbitrary Code
8190| [1021629] Microsoft Windows Guidelines for Disabling AutoRun are Ineffective and May Permit Code Execution
8191| [1021490] Microsoft SQL Server Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
8192| [1021381] Microsoft Internet Explorer DHTML Data Binding Invalid Pointer Reference Bug Lets Remote Users Execute Arbitrary Code
8193| [1021376] Microsoft WordPad Word 97 Text Converter Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8194| [1021371] Microsoft Internet Explorer HTML Processing Bugs Let Remote Users Execute Arbitrary Code
8195| [1021370] Microsoft Word Memory Corruption Errors Let Remote Users Execute Arbitrary Code
8196| [1021369] Microsoft Visual Basic DataGrid/FlexGrid/Heirarchival FlexGrid/Windows Common/Charts ActiveX Controls Let Remote Users Execute Arbitrary Code
8197| [1021368] Microsoft Excel Formula, Object, and Global Array Bugs Let Remote Users Execute Arbitrary Code
8198| [1021367] Microsoft Office SharePoint Server Access Control Flaw Lets Remote Users Gain Administrative Access
8199| [1021365] Microsoft GDI Buffer Overflows in Processing WMF Files Lets Remote Users Execute Arbitrary Code
8200| [1021363] Microsoft SQL Server Memory Overwrite Bug in sp_replwritetovarbin May Let Remote Users Execute Arbitrary Code
8201| [1021294] Microsoft Office Communicator VoIP Processing Bugs Let Remote Users Deny Service
8202| [1021164] Microsoft XML Core Services (MSXML) Bugs Let Remote Users Obtain Information and Execute Arbitrary Code
8203| [1021053] Microsoft Ancillary Function Driver 'afd.sys' Lets Local Users Gain Elevated Privileges
8204| [1021052] Microsoft Message Queuing (MSMQ) Heap Overflow Lets Remote Users Execute Arbitrary Code
8205| [1021047] Microsoft Internet Explorer Flaws Permit Cross-Domain Scripting Attacks and Let Remote Users Execute Arbitrary Code
8206| [1021045] Microsoft Office CDO Protocol Bug Lets Remote Users Execute Arbitrary Scripting Code
8207| [1021044] Microsoft Excel Object, Calendar, and Formula Bugs Let Remote Users Execute Arbitrary Code
8208| [1021043] Microsoft Host Integration Server RPC Buffer Overflow Lets Remote Users Execute Arbitrary Code
8209| [1021042] Microsoft Active Directory LDAP Memory Allocation Error Lets Remote Users Execute Arbitrary Code
8210| [1021020] Cisco Unity Bug in Microsoft API Lets Remote Users Deny Service
8211| [1021018] Microsoft Digital Image 'PipPPush.DLL' ActiveX Control Lets Remote Users Access Files
8212| [1020838] Microsoft GDI+ Integer Overflow in Processing BMP Files Lets Remote Users Execute Arbitrary Code
8213| [1020837] Microsoft GDI+ Buffer Overflow in Processing WMF Files Lets Remote Users Execute Arbitrary Code
8214| [1020836] Microsoft GDI+ Bug in Processing GIF Image Files Lets Remote Users Execute Arbitrary Code
8215| [1020835] Microsoft GDI+ Memory Corruption Error in Processing EMF Image Files Lets Remote Users Execute Arbitrary Code
8216| [1020834] Microsoft GDI+ Heap Overflow in Processing Gradient Sizes Lets Remote Users Execute Arbitrary Code
8217| [1020833] Microsoft Office OneNote Buffer Overflow Lets Remote Users Execute Arbitrary Code
8218| [1020679] Microsoft Outlook Express MTHML Redirect Bug Lets Remote Users Obtain Information
8219| [1020678] Microsoft Windows IPSec Policy May Not Be Enforced in Certain Cases
8220| [1020677] Microsoft Windows Event System Bugs Let Remote Authenticated Users Execute Arbitrary Code
8221| [1020676] Microsoft PowerPoint Memory Errors Let Remote Users Execute Arbitrary Code
8222| [1020675] Microsoft Color Management Module Heap Overflow Lets Remote Users Execute Arbitrary Code
8223| [1020674] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code
8224| [1020673] Microsoft Office Format Filter Bugs Let Remote Users Execute Arbitrary Code
8225| [1020672] Microsoft Excel Input Validation Bug in Parsing Records Lets Remote Users Execute Arbitrary Code
8226| [1020671] Microsoft Excel Input Validation Bug in Processing Array Index Values Lets Remote Users Execute Arbitrary Code
8227| [1020670] Microsoft Excel Input Validation Bug in Processing Index Values Lets Remote Users Execute Arbitrary Code
8228| [1020669] Microsoft Excel Credential Caching Bug Lets Local Users Gain Access to Remote Data Sources
8229| [1020607] Mac OS X Quick Look Buffer Overflow in Downloading Microsoft Office Files Lets Remote Users Execute Arbitrary Code
8230| [1020447] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8231| [1020446] Microsoft Windows AutoRun Bug May Let Users Execute Arbitrary Code
8232| [1020441] Microsoft SQL Server Bugs Let Remote Authenticated Users Obtain Information and Execute Arbitrary Code
8233| [1020439] Microsoft Outlook Web Access for Exchange Server Input Validation Bugs Permit Cross-Site Scripting Attacks
8234| [1020433] Microsoft Access Snapshot Viewer ActiveX Control Lets Remote Users Download Files to Arbitrary Locations
8235| [1020382] Microsoft Internet Explorer Lets Remote Users Conduct Cross-Domain Scripting Attacks
8236| [1020232] Microsoft Speech API Lets Remote Users Execute Arbitrary Commands
8237| [1020229] Microsoft Active Directory LDAP Validation Bug Lets Remote Users Deny Service
8238| [1020228] Microsoft WINS Data Structure Validation Bug Lets Local Users Gain Elevated Privileges
8239| [1020226] Microsoft Internet Explorer HTTP Request Header Bug May Let Remote Users Obtain Information in a Different Domain
8240| [1020225] Microsoft Internet Explorer Bug in Processing Method Calls Lets Remote Users Execute Arbitrary Code
8241| [1020223] Microsoft DirectX SAMI File Validation Bug Lets Remote Users Execute Arbitrary Code
8242| [1020222] Microsoft DirectX MJPEG Stream Error Handling Bug Lets Remote Users Execute Arbitrary Code
8243| [1020016] Microsoft Malware Protection Engine Lets Remote Users Deny Service
8244| [1020015] Microsoft Publisher Bug in Processing Object Header Data Lets Remote Users Execute Arbitrary Code
8245| [1020014] Microsoft Word Memory Error in Processing CSS Values Lets Remote Users Execute Arbitrary Code
8246| [1020013] Microsoft Word Memory Error in Processing RTF Files Lets Remote Users Execute Arbitrary Code
8247| [1020006] Microsoft Windows XP 'i2omgmt.sys' Input Validation Flaw Lets Local Users Gain Elevated Privileges
8248| [1019804] Microsoft Visio Lets Remote Users Execute Arbitrary Code
8249| [1019801] Microsoft Internet Explorer Data Stream Processing Bug Lets Remote Users Execute Arbitrary Code
8250| [1019800] Microsoft Internet Explorer 'hxvz.dll' ActiveX Control Lets Remote Users Execute Arbitrary Code
8251| [1019798] Microsoft GDI Buffer Overflow in Processing EMF and WMF Files Lets Remote Users Execute Arbitrary Code
8252| [1019797] Microsoft Project Memory Error Lets Remote Users Execute Arbitrary Code
8253| [1019738] Microsoft Office S/MIME Processing Lets Remote Users Access Arbitrary URLs
8254| [1019736] Microsoft Outlook S/MIME Processing Lets Remote Users Access Arbitrary URLs
8255| [1019686] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code via Word Documents
8256| [1019587] Microsoft Excel Input Validation Bug in Processing Conditional Formatting Values Lets Remote Users Execute Arbitrary Code
8257| [1019586] Microsoft Excel Input Validation Bug in Processing Rich Text Data Lets Remote Users Execute Arbitrary Code
8258| [1019585] Microsoft Excel Formula Parsing Error Lets Remote Users Execute Arbitrary Code
8259| [1019584] Microsoft Excel Input Validation Bug in Processing Style Record Data Lets Remote Users Execute Arbitrary Code
8260| [1019583] Microsoft Excel Flaw in Importing '.slk' Files Lets Remote Users Execute Arbitrary Code
8261| [1019582] Microsoft Excel Input Validation Bug in Processing Data Validation Records Lets Remote Users Execute Arbitrary Code
8262| [1019581] Microsoft Office Web Components DataSource Bug Lets Remote Users Execute Arbitrary Code
8263| [1019580] Microsoft Office Web Components URL Parsing Bug Lets Remote Users Execute Arbitrary Code
8264| [1019579] Microsoft Outlook 'mailto:' URL Validation Flaw Lets Remote Users Execute Arbitrary Code
8265| [1019578] Microsoft Office and Excel Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
8266| [1019388] Microsoft Works/Microsoft Office Bug in Processing '.wps' Field Length Values Lets Remote Users Execute Arbitrary Code
8267| [1019387] Microsoft Works/Microsoft Office Bug in Processing '.wps' Header Index Table Lets Remote Users Execute Arbitrary Code
8268| [1019386] Microsoft Works/Microsoft Office Bug in Processing '.wps' File Section Length Headers Lets Remote Users Execute Arbitrary Code
8269| [1019385] Microsoft Internet Information Services Error in Processing ASP Page Input Lets Remote Users Execute Arbitrary Code
8270| [1019384] Microsoft Internet Information Services File Change Notification Bug Lets Local Users Gain Elevated Privileges
8271| [1019381] Microsoft Internet Explorer Argument Validation Flaw in 'dxtmsft.dll' Lets Remote Users Execute Arbitrary Code
8272| [1019380] Microsoft Internet Explorer Property Method Processing Bug Lets Remote Users Execute Arbitrary Code
8273| [1019379] Microsoft Internet Explorer HTML Layout Rendering Bug Lets Remote Users Execute Arbitrary Code
8274| [1019378] Microsoft Internet Explorer Buffer Overflow in Fox Pro ActiveX Control Lets Remote Users Execute Arbitrary Code
8275| [1019377] Microsoft Office Publisher Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
8276| [1019376] Microsoft Office Publisher Invalid Memory Reference Bug Lets Remote Users Execute Arbitrary Code
8277| [1019375] Microsoft Office Object Processing Flaw Lets Remote Users Execute Arbitrary Code
8278| [1019374] Microsoft Word Memory Error Lets Remote Users Execute Arbitrary Code
8279| [1019258] Microsoft Visual Basic '.dsr' File Buffer Overflow Lets Remote Users Execute Arbitrary Code
8280| [1019200] Microsoft Excel File Header Bug Lets Remote Users Execute Arbitrary Code
8281| [1019165] Microsoft Windows LSASS Lets Local Users Gain Elevated Privileges
8282| [1019078] Microsoft Internet Explorer Object Access Bugs Let Remote Users Execute Arbitrary Code
8283| [1019077] Microsoft Message Queuing (MSMQ) Buffer Overflow Lets Remote Users Execute Arbitrary Code
8284| [1019073] Microsoft DirectX Bugs in Parsing SAMI, WAV, and AVI Files Let Remote Users Execute Arbitrary Code
8285| [1019033] Microsoft Web Proxy Auto-Discovery Name Server Resolution Bug Lets Remote Users Conduct Man-in-the-Middle Attacks
8286| [1018976] Microsoft Jet Engine Stack Overflow May Let Remote Users Execute Arbitrary Code
8287| [1018942] Microsoft Windows DNS Service Insufficent Entropy Lets Remote Users Spoof the DNS Service
8288| [1018903] Microsoft DebugView 'Dbgv.sys' Module Lets Local Users Gain Kernel Level Privileges
8289| [1018831] Microsoft Windows ShellExecute() URI Handler Bug Lets Remote Users Execute Arbitrary Commands
8290| [1018790] Microsoft Word Bug in Processing Office Files Lets Remote Users Execute Arbitrary Code
8291| [1018789] Microsoft SharePoint Input Validation Hole Permits Cross-Site Scripting Attacks
8292| [1018788] Microsoft Internet Explorer Bugs Let Remote Users Spoof the Address Bar and Execute Arbitrary Code
8293| [1018786] Microsoft Outlook Express Bug in Processing NNTP Responses Lets Remote Users Execute Arbitrary Code
8294| [1018727] Microsoft Internet Security and Acceleration Server SOCKS4 Proxy Discloses IP Address Information to Remote Users
8295| [1018677] Microsoft Agent ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8296| [1018676] Microsoft Visual Basic VBP File Buffer Overflow Lets Remote Users Execute Arbitrary Code
8297| [1018568] Microsoft Vector Markup Language Buffer Overflow Lets Remote Users Execute Arbitrary Code
8298| [1018567] Microsoft Virtual PC/Server Heap Overflow Lets Local Users Gain Elevated Privileges
8299| [1018563] Microsoft GDI Buffer Overflow Lets Remote Users Execute Arbitrary Code
8300| [1018562] Microsoft Internet Explorer CSS and ActiveX Control Bugs Let Remote Users Execute Arbitrary Code
8301| [1018561] Microsoft Excel Workspace Index Validation Bug Lets Remote Users Execute Arbitrary Code
8302| [1018560] Microsoft OLE Automation Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
8303| [1018559] Microsoft Core XML Services Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8304| [1018551] Microsoft DirectX Buffer Overflow in FlashPix ActiveX Control Lets Remote Users Execute Arbitrary Code
8305| [1018520] Microsoft Visual Database Tools Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
8306| [1018420] Microsoft DirectX Heap Overflow in Processing RLE-Compressed Targa Images Lets Remote Users Execute Arbitrary Code
8307| [1018353] Microsoft Office Publisher Lets Remote Users Execute Arbitrary Code
8308| [1018352] Microsoft Excel Caculation Error and Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8309| [1018351] Microsoft Internet Explorer Bug in Firefox URL Protocol Handler Lets Remote Users Execute Arbitrary Commands
8310| [1018321] Microsoft Excel Sheet Name Buffer Overflow Lets Remote Users Execute Arbitrary Code
8311| [1018251] Microsoft Office Buffer Overflow in MSODataSourceControl ActiveX Control May Let Remote Users Execute Arbitrary Code
8312| [1018235] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
8313| [1018202] Microsoft GDI+ ICO File Divide By Zero Bug Lets Remote Users Deny Service
8314| [1018193] Microsoft Internet Explorer Lets Remote Users Spoof Certain Objects
8315| [1018192] Microsoft Internet Explorer Input Validation Hole Permits Cross-Site Scripting Attacks
8316| [1018107] Microsoft Office Buffer Overflow in OUACTRL.OCX ActiveX Control Lets Remote Users Execute Arbitrary Code
8317| [1018019] Microsoft Internet Explorer Bugs Let Remote Users Modify Files or Execute Arbitrary Code
8318| [1018017] Microsoft CAPICOM 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
8319| [1018016] Microsoft BizTalk Server 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
8320| [1018015] Microsoft Exchange Base64, iCal, IMAP, and Attachment Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code
8321| [1018014] Microsoft Office Drawing Object Validation Flaw Lets Remote Users Execute Arbitrary Code
8322| [1018013] Microsoft Word Array and RTF Processing Bugs Let Remote Users Execute Arbitrary Code
8323| [1018012] Microsoft Excel Specially Crafted BIFF Records, Set Font Values, and Filter Records Permit Remote Code Execution
8324| [1017969] Microsoft Internet Explorer Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
8325| [1017910] Microsoft Windows DNS Service RPC Stack Overflow Lets Remote Users Execute Arbitrary Code
8326| [1017902] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
8327| [1017901] Microsoft Windows Help File Heap Overflow Lets Remote Users Execute Arbitrary Code
8328| [1017896] Microsoft Agent URL Parsing Bug Lets Remote Users Execute Arbitrary Code
8329| [1017894] Microsoft Content Management Server Permits Cross-Site Scripting Attacks and Lets Remote Users Execute Arbitrary Code
8330| [1017827] Microsoft Windows Animated Cursor Bug Lets Remote Users Execute Arbitrary Code
8331| [1017752] Adobe JRun IIS Connector Bug Lets Remote Users Deny Service
8332| [1017736] Microsoft Windows Explorer OLE Parsing Bug Lets Users Deny Service
8333| [1017694] VeriSign Secure Messaging for Microsoft Exchange Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code
8334| [1017653] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
8335| [1017643] Microsoft Internet Explorer Multiple COM Objects Let Remote Users Execute Arbitrary Code
8336| [1017642] Microsoft Internet Explorer FTP Server Response Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8337| [1017641] Microsoft Windows RichEdit OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8338| [1017640] Microsoft Office OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8339| [1017639] Microsoft Word Macro Security Warning Bug and Drawing Object Memory Corrupution Error Lets Remote Users Execute Arbitrary Code
8340| [1017638] Microsoft MFC Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8341| [1017637] Microsoft OLE Dialog RTF File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8342| [1017636] Microsoft Windows Defender Integer Overflow in Parsing PDF Files Lets Remote Users Execute Arbitrary Code
8343| [1017635] Microsoft HTML Help ActiveX Control Lets Remote Users Execute Arbitrary Code
8344| [1017632] Microsoft Step-by-Step Interactive Training Buffer Overflow in Processing Bookmark Links Lets Remote Users Execute Arbitrary Code
8345| [1017584] Microsoft Office Excel Buffer Overflow Lets Remote Users Execute Arbitrary Code
8346| [1017579] [Duplicate Entry] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
8347| [1017564] Microsoft Word Function Processing Bug Lets Remote Users Execute Arbitrary Code
8348| [1017530] Microsoft Help Workshop Buffer Overflow in Processing '.CNT' Files Lets Remote Users Execute Arbitrary Code
8349| [1017488] Microsoft Outlook '.iCal', '.oss', and SMTP Header Bugs Let Remote Users Execute Arbitrary Code or Deny Service
8350| [1017487] Microsoft Excel Buffer Overflows in Processing Various Records and Strings Lets Remote Users Execute Arbitrary Code
8351| [1017486] Microsoft Office Brazilian Portuguese Grammar Checker Lets Remote Users Execute Arbitrary Code
8352| [1017485] Microsoft Excel Memory Access Error Lets Remote Users Execute Arbitrary Code
8353| [1017441] Microsoft Windows Workstation Service Memory Allocation Error in NetrWkstaUserEnum() Lets Remote Users Deny Service
8354| [1017397] Microsoft Outlook Recipient ActiveX Control Lets Remote Users Deny Service
8355| [1017390] Microsoft Word Unchecked Count Vulnerability Lets Remote Users Execute Arbitrary Code
8356| [1017388] Microsoft Project Discloses Database Password to Remote Authenticated Users
8357| [1017374] Microsoft Internet Explorer May Disclose Contents of the Temporary Internet Files Folder to Remote Users
8358| [1017373] Microsoft Internet Explorer DHTML and Script Error Handling Bugs Let Remote Users Execute Arbitrary Code
8359| [1017369] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Book Files Let Remote Users Execute Arbitrary Code
8360| [1017358] Microsoft Word Data Structure Processing Bug Lets Remote Users Cause Arbitrary Code to Be Executed
8361| [1017339] Microsoft Word String Processing Bug Lets Remote Users Execute Arbitrary Code
8362| [1017224] Microsoft Client Service for Netware Buffer Overflows Let Remote Users Execute Arbitrary Code and Crash the System
8363| [1017223] Microsoft Internet Explorer Bug in Rending HTML Layout Combinations May Let Remote Users Execute Arbitrary Code
8364| [1017222] Microsoft Agent '.ACF' File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
8365| [1017168] Microsoft Windows Kernel GDI Data Structure Processing Bug Lets Local Users Gain Elevated Privileges
8366| [1017165] Microsoft Internet Explorer 'ieframe.dll' Lets Remote Users Spoof Invalid Certificates
8367| [1017157] Microsoft XML Core Services ActiveX Control Lets Remote Users Execute Arbitrary Code
8368| [1017142] Microsoft Visual Studio WMI Object Broker ActiveX Control Lets Remote Users Execute Arbitrary Code
8369| [1017133] Microsoft NAT Helper 'ipnathlp.dll' Lets Remote Users Deny Service
8370| [1017127] Microsoft Data Access Components 'ADODB.Connection' Execute Function Lets Remote Users Execute Arbitrary Code
8371| [1017122] Microsoft Internet Explorer Lets Remote Users Partially Spoof Address Bar URLs
8372| [1017059] Microsoft PowerPoint Bug Causes PowerPoint to Crash
8373| [1017034] Microsoft Office String, Chart Record, and SmartTag Validation Errors Let Remote Users Execute Arbitrary Code
8374| [1017033] Microsoft XML Core Services Lets Remote Users Execute Arbitrary Code or Obtain Information
8375| [1017032] Microsoft Word String and Mail Merge Record Validation Flaws Let Remote Users Execute Arbitrary Code
8376| [1017031] Microsoft Excel DATETIME/COLINFO Record Errors and Lotus 1-2-3 Errors Let Remote Users Execute Arbitrary Code
8377| [1017030] Microsoft PowerPoint Errors in Parsing Object Pointers and Data Records Lets Remote Users Execute Arbitrary Code
8378| [1016941] Microsoft Windows Shell Integer Overflow Lets Remote Users Execute Arbitrary Code
8379| [1016937] Microsoft PowerPoint Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
8380| [1016886] [Duplicate] Microsoft PowerPoint Bug Lets Remote Users Execute Arbitrary Code
8381| [1016879] Microsoft Internet Explorer VML Buffer Overflow Lets Remote Users Execute Arbitrary Code
8382| [1016854] Microsoft Internet Explorer Buffer Overflow in 'daxctle.ocx' ActiveX in KeyFrame Method Control Lets Remote Users Execute Arbitrary Code
8383| [1016839] Microsoft Internet Explorer URLMON.DLL Buffer Overflow Lets Remote Users Execute Arbitrary Code
8384| [1016827] Microsoft PGM Implementation Buffer Overflow in MSMQ Service Lets Remote Users Execute Arbitrary Code
8385| [1016825] Microsoft Publisher Buffer Overflow in Parsing '.pub' Files Lets Remote Users Execute Arbitrary Code
8386| [1016787] Microsoft Word Record Validation Vulnerability Lets Remote Users Execute Arbitrary Code
8387| [1016764] Microsoft Internet Explorer (IE) Buffer Overflow in 'daxctle.ocx' ActiveX Control Lets Remote Users Execute Arbitrary Code
8388| [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
8389| [1016720] [Duplicate Entry] Microsoft PowerPoint Unknown Bug May Let Remote Users Execute Arbitrary Code
8390| [1016663] Microsoft Internet Explorer Bugs Let Remote Users Obtain Information or Execute Arbitrary Code
8391| [1016657] Microsoft Office Buffer Overflow in Processing PowerPoint Records Lets Remote Users Execute Arbitrary Code
8392| [1016656] Microsoft Visual Basic for Applications Buffer Overflow Lets Remote Users Execute Arbitrary Code
8393| [1016655] Microsoft Management Console Input Validation Hole Permits Remote Code Execution
8394| [1016654] Microsoft Outlook Express MHTML Parsing Error Lets Remote Users Execute Arbitrary Code
8395| [1016506] Microsoft Internet Security and Acceleration Server HTTP File Exentsion Filter Can Be Bypassed By Remote Users
8396| [1016504] Microsoft Works Buffer Overflow in Processing Spreadsheet Files May Let Remote Users Execute Arbitrary Code
8397| [1016496] Microsoft PowerPoint 'mso.dll' Buffer Overflow May Let Remote Users Execute Arbitrary Code
8398| [1016472] Microsoft Excel Errors in Processing Various Malformed Records Let Remote Users Execute Arbitrary Code
8399| [1016470] Microsoft Office PNG and GIF File Buffer Error Lets Remote Users Execute Arbitrary Code
8400| [1016469] Microsoft Office String Parsing and Property Bugs Let Remote Users Execute Arbitrary Code
8401| [1016468] Microsoft DHCP Client Buffer Overflow Lets Remote Users Execute Arbitrary Code
8402| [1016453] Microsoft Office LsCreateLine() Function May Let Remote Users Execute Arbitrary Code
8403| [1016434] Microsoft HTML Help Heap Overflow in HHCtrl ActiveX Control May Let Remote Users Execute Arbitrary Code
8404| [1016430] Microsoft Excel STYLE Record Bug May Let Remote Users Execute Arbitrary Code
8405| [1016388] Microsoft Windows Explorer Lets Remote Users Access Information in Other Domains and Execute HTA Applications
8406| [1016344] Microsoft Excel 'Shockwave Flash Object' Lets Remote Users Execute Code Automatically
8407| [1016339] Microsoft Windows 'hlink.dll' Buffer Overflow in Processing Hyperlinks Lets Remote Users Execute Arbitrary Code
8408| [1016316] Microsoft Excel Memory Validation Flaw May Let Remote Users Cause Arbitrary Code to Be Executed
8409| [1016292] Microsoft Windows Buffer Overflow in AOL ART Image Rendering Library Lets Remote Users Execute Arbitrary Code
8410| [1016291] Microsoft Internet Explorer Multiple Memory and Access Control Errors Let Remote Users Execute Arbitrary Code
8411| [1016290] Microsoft Windows Buffer Overflow in TCP/IP Stack Lets Remote Users Execute Arbitrary Code
8412| [1016289] Microsoft RPC Mutual Authentication Bug Lets Remote Users Spoof Other Systems
8413| [1016287] Microsoft PowerPoint Buffer Overflow in Processing Malformed Records Lets Remote Users Execute Arbitrary Code
8414| [1016286] Microsoft Windows 98 Graphics Rendering Engine Buffer Overflow in Processing WMF Images Lets Remote Users Execute Arbitrary Code
8415| [1016283] Microsoft JScript Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
8416| [1016280] Microsoft Outlook Web Access Input Validation Hole Permits Cross-Site Scripting Attacks
8417| [1016196] F-Secure Anti-Virus for Microsoft Exchange Buffer Overflow in Web Console May Let Remote Users Execute Arbitrary Code
8418| [1016130] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
8419| [1016048] Microsoft Exchange Error in Processing iCAL/vCAL Properties Lets Remote Users Execute Arbitrary Code
8420| [1016047] Microsoft Distributed Transaction Coordinator Bugs Let Remote Users Deny Service
8421| [1016005] Microsoft Outlook Express 'mhtml:' Redirect URL Processing Lets Remote Users Bypass Security Domains
8422| [1016001] Microsoft Internet Explorer Bug in Processing Nested OBJECT Tags Lets Remote Users Execute Arbitrary Code
8423| [1015900] Microsoft Internet Explorer Parsing and State Errors Let Remote Users Execute Arbitrary Code
8424| [1015899] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar URL
8425| [1015898] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Books Lets Remote Users Execute Arbitrary Code
8426| [1015897] Microsoft Windows Explorer COM Object Bug Lets Remote Users Execute Arbitrary Code
8427| [1015896] Microsoft FrontPage Server Extensions Input Validation Holes Permit Cross-Site Scripting Attacks
8428| [1015895] Microsoft SharePoint Team Services Input Validation Holes Permit Cross-Site Scripting Attacks
8429| [1015894] Microsoft Data Access Components RDS.Dataspace Access Control Bug Lets Remote Users Execute Arbitrary Code
8430| [1015892] Microsoft Internet Explorer Popup Window Object Bugs Let Remote Users Execute Scripting Code in Arbitrary Domains
8431| [1015855] Microsoft Office Array Index Boundary Error Lets Remote Users Execute Arbitrary Code
8432| [1015825] Microsoft ASP.NET Incorrect COM Component Reference Lets Remote Users Deny Service
8433| [1015812] Microsoft Internet Explorer createTextRange() Memory Error Lets Remote Users Execute Arbitrary Code
8434| [1015800] (Vendor Issues Fix) Microsoft Internet Explorer (IE) Lets Remote Users Cause HTA Files to Be Executed
8435| [1015794] (Vendor Issues Fix) Microsoft Internet Explorer 'mshtml.dll' Bug in Processing Multiple Action Handlers Lets Remote Users Deny Service
8436| [1015766] Microsoft Office and Excel Buffer Overflows Let Remote Users Execute Arbitrary Code
8437| [1015765] Microsoft Windows Services Have Unsafe Default ACLs That Let Remote Authenticated Users Gain Elevated Privileges
8438| [1015720] Microsoft Internet Explorer Modal Security Dialog Race Condition May Let Remote Users Install Code or Obtain Information
8439| [1015632] Microsoft PowerPoint May Let Users Access Contents of the Temporary Internet Files Folder
8440| [1015631] Microsoft Office Korean Input Method Editor Lets Local Users Gain Elevated Privileges
8441| [1015630] Microsoft Windows Web Client Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
8442| [1015629] Microsoft Windows IGMP Processing Bug Lets Remote Users Deny Service
8443| [1015595] Microsoft Windows UPnP/NetBT/SCardSvr/SSDP Services May Be Incorrectly Configured By 3rd Party Applications, Allowing Local Users to Gain Elevated Privileges
8444| [1015585] Microsoft HTML Help Workshop Buffer Overflow in Processing .hhp Files Lets Remote User Execute Arbitrary Code
8445| [1015559] Microsoft Internet Explorer Shockwave Flash Scripting Bug Lets Remote Users Deny Service
8446| [1015489] Microsoft Wireless Network Connection Software May Broadcast Ad-Hoc SSID Information in Certain Cases
8447| [1015461] Microsoft Outlook Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
8448| [1015460] Microsoft Exchange Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
8449| [1015459] Microsoft Windows Embedded Web Fonts Buffer Overflow Lets Remote Users Execute Arbitrary Code
8450| [1015453] Microsoft Windows Graphics Rendering Engine WMF File Memory Access Error Lets Remote Users Execute Arbitrary Code
8451| [1015416] Microsoft Windows Unspecified WMF Rendering Bug Lets Remote Users Execute Arbitrary Code
8452| [1015350] Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users
8453| [1015349] Microsoft Windows Internet Explorer May Let Remote Users Obfuscate the Download Dialog Box
8454| [1015348] Microsoft Internet Explorer Bug in Instantiating COM Objects May Let Remote Users Execute Arbitrary Code
8455| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
8456| [1015333] Microsoft Excel Unspecified Stack Overflow May Let Remote Users Cause Arbitrary Code to Be Executed
8457| [1015251] Microsoft Internet Explorer Bug in Processing Mismatched Document Object Model Objects May Let Remote Users Execute Arbitrary Code
8458| [1015233] Microsoft Windows RPC Service May Let Remote Users Deny Service
8459| [1015226] Microsoft AntiSpyware Improper CreateProcess() Call Lets Local Users Execute Arbitrary Code
8460| [1015168] Microsoft Windows Buffer Overflows in Graphics Rendering Engine Lets Remote Users Execute Arbitrary Code
8461| [1015143] F-Secure Anti-Virus for Microsoft Exchange Web Console May Disclose Files to Remote Users
8462| [1015101] Microsoft Internet Explorer J2SE Runtime Environment Bug Lets Remote Users Crash the Target User's Browser
8463| [1015044] Microsoft Windows Multiple COM Objects Let Remote Users Execute Arbitrary Code
8464| [1015043] Microsoft Network Connection Manager Lets Remote Users Deny Service
8465| [1015042] Microsoft Windows Plug and Play Buffer Overflow Lets Remote Users Execute Arbitrary Code
8466| [1015041] Microsoft Client Service for NetWare Buffer Overflow Lets Remote Users Execute Arbitrary Code
8467| [1015040] Microsoft Windows Shell Bugs in Processing '.lnk' Files and in Web View Preview Mode Lets Remote Users Execute Arbitrary Code
8468| [1015039] Microsoft Windows Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
8469| [1015038] Microsoft Exchange Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
8470| [1015037] Microsoft Windows Buffer Overflows in MSDTC and COM+ Let Remote Users Execute Arbitrary Code and Local User Gain Elevated Privileges
8471| [1015036] Microsoft Windows FTP Client Input Validation Hole Lets Remote Servers Create/Overwrite Files on the Target User's System
8472| [1015034] Microsoft DirectX DirectShow Buffer Overflow Lets Remote Users Execute Arbitrary Code
8473| [1014829] Microsoft Windows Firewall User Interface May Not Properly Display Exception Rules
8474| [1014809] Microsoft Internet Explorer Unspecified Bug May Permit Remote Code Execution
8475| [1014727] Microsoft 'msdds.dll' COM Object Lets Remote Users Execute Arbitrary Code
8476| [1014643] Microsoft Internet Explorer COM Object Instantiation Bug May Let Remote Users Execute Arbitrary Code
8477| [1014642] Microsoft Windows Kerberos and PKINIT Vulnerabilities Allow Denial of Service, Information Disclosure, and Spoofing
8478| [1014641] Microsoft Internet Explorer Web Folder URL Validation Bug Lets Remote Users Execute Scripting Code in an Arbitrary Security Domain
8479| [1014640] Microsoft Windows Plug and Play Stack Overflow Lets Remote Users Execute Arbitrary Code
8480| [1014639] Microsoft Windows Telephony Service Remote Code Execution or Local Privilege Escalation
8481| [1014638] Microsoft Windows Print Spooler Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
8482| [1014501] Hosting Controller 'IISActions.asp' Script Lets Remote Authenticated Users Add Domains/Subdomains
8483| [1014500] Microsoft Internet Explorer (IE) JPEG Rendering Bugs Let Remote Users Deny Service or Execute Arbitrary Code
8484| [1014498] Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
8485| [1014458] Microsoft Office Buffer Overflow in Parsing Fonts Lets Remote Users Cause Arbitrary Code to Be Executed
8486| [1014457] Microsoft Microsoft Color Management Module Lets Remote Users Execute Arbitrary Code
8487| [1014417] Microsoft Windows Named Pipe NULL Session Bugs in svcctl and eventlog RPC Interfaces Disclose Information to Remote Users
8488| [1014364] Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
8489| [1014356] Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required
8490| [1014352] Microsoft Front Page May Crash When Editing a Specially Crafted Web Page
8491| [1014329] Microsoft Internet Explorer 'javaprxy.dll' COM Object Exception Handling Lets Remote Users Execute Arbitrary Code
8492| [1014261] Microsoft Internet Explorer Lets Remote Users Spoof Javascript Dialog Boxes
8493| [1014201] Microsoft Internet Explorer Buffer Overflow in Rendering PNG Images Lets Remote Users Execute Arbitrary Code
8494| [1014200] Microsoft Outlook Express Buffer Overflow in NNTP Response Parser Lets Remote Users Execute Arbitrary Code
8495| [1014199] Microsoft Outlook Web Access Input Validation Hole in IMG Tags Permits Cross-Site Scripting Attacks
8496| [1014198] Microsoft Windows Buffer Overflow in Processing Server Message Block Packets Lets Remote Users Execute Arbitrary Code
8497| [1014197] Microsoft Agent Lets Remote Users Spoof Security Dialog Box Contents
8498| [1014196] Microsoft Windows Buffer Overflow in Web Client Service Lets Remote Authenticated Users Execute Arbitrary Code
8499| [1014195] Microsoft HTML Help Input Validation Flaw Lets Remote Users Execute Arbitrary Code
8500| [1014194] Microsoft Step-by-Step Interactive Training Bookmark Link File Validation Flaw Lets Remote Users Execute Arbitrary Code
8501| [1014193] Microsoft Internet Security and Acceleration Server Bugs Let Remote Users Poison the Cache and Establish NetBIOS Connections
8502| [1014174] Microsoft Internet Explorer Lets Remote Users Obfuscate Scripting Code
8503| [1014113] Microsoft ISA Server in SecureNAT Configuration Can Be Crashed By Remote Users
8504| [1014050] Computer Associates eTrust Antivirus Integer Overflow in Processing Microsoft OLE Data Lets Remote Users Execute Arbitrary Code
8505| [1013996] Microsoft ASP.NET May Disclose System Information to Remote Users in Certain Cases
8506| [1013761] Microsoft Windows Explorer 'webvw.dll' Input Validation Error Lets Remote Users Execute Arbitrary Scripting Code
8507| [1013724] RSA Authentication Agent for Web for IIS Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks
8508| [1013692] Microsoft Internet Explorer Buffer Overflows in DHTML, URL Parsing, and Content Advisor Let Remote Users Execute Arbitrary Code
8509| [1013691] Microsoft Message Queuing Buffer Overflow Lets Remote Users Execute Arbitrary Code
8510| [1013689] Microsoft Windows Shell MSHTA Lets Remote Users Code Execute Arbitrary Scripting Code
8511| [1013688] Microsoft Windows Kernel and Font Buffer Overflows Let Local Users Deny Service or Obtain System Privileges
8512| [1013687] Microsoft Exchange Heap Overlow in Processing Extended SMTP Verb Lets Remote Users Execute Arbitrary Code
8513| [1013686] Microsoft Windows TCP, IP, and ICMP Processing Errors Let Remote Users Deny Service and Execute Arbitrary Code
8514| [1013684] Microsoft Word Unspecified Buffer Overflow in Processing Documents Lets Remote Users Execute Arbitrary Code
8515| [1013669] Microsoft Outlook Web Access 'From' Address Display Lets Remote Users Spoof Origination Addresses
8516| [1013668] Microsoft Outlook 'From' Address Display Lets Remote Users Spoof Origination Addresses
8517| [1013618] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code
8518| [1013583] Microsoft Outlook Connector for IBM Lotus Domino Lets Users Bypass Password Storage Policy
8519| [1013552] Microsoft Windows Remote Desktop 'TSShutdn.exe' Lets Remote Authenticated Users Shutdown the System
8520| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
8521| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
8522| [1013205] Microsoft Internet Explorer Can Be Crashed With URL Containing Special URL Characters
8523| [1013126] Microsoft Internet Explorer CDF Scripting Error Lets Remote Users Execute Scripting Code in Arbitrary Domains
8524| [1013125] Microsoft Internet Explorer DHTML Method Heap Overflow Lets Remote Users Execute Arbitrary Code
8525| [1013124] Microsoft Internet Explorer URL Encoding Error Lets Remote Users Spoof Arbitrary URLs and Execute Scripting Code in Arbitrary Security Zone
8526| [1013120] Microsoft Windows OLE Buffer Overflow Lets Remote Users Execute Arbitrary Code and COM Access Flaw Lets Remote Authenticated Users Gain Elevated Privileges
8527| [1013119] Microsoft Windows Hyperlink Object Library Lets Remote Users Execute Arbitrary Code
8528| [1013117] Microsoft Windows License Logging Service Lets Remote Users Execute Arbitrary Code
8529| [1013115] Microsoft Windows Media Player Buffer Overflow in Processing PNG Files Lets Remote Users Execute Arbitrary Code
8530| [1013114] Microsoft Windows SMB Lets Remote Users Execute Arbitrary Code
8531| [1013112] Microsoft Windows XP Named Pipe Validation Error Lets Remote Users Obtain Information
8532| [1013111] Microsoft SharePoint Services Redirection Query Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks
8533| [1013110] Microsoft Office XP Buffer Overflow in Processing URLs Lets Remote Users Execute Arbitrary Code
8534| [1013086] Microsoft Outlook Web Access 'owalogon.asp' Lets Remote Users Redirect Login Requests
8535| [1012891] Microsoft IE Windows XP SP2 File Download Security Can Be Bypassed With Dynamic IFRAME Tag
8536| [1012836] Microsoft HTML Help Active Control Cross-Domain Error Lets Remote Users Execute Arbitrary Commands
8537| [1012835] Microsoft Cursor and Icon Validation Error Lets Remote Users Execute Arbitrary Code
8538| [1012684] Microsoft Windows LoadImage API Buffer Overflow Lets Remote Users Execute Arbitrary Code
8539| [1012683] Microsoft Windows ANI File Parsing Errors Let Remote Users Deny Service
8540| [1012682] Microsoft Windows Help System Buffer Overflows in Processing Phrase Compressed Help Files Lets Remote Users Execute Arbitrary Code
8541| [1012626] Microsoft Windows Media Player setItemInfo Lets Remote Users Execute Arbitrary Code
8542| [1012584] Microsoft IE dhtmled.ocx Lets Remote Users Execute Cross-Domain Scripting Attacks
8543| [1012518] Microsoft HyperTerminal Buffer Overflow Lets Remote Users Execute Arbitrary Code
8544| [1012517] Microsoft WINS Buffer Overflow in Name Value Lets Remote Users Execute Arbitrary Code
8545| [1012515] Microsoft Windows NT 4.0 Buffer Overflows in the Logging and Processing of DHCP Packets May Let Remote Users Execute Arbitrary Code
8546| [1012514] Microsoft WordPad Error in Converting Tables/Fonts Lets Remote Users Execute Arbitrary Code
8547| [1012513] Microsoft Windows Kernel Buffer Overflow in Processing Local Procedure Call Messages Lets Local Users Gain System Privileges
8548| [1012512] Microsoft LSASS Bug in Validating Identity Tokens Lets Local Users Gain Elevated Privileges
8549| [1012458] Microsoft Internet Explorer Lets Remote Users Inject Content into Open Windows
8550| [1012444] Microsoft Internet Explorer Input Validation Error in Processing FTP URLs May Let Remote Users Inject Arbitrary FTP Commands
8551| [1012435] Microsoft Windows Resource Kit Buffer Overflow and Input Validation Holes in 'w3who.dll' May Permit Remote Code Execution and Cross-Site Scripting Attacks
8552| [1012341] Microsoft WINS Memory Overwrite Lets Remote Users Execute Arbitary Code
8553| [1012288] Microsoft IE Custom 404 Error Message and execCommand SaveAs Lets Remote Users Bypass XP SP2 Download Warning Mechanisms
8554| [1012234] Microsoft Internet Explorer on XP SP2 Has Unspecified Flaws That Let Remote Users Bypass File Download Restrictions
8555| [1012155] Microsoft Internet Security and Acceleration Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
8556| [1012154] Microsoft Proxy Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
8557| [1012138] Microsoft IE Discloses Whether Specified Files Exist to Remote Users
8558| [1012057] F-Secure Anti-Virus for Microsoft Exchange Lets Remote Users Bypass Anti-Virus Detection With a ZIP Archive
8559| [1012049] (Exploit Code Has Been Released) Microsoft Internet Explorer Buffer Overflow in IFRAME/EMBED Tag Processing Lets Remote Users Execute Arbitrary Code
8560| [1011987] Microsoft Internet Explorer Lets Remote Users Spoof the Status Bar Address with a Table Within a Link
8561| [1011940] Microsoft Remote Desktop on Windows XP Lets Remote Authenticated Users Restart the System
8562| [1011895] Microsoft IE for Mac Multi-Window Browsing Errors Let Remote Users Spoof Sites
8563| [1011890] Microsoft Outlook May Display Images in Plaintext Only Mode
8564| [1011880] Microsoft Windows XP Error in Explorer in Processing WAV Files Lets Remote Users Deny Service
8565| [1011859] Microsoft Internet Explorer on Windows XP Fails to Restrict Drag and Drop Operations When Configured to Disable These Operations
8566| [1011851] Microsoft IE AnchorClick Behavior and HTML Help Let Remote Users Execute Arbitrary Code
8567| [1011735] Microsoft Internet Explorer May Display the Incorrect URL When Loading a Javascript Homepage
8568| [1011706] Microsoft Operating System 'asycpict.dll' Lets Remote Users Crash the System
8569| [1011678] Microsoft IE MSN 'heartbeat.ocx' Component Has Unspecified Flaw
8570| [1011647] Microsoft Windows Shell Buffer Overflows Let Remote Users Execute Arbitrary Code
8571| [1011646] Microsoft Program Group Converter Buffer Overflow Lets Remote Users Execute Arbitrary Code
8572| [1011645] Microsoft Various Operating System Flaws Lets Remote Users Execute Code and Local Users Gain Elevated Privileges or Deny Service
8573| [1011644] Microsoft IE Plug-in Navigation Flaw Lets Remote Users Spoof URLs in the Addresses Bar
8574| [1011643] Microsoft IE Double Byte Parsing Flaw Lets Remote Users Spoof URLs in the Addresses Bar
8575| [1011642] Microsoft IE SSL Caching Flaw Lets Remote Users Run Scripting Code in the Context of Arbitrary Secure Sites
8576| [1011640] Microsoft IE Buffer Overflow in Install Engine Lets Remote Users Execute Arbitrary Code
8577| [1011639] Microsoft IE Buffer Overflow in Processing Cascading Style Sheets Lets Remote Users Execute Arbitrary Code
8578| [1011637] Microsoft Windows Buffer Overflow in Processing Compressed Folders Lets Remote Users Execute Arbitrary Code
8579| [1011636] Microsoft SMTP Service Buffer Overflow in Processing DNS Responses May Let Remote Users Execute Arbitrary Code
8580| [1011635] Microsoft Excel Unspecified Flaw Lets Remote Users Execute Arbitrary Code
8581| [1011634] Microsoft NetDDE Buffer Overflow Lets Remote Users Execute Arbitrary Code With System Privileges
8582| [1011632] Microsoft NT RPC Runtime Library Buffer Overflow Lets Remote Users Deny Service
8583| [1011631] Microsoft NNTP Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
8584| [1011626] Microsoft Cabarc Directory Traversal Flaw Lets Remote Users Create/Overwrite Files on the Target System
8585| [1011565] Microsoft Word Parsing Flaw May Let Remote Users Execute Arbitrary Code
8586| [1011563] Microsoft Internet Explorer Lets Remote Users Access XML Documents
8587| [1011559] Microsoft .NET Forms Authentication Can Be Bypassed By Remote Users
8588| [1011434] Microsoft SQL Server Can Be Crashed By Remote Users Sending a Specially Crafted Large Buffer
8589| [1011332] Microsoft Internet Explorer Bug in Setting Cookies in Certain Domains May Let Remote Users Conduct Session Fixation Attacks
8590| [1011253] Microsoft GDI+ Buffer Overflow in Processing JPEG Images Lets Remote Users Execute Arbitrary Code
8591| [1011252] Microsoft Works Suite Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
8592| [1011251] Microsoft Publisher Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
8593| [1011250] Microsoft FrontPage Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
8594| [1011249] Microsoft Office Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
8595| [1011200] F-Secure Anti-Virus for Microsoft Exchange Input Validation Bug in Content Scanner Server Lets Remote Users Deny Service
8596| [1011141] HP Systems Insight Manager May Not Let Users Login After Applying a Microsoft Security Patch
8597| [1011067] Microsoft Outlook Express May Disclose 'bcc:' Recipient Addresses
8598| [1011043] Microsoft Internet Explorer Local File IFRAME Error Response Lets Remote Users Determine if Files or Directories Exist
8599| [1010996] Microsoft Windows XP SP2 Local Computer Scripting Restrictions Can Be Bypassed With a Specially Crafted MHT File
8600| [1010992] Microsoft Internet Security and Acceleration Server Does Not Block FTP Bounce Attacks
8601| [1010959] Microsoft Windows Explorer (in XP SP2) May Fail to Warn Users When Executing Untrusted Files
8602| [1010957] Microsoft Internet Explorer Unregistered Protocol State Error Lets Remote Users Spoof Location Bar
8603| [1010916] Microsoft Outlook Web Access Input Validation Hole in Redirection Query Permits Cross-Site Scripting Attacks
8604| [1010827] Microsoft Internet Explorer Error in 'mshtml.dll' in Processing GIF Files Lets Remote Users Crash the Browser
8605| [1010713] Microsoft Systems Management Server (SMS) Client Can Be Crashed By Remote Users
8606| [1010694] Microsoft IE Lets Remote Users Spoof Filenames Using CLSIDs
8607| [1010693] Microsoft Internet Explorer 'shell:' Protocol Lets Remote Users Execute Arbitrary Scripting Code in the Local Zone
8608| [1010690] Microsoft HTML Help Input Validation Error Lets Remote Users Execute Arbitrary Code
8609| [1010688] Microsoft Windows Task Scheduler Buffer Overflow Lets Remote Users Execute Arbitrary Code
8610| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
8611| [1010686] Microsoft Utility Manager Permits Local Applications to Run With Elevated Privileges
8612| [1010683] Microsoft Internet Explorer Same Name Javascript Bug Lets Remote Users Execute Arbitrary Javascript in the Domain of an Arbitrary Site
8613| [1010679] Microsoft Internet Explorer Access Control Flaw in popup.show() Lets Remote Users Execute Mouse-Click Actions
8614| [1010673] Microsoft Internet Explorer Can Be Crashed By Remote Users With Large Text Files
8615| [1010550] Microsoft MN-500 Wireless Base Station Lets Remote Users Deny Administrative Access
8616| [1010491] Microsoft Internet Explorer Crashes When Saving Files With Special Character Strings
8617| [1010482] Microsoft Internet Explorer '%2F' URL Parsing Error Lets Remote Users Spoof Sites in the Trusted Zone
8618| [1010479] (US-CERT Issues Advisory) Microsoft Internet Explorer Cross-Domain Redirect Hole Lets Remote Users Execute Arbitrary Code
8619| [1010427] Microsoft DirectX DirectPlay Input Validation Error Lets Remote Users Crash the Application
8620| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
8621| [1010314] Microsoft Windows IPSec Filtering Can Be Bypassed By Remote Users
8622| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
8623| [1010175] Microsoft Visual Basic Buffer Overflow May Let Local Users Gain Elevated Privileges
8624| [1010166] Microsoft Outlook Express Mail Troubleshooting Function May Disclose SMTP Password to Local Users
8625| [1010165] Microsoft Internet Explorer Image Map URL Display Error Lets Remote Users Spoof URLs
8626| [1010157] Microsoft Internet Explorer showHelp Path Search Lets Remote Users Load Existing Local CHM Files
8627| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
8628| [1010119] Microsoft Help and Support Center HCP URL Validation Error May Let Remote Users Execute Arbitrary Code If User Interactions Occur
8629| [1010092] Microsoft Internet Explorer 'file://' URL Processing Flaw Lets Remote Users Damage the Registry
8630| [1010009] Microsoft Internet Explorer SSL Icon Error May Let Remote Users Impersonate Secure Web Sites
8631| [1009940] Microsoft Windows Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
8632| [1009939] Microsoft Internet Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
8633| [1009778] Microsoft H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
8634| [1009777] Microsoft SSL Library Input Validation Error Lets Remote Users Crash the Service
8635| [1009776] Microsoft Windows Kernel Local Descriptor Table Flaw Lets Local Users Gain Elevated Privileges
8636| [1009771] Microsoft Windows Negotiate Security Software Provider (SSP) Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code
8637| [1009770] Microsoft Windows Management Interface Provider Lets Local Users Gain Elevated Privileges
8638| [1009769] Microsoft Utility Manager Lets Local Users Run Applications With Elevated Privileges
8639| [1009768] Microsoft Winlogon Buffer Overflow Lets Certain Remote Users Execute Arbitrary Code
8640| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
8641| [1009762] Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users
8642| [1009761] Microsoft Windows COM Object Identifier Creation Flaw May Let Remote Users Cause Applications to Open Network Ports
8643| [1009760] Microsoft Virtual DOS Machine (VDM) Lets Local Users Gain Elevated Privileges
8644| [1009758] Microsoft Windows RCP Memory Leak Lets Remote Users Deny Service
8645| [1009757] Microsoft Jet Database Engine 'msjet40.dll' Buffer Overflow Lets Remote Users Execute Arbitrary Code
8646| [1009754] Microsoft ASN.1 Library (msasn1.dll) Double-Free Memory Allocation Error May Let Remote Users Execute Arbitrary Code
8647| [1009753] Microsoft SSL Library PCT Buffer Overflow Lets Remote Users Execute Arbitrary Code
8648| [1009752] Microsoft Help and Support Center Input Validation Flaw Lets Remote Users Execute Arbitrary Code in the My Computer Zone
8649| [1009751] Microsoft LSASS Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
8650| [1009746] Microsoft Internet Explorer Bitmap Memory Allocation Error Lets Remote Users Cause All Available Memory to Be Consumed
8651| [1009743] Microsoft Outlook Express Can Be Crashed By Remote Users With Specially Crafted EML File
8652| [1009739] Microsoft Internet Explorer Javascript OLE Object Lets Remote Users Automatically Print Without Authorization
8653| [1009690] Microsoft Internet Explorer Security Domain Flaw in Accessing CHM Files Lets Remote Users Execute Arbitrary Code
8654| [1009673] Microsoft Windows XP 'mswebdvd.dll' Buffer Overflow Lets Remote Users Deny Service
8655| [1009666] Microsoft SharePoint Portal Server Input Validation Holes Permit Cross-Site Scripting Attacks
8656| [1009604] Microsoft Internet Explorer Does Not Correctly Display Links With Embedded FORM Data
8657| [1009603] Microsoft Outlook Express Does Not Correctly Display Links With Embedded FORM Data
8658| [1009546] Microsoft Operating Systems Have Unspecified Flaw That Yields Kernel Level Access to Local Users
8659| [1009361] Microsoft Internet Explorer Cookie Path Restrictions Can Be Bypassed By Remote Servers
8660| [1009360] Microsoft MSN Messenger May Disclose Known Files to Remote Users
8661| [1009359] Microsoft Windows Media Services Can Be Crashed By Remote Users
8662| [1009358] Microsoft Office XP 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
8663| [1009357] Microsoft Outlook 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
8664| [1009243] Microsoft Internet Explorer (IE) May Leak Keystrokes Across Frames
8665| [1009181] Microsoft Windows Explorer Heap Overflow in Processing '.emf' Files Permits Code Execution
8666| [1009067] Microsoft Internet Explorer Integer Overflow in Processing Bitmap Files Lets Remote Users Execute Arbitrary Code
8667| [1009009] Microsoft Virtual PC for Mac Temporary File Flaw Lets Local Users Gain Root Privileges
8668| [1009008] Microsoft Windows Internet Naming Service (WINS) Length Validation Flaw Lets Remote Users Deny Service
8669| [1009007] Microsoft ASN.1 Library Heap Overflows Let Remote Users Execute Arbitrary Code With SYSTEM Privileges
8670| [1008901] Microsoft Internet Explorer Travel Log Input Validation Flaw Lets Remote Users Run Arbitrary Scripting Code in the Local Computer Domain
8671| [1008699] Microsoft Windows Buffer Overflow in MDAC Lets Remote Users Execute Arbitrary Code
8672| [1008698] Microsoft Internet Security and Acceleration Server H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
8673| [1008586] Microsoft Office Security Features Can Be Bypassed
8674| [1008583] Microsoft Internet Explorer Flaw in Processing '.lnk' Shortcuts Lets Remote Users Execute Arbitrary Code
8675| [1008578] Microsoft Internet Explorer showHelp() '\..\' Directory Traversal Flaw Lets Remote Users Execute Files on the Target System
8676| [1008558] Microsoft Internet Explorer Trusted Domain Default Settings Facilitate Silent Installation of Executables
8677| [1008554] Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field
8678| [1008510] Openwares.org 'Microsoft IE Security Patch' URL Buffer Overflow Lets Remote Users Execute Arbitrary Code
8679| [1008428] Microsoft ASP.NET Web Services XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests
8680| [1008425] Microsoft IE Does Not Properly Display Some URLs
8681| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
8682| [1008293] Microsoft Internet Explorer Invalid ContentType May Disclose Cache Directory Location to Remote Users
8683| [1008292] Microsoft Internet Explorer MHT Redirect Flaws Let Remote Users Execute Arbitrary Code
8684| [1008245] Microsoft SharePoint May Let Remote Users Access Protected Pages Without Authenticating
8685| [1008151] Microsoft Works Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
8686| [1008150] Microsoft Word Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
8687| [1008149] Microsoft Excel Macro Security Flaw Lets Remote Users Execute Arbitrary Macro Codes
8688| [1008148] Microsoft SharePoint Team Services Buffer Overflow May Let Remote Users Execute Arbitrary Code
8689| [1008147] Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
8690| [1008146] Microsoft Windows Workstation Service (wkssvc.dll) Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Privileges
8691| [1008053] Microsoft Internet Explorer IFRAME Refresh Lets Remote HTML Access Local Files
8692| [1008000] Microsoft Internet Explorer Lets Remote Users Execute Arbitrary Files in the Local Zone Using a Specially Crafted IFRAME/Location Header
8693| [1007937] Microsoft Exchange Server Buffer Overflow in Processing Extended Verb Requests May Let Remote Users Execute Arbitrary Code
8694| [1007936] Microsoft Outlook Web Access Input Validation Flaw in 'Compose New Message' Permits Remote Cross-Site Scripting Attacks
8695| [1007935] Microsoft ListBox and ComboBox 'user32.dll' Buffer Overflow May Allow Local Users to Gain Elevated Privileges
8696| [1007934] Microsoft Help and Support Center HCP Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code With Local Computer Privileges
8697| [1007933] Microsoft Windows Messenger Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With Local System Privileges
8698| [1007932] Microsoft Windows Troubleshooter ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
8699| [1007931] Microsoft Authenticode Low Memory Flaw May Let Remote Users Execute Arbitrary Code
8700| [1007922] Microsoft Windows RPC Multi-threaded Race Condition Lets Remote Users Crash the Service or Execute Arbitrary Code
8701| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
8702| [1007874] Microsoft Windows OS PostThreadMessage() API Permits Local Users to Terminate Processes That Have Message Queues
8703| [1007750] Microsoft BizTalk Server Default Directory Permissions May Let Remote Users Deny Service
8704| [1007689] Microsoft Internet Explorer Media Sidebar Flaw Lets Remote Users Execute Arbitrary Code on the System
8705| [1007687] Microsoft Internet Explorer Various Cross-Domain Flaws Permit Remote Scripting in Arbitrary Domains
8706| [1007670] Microsoft Windows Remote Procedure Call (RPC) DCOM Activation Buffer Overflows Let Remote Users Execute Arbitrary Code
8707| [1007651] RealSecure Server Sensor Unicode Flaw Lets Remote Users Crash the IIS Web Service
8708| [1007618] Microsoft Visual Basic for Applications (VBA) in Multiple Microsoft Products Permits Remote Code Execution
8709| [1007617] Microsoft Converter for WordPerfect Has Buffer Overflow That Lets Remote Users Execute Arbitrary Code
8710| [1007616] Microsoft Word Document Validation Error Lets Macros Run Without Warning
8711| [1007615] Microsoft Windows NetBIOS Name Service May Disclose Memory Contents to Remote Users
8712| [1007614] Microsoft Access Snapshot Viewer ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
8713| [1007599] Microsoft Outlook May Fail to Delete Outlook Data From the PST File
8714| [1007538] Microsoft Internet Explorer Buffer Overflow in CR549.DLL ActiveX Control Permits Remote Code Execution
8715| [1007537] Microsoft Internet Explorer Object Tag Flaw Lets Remote Users Execute Arbitrary Code
8716| [1007536] Microsoft Internet Explorer Cache Script Flaw Lets Remote Users Execute Code in the My Computer Zone
8717| [1007535] Microsoft MDAC Database Component Lets Remote Users Execute Arbitrary Code
8718| [1007507] RSA SecurID Interaction With Microsoft URLScan May Disclose URLScan Configuration to Remote Users
8719| [1007493] Microsoft Visual Studio Buffer Overflow in 'mciwndx.ocx' May Let Remote Users Execute Arbitrary Code
8720| [1007388] Microsoft WebServer Beta for Pocket PC Yields Administrative Access to Remote Users
8721| [1007364] IISShield May Fail to Drop a Specific Malformed HTTP Request
8722| [1007306] Microsoft Outlook Express Again Executes Scripting Code in Plain Text E-mail Messages
8723| [1007281] Microsoft Windows NT File Management Flaw May Let Remote Users Crash Certain Applications
8724| [1007280] Microsoft Data/Desktop Engine Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
8725| [1007279] Microsoft SQL Server Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
8726| [1007278] Microsoft DirectX Heap Overflow in Loading MIDI Files Lets Remote Users Execute Arbitrary Code
8727| [1007265] Microsoft MDAC ODBC Component May Store Database Passwords in Plaintext in the Registry
8728| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
8729| [1007214] Microsoft Windows XP Shell Buffer Overflow in Processing Folder Display Attributes Permits Remote Code Execution
8730| [1007212] Microsoft Windows Remote Procedure Call (RPC) Service Buffer Overflow in Processing DCOM Requests Allows Remote Code Execution
8731| [1007206] Microsoft SMTP Service Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
8732| [1007205] Microsoft Exchange Server Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
8733| [1007190] Microsoft Internet Explorer 'Chromeless' Window May Let Remote Users Spoof Various User Interface Characteristics
8734| [1007172] Microsoft Jet Database Engine Buffer Overflow May Let Remote Users Execute Arbitrary Code
8735| [1007154] Microsoft SMB Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
8736| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
8737| [1007133] Microsoft Outlook Web Access (OWA) May Disclose The User's OWA Password to Remote Users
8738| [1007126] Microsoft Internet Explorer Can By Crashed By Loading 'C:\aux' URL
8739| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
8740| [1007098] Microsoft Commerce Server Discloses SQL Server Password to Local Users
8741| [1007094] Microsoft NetMeeting Directory Traversal Flaw Lets Remote Users Execute Arbitrary Code
8742| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
8743| [1007072] Microsoft Internet Explorer Buffer Overflow in Processing Scripted 'HR' Tags Lets Remote Users Execute Arbitrary Code
8744| [1007057] Microsoft Windows Media Player Access Control Flaw Lets Remote Users View, Modify, and Delete Media Library Metadata
8745| [1007022] SurfControl for Microsoft ISA Server Discloses Files to Remote Users
8746| [1007008] Microsoft Internet Explorer XML Parsing Error Lets Remote Users Conduct Cross-Site Scripting Attacks
8747| [1007007] Microsoft Internet Explorer Custom HTTP Error Pages May Let Remote Users Execute Scripts in the Local Computer Zone
8748| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
8749| [1006924] Microsoft Internet Explorer Input Validation Flaw in Displaying FTP Site Names Lets Remote Users Execute Arbitrary Scripting Code in Arbitrary Domains
8750| [1006918] Microsoft Internet Explorer (IE) Object Tag Buffer Overflow Lets Remote Users Execute Arbitrary Code
8751| [1006901] Microsoft UrlScan Default Configuration Displays Identifying Characteristics to Remote Users
8752| [1006894] iisCART2000 Upload Authentication Error Lets Remote Users Upload and Execute Arbitrary Scripts
8753| [1006844] Microsoft Internet Connection Firewall Fails to Block IP Version 6 Protocol
8754| [1006829] iisPROTECT Input Validation Hole Lets Remote Users Execute SQL Stored Procedures
8755| [1006815] iisPROTECT Lets Remote Users Access Protected Files Using URL Encoding
8756| [1006809] Microsoft Outlook Express Lets Remote Users Silently Install Arbitrary Code Using Audio and Media Files
8757| [1006808] Microsoft Outlook Express May Be Affected by W32/Palyh@MM Mass-Mailing Worm
8758| [1006807] Microsoft Outlook May Be Affected by W32/Palyh@MM Mass-Mailing Worm
8759| [1006803] Microsoft Windows Can Be Crashed By Remote Users via Malformed NetMeeting URLs
8760| [1006789] Microsoft ISA Server Input Validation Flaw Lets Remote Users Execute Scripting Code in Arbitrary Security Domains
8761| [1006774] Microsoft Internet Explorer May Execute Arbitrary Code in the Wrong Security Domain When Processing Large Numbers of Download Requests
8762| [1006771] Microsoft Outlook Express Integer Overflow Lets Remote IMAP Servers Cause the Client to Crash
8763| [1006748] Microsoft Outlook Express May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
8764| [1006747] Microsoft Outlook May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
8765| [1006728] Microsoft .NET Passport Passwords, Including Hotmail Passwords, Can Be Changed By Remote Users
8766| [1006696] Microsoft Internet Explorer Web Folder Access Flaw Lets Remote Users Execute Arbitrary Scripting Code in the My Computer Zone
8767| [1006691] Microsoft MN-500 Wireless Base Station Backup Configuration File Discloses Administrator Password
8768| [1006686] Microsoft BizTalk Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
8769| [1006634] Microsoft Internet Explorer Bugs (URLMON.DLL Buffer Overflow, File Upload Control Bypass, Plug-in URL Input Validation Flaw, CSS Modal Dialog Input Validation Flaw) Let Remote Users Execute Arbitrary Code or Access Local Files
8770| [1006608] Microsoft NTLM Authentication Protocol Flaw Lets Malicious SMB Servers Gain Access to Systems
8771| [1006599] Microsoft REGEDIT.EXE May Let Local Users Gain Elevated Privileges
8772| [1006588] Microsoft Windows OS Kernel Messaging Buffer Overflow Lets Local Users Gain Full Control of the System
8773| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
8774| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
8775| [1006533] Microsoft Firewall Service in ISA Server Has Unspecified Flaw That Lets Remote Users Stop Traffic
8776| [1006532] Microsoft Windows VM Input Validation Flaw in ByteCode Verifier Lets Malicious Java Applets Execute Arbitrary Code
8777| [1006447] Microsoft Windows Terminal Services RDP Implementation Does Not Validate Server Identity, Allowing Man-in-the-Middle Attacks
8778| [1006361] Microsoft ActiveSync Application Can Be Crashed By Remote Users
8779| [1006323] Microsoft Windows Buffer Overflow in Windows Script Engine JScript.DLL Lets Remote Users Execute Arbitrary Code
8780| [1006322] Microsoft ISA Server DNS Intrusion Detection Flaw Lets Remote Users Block DNS Inbound Requests
8781| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
8782| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
8783| [1006257] Microsoft Internet Explorer Buffer Overflow in Processing '.MHT' Web Archives Lets Remote Users Execute Arbitrary Code
8784| [1006179] Microsoft Windows Me Help and Support Center URL Handler Overflow Lets Remote Users Execute Arbitrary Code
8785| [1006169] Microsoft Internet Explorer Vulnerable Codebase Object Lets Remote Users Execute Arbitrary Code
8786| [1006148] Microsoft Outlook Express Security Domain Flaw Lets Remote Users Silently Install and Execute Arbitrary Code
8787| [1006121] Microsoft Windows 'riched20.DLL' Buffer Overflow May Let Remote Users Crash Applications
8788| [1006046] Microsoft Internet Explorer showHelp() Domain Security Flaw Lets Remote Users Execute Commands
8789| [1006045] Microsoft Windows XP Redirector Buffer Overflow May Let Local Users Gain System Level Privileges
8790| [1006036] Microsoft Internet Explorer May Let Remote Users Read or Write Files Via the dragDrop() Method
8791| [1006023] ColdFusion MX Configuration Error When Used With IIS and NT Authentication May Grant Unauthorized Access to Remote Authenticated Users
8792| [1005986] Microsoft Windows Terminal Server MSGINA.DLL Flaw Lets Remote Authenticated Users Reboot the Server
8793| [1005966] Microsoft Outlook May Fail to Encrypt User E-mail, Disclosing the Contents to Remote Users
8794| [1005964] Microsoft Locator Service Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Level Privileges
8795| [1005859] Microsoft Windows File Protection Mechanism Weakness in Trusting Code-Signing Certificate Chains Lets Arbitrary Remote Users Sign Code That Will Be Trusted By Windows
8796| [1005858] Microsoft Windows File Protection Weakness May Let Local Users Replace Code With Previous Vulnerable Versions Without Detection
8797| [1005857] Microsoft Internet Explorer Bug in Loading Multimedia Files May Let Remote Users Execute Arbitrary Scripting Code in Other Domains
8798| [1005833] Microsoft Windows XP Shell Buffer Overflow in Processing Audio Files Allows Remote Users to Execute Arbitrary Code
8799| [1005799] Microsoft Windows OS Bug in Processing WM_TIMER Messages May Let Local Users Gain Elevated Privileges
8800| [1005796] Microsoft SMB Signing Flaw May Let Remote Users With Access to an SMB Session Gain Control of a Network Client
8801| [1005761] Microsoft Windows XP Wireless LAN Support May Disclose Access Point Information to Remote Users
8802| [1005757] Microsoft Outlook Bug in Processing Malformed E-mail Headers Lets Remote Users Crash the Client
8803| [1005747] Microsoft Internet Explorer showModalDialog() Input Validation Flaw Lets Remote Users Execute Arbitary Scripting Code in Any Security Zone
8804| [1005699] Microsoft Internet Explorer (IE) Java Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
8805| [1005698] Microsoft Java Virtual Machine (VM) Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
8806| [1005674] Microsoft Internet Explorer Buffer Overflow in Processing PNG Images Allows Denial of Service Attacks
8807| [1005672] Microsoft Internet Explorer MDAC Component Buffer Overflow Allows Remote Users to Execute Arbitrary Code
8808| [1005671] Microsoft Data Access Components (MDAC) Buffer Overflow Allows Remote Users to Execute Arbitrary Code
8809| [1005627] IISPop EMail Server Can Be Crashed By Remote Users
8810| [1005489] Microsoft Outlook Express May Fail to Delete E-mail Messages from Local Storage
8811| [1005466] Microsoft Internet Explorer Cached Object Flaw Lets Remote Users Execute Arbitrary Programs on the Target User's Computer
8812| [1005455] Microsoft Windows Remote Procedure Call (RPC) Service Null Pointer Dereference Allows Remote Users to Crash the Service
8813| [1005454] Microsoft Windows Media Player for Solaris Uses Unsafe Default Permissions
8814| [1005436] Microsoft Data Engine/Desktop Engine (MSDE) Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
8815| [1005435] Microsoft SQL Server Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
8816| [1005416] Microsoft Internet Explorer Flaw in WebBrowser Control Document Property Lets Remote Users Run Code in the My Computer Security Zone
8817| [1005405] Microsoft Outlook Express Buffer Overflow in Parsing S/MIME Messages Lets Remote Users Execute Arbitrary Code
8818| [1005395] Microsoft Content Management Server Input Validation Bug in 'ManualLogin.asp' Allows Cross-Site Scripting Attacks
8819| [1005377] Microsoft MSN Hotmail/Passport Login Page May Permit Cookie Stealing Via Cross-Site Scripting Attacks
8820| [1005343] Microsoft Windows Help System Bug in Processing Compiled HTML Help Files Lets Remote Users Execute Arbitrary Commands in the Local Computer Security Zone
8821| [1005339] Microsoft Services for Unix Interix SDK Bugs May Allow Denial of Service Conditions or May Execute Arbitrary Code
8822| [1005338] Microsoft Data/Desktop Engine (MSDE) Buffer Overflow Lets Remote Users Execute Arbitrary Code
8823| [1005337] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
8824| [1005336] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Files to Be Created
8825| [1005335] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Code to Be Executed
8826| [1005332] Microsoft Windows Help System Buffer Overflow in 'hhctrl.ocx' Lets Remote Users Execute Arbitrary Code
8827| [1005296] Microsoft PPTP Service Buffer Overflow May Let Remote Users Execute Arbitrary Code
8828| [1005287] Microsoft FrontPage Server Extensions SmartHTML Interpreter Bugs May Let Remote Users Execute Arbitrary Code with System Privileges
8829| [1005256] (Vendor Issues Fix) Microsoft Windows XP Remote Desktop Implementation Bug Lets Remote Users Crash the Operating System
8830| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
8831| [1005246] Microsoft Remote Desktop Protocol (RDP) Design Flaw May Disclose Information About the Unencrypted Data to Remote Users and May Let Data Be Modified During Transmission
8832| [1005243] Microsoft NetMeeting Remote Desktop Sharing Screen Saver Access Control Flaw Lets Physically Local Users Hijack Remote Sessions
8833| [1005242] Microsoft Windows XP Remote Desktop Can Be Crashed By Remote Users Sending a Modified RDP Packet
8834| [1005223] (Microsoft Responds) Microsoft Word Document Processing File Include Bug May Let Remote Users Obtain Files From a Target User's System
8835| [1005207] Microsoft Outlook Express Can Be Crashed By Remote Users Sending HTML Mail With Long Links Embedded
8836| [1005203] Microsoft Internet Explorer Frame Domain Security Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Zone Via Frame URLs
8837| [1005200] Microsoft Internet Explorer Implementation Bugs in Java Native Methods May Let Remote Users Execute Arbitrary Code Via Malicious Applets
8838| [1005182] Microsoft Internet Explorer URL Decoding Inconsistency May Result in a Web Page Loading in the Incorrect Security Domain
8839| [1005177] Microsoft Visual FoxPro Filename Processing Bug Lets Remote Users Create HTML That Will Cause Arbitrary Code to Be Executed When the HTML is Loaded
8840| [1005150] Microsoft Windows Operating System Certificate Enrollment ActiveX Control Allows Remote Users to Delete Certificates on a Target User's System
8841| [1005128] Microsoft Internet Explorer XML Script Element Redirect Bug Lets Remote Users View XML Files on the Target User's Computer
8842| [1005127] Microsoft Visual Studio .NET Web Projects May Disclose the Web Directory Structure to Remote Users
8843| [1005123] Microsoft Internet Explorer Buffer Overflow in Unspecified Text Formatting ActiveX Control Lets Remote Users Execute Arbitrary Code
8844| [1005120] Microsoft Terminal Services Advanced Client (TSAC) ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
8845| [1005119] Microsoft Operating System SMB Protocol Implementation in the Network
8846| [1005112] Microsoft File Transfer Manager ActiveX Control Buffer Overflow May Let Remote Users Execute Arbitrary Code
8847| [1005108] Microsoft Windows Media Player Allows Malicious Windows Media Download (.wmd) Files to Silently Create Files in a Known Location and Execute Them
8848| [1005075] Microsoft Internet Explorer XMLDSO Java Class Lets Remote HTML Code Access Local Files
8849| [1005071] Microsoft DirectX Files Viewer ActiveX Control Has Buffer Overflow That Allows Remote Users to Execute Arbitrary Code
8850| [1005070] Microsoft Internet Explorer (IE) Browser Error Message Processing Allows Remote Users to Execute Arbitrary Code on Certain Windows 98 Platforms
8851| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
8852| [1005067] Microsoft Desktop Engine (MSDE) Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
8853| [1005066] Microsoft SQL Server Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
8854| [1005065] Microsoft Network Connection Manager Could Give a Local User System Level Privileges
8855| [1005063] Microsoft Windows XP Help and Support Center Hole Lets Remote Users Create URLs That, When Loaded, Will Delete Arbitrary Files on Your System
8856| [1004986] Microsoft Content Management Server Buffer Overflow in Authentication Function May Allow Remote Users to Execute Arbitrary Code With System Level Privileges
8857| [1004983] Microsoft Visual C++ Flaw in calloc() and Similar Functions May Result in Buffer Overflows in Applications That Use the Compiler or Runtime Library
8858| [1004965] Microsoft Internet Explorer SSL Implementation Flaw in Following Certificate Chains Allows Remote Users to Conduct Man-in-the-Middle Attacks to Obtain Unencrypted Data from the Browser
8859| [1004927] Microsoft Terminal Services Can Be Crashed By Remote Users Conducting a TCP SYN Scan in Certain Situations
8860| [1004917] Microsoft SQL Server MDAC Function Buffer Overflow May Let Remote Users Execute Arbitrary Code to Gain Full Control Over the Database
8861| [1004877] Microsoft Internet Explorer (IE) Web Browser JavaScript 'Same Origin Policy' Flaw Allows Remote Users to Create Malicious JavaScript to Retrieve Web Data from a Victim's Internal Network
8862| [1004862] Microsoft Outlook Express Flaw in Parsing XML Using Internet Explorer Allows a Remote User to Silently Deliver and Install an Executable on a Target User's Computer
8863| [1004831] Microsoft Data Engine (MSDE) Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
8864| [1004830] Microsoft SQL Server Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
8865| [1004829] Microsoft SQL Server Resolution Service Buffer Overflows Let Remote Users Execute Arbitrary Code with the Privileges of the SQL Service
8866| [1004828] Microsoft Exchange Server Buffer Overflow in Processing SMTP EHLO Command Lets Remote Users Execute Arbitrary Code on the Server with System Level Privileges
8867| [1004827] Microsoft Metadirectory Services Authentication Flaw May Let Remote Users Modify Data and Obtain Elevated Privileges on the System
8868| [1004805] Microsoft Outlook Express (and Possibly Outlook) Has File Attachment Name Bugs That Let Remote Users Send Malicious Mail to Bypass Attachment Type Filters and Modify the Apparent File Name and File Size
8869| [1004761] Microsoft Foundation Classes (MFC) Information Server Application Programming Interface (ISAPI) 'mfc42.dll' Contains Buffer Overflows That Can Crash the System or Possibly Allow for the Remote Execution of Arbitrary Code
8870| [1004746] Microsoft Internet Explorer Flaw in OBJECT Domain Security Enforcement Lets Remote Users Execute Code in Arbitrary Domains
8871| [1004744] Microsoft SQL Server Install Process May Disclose Sensitive Passwords to Local Users
8872| [1004739] Microsoft SQL Server Desktop Engine (MSDE) Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
8873| [1004738] Microsoft SQL Server Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
8874| [1004637] Microsoft Commerce Server Buffer Overflows and Other Flaws Let Remote Users Execute Arbitrary Code with LocalSystem Privileges
8875| [1004618] Microsoft Internet Explorer Can Be Crashed By Malicious AVI Object in HTML
8876| [1004595] Microsoft Word Documents May Execute Remotely Supplied Macro Code Under Certain Conditions
8877| [1004594] Microsoft Excel Spreadsheet May Execute Remotely Supplied Macro Code Within Malicious Documents
8878| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
8879| [1004569] Microsoft Visual Studio .NET Korean Language Version Contains Nimda Virus
8880| [1004544] Microsoft SQL Server Buffer Overflow in 'pwdencrypt()' Function May Let Remote Authorized Users Execute Arbitrary Code
8881| [1004542] Lumigent Log Explorer Buffer Overflow May Let Remote Users Crash the Microsoft SQL Server Service or Execute Arbitrary Code on the System
8882| [1004541] Compaq Insight Manager May Include a Vulnerable Default Configuration of Microsoft MSDE/SQL Server That Allows Remote Users to Execute Commands on the System
8883| [1004529] Microsoft Remote Access Service (RAS) Phonebook Buffer Overflow May Let Local Users Execute Arbitrary Code with Local System Privileges
8884| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
8885| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
8886| [1004518] Microsoft Proxy Server Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
8887| [1004517] Microsoft Internet Security and Acceleration Server (ISA) Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
8888| [1004486] Microsoft ASP.NET Buffer Overflow in Processing Cookies in StateServer Mode May Let Remote Users Crash the Service or Execute Arbitrary Code on the Server
8889| [1004479] Microsoft Internet Explorer May Execute Remotely Supplied Scripting in the My Computer Zone if FTP Folder Viewing is Enabled
8890| [1004464] Microsoft Internet Explorer Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Victim's Computer
8891| [1004441] Microsoft Windows Help System Buffer Overflows in 'htctrl.ocx' ActiveX Control May Let Remote Users Execute Arbitrary Code on a Target User's Computer By Sending Malicious HTML
8892| [1004436] Microsoft Internet Explorer Allows HTML-Delivered Compiled Help Files to Be Automatically Executed on the Target User's Computer
8893| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
8894| [1004372] Microsoft Excel Spreadsheet XML Stylesheet ActiveX Object Flaw Lets Remote Users Create Malicious Excel Spreadsheets That May Execute Arbitrary Code When Opened With the XML Stylesheet Option
8895| [1004369] Microsoft Active Directory May Have Bug That Allows Remote Users to Crash the Directory
8896| [1004361] Microsoft Date Engine (MSDE) Default Configuration Leaves Blank Password for System Administrator Account
8897| [1004360] Opty-Way Enterprise Glassworks Management Application Installs Microsoft Data Engine Insecurely, Allowing Remote Users to Execute Commands on the System
8898| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
8899| [1004304] Microsoft Internet Explorer (IE) New Content-Disposition Bugs May Let Remote Users Execute Arbitrary Code on the Victim's Computer
8900| [1004300] Microsoft Internet Explorer (IE) Zone Spoofing Hole Lets Remote Users Create HTML That, When Loaded, May Run in a Less-Secure IE Security Zone
8901| [1004290] Microsoft Internet Explorer Bugs in 'BGSOUND' and 'IFRAME' Tags Let Remote Users Create HTML That Will Cause Denial of Service Conditions or Will Access Special DOS Devices
8902| [1004251] Microsoft Exchange Instant Messenger ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
8903| [1004250] Microsoft MSN Messenger Includes an ActiveX Control That Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
8904| [1004249] Microsoft MSN Chat Control ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
8905| [1004236] L.Y.S.I.A.S. Lidik Web Server for Microsoft Windows Systems Lets Remote Users View Files Located Anywhere on the Partition
8906| [1004229] Microsoft Office 'Word Mail Merge' Feature Allows Remote Users to Cause Arbitrary Programs to Be Executed on the Target User's Computer
8907| [1004226] Microsoft MSN Messenger Instant Messaging Client Malformed Header Processing Flaw Lets Remote Users Crash the Client
8908| [1004197] Microsoft Internet Explorer Can Be Crashed By Incorrectly Sized XBM Graphics Files
8909| [1004157] Microsoft Outlook Weak Security Enforcement When Editing Messages with Microsoft Word Lets Remote Users Send Malicious Code to Outlook Recipients That Will Be Executed When Forwarded or Replied To
8910| [1004146] Microsoft Internet Explorer Browser Can Be Crashed By Remote HTML Containing Malicious Image Tags That Cause Infinite Processing Loops
8911| [1004130] Microsoft MSN Messenger Instant Messaging Client Discloses Buddy List to Local Users
8912| [1004121] Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users With OLE OBJECT Element Dependency Loops
8913| [1004109] Microsoft Distributed Transaction Coordinator Can Be Crashed By Remote Users Sending Malformed Packets
8914| [1004090] Microsoft Back Office Web Administration Authentication Mechanism Can Be Bypassed By Remote Users
8915| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
8916| [1004079] Microsoft Internet Explorer (IE) 'dialogArguments' Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against IE Users
8917| [1004051] Microsoft Outlook Express for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
8918| [1004050] Microsoft Office for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
8919| [1004049] Microsoft Internet Explorer for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
8920| [1004048] Microsoft Word Object Creation Flaw Lets Remote Users Create ActiveX That Will Consume Memory on the Victim's Computer
8921| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
8922| [1004014] Microsoft Internet Information Server ASP HTTP Header Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
8923| [1004008] Microsoft Internet Information Server Comes With Code That Allows Remote Users to Conduct Cross-Site Scripting Attacks
8924| [1004005] Microsoft Internet Information Server Buffer Overflow in Chunked Encoding Mechanism Lets Remote Users Run Arbitrary Code on the Server
8925| [1004002] Microsoft Office Web Components Let Remote Users Determine if Specified Files Exist on Another User's Host
8926| [1004001] Microsoft Office Web Components Let Remote Users Gain Full Read and Write Control Over Another User's Clipboard, Even if Clipboard Access Via Scripts is Disabled
8927| [1004000] Microsoft Office Web Components Let Remote Users Write Code to Run in the Victim's Local Security Domain and Access Local or Remote Files
8928| [1003999] Microsoft Office Web Components in Office XP Lets Remote Users Cause Malicious Scripting to Be Executed By Another User's Browser Even If Scripting is Disabled
8929| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
8930| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
8931| [1003948] Microsoft Internet Explorer Cascading Style Sheets (CSS) Invalid Attribute Bug Lets Remote Users Read Portions of Files on the Victim's Computer
8932| [1003932] Microsoft Office XP Active Content Bug Lets Remote Users Cause Code to Be Executed on an Office User's Computer
8933| [1003922] Microsoft Outlook Web Access With SecurID Authentication May Allow Remote Users to Avoid the SecurID Authentication in Certain Cases
8934| [1003915] Microsoft Internet Explorer Browser Security Zone Flaw Lets Remote Users Cause Cookie-based Scripts to Be Executed on Another User's Browser in the Incorrect Security Domain
8935| [1003907] Microsoft Internet Explorer Discloses The Existence of and Details of Local Files to Remote Users
8936| [1003871] Microsoft .NET Unspecified Vulnerabilities May Allow a Remote User to Cause Arbitrary Code to Be Executed on Another User's Systems
8937| [1003856] Microsoft Internet Explorer Can Be Crashed By Malicious 'location.replace' Javascript
8938| [1003839] Microsoft Internet Explorer (IE) 6 Lets Remote Users Cause Files to Be Downloaded and Executed Without the Knowledge or Consent of the Victim
8939| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
8940| [1003800] A Multitude of Microsoft SQL Server Extended Stored Procedures Have Buffer Overflows That Allow Remote Users to Crash the Database Server or Execute Arbitrary Code on the Server to Gain Full Control of the System
8941| [1003764] Microsoft Windows Operating System Shell URL Handler Bug Lets Remote Users Create HTML That Could Cause Arbitrary Code to Be Executed on Another User's System in Certain Situations
8942| [1003756] Microsoft Internet Information Server 4.0 .HTR Web Application Lets Users Change Their Passwords When the NT Security Policy is Configured to Prohibit Password Changing
8943| [1003744] Microsoft SQL Server 'xp_dirtree' Buffer Overflow Lets Users Crash the Database Service
8944| [1003730] Microsoft Java Virtual Machine in Internet Explorer Lets Remote Malicious Applets Redirect Web Proxy Connections
8945| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
8946| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
8947| [1003686] Microsoft Windows SMTP Service Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
8948| [1003685] Microsoft Exchange Server Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
8949| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
8950| [1003633] Microsoft XML Core Services in Microsoft Windows XP Operating System Lets Remote Scripts Access and Send Local Files
8951| [1003630] Microsoft Internet Explorer Has Another Frame Domain Security Bug That Lets Remote Users View Files or Other Personal Information from a Victim's Computer By Using Malicious VBScripts
8952| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
8953| [1003611] Gator Plugin for Microsoft Internet Explorer Lets Remote Users Install Arbitrary Software on the User's Host
8954| [1003605] Microsoft SQL Server Buffer Overflow Lets Remote Users Crash the Server and May Allow Remote Code to Be Executed on the Database Server
8955| [1003597] Microsoft Outlook Web Access Discloses 'Include' Archive Files in the 'lib' Directory to Remote Users
8956| [1003591] Microsoft Windows Terminal Services May Cause the System's Screen Saver Lockout Mechanism to Fail in Certain Situations
8957| [1003582] Microsoft Internet Security Acceleration Server Can Be Affected By Remote Users Conducting a LAND Flood Attack
8958| [1003556] Microsoft Visual C++ Compiler Buffer Security Mode Does Not Eliminate Buffer Overflows in Compiled Applications
8959| [1003546] Microsoft Outlook E-mail Client May Display Potentially Malicious File Attachments Illegally Embedded Within Mail Headers
8960| [1003540] Microsoft Internet Explorer Browser MIME Flaw Causes 'text/plain' Pages to Be Displayed as HTML and Any Embedded Scripting to Be Executed By the Browser
8961| [1003538] NetWin CWMail Web-Mail Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the System With the Privileges of the IIS Web Server
8962| [1003519] Microsoft Internet Explorer (IE) HTML Directive Buffer Overflow Lets Remote Users Cause Arbitrary Code to Be Executed on Another User's Computer
8963| [1003517] Microsoft Internet Explorer (IE) 'Content-Type' Processing Hole Lets Remote Users Open Applications on Another User's Computer
8964| [1003516] Microsoft Internet Explorer (IE) Web Browser Has New Frame Domain Verification Bug That Lets Remote Users Obtain Files from Another User's Local File System
8965| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
8966| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
8967| [1003462] Microsoft Internet Explorer Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
8968| [1003458] Microsoft Office v. X for Mac OS X Can Be Crashed By Remote Users Sending Malformed Product Identification Packets
8969| [1003446] Microsoft Internet Information Server Can Be Stopped By Local Users Removing Virtual Directories in a Shared Hosting Environment
8970| [1003434] Microsoft ASP.NET Web Application Framework Allows Cross Site Scritping Attacks and Discloses Path Information to Remote Users
8971| [1003420] Microsoft Site Server Commerce Edition Discloses Potentially Sensitive Administration Information and Source Code to Remote Users With Valid Accounts and Discloses User Passwords from the LDAP Directory to Anonymous Remote Users
8972| [1003419] Microsoft Site Server Commerce Edition Lets Remote Users With Valid NT Accounts Upload and Then Execute ASP Scripts on the Server or Consume Disk Space on the Server
8973| [1003415] Microsoft Distributed Transaction Coordinator (MSDTC) Service Can Be Crashed By Remote Users
8974| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
8975| [1003369] PGPfire Personal Firewall for Microsoft Windows Discloses Identifying Information to Remote Users
8976| [1003326] Microsoft Internet Explorer for Macintosh OS Executes Remotely Supplied Commands in AppleScripts
8977| [1003310] Microsoft Windows NT/2000 Authentication Lockout Bug May Record Successful Logins as Failed Login Attempts in Certain Situations
8978| [1003308] Microsoft Windows XP Manifest Processing Bug Lets Local Users Corrupt the System and Cause the Boot Process to Fail
8979| [1003257] Microsoft Windows XP Upgrade Effectively Removes Patches from Internet Explorer (IE) During Upgrade, Leaving Users Exposed to IE Vulnerabilities
8980| [1003239] Python Language Implementation on Microsoft Windows Allows a Remote Server to Access Files on a Web Surfing User's PC
8981| [1003228] Microsoft Windows Media Player Discloses Unique ID to Remote Users in the Default Configuration, Allowing Web Sites to Track Users
8982| [1003221] Microsoft Internet Explorer (IE) Default Configuration Allows HTML-based Scripts to Access Your Windows Clipboard Contents
8983| [1003215] Microsoft Internet Explorer Popup Object Tag Flaw Lets Remote Users Execute Programs on the Browser's Host
8984| [1003201] Microsoft Windows 95 Backup Utility Has Buffer Overflow That Could Cause Denial of Service Conditions
8985| [1003135] Microsoft Internet Explorer Can Be Crashed By Remote Users With Javascript That Calls an Endless Loop of Modeless Dialogs
8986| [1003121] Microsoft Windows XP Task Manager Will Not Kill Certain Processes
8987| [1003109] Microsoft Internet Explorer (IE) May Allow Malicious Javascript to Poll a User's System for Known Files
8988| [1003084] Microsoft Internet Explorer GetObject() Active Scripting Bug Lets Remote Code Access Files on the PC
8989| [1003050] Microsoft Internet Explorer Web Browser Can Be Crashed By Malicious Image Source Tag Javascript Supplied By Remote Users
8990| [1003049] Microsoft Internet Explorer (IE) Text Form Processing Flaw May Cause IE to Crash
8991| [1003043] PGP Plug-in For Microsoft Outlook May Fail to Encrypt E-mail in Certain Situations
8992| [1003042] Microsoft Internet Explorer Web Browser SSL Security Flaw Lets Remote Users Conduct Man-in-the-Middle Attacks to Access Sensitive Information
8993| [1003041] Microsoft Windows XP Remote Desktop Client May Disclose Recently Used Account Names to Remote Users
8994| [1003040] Microsoft Excel Password Protection Flaw Lets Local Users Obtain Contents of Password-Protect Cells
8995| [1003033] Microsoft C Runtime Format String Flaw Lets Remote Users Crash the Microsoft SQL Server Service
8996| [1003032] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code in the Security Context of the SQL Server
8997| [1003028] Microsoft Windows Universal Plug and Play Component Buffer Overflow Gives Remote Users System Level Access to Windows XP and 98/ME Hosts
8998| [1003024] Microsoft Internet Explorer (IE) Web Browser 'document.open()' Scripting Flaw Lets Remote Users Steal Cookies, Read Local Files, and Spoof Web Sites
8999| [1003003] Microsoft Windows XP Hot Key Function Lets Physically Local Users Execute Administrator Hot Key Functions in Certain Situations
9000| [1002986] Microsoft Internet Explorer Version 6 Lets Remote Scripts Access and Send Local Files
9001| [1002979] Microsoft Windows Explorer Discloses Stored FTP Passwords to Local Users
9002| [1002973] Microsoft Internet Explorer (IE 6) Browser May Automatically and Silently Execute Arbitrary Code from a Remote Web Site When the User Views a Web Page or HTML-based E-mail
9003| [1002957] Microsoft Internet Information Server Can Be Crashed By Remote Users With HTTP Requests Containing Invalid Content-Length Values
9004| [1002942] Microsoft Internet Explorer May Execute Javascript Contained Within an 'About:' URL in an Unauthorized Security Domain When the URL Contains an Extraneous '%' Character
9005| [1002926] Microsoft Windows Operating System File Locking Design May Allow Local Users to Block Group Policy Scripts
9006| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
9007| [1002919] Microsoft Internet Explorer Browser Can Be Crashed By Certain Image Tags
9008| [1002915] Microsoft Outlook Web Access for Exchange May Execute Remotely Supplied Scripts When a Recipient Views a Malicious E-mail Message
9009| [1002885] Microsoft Internet Explorer Can Be Crashed By Malicious Javascript Causing a Stack Overflow in setTimeout() Function
9010| [1002823] Microsoft Internet Explorer Fails to Enforce Cookie Prompting Preferences for Local Security Zone
9011| [1002820] Microsoft Internet Explorer Allows Malicious Web Pages to Spoof Downloadable File Types And Execute Code on the User's Computer When Opened Directly from the Browser
9012| [1002819] Microsoft Internet Explorer ActiveX Flaw Permits Remote Malicious HTML Code Containing an 'htmlfile' or 'htmlfile_FullWindowEmbed' Object to Access Local Files and Potentially Execute Commands
9013| [1002802] Microsoft Help and Support Center Software (helpctr.exe) Has Buffer Overflow That May Allow a Remote User to Cause Arbitrary Code to Be Executed on a User's PC
9014| [1002773] Titan Application Firewall for IIS Web Server Fails to Decode URLs, Letting Remote Users Bypass URL-based Firewall Restrictions
9015| [1002772] Microsoft Internet Explorer Cookie Disclosure Fix Discloses Patch Information to Remote Users
9016| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
9017| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
9018| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
9019| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
9020| [1002728] Microsoft SQL Server May Disclose Database Passwords When Creating Data Transformation Service (DTS) Packages
9021| [1002702] Microsoft Passport May Disclose Wallet Contents, Including Credit Card and Contact Information, to Remote Users
9022| [1002693] Microsoft Internet Security and Acceleration Server UDP Fragmentation Processing Can Cause 100% of CPU Resources to Be Consumed
9023| [1002601] Microsoft Windows Me Universal Plug and Play (UPnP) Ssdpsrv.exe Server Component Can Be Crashed by Remote Users
9024| [1002595] Microsoft Internet Explorer Has Fixed Security Zone for about: URLs and Has Shared Cookie Flaw That Diminishes Cross-Site Scripting Protections
9025| [1002594] Microsoft Internet Explorer for Mac OS X is Configured to Automatically Execute Downloaded Files
9026| [1002581] Microsoft Terminal Servers Can Be Crashed By Remote Users Sending Certain Remote Desktop Protocol (RDP) Packets
9027| [1002560] Internet Explorer Sends Potentially Sensitive Web Browser Contents to Microsoft via the Network When an Error Occurs
9028| [1002559] Microsoft Office XP Sends Potentially Sensitive Information to Microsoft Via the Network When an Error Occurs
9029| [1002526] Microsoft Internet Explorer (IE) Web Browser Has Multiple URL-related Flaws That May Allow for Remote Code Execution, Remote HTTP Request Generation, and Application of Incorrect Security Restrictions
9030| [1002519] TYPSoft FTP Server for Microsoft Windows Can Be Crashed by Remote Users
9031| [1002487] Microsoft PowerPoint Macro Security Features Can Be Bypassed by Malformed PowerPoint Documents
9032| [1002486] Microsoft Excel Macro Security Features Can Be Bypassed by Malformed Excel Documents
9033| [1002456] Microsoft Outlook Web Access Directory Validation Flaw Lets Remote Users Consume CPU Resources by Requesting Mail from Nested Folders
9034| [1002421] Microsoft Index Server Sample File Discloses File Information to Remote Users
9035| [1002418] Counterpane's Password Safe Password Encryption Utility for Microsoft Windows May Disclose Passwords to Local Users in Certain Situations
9036| [1002413] Microsoft Outlook Express Will Execute Active Scripting in Plain Text E-mail Messages, Circumventing Some Scripting Controls
9037| [1002394] Microsoft Windows NT Remote Procedure Call (RPC) Services Can Be Crashed With Malformed Packets
9038| [1002385] Norton Anti-Virus For Microsoft Exchange Discloses User Path Information to Remote Users
9039| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
9040| [1002331] Internet Security Systems RealSecure Intrusion Detection Misses '%u' Encoded Attacks Against Microsoft Web Servers
9041| [1002330] Cisco Catalyst 6000 Intrusion Detection System Module Fails to Detect '%u' Encoding Obfuscation Attacks Against Microsoft Web Servers
9042| [1002329] Dragon Sensor Intrusion Detection System Does Not Detect Certain Attacks Against Microsoft Web Servers
9043| [1002327] Snort Network Intrusion Detection System Will Not Detect '%u' URL Encoding Attacks Against Microsoft Web Servers
9044| [1002326] Cisco Secure Intrusion Detection System (NetRanger) Fails to Detect Certain Attacks Against Microsoft Web Servers
9045| [1002317] Microsoft DNS Server Software Susceptible to DNS Cache Poisoning in Default Configuration, Allowing Remote Users to Inject False DNS Records in Certain Situations
9046| [1002269] Microsoft Outlook Web Access with SSL Can Be Crashed by Remote Users
9047| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
9048| [1002201] Microsoft Windows TCP/IP Stack Vulnerable to a Certain Man-in-the-Middle Denial of Service Attack
9049| [1002197] Microsoft Windows NNTP Network News Service Has a Memory Leak That Allows Remote Users to Cause the Server to Crash
9050| [1002124] Microsoft Windows 98 Operating System Can Be Crashed When Running a Web Server or Other Servers And the AUX Device is Accessed By the Program
9051| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
9052| [1002105] Microsoft SQL Database Server RPC Input Validation Failure Lets Remote Users Crash the Database Service
9053| [1002104] Microsoft Exchange Server RPC Input Validation Failure Lets Remote Users Crash the Exchange Service
9054| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
9055| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
9056| [1002075] Microsoft Services for Unix Memory Leak in Telnet and NFS Services Allows Remote Users to Crash the Operating System
9057| [1002028] Microsoft Exchange LDAP Service Can Be Crashed By Remote Users
9058| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
9059| [1001992] Microsoft Windows NT Lets Remote Users Cause Increased Packet Overhead and Increased CPU Resource Consumption
9060| [1001984] Microsoft Outlook Allows Rogue HTML to Execute Arbitrary Commands on the User's Host
9061| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
9062| [1001923] Microsoft's Internet Information Server's ASP Processor Can Be Crashed by Remote Users in Certain Situations
9063| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
9064| [1001819] Microsoft NetMeeting Can Be Crashed By Remote Users
9065| [1001816] Microsoft Visual Studio RAD Support Component of FrontPage Lets Remote Users Execute Arbitrary Code on the FrontPage Server
9066| [1001815] Microsoft Word May Execute Macros in Malformed Word Documents Without Warning Even if Macros are Disabled
9067| [1001775] Microsoft Index Server Lets Remote Users Execute Arbitrary Code With System Level Privileges, Giving Remote Users Full Control of the Operating System
9068| [1001734] Microsoft SQL Server May Let Remote Authenticated Users Take Full Control of the Database Server and the Underlying Operating System
9069| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
9070| [1001699] Microsoft Internet Explorer Web Browser May Allow Remote Users to Read Some Text Files on the Browser's Hard Drive
9071| [1001696] Microsoft Exchange Server's Outlook Web Access (OWA) Lets Remote Users Execute Arbitrary Code on the OWA User's Web Browser
9072| [1001687] Microsoft Outlook Express May Allow A Remote User to Obtain E-mail Destined for a Different User
9073| [1001661] Microsoft Hotmail May Allow a Worm to Send Mail to Other Destinations Listed in a Remote User's Inbox
9074| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
9075| [1001603] Microsoft Windows Media Player May Allow Remote Users to Execute Code Contained in Internet Shortcuts and View Files on the Media Player's Host
9076| [1001587] Microsoft Word for Windows and for Mac May Run Macros Linked By RTF Documents Without Warning
9077| [1001572] Apache Web Server on Microsoft Windows Platforms Allows Remote Users to Crash the Web Server
9078| [1001562] Microsoft Internet Explorer Allows Remote Web Sites to Cause a Different Web URL Address to Be Displayed in the Browser's Address Bar, Allowing Rogue Web Sites to Spoof the Browser and Masquerade as Different Web Sites
9079| [1001561] Microsoft Internet Explorer Web Browser Fails To Validate Digital Certificates in Some Configurations, Allowing Rogue Secure Web Sites to Spoof the Browser and Masquerade as a Different Secure Web Site
9080| [1001538] Older Version of Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users
9081| [1001537] Microsoft's Internet Information Server's FTP Services May Give Remote Users Information About User Account Names on the Server's Domain and Trusted Domains
9082| [1001535] Microsoft's Internet Information Server's FTP Services Can Be Crashed By Remote Users
9083| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
9084| [1001512] Microsoft Index Server for NT Can Be Crashed By Local Users, Allows Local Users to Execute Arbitrary Code With System Level Privileges, and Lets Remote Users View Certain Include Files
9085| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
9086| [1001467] Microsoft Windows Media Player ASX Processing Vulnerability Lets Remote Users Execute Arbitrary Code on the Player's Host System
9087| [1001445] Microsoft Internet Security and Acceleration Server May Allow Remote Users to Execute Arbitrary Code on the Firewall
9088| [1001424] Microsoft Internet Explorer Can Consume All Memory Due to Malicious HTML Code
9089| [1001380] Microsoft Internet Explorer and Outlook Express May Execute Arbitrary Code Without User Authorization or Intervention
9090| [1001360] Microsoft Windows Operating System DLL May Allow Malicious Remote Scripts to Run Code on the User's Host Without the User's Intervention
9091| [1001344] Microsoft Internet Explorer May Not Display File Extensions in Certain Cases
9092| [1001330] Microsoft ActiveSync Software for Portable Computing Devices Allows Portable Devices to Access Files on a Locked Server
9093| [1001319] Microsoft Internet Security and Acceleration Server Can Be Crashed By Remote Users
9094| [1001311] Netscape's SmartDownload Can Automatically Execute Arbitrary Code Without User Intervention or Knowledge for Both Netscape and Microsoft Browsers
9095| [1001255] Microsoft's Ping.exe Allows Local Users to Cause Certain Applications to Crash
9096| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
9097| [1001221] E-Mail Clients that use Microsoft Internet Explorer to Process HTML May Disguise Executable Attachments as Data Files
9098| [1001219] Microsoft's Internet Security and Acceleration Server Performance Can Be Significantly Affected By Remote Users Under Certain Configurations
9099| [1001216] Microsoft Internet Explorer Can Be Made to Execute Arbitrary Files on the User's Computer
9100| [1001211] TrendMicro's ScanMail E-Mail Virus Scanner for Microsoft Exchange Discloses Administrative System Usernames and Passwords
9101| [1001210] Microsoft Internet Explorer Allows Malicious Web Pages to Retrieve Files from the User's Computer
9102| [1001209] Microsoft Telnet Can Be Crashed Locally, Causing Other Applications Including Outlook Express To Crash
9103| [1001197] Microsoft Internet Explorer May Automatically Execute Certain E-mail Attachments
9104| [1001187] Microsoft Internet Explorer Is Vulnerable to Malicious Web Pages That May Obtain the User's Exchange E-mail Messages and May Access Restricted Web Server Directory Listings
9105| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
9106| [1001172] Microsoft Visual Studio Could Allow Users to Crash the Debugger or to Execute Code on the Server
9107| [1001163] Microsoft's Dr. Watson Diagnostic Utility May Reveal Passwords and Other Sensitive Information
9108| [1001147] Microsoft Outlook Express Crashes When Reading Certain E-mail Messages
9109| [1001142] Microsoft Internet Explorer Does Not Check for Revoked Digital Certificates (Two Fraudlent Certificates Are Known to Exist)
9110| [1001139] SurfControl for Microsoft Proxy Server May Fail to Block Sites
9111| [1001123] Microsoft's FTP Server May Allow Remote Users to Deny Service on the Server
9112| [1001110] A Microsoft German-Language Hotfix for Windows NT 4 Incorrectly Displays Some Security Events as Other Security Events
9113| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
9114|
9115| OSVDB - http://www.osvdb.org:
9116| [91195] Microsoft Windows 7 Unspecified ASLR Protection Mechanism Bypass
9117| [91194] Microsoft Windows 7 Kernel Unspecified Local Privilege Escalation (pwn2own)
9118| [91193] Microsoft Windows 7 Unspecified ASLR / DEP Protection Mechanism Bypass (pwn2own)
9119| [85619] Microsoft Windows Phone 7 X.509 Certificate Subject's Common Name (CN) Field Domain Name Validation Multiple Protocol SSL Server MitM Spoofing Weakness
9120| [67783] Microsoft Windows SDK for Windows 7 / .NET Framework 4 GraphEdit Path Subversion Arbitrary DLL Injection Code Execution
9121| [87555] Adobe ColdFusion for Microsoft IIS Unspecified DoS
9122| [87262] Microsoft IIS FTP Command Injection Information Disclosure
9123| [87261] Microsoft IIS Log File Permission Weakness Local Password Disclosure
9124| [86899] Microsoft IIS 302 Redirect Message Internal IP Address Remote Disclosure
9125| [83771] Microsoft IIS Tilde Character Request Parsing File / Folder Name Information Disclosure
9126| [83454] Microsoft IIS ODBC Tool ctguestb.idc Unauthenticated Remote DSN Initialization
9127| [83386] Microsoft IIS Non-existent IDC File Request Web Root Path Disclosure
9128| [82848] Microsoft IIS $INDEX_ALLOCATION Data Stream Request Authentication Bypass
9129| [76237] Microsoft Forefront Unified Access Gateway IIS NULL Session Cookie Parsing Remote DoS
9130| [71856] Microsoft IIS Status Header Handling Remote Overflow
9131| [70167] Microsoft IIS FTP Server Telnet IAC Character Handling Overflow
9132| [67980] Microsoft IIS Unspecified Remote Directory Authentication Bypass
9133| [67979] Microsoft IIS FastCGI Request Header Handling Remote Overflow
9134| [67978] Microsoft IIS Repeated Parameter Request Unspecified Remote DoS
9135| [66160] Microsoft IIS Basic Authentication NTFS Stream Name Permissions Bypass
9136| [65216] Microsoft IIS Extended Protection for Authentication Memory Corruption
9137| [62229] Microsoft IIS Crafted DNS Response Inverse Lookup Log Corruption XSS
9138| [61432] Microsoft IIS Colon Safe Extension NTFS ADS Filename Syntax Arbitrary Remote File Creation
9139| [61294] Microsoft IIS ASP Crafted semicolon Extension Security Bypass
9140| [61249] Microsoft IIS ctss.idc table Parameter SQL Injection
9141| [59892] Microsoft IIS Malformed Host Header Remote DoS
9142| [59621] Microsoft IIS CodeBrws.asp Off-By-One File Check Bypass Source Disclosure
9143| [59561] Microsoft IIS CodeBrws.asp Encoded Traversal Arbitrary File Source Disclosure
9144| [59360] Microsoft IIS ASP Page Visual Basic Script Malformed Regex Parsing DoS
9145| [57753] Microsoft IIS FTP Server Crafted Recursive Listing Remote DoS
9146| [57589] Microsoft IIS FTP Server NLST Command Remote Overflow
9147| [56474] Microsoft IIS WebDAV Extension URL Decode Crafted HTTP Request Authentication Bypass
9148| [55269] Microsoft IIS Traversal GET Request Remote DoS
9149| [54555] Microsoft IIS WebDAV Unicode URI Request Authentication Bypass
9150| [52924] Microsoft IIS WebDAV PROPFIND Method Forced Directory Listing
9151| [52680] Microsoft IIS httpext.dll WebDav LOCK Method Nonexistent File Request Parsing Memory Exhaustion Remote DoS
9152| [52238] Microsoft IIS IDC Extension XSS
9153| [49899] Microsoft IIS iissext.dll Unspecified ActiveX SetPassword Method Remote Password Manipulation
9154| [49730] Microsoft IIS ActiveX (adsiis.dll) GetObject Method Remote DoS
9155| [49059] Microsoft IIS IPP Service Unspecified Remote Overflow
9156| [45583] Microsoft IIS w/ Visual Interdev Unspecified Authentication Bypass
9157| [43451] Microsoft IIS HTTP Request Smuggling
9158| [41456] Microsoft IIS File Change Handling Local Privilege Escalation
9159| [41445] Microsoft IIS ASP Web Page Input Unspecified Arbitrary Code Execution
9160| [41091] Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass
9161| [41063] Microsoft IIS ODBC Tool newdsn.exe Remote DSN Creation
9162| [41057] Microsoft IIS w/ .NET MS-DOS Device Request Blacklist Bypass
9163| [35950] Microsoft IIS IUSR_Machine Account Arbitrary Non-EXE Command Execution
9164| [33457] Microsoft IIS Crafted TCP Connection Range Header DoS
9165| [28260] Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
9166| [27152] Microsoft Windows IIS ASP Page Processing Overflow
9167| [27087] Microsoft IIS SMTP Encapsulated SMTP Address Open Relay
9168| [23590] Microsoft IIS Traversal Arbitrary FPSE File Access
9169| [21805] Microsoft IIS Crafted URL Remote DoS
9170| [21537] Microsoft IIS Log File Permission Weakness Remote Modification
9171| [18926] Microsoft IIS SERVER_NAME Variable Spoofing Filter Bypass
9172| [17124] Microsoft IIS Malformed WebDAV Request DoS
9173| [17123] Microsoft IIS Multiple Unspecified Admin Pages XSS
9174| [17122] Microsoft IIS Permission Weakness .COM File Upload
9175| [15749] Microsoft IIS / Site Server code.asp Arbitrary File Access
9176| [15342] Microsoft IIS Persistent FTP Banner Information Disclosure
9177| [14229] Microsoft IIS asp.dll Scripting.FileSystemObject Malformed Program DoS
9178| [13985] Microsoft IIS Malformed HTTP Request Log Entry Spoofing
9179| [13760] Microsoft IIS Malformed URL Request DoS
9180| [13759] Microsoft IIS ISAPI .ASP Parser Script Tag LANGUAGE Argument Overflow
9181| [13634] Microsoft IIS Inetinfo.exe Malformed Long Mail File Name DoS
9182| [13558] Microsoft IIS SSL Request Resource Exhaustion DoS
9183| [13507] Microsoft IIS showfile.asp FileSystemObject Arbitrary File Access
9184| [13479] Microsoft IIS for Far East Parsed Page Source Disclosure
9185| [13473] Microsoft IIS on FAT Partition Local ASP Source Disclosure
9186| [13439] Microsoft IIS HTTP Request Malformed Content-Length Parsing Remote DoS
9187| [13433] Microsoft IIS WebDAV MKCOL Method Location Server Header Internal IP Disclosure
9188| [13432] Microsoft IIS WebDAV WRITE Location Server Header Internal IP Disclosure
9189| [13431] Microsoft IIS WebDAV Malformed PROPFIND Request Internal IP Disclosure
9190| [13430] Microsoft IIS aexp4.htr Password Policy Bypass
9191| [13429] Microsoft IIS aexp3.htr Password Policy Bypass
9192| [13428] Microsoft IIS aexp2b.htr Password Policy Bypass
9193| [13427] Microsoft IIS aexp2.htr Password Policy Bypass
9194| [13426] Microsoft IIS NTLM Authentication Request Parsing Remote Information Disclosure
9195| [13385] Microsoft IIS WebDAV Long PROPFIND/SEARCH Request DoS
9196| [11455] Microsoft IIS / PWS DOS Filename Request Access Bypass
9197| [11452] Microsoft IIS Double Byte Code Arbitrary Source Disclosure
9198| [11277] Microsoft IIS SSL ISAPI Filter Cleartext Information Disclosure
9199| [11257] Microsoft IIS Malformed GET Request DoS
9200| [11157] Microsoft IIS FTP Service PASV Connection Saturation DoS
9201| [11101] Microsoft IIS Multiple Slash ASP Page Request DoS
9202| [9315] Microsoft IIS getdrvs.exe ODBC Sample Information Disclosure
9203| [9314] Microsoft IIS mkilog.exe ODBC Sample Arbitrary Command Execution
9204| [9200] Microsoft IIS Unspecified XSS Variant
9205| [9199] Microsoft IIS shtml.dll XSS
9206| [8098] Microsoft IIS Virtual Directory ASP Source Disclosure
9207| [7807] Microsoft IIS ISAPI Virtual Directory UNC Mapping ASP Source Disclosure
9208| [7737] Microsoft IIS ASP Redirection Function XSS
9209| [7265] Microsoft IIS .ASP Session ID Disclosure and Hijacking
9210| [5851] Microsoft IIS Single Dot Source Code Disclosure
9211| [5736] Microsoft IIS Relative Path System Privilege Escalation
9212| [5693] Microsoft MS00-060 Patch IIS Malformed Request DoS
9213| [5633] Microsoft IIS Invalid WebDAV Request DoS
9214| [5606] Microsoft IIS WebDAV PROPFIND Request DoS
9215| [5584] Microsoft IIS URL Redirection Malformed Length DoS
9216| [5566] Microsoft IIS Form_VBScript.asp XSS
9217| [5316] Microsoft IIS ISAPI HTR Chunked Encoding Overflow
9218| [4864] Microsoft IIS TRACK Logging Failure
9219| [4863] Microsoft IIS Active Server Page Header DoS
9220| [4791] Microsoft IIS Response Object DoS
9221| [4655] Microsoft IIS ssinc.dll Long Filename Overflow
9222| [4535] Microsoft Media Services ISAPI nsiislog.dll POST Overflow
9223| [3512] Microsoft IIS ODBC Tool getdrvrs.exe Remote DSN Creation
9224| [3500] Microsoft IIS fpcount.exe Remote Overflow
9225| [3341] Microsoft IIS Redirect Response XSS
9226| [3339] Microsoft IIS HTTP Error Page XSS
9227| [3338] Microsoft IIS Help File XSS
9228| [3328] Microsoft IIS FTP Status Request DoS
9229| [3326] Microsoft IIS w3svc.dll ISAPI Filter URL Handling Remote DoS
9230| [3325] Microsoft IIS HTR ISAPI Overflow
9231| [3323] Microsoft IIS ISAPI .printer Extension Host Header Overflow
9232| [3320] Microsoft IIS ASP Server-Side Include Buffer Overflow
9233| [3316] Microsoft IIS HTTP Header Field Delimiter Overflow
9234| [3301] Microsoft IIS ASP Chunked Encoding Variant Heap Overflow
9235| [3284] Microsoft IIS Winmsdp.exe Arbitrary File Retrieval
9236| [3231] Microsoft IIS Log Bypass
9237| [2106] Microsoft Media Services ISAPI nsiislog.dll Overflow
9238| [1931] Microsoft IIS MIME Content-Type Header DoS
9239| [1930] Microsoft IIS SSI ssinc.dll Filename Handling Overflow
9240| [1826] Microsoft IIS Domain Guest Account Disclosure
9241| [1824] Microsoft IIS FTP DoS
9242| [1804] Microsoft IIS Long Request Parsing Remote DoS
9243| [1770] Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS
9244| [1750] Microsoft IIS File Fragment Disclosure
9245| [1543] Microsoft NT/IIS Invalid URL Request DoS
9246| [1504] Microsoft IIS File Permission Canonicalization Bypass
9247| [1465] Microsoft IIS .htr Missing Variable DoS
9248| [1325] Microsoft IIS Malformed Filename Request File Fragment Disclosure
9249| [1322] Microsoft IIS Malformed .htr Request DoS
9250| [1281] Microsoft IIS Escaped Character Saturation Remote DoS
9251| [1261] Microsoft IIS Chunked Transfer Encoding Remote Overflow DoS
9252| [1210] Microsoft IIS WebHits.dll ISAPI Filter Traversal Arbitrary File Access
9253| [1170] Microsoft IIS Escape Character URL Access Bypass
9254| [1083] Microsoft IIS FTP NO ACCESS Read/Delete File
9255| [1082] Microsoft IIS Domain Resolution Access Bypass
9256| [1041] Microsoft IIS Malformed HTTP Request Header DoS
9257| [1020] Microsoft IIS ISAPI GetExtensionVersion() Privilege Escalation
9258| [930] Microsoft IIS Shared ASP Cache Information Disclosure
9259| [929] Microsoft IIS FTP Server NLST Command Overflow
9260| [928] Microsoft IIS Long Request Log Evasion
9261| [815] Microsoft IIS ASP.NET trace.axd Application Tracing Information Disclosure
9262| [814] Microsoft IIS global.asa Remote Information Disclosure
9263| [782] Microsoft IIS / Site Server codebrws.asp Arbitrary File Access
9264| [771] Microsoft IIS Hosting Process (dllhost.exe) Out of Process Application Unspecified Privilege Escalation
9265| [768] Microsoft IIS ASP Chunked Encoding Heap Overflow
9266| [636] Microsoft IIS sqlqhit.asp Sample Script CiScope Parameter Information Disclosure
9267| [630] Microsoft IIS Multiple Malformed Header Field Internal IP Address Disclosure
9268| [568] Microsoft IIS idq.dll IDA/IDQ ISAPI Remote Overflow
9269| [564] Microsoft IIS ISM.dll Fragmented Source Disclosure
9270| [556] Microsoft IIS/PWS Encoded Filename Arbitrary Command Execution
9271| [525] Microsoft IIS Webserver Invalid Filename Request Arbitrary Command Execution
9272| [482] Microsoft IIS FrontPage Server Extensions (FPSE) Malformed Form DoS
9273| [475] Microsoft IIS bdir.htr Arbitrary Directory Listing
9274| [474] Microsoft IIS / Site Server viewcode.asp Arbitrary File Access
9275| [473] Microsoft IIS Multiple .cnf File Information Disclosure
9276| [471] Microsoft IIS ServerVariables_Jscript.asp Path Disclosure
9277| [470] Microsoft IIS Form_JScript.asp XSS
9278| [463] Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow
9279| [436] Microsoft IIS Unicode Remote Command Execution
9280| [425] Microsoft IIS WebDAV SEARCH Method Arbitrary Directory Forced Listing
9281| [391] Microsoft IIS IDA/IDQ Document Root Path Disclosure
9282| [390] Microsoft IIS Translate f: Request ASP Source Disclosure
9283| [308] Microsoft IIS Malformed File Extension URL DoS
9284| [285] Microsoft IIS repost.asp File Upload
9285| [284] Microsoft IIS IISADMPWD Virtual Directory Information Enumeration
9286| [283] Microsoft IIS /iissamples Multiple Sample Scripts Installed
9287| [277] Microsoft IIS / PWS %2e Request ASP Source Disclosure
9288| [276] Microsoft IIS ASP::$DATA Stream Request ASP Source Disclosure
9289| [275] Microsoft IIS newdsn.exe Remote Arbitrary File Creation
9290| [274] Microsoft IIS ctss.idc ODBC Sample Arbitrary Command Execution
9291| [273] Microsoft IIS Upgrade ism.dll Local Privilege Escalation
9292| [272] Microsoft IIS MDAC RDS Arbitrary Remote Command Execution
9293| [271] Microsoft IIS WebHits null.htw .asp Source Disclosure
9294| [98] Microsoft IIS perl.exe HTTP Path Disclosure
9295| [97] Microsoft IIS ISM.DLL HTR Request Overflow
9296| [96] Microsoft IIS idq.dll Traversal Arbitrary File Access
9297| [7] Microsoft IIS / Site Server showcode.asp source Parameter Traversal Arbitrary File Access
9298| [4] Microsoft IIS ExAir advsearch.asp Direct Request Remote DoS
9299| [3] Microsoft IIS ExAir query.asp Direct Request Remote DoS
9300| [2] Microsoft IIS ExAir search.asp Direct Request DoS
9301|_
9302Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
9303Device type: general purpose|specialized|phone
9304Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
9305OS CPE: cpe:/o:microsoft:windows_server_2008 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1
9306Aggressive OS guesses: Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows Embedded Standard 7 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%)
9307No exact OS matches for host (test conditions non-ideal).
9308Network Distance: 13 hops
9309Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
9310
9311TRACEROUTE (using port 443/tcp)
9312HOP RTT ADDRESS
93131 178.88 ms 10.247.200.1
93142 180.30 ms 213.184.122.97
93153 179.29 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
93164 179.33 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
93175 179.41 ms bzq-219-189-2.dsl.bezeqint.net (62.219.189.2)
93186 240.23 ms bzq-219-189-73.cablep.bezeqint.net (62.219.189.73)
93197 237.70 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
93208 237.70 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
93219 242.27 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
932210 240.45 ms s13-49.stratogen.net (109.233.49.13)
932311 236.73 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
932412 241.24 ms s13-49.stratogen.net (109.233.49.13)
932513 241.25 ms s10-140-54-212.cust.stratogen.net (212.54.140.10)
9326######################################################################################################################################
9327https://www.jobtrain.co.uk [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://jobtrain.co.uk], Title[Object moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[ALLOW-FROM https://www.jobtrain.co.uk/], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
9328https://jobtrain.co.uk [200 OK] Apache, Country[UNITED KINGDOM][GB], Email[enquiries@jobtrain.co.uk], Google-Analytics[UA-12529237-3], HTML5, HTTPServer[Apache], IP[87.247.244.117], JQuery, Open-Graph-Protocol[website], Script[application/ld+json,text/javascript], Title[Applicant Tracking System UK | Online Candidate Management | Jobtrain], UncommonHeaders[link,upgrade], WordPress, X-UA-Compatible[IE=9]
9329#######################################################################################################################################
9330
9331wig - WebApp Information Gatherer
9332
9333
9334Scanning https://jobtrain.co.uk...
9335___________________________________________________ SITE INFO ____________________________________________________
9336IP Title
933787.247.244.117 Applicant Tracking System UK | Online Candidate Management | Jobtrain
9338
9339____________________________________________________ VERSION _____________________________________________________
9340Name Versions Type
9341WordPress 3.8 | 3.8.1 | 3.8.2 | 3.8.3 | 3.8.4 | 3.8.5 | 3.8.6 | 3.8.7 CMS
9342 3.8.8 | 3.9 | 3.9.1 | 3.9.2 | 3.9.3 | 3.9.4 | 3.9.5 | 3.9.6
9343 4.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.1 | 4.1.1
9344 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5 | 4.2 | 4.2.1 | 4.2.2
9345Apache Platform
9346
9347__________________________________________________ INTERESTING ___________________________________________________
9348URL Note Type
9349/readme.html Readme file Interesting
9350/test.htm Test file Interesting
9351
9352_____________________________________________________ TOOLS ______________________________________________________
9353Name Link Software
9354wpscan https://github.com/wpscanteam/wpscan WordPress
9355CMSmap https://github.com/Dionach/CMSmap WordPress
9356
9357________________________________________________ VULNERABILITIES _________________________________________________
9358Affected #Vulns Link
9359WordPress 3.8 12 http://cvedetails.com/version/162922
9360WordPress 3.8.1 12 http://cvedetails.com/version/162923
9361WordPress 3.8.2 7 http://cvedetails.com/version/176067
9362WordPress 3.8.3 7 http://cvedetails.com/version/176068
9363WordPress 3.8.4 8 http://cvedetails.com/version/176069
9364WordPress 3.9 8 http://cvedetails.com/version/176070
9365WordPress 3.9.1 15 http://cvedetails.com/version/169908
9366WordPress 3.9.2 10 http://cvedetails.com/version/176071
9367WordPress 3.9.3 1 http://cvedetails.com/version/185080
9368WordPress 4.0 9 http://cvedetails.com/version/176072
9369WordPress 4.0.1 1 http://cvedetails.com/version/185081
9370WordPress 4.1 1 http://cvedetails.com/version/185082
9371WordPress 4.1.1 2 http://cvedetails.com/version/185079
9372WordPress 4.2 1 http://cvedetails.com/version/185048
9373WordPress 4.2.1 1 http://cvedetails.com/version/184019
9374WordPress 4.2.2 2 http://cvedetails.com/version/185073
9375
9376__________________________________________________________________________________________________________________
9377Time: 1.4 sec Urls: 581 Fingerprints: 40401
9378#######################################################################################################################################
9379HTTP/1.1 302 Found
9380Cache-Control: private
9381Content-Length: 139
9382Content-Type: text/html; charset=utf-8
9383Location: https://jobtrain.co.uk
9384Server:
9385X-AspNet-Version:
9386alternateHostName: www.jobtrain.co.uk
9387Server:
9388X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
9389X-Powered-By: Jobtrain
9390X-XSS-Protection: 1; mode=block
9391X-Content-Type-Options: nosniff
9392Date: Wed, 07 Aug 2019 11:07:14 GMT
9393
9394HTTP/1.1 302 Found
9395Cache-Control: private
9396Content-Length: 139
9397Content-Type: text/html; charset=utf-8
9398Location: https://jobtrain.co.uk
9399Server:
9400X-AspNet-Version:
9401alternateHostName: www.jobtrain.co.uk
9402Server:
9403X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
9404X-Powered-By: Jobtrain
9405X-XSS-Protection: 1; mode=block
9406X-Content-Type-Options: nosniff
9407Date: Wed, 07 Aug 2019 11:07:15 GMT
9408
9409HTTP/2 200
9410date: Wed, 07 Aug 2019 11:07:17 GMT
9411server: Apache
9412link: <https://jobtrain.co.uk/wp-json/>; rel="https://api.w.org/", <https://jobtrain.co.uk/>; rel=shortlink
9413content-type: text/html; charset=UTF-8
9414
9415Allow: OPTIONS, TRACE, GET, HEAD, POST
9416#######################################################################################################################################
9417Version: 1.11.13-static
9418OpenSSL 1.0.2-chacha (1.0.2g-dev)
9419
9420Connected to 212.54.140.10
9421
9422Testing SSL server www.jobtrain.co.uk on port 443 using SNI name www.jobtrain.co.uk
9423
9424 TLS Fallback SCSV:
9425Server does not support TLS Fallback SCSV
9426
9427 TLS renegotiation:
9428Secure session renegotiation supported
9429
9430 TLS Compression:
9431Compression disabled
9432
9433 Heartbleed:
9434TLS 1.2 not vulnerable to heartbleed
9435TLS 1.1 not vulnerable to heartbleed
9436TLS 1.0 not vulnerable to heartbleed
9437
9438 Supported Server Cipher(s):
9439Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-521 DHE 521
9440Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
9441Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-521 DHE 521
9442Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
9443Accepted TLSv1.2 256 bits AES256-SHA256
9444Accepted TLSv1.2 256 bits AES256-SHA
9445Accepted TLSv1.2 128 bits AES128-SHA256
9446Accepted TLSv1.2 128 bits AES128-SHA
9447Accepted TLSv1.2 112 bits DES-CBC3-SHA
9448Preferred TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
9449Accepted TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
9450Accepted TLSv1.1 256 bits AES256-SHA
9451Accepted TLSv1.1 128 bits AES128-SHA
9452Accepted TLSv1.1 112 bits DES-CBC3-SHA
9453Preferred TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
9454Accepted TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
9455Accepted TLSv1.0 256 bits AES256-SHA
9456Accepted TLSv1.0 128 bits AES128-SHA
9457Accepted TLSv1.0 112 bits DES-CBC3-SHA
9458
9459 SSL Certificate:
9460Signature Algorithm: sha256WithRSAEncryption
9461RSA Key Strength: 2048
9462
9463Subject: www.jobtrain.co.uk
9464Altnames: DNS:www.jobtrain.co.uk, DNS:jobtrain.co.uk
9465Issuer: DigiCert SHA2 Extended Validation Server CA
9466
9467Not valid before: Aug 13 00:00:00 2018 GMT
9468Not valid after: Nov 11 12:00:00 2019 GMT
9469#######################################################################################################################################
9470------------------------------------------------------------------------------------------------------------------------
9471
9472[ ! ] Starting SCANNER INURLBR 2.1 at [07-08-2019 07:08:22]
9473[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
9474It is the end user's responsibility to obey all applicable local, state and federal laws.
9475Developers assume no liability and are not responsible for any misuse or damage caused by this program
9476
9477[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/www.jobtrain.co.uk/output/inurlbr-www.jobtrain.co.uk ]
9478[ INFO ][ DORK ]::[ site:www.jobtrain.co.uk ]
9479[ INFO ][ SEARCHING ]:: {
9480[ INFO ][ ENGINE ]::[ GOOGLE - www.google.dk ]
9481
9482[ INFO ][ SEARCHING ]::
9483-[:::]
9484[ INFO ][ ENGINE ]::[ GOOGLE API ]
9485
9486[ INFO ][ SEARCHING ]::
9487-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
9488[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.com.sv ID: 007843865286850066037:3ajwn2jlweq ]
9489
9490[ INFO ][ SEARCHING ]::
9491-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
9492
9493[ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]
9494
9495
9496 _[ - ]::--------------------------------------------------------------------------------------------------------------
9497|_[ + ] [ 0 / 100 ]-[07:08:43] [ - ]
9498|_[ + ] Target:: [ https://www.jobtrain.co.uk/acorngroup/ ]
9499|_[ + ] Exploit::
9500|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9501|_[ + ] More details:: / - / , ISP:
9502|_[ + ] Found:: UNIDENTIFIED
9503
9504 _[ - ]::--------------------------------------------------------------------------------------------------------------
9505|_[ + ] [ 1 / 100 ]-[07:08:46] [ - ]
9506|_[ + ] Target:: [ https://www.jobtrain.co.uk/bpp/ ]
9507|_[ + ] Exploit::
9508|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9509|_[ + ] More details:: / - / , ISP:
9510|_[ + ] Found:: UNIDENTIFIED
9511
9512 _[ - ]::--------------------------------------------------------------------------------------------------------------
9513|_[ + ] [ 2 / 100 ]-[07:08:50] [ - ]
9514|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/ ]
9515|_[ + ] Exploit::
9516|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9517|_[ + ] More details:: / - / , ISP:
9518|_[ + ] Found:: UNIDENTIFIED
9519
9520 _[ - ]::--------------------------------------------------------------------------------------------------------------
9521|_[ + ] [ 3 / 100 ]-[07:08:53] [ - ]
9522|_[ + ] Target:: [ https://www.jobtrain.co.uk/telent/ ]
9523|_[ + ] Exploit::
9524|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9525|_[ + ] More details:: / - / , ISP:
9526|_[ + ] Found:: UNIDENTIFIED
9527
9528 _[ - ]::--------------------------------------------------------------------------------------------------------------
9529|_[ + ] [ 4 / 100 ]-[07:08:59] [ - ]
9530|_[ + ] Target:: [ https://www.jobtrain.co.uk/bhid/ ]
9531|_[ + ] Exploit::
9532|_[ + ] Information Server:: , , IP:212.54.140.10:443
9533|_[ + ] More details:: / - / , ISP:
9534|_[ + ] Found:: UNIDENTIFIED
9535
9536 _[ - ]::--------------------------------------------------------------------------------------------------------------
9537|_[ + ] [ 5 / 100 ]-[07:09:02] [ - ]
9538|_[ + ] Target:: [ https://www.jobtrain.co.uk/sigplc/ ]
9539|_[ + ] Exploit::
9540|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9541|_[ + ] More details:: / - / , ISP:
9542|_[ + ] Found:: UNIDENTIFIED
9543
9544 _[ - ]::--------------------------------------------------------------------------------------------------------------
9545|_[ + ] [ 6 / 100 ]-[07:09:05] [ - ]
9546|_[ + ] Target:: [ https://www.jobtrain.co.uk/brakesgroup/ ]
9547|_[ + ] Exploit::
9548|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9549|_[ + ] More details:: / - / , ISP:
9550|_[ + ] Found:: UNIDENTIFIED
9551
9552 _[ - ]::--------------------------------------------------------------------------------------------------------------
9553|_[ + ] [ 7 / 100 ]-[07:09:10] [ - ]
9554|_[ + ] Target:: [ https://www.jobtrain.co.uk/Teleperformance5/ ]
9555|_[ + ] Exploit::
9556|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9557|_[ + ] More details:: / - / , ISP:
9558|_[ + ] Found:: UNIDENTIFIED
9559
9560 _[ - ]::--------------------------------------------------------------------------------------------------------------
9561|_[ + ] [ 8 / 100 ]-[07:09:13] [ - ]
9562|_[ + ] Target:: [ https://www.jobtrain.co.uk/clevelandcliniclondon/ ]
9563|_[ + ] Exploit::
9564|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9565|_[ + ] More details:: / - / , ISP:
9566|_[ + ] Found:: UNIDENTIFIED
9567
9568 _[ - ]::--------------------------------------------------------------------------------------------------------------
9569|_[ + ] [ 9 / 100 ]-[07:09:17] [ - ]
9570|_[ + ] Target:: [ https://www.jobtrain.co.uk/citizensadvice/ ]
9571|_[ + ] Exploit::
9572|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9573|_[ + ] More details:: / - / , ISP:
9574|_[ + ] Found:: UNIDENTIFIED
9575
9576 _[ - ]::--------------------------------------------------------------------------------------------------------------
9577|_[ + ] [ 10 / 100 ]-[07:09:20] [ - ]
9578|_[ + ] Target:: [ https://www.jobtrain.co.uk/aldautomotive/ ]
9579|_[ + ] Exploit::
9580|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9581|_[ + ] More details:: / - / , ISP:
9582|_[ + ] Found:: UNIDENTIFIED
9583
9584 _[ - ]::--------------------------------------------------------------------------------------------------------------
9585|_[ + ] [ 11 / 100 ]-[07:09:23] [ - ]
9586|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/ ]
9587|_[ + ] Exploit::
9588|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9589|_[ + ] More details:: / - / , ISP:
9590|_[ + ] Found:: UNIDENTIFIED
9591
9592 _[ - ]::--------------------------------------------------------------------------------------------------------------
9593|_[ + ] [ 12 / 100 ]-[07:09:26] [ - ]
9594|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/ ]
9595|_[ + ] Exploit::
9596|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9597|_[ + ] More details:: / - / , ISP:
9598|_[ + ] Found:: UNIDENTIFIED
9599
9600 _[ - ]::--------------------------------------------------------------------------------------------------------------
9601|_[ + ] [ 13 / 100 ]-[07:09:29] [ - ]
9602|_[ + ] Target:: [ https://www.jobtrain.co.uk/Nordanglia5/ ]
9603|_[ + ] Exploit::
9604|_[ + ] Information Server:: HTTP/1.1 302 Redirect, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9605|_[ + ] More details:: / - / , ISP:
9606|_[ + ] Found:: UNIDENTIFIED
9607
9608 _[ - ]::--------------------------------------------------------------------------------------------------------------
9609|_[ + ] [ 14 / 100 ]-[07:09:34] [ - ]
9610|_[ + ] Target:: [ https://www.jobtrain.co.uk/nissandealerrecruitment/ ]
9611|_[ + ] Exploit::
9612|_[ + ] Information Server:: , , IP:212.54.140.10:443
9613|_[ + ] More details:: / - / , ISP:
9614|_[ + ] Found:: UNIDENTIFIED
9615
9616 _[ - ]::--------------------------------------------------------------------------------------------------------------
9617|_[ + ] [ 15 / 100 ]-[07:09:37] [ - ]
9618|_[ + ] Target:: [ https://www.jobtrain.co.uk/derbyshirefire/ ]
9619|_[ + ] Exploit::
9620|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9621|_[ + ] More details:: / - / , ISP:
9622|_[ + ] Found:: UNIDENTIFIED
9623
9624 _[ - ]::--------------------------------------------------------------------------------------------------------------
9625|_[ + ] [ 16 / 100 ]-[07:09:43] [ - ]
9626|_[ + ] Target:: [ https://www.jobtrain.co.uk/advance/ ]
9627|_[ + ] Exploit::
9628|_[ + ] Information Server:: , , IP:212.54.140.10:443
9629|_[ + ] More details:: / - / , ISP:
9630|_[ + ] Found:: UNIDENTIFIED
9631
9632 _[ - ]::--------------------------------------------------------------------------------------------------------------
9633|_[ + ] [ 17 / 100 ]-[07:09:46] [ - ]
9634|_[ + ] Target:: [ https://www.jobtrain.co.uk/paperchasecareers/ ]
9635|_[ + ] Exploit::
9636|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9637|_[ + ] More details:: / - / , ISP:
9638|_[ + ] Found:: UNIDENTIFIED
9639
9640 _[ - ]::--------------------------------------------------------------------------------------------------------------
9641|_[ + ] [ 18 / 100 ]-[07:09:49] [ - ]
9642|_[ + ] Target:: [ https://www.jobtrain.co.uk/dret/ ]
9643|_[ + ] Exploit::
9644|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9645|_[ + ] More details:: / - / , ISP:
9646|_[ + ] Found:: UNIDENTIFIED
9647
9648 _[ - ]::--------------------------------------------------------------------------------------------------------------
9649|_[ + ] [ 19 / 100 ]-[07:09:55] [ - ]
9650|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/ ]
9651|_[ + ] Exploit::
9652|_[ + ] Information Server:: , , IP:212.54.140.10:443
9653|_[ + ] More details:: / - / , ISP:
9654|_[ + ] Found:: UNIDENTIFIED
9655
9656 _[ - ]::--------------------------------------------------------------------------------------------------------------
9657|_[ + ] [ 20 / 100 ]-[07:09:59] [ - ]
9658|_[ + ] Target:: [ https://www.jobtrain.co.uk/southernhousing5/ ]
9659|_[ + ] Exploit::
9660|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9661|_[ + ] More details:: / - / , ISP:
9662|_[ + ] Found:: UNIDENTIFIED
9663
9664 _[ - ]::--------------------------------------------------------------------------------------------------------------
9665|_[ + ] [ 21 / 100 ]-[07:10:04] [ - ]
9666|_[ + ] Target:: [ https://www.jobtrain.co.uk/frontieragriculture/ ]
9667|_[ + ] Exploit::
9668|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9669|_[ + ] More details:: / - / , ISP:
9670|_[ + ] Found:: UNIDENTIFIED
9671
9672 _[ - ]::--------------------------------------------------------------------------------------------------------------
9673|_[ + ] [ 22 / 100 ]-[07:10:08] [ - ]
9674|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/ ]
9675|_[ + ] Exploit::
9676|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9677|_[ + ] More details:: / - / , ISP:
9678|_[ + ] Found:: UNIDENTIFIED
9679
9680 _[ - ]::--------------------------------------------------------------------------------------------------------------
9681|_[ + ] [ 23 / 100 ]-[07:10:14] [ - ]
9682|_[ + ] Target:: [ https://www.jobtrain.co.uk/theritz5/ ]
9683|_[ + ] Exploit::
9684|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9685|_[ + ] More details:: / - / , ISP:
9686|_[ + ] Found:: UNIDENTIFIED
9687
9688 _[ - ]::--------------------------------------------------------------------------------------------------------------
9689|_[ + ] [ 24 / 100 ]-[07:10:18] [ - ]
9690|_[ + ] Target:: [ https://www.jobtrain.co.uk/transact/ ]
9691|_[ + ] Exploit::
9692|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9693|_[ + ] More details:: / - / , ISP:
9694|_[ + ] Found:: UNIDENTIFIED
9695
9696 _[ - ]::--------------------------------------------------------------------------------------------------------------
9697|_[ + ] [ 25 / 100 ]-[07:10:23] [ - ]
9698|_[ + ] Target:: [ https://www.jobtrain.co.uk/agsairports/ ]
9699|_[ + ] Exploit::
9700|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9701|_[ + ] More details:: / - / , ISP:
9702|_[ + ] Found:: UNIDENTIFIED
9703
9704 _[ - ]::--------------------------------------------------------------------------------------------------------------
9705|_[ + ] [ 26 / 100 ]-[07:10:29] [ - ]
9706|_[ + ] Target:: [ https://www.jobtrain.co.uk/dumfriesandgalloway/ ]
9707|_[ + ] Exploit::
9708|_[ + ] Information Server:: , , IP:212.54.140.10:443
9709|_[ + ] More details:: / - / , ISP:
9710|_[ + ] Found:: UNIDENTIFIED
9711
9712 _[ - ]::--------------------------------------------------------------------------------------------------------------
9713|_[ + ] [ 27 / 100 ]-[07:10:34] [ - ]
9714|_[ + ] Target:: [ https://www.jobtrain.co.uk/jobtrainsolutions/ ]
9715|_[ + ] Exploit::
9716|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9717|_[ + ] More details:: / - / , ISP:
9718|_[ + ] Found:: UNIDENTIFIED
9719
9720 _[ - ]::--------------------------------------------------------------------------------------------------------------
9721|_[ + ] [ 28 / 100 ]-[07:10:40] [ - ]
9722|_[ + ] Target:: [ https://www.jobtrain.co.uk/west-norfolk/ ]
9723|_[ + ] Exploit::
9724|_[ + ] Information Server:: , , IP:212.54.140.10:443
9725|_[ + ] More details:: / - / , ISP:
9726|_[ + ] Found:: UNIDENTIFIED
9727
9728 _[ - ]::--------------------------------------------------------------------------------------------------------------
9729|_[ + ] [ 29 / 100 ]-[07:10:43] [ - ]
9730|_[ + ] Target:: [ https://www.jobtrain.co.uk/socotec-careers/ ]
9731|_[ + ] Exploit::
9732|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9733|_[ + ] More details:: / - / , ISP:
9734|_[ + ] Found:: UNIDENTIFIED
9735
9736 _[ - ]::--------------------------------------------------------------------------------------------------------------
9737|_[ + ] [ 30 / 100 ]-[07:10:46] [ - ]
9738|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/vacancies.aspx ]
9739|_[ + ] Exploit::
9740|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9741|_[ + ] More details:: / - / , ISP:
9742|_[ + ] Found:: UNIDENTIFIED
9743
9744 _[ - ]::--------------------------------------------------------------------------------------------------------------
9745|_[ + ] [ 31 / 100 ]-[07:10:52] [ - ]
9746|_[ + ] Target:: [ https://www.jobtrain.co.uk/jdwilliams5/vacancies.aspx ]
9747|_[ + ] Exploit::
9748|_[ + ] Information Server:: , , IP:212.54.140.10:443
9749|_[ + ] More details:: / - / , ISP:
9750|_[ + ] Found:: UNIDENTIFIED
9751
9752 _[ - ]::--------------------------------------------------------------------------------------------------------------
9753|_[ + ] [ 32 / 100 ]-[07:10:56] [ - ]
9754|_[ + ] Target:: [ https://www.jobtrain.co.uk/certasenergycareers/vacancies.aspx ]
9755|_[ + ] Exploit::
9756|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9757|_[ + ] More details:: / - / , ISP:
9758|_[ + ] Found:: UNIDENTIFIED
9759
9760 _[ - ]::--------------------------------------------------------------------------------------------------------------
9761|_[ + ] [ 33 / 100 ]-[07:10:59] [ - ]
9762|_[ + ] Target:: [ https://www.jobtrain.co.uk/iomgovjobs/vacancies.aspx ]
9763|_[ + ] Exploit::
9764|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9765|_[ + ] More details:: / - / , ISP:
9766|_[ + ] Found:: UNIDENTIFIED
9767
9768 _[ - ]::--------------------------------------------------------------------------------------------------------------
9769|_[ + ] [ 34 / 100 ]-[07:11:05] [ - ]
9770|_[ + ] Target:: [ https://www.jobtrain.co.uk/thpt/vacancies.aspx ]
9771|_[ + ] Exploit::
9772|_[ + ] Information Server:: , , IP:212.54.140.10:443
9773|_[ + ] More details:: / - / , ISP:
9774|_[ + ] Found:: UNIDENTIFIED
9775
9776 _[ - ]::--------------------------------------------------------------------------------------------------------------
9777|_[ + ] [ 35 / 100 ]-[07:11:08] [ - ]
9778|_[ + ] Target:: [ https://www.jobtrain.co.uk/lga/Vacancies.aspx ]
9779|_[ + ] Exploit::
9780|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9781|_[ + ] More details:: / - / , ISP:
9782|_[ + ] Found:: UNIDENTIFIED
9783
9784 _[ - ]::--------------------------------------------------------------------------------------------------------------
9785|_[ + ] [ 36 / 100 ]-[07:11:13] [ - ]
9786|_[ + ] Target:: [ https://www.jobtrain.co.uk/dret/vacancies.aspx ]
9787|_[ + ] Exploit::
9788|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9789|_[ + ] More details:: / - / , ISP:
9790|_[ + ] Found:: UNIDENTIFIED
9791
9792 _[ - ]::--------------------------------------------------------------------------------------------------------------
9793|_[ + ] [ 37 / 100 ]-[07:11:15] [ - ]
9794|_[ + ] Target:: [ https://www.jobtrain.co.uk/starcareers/search.aspx ]
9795|_[ + ] Exploit::
9796|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9797|_[ + ] More details:: / - / , ISP:
9798|_[ + ] Found:: UNIDENTIFIED
9799
9800 _[ - ]::--------------------------------------------------------------------------------------------------------------
9801|_[ + ] [ 38 / 100 ]-[07:11:19] [ - ]
9802|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/vacancies.aspx ]
9803|_[ + ] Exploit::
9804|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9805|_[ + ] More details:: / - / , ISP:
9806|_[ + ] Found:: UNIDENTIFIED
9807
9808 _[ - ]::--------------------------------------------------------------------------------------------------------------
9809|_[ + ] [ 39 / 100 ]-[07:11:23] [ - ]
9810|_[ + ] Target:: [ https://www.jobtrain.co.uk/saxonweald/vacancies.aspx ]
9811|_[ + ] Exploit::
9812|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9813|_[ + ] More details:: / - / , ISP:
9814|_[ + ] Found:: UNIDENTIFIED
9815
9816 _[ - ]::--------------------------------------------------------------------------------------------------------------
9817|_[ + ] [ 40 / 100 ]-[07:11:27] [ - ]
9818|_[ + ] Target:: [ https://www.jobtrain.co.uk/teleperformance5/vacancies.aspx ]
9819|_[ + ] Exploit::
9820|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9821|_[ + ] More details:: / - / , ISP:
9822|_[ + ] Found:: UNIDENTIFIED
9823
9824 _[ - ]::--------------------------------------------------------------------------------------------------------------
9825|_[ + ] [ 41 / 100 ]-[07:11:31] [ - ]
9826|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/vacancies.aspx ]
9827|_[ + ] Exploit::
9828|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9829|_[ + ] More details:: / - / , ISP:
9830|_[ + ] Found:: UNIDENTIFIED
9831
9832 _[ - ]::--------------------------------------------------------------------------------------------------------------
9833|_[ + ] [ 42 / 100 ]-[07:11:34] [ - ]
9834|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/vacancies.aspx ]
9835|_[ + ] Exploit::
9836|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9837|_[ + ] More details:: / - / , ISP:
9838|_[ + ] Found:: UNIDENTIFIED
9839
9840 _[ - ]::--------------------------------------------------------------------------------------------------------------
9841|_[ + ] [ 43 / 100 ]-[07:11:37] [ - ]
9842|_[ + ] Target:: [ https://www.jobtrain.co.uk/gam/vacancies.aspx ]
9843|_[ + ] Exploit::
9844|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9845|_[ + ] More details:: / - / , ISP:
9846|_[ + ] Found:: UNIDENTIFIED
9847
9848 _[ - ]::--------------------------------------------------------------------------------------------------------------
9849|_[ + ] [ 44 / 100 ]-[07:11:41] [ - ]
9850|_[ + ] Target:: [ https://www.jobtrain.co.uk/hermescareers/vacancies.aspx ]
9851|_[ + ] Exploit::
9852|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9853|_[ + ] More details:: / - / , ISP:
9854|_[ + ] Found:: UNIDENTIFIED
9855
9856 _[ - ]::--------------------------------------------------------------------------------------------------------------
9857|_[ + ] [ 45 / 100 ]-[07:11:44] [ - ]
9858|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/default.aspx ]
9859|_[ + ] Exploit::
9860|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9861|_[ + ] More details:: / - / , ISP:
9862|_[ + ] Found:: UNIDENTIFIED
9863
9864 _[ - ]::--------------------------------------------------------------------------------------------------------------
9865|_[ + ] [ 46 / 100 ]-[07:11:48] [ - ]
9866|_[ + ] Target:: [ https://www.jobtrain.co.uk/radian5/vacancies.aspx ]
9867|_[ + ] Exploit::
9868|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9869|_[ + ] More details:: / - / , ISP:
9870|_[ + ] Found:: UNIDENTIFIED
9871
9872 _[ - ]::--------------------------------------------------------------------------------------------------------------
9873|_[ + ] [ 47 / 100 ]-[07:11:51] [ - ]
9874|_[ + ] Target:: [ https://www.jobtrain.co.uk/odeon5/vacancies.aspx ]
9875|_[ + ] Exploit::
9876|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9877|_[ + ] More details:: / - / , ISP:
9878|_[ + ] Found:: UNIDENTIFIED
9879
9880 _[ - ]::--------------------------------------------------------------------------------------------------------------
9881|_[ + ] [ 48 / 100 ]-[07:11:55] [ - ]
9882|_[ + ] Target:: [ https://www.jobtrain.co.uk/agsairports/vacancies.aspx ]
9883|_[ + ] Exploit::
9884|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9885|_[ + ] More details:: / - / , ISP:
9886|_[ + ] Found:: UNIDENTIFIED
9887
9888 _[ - ]::--------------------------------------------------------------------------------------------------------------
9889|_[ + ] [ 49 / 100 ]-[07:12:00] [ - ]
9890|_[ + ] Target:: [ https://www.jobtrain.co.uk/theritz5/vacancies.aspx ]
9891|_[ + ] Exploit::
9892|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9893|_[ + ] More details:: / - / , ISP:
9894|_[ + ] Found:: UNIDENTIFIED
9895
9896 _[ - ]::--------------------------------------------------------------------------------------------------------------
9897|_[ + ] [ 50 / 100 ]-[07:12:06] [ - ]
9898|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/vacancies.aspx ]
9899|_[ + ] Exploit::
9900|_[ + ] Information Server:: , , IP:212.54.140.10:443
9901|_[ + ] More details:: / - / , ISP:
9902|_[ + ] Found:: UNIDENTIFIED
9903
9904 _[ - ]::--------------------------------------------------------------------------------------------------------------
9905|_[ + ] [ 51 / 100 ]-[07:12:12] [ - ]
9906|_[ + ] Target:: [ https://www.jobtrain.co.uk/thecrownestate5/vacancies.aspx ]
9907|_[ + ] Exploit::
9908|_[ + ] Information Server:: , , IP:212.54.140.10:443
9909|_[ + ] More details:: / - / , ISP:
9910|_[ + ] Found:: UNIDENTIFIED
9911
9912 _[ - ]::--------------------------------------------------------------------------------------------------------------
9913|_[ + ] [ 52 / 100 ]-[07:12:15] [ - ]
9914|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/update.aspx ]
9915|_[ + ] Exploit::
9916|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9917|_[ + ] More details:: / - / , ISP:
9918|_[ + ] Found:: UNIDENTIFIED
9919
9920 _[ - ]::--------------------------------------------------------------------------------------------------------------
9921|_[ + ] [ 53 / 100 ]-[07:12:18] [ - ]
9922|_[ + ] Target:: [ https://www.jobtrain.co.uk/MerseysidePolice/update.aspx ]
9923|_[ + ] Exploit::
9924|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9925|_[ + ] More details:: / - / , ISP:
9926|_[ + ] Found:: UNIDENTIFIED
9927
9928 _[ - ]::--------------------------------------------------------------------------------------------------------------
9929|_[ + ] [ 54 / 100 ]-[07:12:21] [ - ]
9930|_[ + ] Target:: [ https://www.jobtrain.co.uk/brakesgroup/update.aspx ]
9931|_[ + ] Exploit::
9932|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9933|_[ + ] More details:: / - / , ISP:
9934|_[ + ] Found:: UNIDENTIFIED
9935
9936 _[ - ]::--------------------------------------------------------------------------------------------------------------
9937|_[ + ] [ 55 / 100 ]-[07:12:23] [ - ]
9938|_[ + ] Target:: [ https://www.jobtrain.co.uk/BPP/update.aspx ]
9939|_[ + ] Exploit::
9940|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9941|_[ + ] More details:: / - / , ISP:
9942|_[ + ] Found:: UNIDENTIFIED
9943
9944 _[ - ]::--------------------------------------------------------------------------------------------------------------
9945|_[ + ] [ 56 / 100 ]-[07:12:26] [ - ]
9946|_[ + ] Target:: [ https://www.jobtrain.co.uk/hermescareers/update.aspx ]
9947|_[ + ] Exploit::
9948|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9949|_[ + ] More details:: / - / , ISP:
9950|_[ + ] Found:: UNIDENTIFIED
9951
9952 _[ - ]::--------------------------------------------------------------------------------------------------------------
9953|_[ + ] [ 57 / 100 ]-[07:12:29] [ - ]
9954|_[ + ] Target:: [ https://www.jobtrain.co.uk/teleperformance5/update.aspx ]
9955|_[ + ] Exploit::
9956|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9957|_[ + ] More details:: / - / , ISP:
9958|_[ + ] Found:: UNIDENTIFIED
9959
9960 _[ - ]::--------------------------------------------------------------------------------------------------------------
9961|_[ + ] [ 58 / 100 ]-[07:12:32] [ - ]
9962|_[ + ] Target:: [ https://www.jobtrain.co.uk/paperchasecareers/update.aspx ]
9963|_[ + ] Exploit::
9964|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9965|_[ + ] More details:: / - / , ISP:
9966|_[ + ] Found:: UNIDENTIFIED
9967
9968 _[ - ]::--------------------------------------------------------------------------------------------------------------
9969|_[ + ] [ 59 / 100 ]-[07:12:35] [ - ]
9970|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/update.aspx ]
9971|_[ + ] Exploit::
9972|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9973|_[ + ] More details:: / - / , ISP:
9974|_[ + ] Found:: UNIDENTIFIED
9975
9976 _[ - ]::--------------------------------------------------------------------------------------------------------------
9977|_[ + ] [ 60 / 100 ]-[07:12:38] [ - ]
9978|_[ + ] Target:: [ https://www.jobtrain.co.uk/odeon5/update.aspx ]
9979|_[ + ] Exploit::
9980|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9981|_[ + ] More details:: / - / , ISP:
9982|_[ + ] Found:: UNIDENTIFIED
9983
9984 _[ - ]::--------------------------------------------------------------------------------------------------------------
9985|_[ + ] [ 61 / 100 ]-[07:12:41] [ - ]
9986|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/update.aspx ]
9987|_[ + ] Exploit::
9988|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9989|_[ + ] More details:: / - / , ISP:
9990|_[ + ] Found:: UNIDENTIFIED
9991
9992 _[ - ]::--------------------------------------------------------------------------------------------------------------
9993|_[ + ] [ 62 / 100 ]-[07:12:44] [ - ]
9994|_[ + ] Target:: [ https://www.jobtrain.co.uk/poferries/update.aspx ]
9995|_[ + ] Exploit::
9996|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
9997|_[ + ] More details:: / - / , ISP:
9998|_[ + ] Found:: UNIDENTIFIED
9999
10000 _[ - ]::--------------------------------------------------------------------------------------------------------------
10001|_[ + ] [ 63 / 100 ]-[07:12:47] [ - ]
10002|_[ + ] Target:: [ https://www.jobtrain.co.uk/newcastleairport/update.aspx ]
10003|_[ + ] Exploit::
10004|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10005|_[ + ] More details:: / - / , ISP:
10006|_[ + ] Found:: UNIDENTIFIED
10007
10008 _[ - ]::--------------------------------------------------------------------------------------------------------------
10009|_[ + ] [ 64 / 100 ]-[07:12:50] [ - ]
10010|_[ + ] Target:: [ https://www.jobtrain.co.uk/clevelandcliniclondon/Pages/Page2.aspx ]
10011|_[ + ] Exploit::
10012|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10013|_[ + ] More details:: / - / , ISP:
10014|_[ + ] Found:: UNIDENTIFIED
10015
10016 _[ - ]::--------------------------------------------------------------------------------------------------------------
10017|_[ + ] [ 65 / 100 ]-[07:12:53] [ - ]
10018|_[ + ] Target:: [ https://www.jobtrain.co.uk/radian5/update.aspx?jobid=1124 ]
10019|_[ + ] Exploit::
10020|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10021|_[ + ] More details:: / - / , ISP:
10022|_[ + ] Found:: UNIDENTIFIED
10023
10024 _[ - ]::--------------------------------------------------------------------------------------------------------------
10025|_[ + ] [ 66 / 100 ]-[07:12:56] [ - ]
10026|_[ + ] Target:: [ https://www.jobtrain.co.uk/leighacademiestrust/vacancies.aspx?lstlocation=30 ]
10027|_[ + ] Exploit::
10028|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10029|_[ + ] More details:: / - / , ISP:
10030|_[ + ] Found:: UNIDENTIFIED
10031
10032 _[ - ]::--------------------------------------------------------------------------------------------------------------
10033|_[ + ] [ 67 / 100 ]-[07:12:59] [ - ]
10034|_[ + ] Target:: [ https://www.jobtrain.co.uk/Graham/emailafriend.aspx?jobid=227 ]
10035|_[ + ] Exploit::
10036|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10037|_[ + ] More details:: / - / , ISP:
10038|_[ + ] Found:: UNIDENTIFIED
10039
10040 _[ - ]::--------------------------------------------------------------------------------------------------------------
10041|_[ + ] [ 68 / 100 ]-[07:13:02] [ - ]
10042|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/register.aspx?jobid=1791 ]
10043|_[ + ] Exploit::
10044|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10045|_[ + ] More details:: / - / , ISP:
10046|_[ + ] Found:: UNIDENTIFIED
10047
10048 _[ - ]::--------------------------------------------------------------------------------------------------------------
10049|_[ + ] [ 69 / 100 ]-[07:13:05] [ - ]
10050|_[ + ] Target:: [ https://www.jobtrain.co.uk/southernhousing5/register.aspx?jobid=1631 ]
10051|_[ + ] Exploit::
10052|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10053|_[ + ] More details:: / - / , ISP:
10054|_[ + ] Found:: UNIDENTIFIED
10055
10056 _[ - ]::--------------------------------------------------------------------------------------------------------------
10057|_[ + ] [ 70 / 100 ]-[07:13:08] [ - ]
10058|_[ + ] Target:: [ https://www.jobtrain.co.uk/vindisgroup/register.aspx?jobid=1981 ]
10059|_[ + ] Exploit::
10060|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10061|_[ + ] More details:: / - / , ISP:
10062|_[ + ] Found:: UNIDENTIFIED
10063
10064 _[ - ]::--------------------------------------------------------------------------------------------------------------
10065|_[ + ] [ 71 / 100 ]-[07:13:12] [ - ]
10066|_[ + ] Target:: [ https://www.jobtrain.co.uk/thpt/register.aspx?jobid=188 ]
10067|_[ + ] Exploit::
10068|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10069|_[ + ] More details:: / - / , ISP:
10070|_[ + ] Found:: UNIDENTIFIED
10071
10072 _[ - ]::--------------------------------------------------------------------------------------------------------------
10073|_[ + ] [ 72 / 100 ]-[07:13:15] [ - ]
10074|_[ + ] Target:: [ https://www.jobtrain.co.uk/MerseysidePolice/special-constables/update.aspx ]
10075|_[ + ] Exploit::
10076|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10077|_[ + ] More details:: / - / , ISP:
10078|_[ + ] Found:: UNIDENTIFIED
10079
10080 _[ - ]::--------------------------------------------------------------------------------------------------------------
10081|_[ + ] [ 73 / 100 ]-[07:13:18] [ - ]
10082|_[ + ] Target:: [ https://www.jobtrain.co.uk/cygnetjobs/register.aspx?jobid=0 ]
10083|_[ + ] Exploit::
10084|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10085|_[ + ] More details:: / - / , ISP:
10086|_[ + ] Found:: UNIDENTIFIED
10087
10088 _[ - ]::--------------------------------------------------------------------------------------------------------------
10089|_[ + ] [ 74 / 100 ]-[07:13:21] [ - ]
10090|_[ + ] Target:: [ https://www.jobtrain.co.uk/plymouthcommunityhomes/update.aspx?jobid=166 ]
10091|_[ + ] Exploit::
10092|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10093|_[ + ] More details:: / - / , ISP:
10094|_[ + ] Found:: UNIDENTIFIED
10095
10096 _[ - ]::--------------------------------------------------------------------------------------------------------------
10097|_[ + ] [ 75 / 100 ]-[07:13:23] [ - ]
10098|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/special-constables/home/special-constable.html ]
10099|_[ + ] Exploit::
10100|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10101|_[ + ] More details:: / - / , ISP:
10102|_[ + ] Found:: UNIDENTIFIED
10103
10104 _[ - ]::--------------------------------------------------------------------------------------------------------------
10105|_[ + ] [ 76 / 100 ]-[07:13:26] [ - ]
10106|_[ + ] Target:: [ https://www.jobtrain.co.uk/iomgovjobs/ForgotPass.aspx?jobid=2863&backto=decide ]
10107|_[ + ] Exploit::
10108|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10109|_[ + ] More details:: / - / , ISP:
10110|_[ + ] Found:: UNIDENTIFIED
10111
10112 _[ - ]::--------------------------------------------------------------------------------------------------------------
10113|_[ + ] [ 77 / 100 ]-[07:13:29] [ - ]
10114|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=5009 ]
10115|_[ + ] Exploit::
10116|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10117|_[ + ] More details:: / - / , ISP:
10118|_[ + ] Found:: UNIDENTIFIED
10119
10120 _[ - ]::--------------------------------------------------------------------------------------------------------------
10121|_[ + ] [ 78 / 100 ]-[07:13:32] [ - ]
10122|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1828 ]
10123|_[ + ] Exploit::
10124|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10125|_[ + ] More details:: / - / , ISP:
10126|_[ + ] Found:: UNIDENTIFIED
10127
10128 _[ - ]::--------------------------------------------------------------------------------------------------------------
10129|_[ + ] [ 79 / 100 ]-[07:13:34] [ - ]
10130|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2073 ]
10131|_[ + ] Exploit::
10132|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10133|_[ + ] More details:: / - / , ISP:
10134|_[ + ] Found:: UNIDENTIFIED
10135
10136 _[ - ]::--------------------------------------------------------------------------------------------------------------
10137|_[ + ] [ 80 / 100 ]-[07:13:36] [ - ]
10138|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1746 ]
10139|_[ + ] Exploit::
10140|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10141|_[ + ] More details:: / - / , ISP:
10142|_[ + ] Found:: UNIDENTIFIED
10143
10144 _[ - ]::--------------------------------------------------------------------------------------------------------------
10145|_[ + ] [ 81 / 100 ]-[07:13:39] [ - ]
10146|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=158 ]
10147|_[ + ] Exploit::
10148|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10149|_[ + ] More details:: / - / , ISP:
10150|_[ + ] Found:: UNIDENTIFIED
10151
10152 _[ - ]::--------------------------------------------------------------------------------------------------------------
10153|_[ + ] [ 82 / 100 ]-[07:13:42] [ - ]
10154|_[ + ] Target:: [ https://www.jobtrain.co.uk/corpssecurity/displayjob.aspx?jobid=921 ]
10155|_[ + ] Exploit::
10156|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10157|_[ + ] More details:: / - / , ISP:
10158|_[ + ] Found:: UNIDENTIFIED
10159
10160 _[ - ]::--------------------------------------------------------------------------------------------------------------
10161|_[ + ] [ 83 / 100 ]-[07:13:46] [ - ]
10162|_[ + ] Target:: [ https://www.jobtrain.co.uk/graham/displayjob.aspx?jobid=281 ]
10163|_[ + ] Exploit::
10164|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10165|_[ + ] More details:: / - / , ISP:
10166|_[ + ] Found:: UNIDENTIFIED
10167
10168 _[ - ]::--------------------------------------------------------------------------------------------------------------
10169|_[ + ] [ 84 / 100 ]-[07:13:48] [ - ]
10170|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2491 ]
10171|_[ + ] Exploit::
10172|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10173|_[ + ] More details:: / - / , ISP:
10174|_[ + ] Found:: UNIDENTIFIED
10175
10176 _[ - ]::--------------------------------------------------------------------------------------------------------------
10177|_[ + ] [ 85 / 100 ]-[07:13:51] [ - ]
10178|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=3999 ]
10179|_[ + ] Exploit::
10180|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10181|_[ + ] More details:: / - / , ISP:
10182|_[ + ] Found:: UNIDENTIFIED
10183
10184 _[ - ]::--------------------------------------------------------------------------------------------------------------
10185|_[ + ] [ 86 / 100 ]-[07:13:54] [ - ]
10186|_[ + ] Target:: [ https://www.jobtrain.co.uk/citizensadvice/displayjob.aspx?jobid=205 ]
10187|_[ + ] Exploit::
10188|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10189|_[ + ] More details:: / - / , ISP:
10190|_[ + ] Found:: UNIDENTIFIED
10191
10192 _[ - ]::--------------------------------------------------------------------------------------------------------------
10193|_[ + ] [ 87 / 100 ]-[07:13:58] [ - ]
10194|_[ + ] Target:: [ https://www.jobtrain.co.uk/merseysidepolice/displayjob.aspx?jobid=5052 ]
10195|_[ + ] Exploit::
10196|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10197|_[ + ] More details:: / - / , ISP:
10198|_[ + ] Found:: UNIDENTIFIED
10199
10200 _[ - ]::--------------------------------------------------------------------------------------------------------------
10201|_[ + ] [ 88 / 100 ]-[07:14:00] [ - ]
10202|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3551 ]
10203|_[ + ] Exploit::
10204|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10205|_[ + ] More details:: / - / , ISP:
10206|_[ + ] Found:: UNIDENTIFIED
10207
10208 _[ - ]::--------------------------------------------------------------------------------------------------------------
10209|_[ + ] [ 89 / 100 ]-[07:14:04] [ - ]
10210|_[ + ] Target:: [ https://www.jobtrain.co.uk/carnival/displayjob.aspx?jobid=3609 ]
10211|_[ + ] Exploit::
10212|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10213|_[ + ] More details:: / - / , ISP:
10214|_[ + ] Found:: UNIDENTIFIED
10215
10216 _[ - ]::--------------------------------------------------------------------------------------------------------------
10217|_[ + ] [ 90 / 100 ]-[07:14:06] [ - ]
10218|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1991 ]
10219|_[ + ] Exploit::
10220|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10221|_[ + ] More details:: / - / , ISP:
10222|_[ + ] Found:: UNIDENTIFIED
10223
10224 _[ - ]::--------------------------------------------------------------------------------------------------------------
10225|_[ + ] [ 91 / 100 ]-[07:14:09] [ - ]
10226|_[ + ] Target:: [ https://www.jobtrain.co.uk/warburtons/displayjob.aspx?jobid=2168 ]
10227|_[ + ] Exploit::
10228|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10229|_[ + ] More details:: / - / , ISP:
10230|_[ + ] Found:: UNIDENTIFIED
10231
10232 _[ - ]::--------------------------------------------------------------------------------------------------------------
10233|_[ + ] [ 92 / 100 ]-[07:14:11] [ - ]
10234|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=1600 ]
10235|_[ + ] Exploit::
10236|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10237|_[ + ] More details:: / - / , ISP:
10238|_[ + ] Found:: UNIDENTIFIED
10239
10240 _[ - ]::--------------------------------------------------------------------------------------------------------------
10241|_[ + ] [ 93 / 100 ]-[07:14:14] [ - ]
10242|_[ + ] Target:: [ https://www.jobtrain.co.uk/bpp/displayjob.aspx?jobid=2689 ]
10243|_[ + ] Exploit::
10244|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10245|_[ + ] More details:: / - / , ISP:
10246|_[ + ] Found:: UNIDENTIFIED
10247
10248 _[ - ]::--------------------------------------------------------------------------------------------------------------
10249|_[ + ] [ 94 / 100 ]-[07:14:17] [ - ]
10250|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3862 ]
10251|_[ + ] Exploit::
10252|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10253|_[ + ] More details:: / - / , ISP:
10254|_[ + ] Found:: UNIDENTIFIED
10255
10256 _[ - ]::--------------------------------------------------------------------------------------------------------------
10257|_[ + ] [ 95 / 100 ]-[07:14:19] [ - ]
10258|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2544 ]
10259|_[ + ] Exploit::
10260|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10261|_[ + ] More details:: / - / , ISP:
10262|_[ + ] Found:: UNIDENTIFIED
10263
10264 _[ - ]::--------------------------------------------------------------------------------------------------------------
10265|_[ + ] [ 96 / 100 ]-[07:14:22] [ - ]
10266|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3730 ]
10267|_[ + ] Exploit::
10268|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10269|_[ + ] More details:: / - / , ISP:
10270|_[ + ] Found:: UNIDENTIFIED
10271
10272 _[ - ]::--------------------------------------------------------------------------------------------------------------
10273|_[ + ] [ 97 / 100 ]-[07:14:24] [ - ]
10274|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=3368 ]
10275|_[ + ] Exploit::
10276|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10277|_[ + ] More details:: / - / , ISP:
10278|_[ + ] Found:: UNIDENTIFIED
10279
10280 _[ - ]::--------------------------------------------------------------------------------------------------------------
10281|_[ + ] [ 98 / 100 ]-[07:14:27] [ - ]
10282|_[ + ] Target:: [ https://www.jobtrain.co.uk/nas/displayjob.aspx?jobid=2860 ]
10283|_[ + ] Exploit::
10284|_[ + ] Information Server:: HTTP/1.1 301 Moved Permanently, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10285|_[ + ] More details:: / - / , ISP:
10286|_[ + ] Found:: UNIDENTIFIED
10287
10288 _[ - ]::--------------------------------------------------------------------------------------------------------------
10289|_[ + ] [ 99 / 100 ]-[07:14:30] [ - ]
10290|_[ + ] Target:: [ https://www.jobtrain.co.uk/riverside/displayjob.aspx?jobid=10920 ]
10291|_[ + ] Exploit::
10292|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: X-Powered-By: Jobtrain, IP:212.54.140.10:443
10293|_[ + ] More details:: / - / , ISP:
10294|_[ + ] Found:: UNIDENTIFIED
10295
10296[ INFO ] [ Shutting down ]
10297[ INFO ] [ End of process INURLBR at [07-08-2019 07:14:30]
10298[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
10299[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/www.jobtrain.co.uk/output/inurlbr-www.jobtrain.co.uk ]
10300|_________________________________________________________________________________________
10301
10302\_________________________________________________________________________________________/
10303#######################################################################################################################################
10304Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:21 EDT
10305Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10306Host is up (0.23s latency).
10307Not shown: 470 filtered ports, 3 closed ports
10308Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
10309PORT STATE SERVICE
1031080/tcp open http
10311443/tcp open https
103128080/tcp open http-proxy
10313#######################################################################################################################################
10314Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:21 EDT
10315Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10316Host is up (0.18s latency).
10317Not shown: 2 filtered ports
10318PORT STATE SERVICE
1031953/udp open|filtered domain
1032067/udp open|filtered dhcps
1032168/udp open|filtered dhcpc
1032269/udp open|filtered tftp
1032388/udp open|filtered kerberos-sec
10324123/udp open|filtered ntp
10325139/udp open|filtered netbios-ssn
10326161/udp open|filtered snmp
10327162/udp open|filtered snmptrap
10328389/udp open|filtered ldap
10329520/udp open|filtered route
103302049/udp open|filtered nfs
10331#######################################################################################################################################
10332Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:22 EDT
10333Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10334Host is up.
10335
10336PORT STATE SERVICE VERSION
1033767/udp open|filtered dhcps
10338|_dhcp-discover: ERROR: Script execution failed (use -d to debug)
10339Too many fingerprints match this host to give specific OS details
10340
10341TRACEROUTE (using proto 1/icmp)
10342HOP RTT ADDRESS
103431 179.16 ms 10.247.200.1
103442 180.28 ms 213.184.122.97
103453 210.70 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
103464 179.57 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
103475 245.77 ms bzq-179-124-30.cust.bezeqint.net (212.179.124.30)
103486 245.35 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
103497 252.56 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
103508 242.75 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
103519 246.55 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
1035210 243.20 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1035311 244.43 ms s13-49.stratogen.net (109.233.49.13)
1035412 ... 30
10355#######################################################################################################################################
10356Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:23 EDT
10357Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10358Host is up.
10359
10360PORT STATE SERVICE VERSION
1036168/udp open|filtered dhcpc
10362Too many fingerprints match this host to give specific OS details
10363
10364TRACEROUTE (using proto 1/icmp)
10365HOP RTT ADDRESS
103661 184.38 ms 10.247.200.1
103672 186.66 ms 213.184.122.97
103683 184.60 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
103694 186.65 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
103705 251.88 ms bzq-179-124-30.cust.bezeqint.net (212.179.124.30)
103716 250.82 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
103727 250.01 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
103738 241.84 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
103749 244.67 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
1037510 242.06 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1037611 244.54 ms s13-49.stratogen.net (109.233.49.13)
1037712 ... 30
10378#######################################################################################################################################
10379Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:25 EDT
10380Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10381Host is up.
10382
10383PORT STATE SERVICE VERSION
1038469/udp open|filtered tftp
10385Too many fingerprints match this host to give specific OS details
10386
10387TRACEROUTE (using proto 1/icmp)
10388HOP RTT ADDRESS
103891 183.68 ms 10.247.200.1
103902 185.05 ms 213.184.122.97
103913 184.10 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
103924 184.15 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
103935 250.75 ms bzq-179-124-30.cust.bezeqint.net (212.179.124.30)
103946 250.16 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
103957 258.35 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
103968 241.16 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
103979 244.15 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
1039810 241.66 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1039911 246.21 ms s13-49.stratogen.net (109.233.49.13)
1040012 ... 30
10401#######################################################################################################################################
10402Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:28 EDT
10403Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
10404Host is up (0.24s latency).
10405
10406PORT STATE SERVICE VERSION
1040780/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
10408|_http-server-header: <empty>
10409|_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)
10410| vulscan: VulDB - https://vuldb.com:
10411| [131683] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Win32k memory corruption
10412| [131642] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Active Directory privilege escalation
10413| [127822] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 Kernel information disclosure
10414| [125103] Microsoft Windows Server 2008 SP2 Graphics Component information disclosure
10415| [123853] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel Memory information disclosure
10416| [122858] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 LNK memory corruption
10417| [122833] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI+ memory corruption
10418| [121109] Microsoft Wireless Display Adapter V2 2.0.8350/2.0.8365/2.0.8372 privilege escalation
10419| [120449] Microsoft Forefront Unified Access Gateway 2000 InitParams.aspx Parameter Server-Side Request Forgery
10420| [119469] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel privilege escalation
10421| [116015] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
10422| [114563] Microsoft Office 2007 SP3/2010 SP2/2013/2013 RT SP1 memory corruption
10423| [114528] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI privilege escalation
10424| [114524] Microsoft ASP.NET Core 2.0 denial of service
10425| [114523] Microsoft ASP.NET Core 2.0 Kestrel Web Application privilege escalation
10426| [113257] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
10427| [113256] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
10428| [113255] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
10429| [113247] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
10430| [113246] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
10431| [113245] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 EOT Font Engine information disclosure
10432| [113244] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
10433| [113235] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2016 privilege escalation
10434| [113234] Microsoft Office 2007 SP2/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10435| [113216] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10436| [112285] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10437| [112284] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10438| [112283] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10439| [112282] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10440| [111578] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10441| [111577] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10442| [111576] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10443| [111575] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10444| [111574] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
10445| [111573] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
10446| [111572] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
10447| [111570] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
10448| [111568] Microsoft Excel 2007/2010/2013/2016 memory corruption
10449| [111566] Microsoft Word 2007/2010/2013/2016 memory corruption
10450| [111565] Microsoft Word 2007/2010/2013 Email Message memory corruption
10451| [111563] Microsoft Outlook 2007/2010/2013/2016 Email Message privilege escalation
10452| [111347] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Color Management Icm32.dll information disclosure
10453| [109388] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 memory corruption
10454| [109387] Microsoft ASP.NET Core 2.0 privilege escalation
10455| [109386] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10456| [109385] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature Macro privilege escalation
10457| [109381] Microsoft Office/Word 2007 SP3/2010 SP2 memory corruption
10458| [107703] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10459| [106530] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10460| [106528] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10461| [106515] Microsoft Publisher 2007 SP3/2010 SP2 memory corruption
10462| [106497] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Uniscribe memory corruption
10463| [106476] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10464| [106475] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10465| [105051] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Font Library privilege escalation
10466| [105032] Microsoft Internet Explorer 9/10 on Server 2008/Server 2012 memory corruption
10467| [102513] Microsoft Windows XP SP3/Server 2003 SP2 OLE olecnv32.dll privilege escalation
10468| [102512] Microsoft Windows XP SP3/Server 2003 SP2 rpc privilege escalation
10469| [102511] Microsoft Windows XP SP3/Server 2003 SP2 RDP EsteemAudit privilege escalation
10470| [102447] Microsoft PowerPoint/SharePoint Server 2007 SP3 privilege escalation
10471| [102444] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
10472| [102442] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
10473| [102441] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10474| [102401] Microsoft Windows 7 SP1/Server 2008 R2 SP1 GDI USP10!NextCharInLiga Uniscribe Font information disclosure
10475| [101491] Microsoft Windows up to XP SP3/Server 2003 SP2 Remote Desktop Protocol gpkcsp.dll memory corruption
10476| [101017] Microsoft Office 2007 SP3/2010 SP2/2016 memory corruption
10477| [101012] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2016 memory corruption
10478| [101011] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 ActiveX Object Memory memory corruption
10479| [100854] Microsoft Windows Server 2003 SP2 RRAS ERRATICGOPHER memory corruption
10480| [99904] Microsoft Windows XP SP3/Server 2003 SP2 SmartCard Authentication RDP Packet EsteemAudit privilege escalation
10481| [99698] Microsoft OneNote 2007 SP3/2010 SP2 DLL Loader privilege escalation
10482| [99684] Microsoft Excel 2007 SP3/2010 SP2 Memory information disclosure
10483| [99654] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
10484| [99653] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
10485| [99533] Microsoft Office 2007/2010/2013/2016 RTF Document Necurs Dridex memory corruption
10486| [98561] Microsoft IIS 6.0 on Windows Server 2003 WebDAV ScStoragePathFromUrl Long Header memory corruption
10487| [98092] Microsoft SharePoint Server 2007 SP3 memory corruption
10488| [98088] Microsoft SharePoint Server 2007 SP3 memory corruption
10489| [98087] Microsoft Office 2007 SP3/2010 SP2 memory corruption
10490| [98086] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10491| [98085] Microsoft Excel 2007 SP3 memory corruption
10492| [98084] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
10493| [98083] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
10494| [98078] Microsoft Word/Excel 2007 SP3 memory corruption
10495| [98072] Microsoft Office 2007 SP3/2010 SP2/Word Viewer Graphics Component privilege escalation
10496| [98071] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
10497| [98070] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
10498| [94450] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
10499| [94449] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
10500| [94448] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
10501| [94445] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 information disclosure
10502| [94441] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
10503| [94440] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10504| [94439] Microsoft Office 2007 SP3/2011 privilege escalation
10505| [94438] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
10506| [93542] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
10507| [93541] Microsoft Office 2007 SP3 denial of service
10508| [93539] Microsoft Office 2007/2010 SP2/2011 memory corruption
10509| [93538] Microsoft Office 2007/2010 SP2/2011/2013 SP1 memory corruption
10510| [93537] Microsoft Office 2007/2010 SP2/2011 memory corruption
10511| [93396] Microsoft Office 2007/2010/2011 memory corruption
10512| [93395] Microsoft Office 2007/2010/2011 memory corruption
10513| [93394] Microsoft Office 2007/2010 memory corruption
10514| [92596] Microsoft Windows Vista SP2/7 SP1/Server 2008 SP2/Server 2008 R2 Internet Messaging API File information disclosure
10515| [91554] Microsoft Exchange 2007/2010/2013/2016 Email information disclosure
10516| [91553] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10517| [91552] Microsoft Office 2007/2010/2013/2013 RT/2016 spoofing
10518| [91551] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10519| [91549] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10520| [91548] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10521| [91546] Microsoft Office 2007/2010/2013/2013 RT memory corruption
10522| [91545] Microsoft Office 2007/2010 memory corruption
10523| [91544] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10524| [91542] Microsoft Office 2007/2010/2013/2013 RT/2016 information disclosure
10525| [90707] Microsoft OneNote 2007/2010/2013/2013 RT/2016 information disclosure
10526| [90706] Microsoft Office 2007/2010/2013/2013 RT Graphics memory corruption
10527| [90705] Microsoft Office 2007/2010/2011 memory corruption
10528| [90703] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
10529| [89039] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
10530| [89034] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
10531| [87960] Microsoft Windows Server 2008 R2/Server 2012/Server 2012 R2 Active Directory denial of service
10532| [87955] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
10533| [87954] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
10534| [87953] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
10535| [87939] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL memory corruption
10536| [87938] Microsoft Office 2007 SP3/2010 SP2/2011 information disclosure
10537| [87937] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
10538| [87935] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
10539| [87934] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
10540| [87933] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
10541| [87147] Microsoft Office 2007/2010 memory corruption
10542| [87145] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
10543| [87144] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
10544| [82228] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
10545| [82225] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
10546| [82224] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
10547| [81273] Microsoft Office 2007/2010/2013/2016 memory corruption
10548| [81272] Microsoft Office 2007/2010/2013 memory corruption
10549| [81265] Microsoft Windows Vista SP2/Server 2008 Library Loader memory corruption
10550| [80872] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10551| [80871] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10552| [80869] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
10553| [79506] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Library Loader memory corruption
10554| [79505] Microsoft Office 2007 memory corruption
10555| [79504] Microsoft Office 2007/2010/2013/2016 memory corruption
10556| [79503] Microsoft Office 2007/2010/2013 memory corruption
10557| [79502] Microsoft Office 2007/2010/2011 memory corruption
10558| [79501] Microsoft Office 2007/2010 memory corruption
10559| [79499] Microsoft Windows 7/Server 2008 R2 Uniscribe memory corruption
10560| [79493] Microsoft Windows Vista/Server 2008 Graphics memory corruption
10561| [79190] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
10562| [79189] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
10563| [79187] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 Sandbox privilege escalation
10564| [79167] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Journal memory corruption
10565| [78372] Microsoft Visio 2007 SP3/2010 SP2 UML Data memory corruption
10566| [78371] Microsoft SharePoint Server 2007 SP3/2010 SP2 InfoPath Forms Services XXE information disclosure
10567| [77646] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 EPS Image memory corruption
10568| [77629] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
10569| [77627] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
10570| [77626] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
10571| [77617] Microsoft Office 2007 SP3/2010 SP2 OpenType Font memory corruption
10572| [77252] Microsoft Office 2007 SP3/2010 SP2 Office Graphics Library Font memory corruption
10573| [77038] Microsoft Windows Server 2008 SP2 UDDI Services cross site scripting
10574| [76497] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1 Office Document memory corruption
10575| [76491] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
10576| [76467] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
10577| [76466] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
10578| [76464] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
10579| [76463] Microsoft Excel 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
10580| [76449] Microsoft Windows 8/8.1/Server 2008/Server 2012/Server 2012 R2 Hyper-V memory corruption
10581| [76440] Microsoft SQL Server 2008/2008 R2/2012/2014 Virtual Function Uninitialized Memory memory corruption
10582| [76439] Microsoft SQL Server 2008/2008 R2/2012/2014 Uninitialized Memory memory corruption
10583| [76438] Microsoft SQL Server 2008/2008 R2/2012/2014 Pointer Casting privilege escalation
10584| [75783] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services cross site scripting
10585| [75338] Microsoft SharePoint 2007/2010/2013 Content privilege escalation
10586| [75337] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
10587| [75336] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
10588| [74845] Microsoft Office 2007/2010/2013 Document Use-After-Free memory corruption
10589| [74844] Microsoft Office 2007/2010 Document Use-After-Free memory corruption
10590| [74837] Microsoft Office 2007/2010/2011/2013 RTF Document Use-After-Free privilege escalation
10591| [73979] Microsoft Exchange Server 2003 SP1/2003 CU7 Meeting privilege escalation
10592| [73978] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
10593| [73977] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
10594| [73976] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
10595| [73975] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
10596| [73964] Microsoft SharePoint 2007/2010/2013 cross site scripting
10597| [69158] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
10598| [69157] Microsoft Office 2007/2010/2013 OneTableDocumentStream memory corruption
10599| [69155] Microsoft Excel 2007/2010/2013/- Object memory corruption
10600| [68416] Microsoft Exchange 2007/2010/2013 Outlook Web Access Token spoofing
10601| [68409] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
10602| [68408] Microsoft Excel 2007/2010/2013 memory corruption
10603| [68407] Microsoft Excel 2007/2010 memory corruption
10604| [68405] Microsoft Word 2007/2010 Index Use-After-Free memory corruption
10605| [68195] Microsoft Windows Vista/7/Server 2003/Server 2008 Input Method Editor Sandbox privilege escalation
10606| [68189] Microsoft Windows Server 2003 SP2 TCP/IP Stack Stack-Based memory corruption
10607| [68188] Microsoft Word 2007 File memory corruption
10608| [68187] Microsoft Word 2007 File memory corruption
10609| [68186] Microsoft Word 2007 File memory corruption
10610| [67829] Microsoft Office 2007/2010/2011 Object memory corruption
10611| [67825] Microsoft .NET Framework 2.0/3.5/3.5.1 ASLR privilege escalation
10612| [71337] Microsoft Office 2000/2004/XP memory corruption
10613| [67355] Microsoft OneNote 2007 File Processing privilege escalation
10614| [67354] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 SQL Master Data Services cross site scripting
10615| [67353] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 T-SQL Query Stack-Based memory corruption
10616| [67018] Microsoft Windows Server 2008/Server 2012/Server 2012 R2 Service Bus AMQP Message denial of service
10617| [13545] Microsoft Word 2007 Embedded Font memory corruption
10618| [13397] Microsoft Windows XP/2000/Server 2003 DHCP Response DHCP ACK spoofing
10619| [13462] Microsoft Visual Studio 2002/2003/2005/2010 Debug Interface msdia.dll PDB File memory corruption
10620| [13229] Microsoft Office 2007/2010/2013 Common Control Library MSCOMCTL.OCX privilege escalation
10621| [13227] Microsoft Office 2007/2010/2013 Chinese Grammar Checker Library privilege escalation
10622| [13226] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
10623| [13225] Microsoft SharePoint Server 2007/2010/2013 cross site scripting
10624| [13224] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
10625| [12859] Microsoft Word 2003 Office Document Stack-Based memory corruption
10626| [12852] Microsoft Publisher 2003/2007 Publisher File pubconv.dll memory corruption
10627| [12845] Microsoft Word 2003 Office File Stack-Based memory corruption
10628| [12844] Microsoft Word 2007/2010 Office File memory corruption
10629| [12843] Microsoft Office 2007/2010/2011/2013 XML Parser Nested Entities Memory Consumption denial of service
10630| [12687] Microsoft Word/Office/Outlook 2003/2007/2010/2013 RTF Document memory corruption
10631| [12530] Microsoft Windows XP/Vista/Server 2003/Server 2008/Server 2012 Security Account Manager Lockout privilege escalation
10632| [12266] Microsoft .NET Framework 2.0 SP2/3.5.1 ASLR Bypass privilege escalation
10633| [12070] Apple Pages 2.0/2.0.1/2.0.2/5.0/5.0.1 on Mac Microsoft Word Document memory corruption
10634| [11950] Microsoft Office Compability Pack/Word 2007 SP3 File memory corruption
10635| [11949] Microsoft Word Viewer/Office Compatibility Pack/Word 2003 SP3/2007 SP3 File memory corruption
10636| [11448] Microsoft Office 2007/2010 Address Space Layout Randomization privilege escalation
10637| [11151] Microsoft Outlook 2007/2010/2013/- S/MIME Certificate Metadata Expansion memory corruption
10638| [11149] Microsoft Office 2003/2007/2010/2013/- WordPerfect Document epsimp32.flt memory corruption
10639| [11148] Microsoft Office 2003/2007 WordPerfect Document epsimp32.flt memory corruption
10640| [11146] Microsoft Office 2003/2007 epsimp32.flt memory corruption
10641| [11230] Microsoft Word 2003 DOC Document Embedded Image denial of service
10642| [11081] Microsoft Windows Vista/Server 2008 TIFF Image memory corruption
10643| [10648] Microsoft Word 2007 Word File memory corruption
10644| [10647] Microsoft Word 2003 Word File memory corruption
10645| [10643] Microsoft SharePoint Server 2007/2010/2013 Input Sanitizer memory corruption
10646| [10642] Microsoft SharePoint Server 2007/2010 Content Display in Frames privilege escalation
10647| [10247] Microsoft SharePoint Server 2007/2010/2013 Online Cloud cross site scripting
10648| [10245] Microsoft Office 2003/2007/2010 Word File memory corruption
10649| [10244] Microsoft Office 2003 SP3 Word File memory corruption
10650| [10243] Microsoft Office 2003/2007 Word File memory corruption
10651| [10242] Microsoft Office 2007 Word File memory corruption
10652| [10241] Microsoft Office 2007 Word File memory corruption
10653| [10240] Microsoft Office 2003/2007/2010 Word File memory corruption
10654| [10239] Microsoft Office 2003/2007 Word File memory corruption
10655| [10238] Microsoft Excel 2003/2007 XML External Entity Data information disclosure
10656| [10237] Microsoft Excel 2003/2007/2010 XML External Entity Data information disclosure
10657| [10236] Microsoft Word/Office 2003/2007 XML External Entity Data information disclosure
10658| [10234] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
10659| [10232] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
10660| [10231] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
10661| [10230] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
10662| [10229] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
10663| [10228] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
10664| [10227] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
10665| [10192] Microsoft Windows XP SP3/Vista/7/2000/Server 2003 SP2 Windows Theme File privilege escalation
10666| [10191] Microsoft Windows XP/Server 2003 OLE Object privilege escalation
10667| [10190] Microsoft Windows Vista/7/8/Server 2008 Active Directory denial of service
10668| [10189] Microsoft Outlook 2007/2010 S/MIME privilege escalation
10669| [9941] Microsoft Windows XP/Server 2003 Unicode Scripts Processor USP10.DLL Uniscribe Font memory corruption
10670| [9929] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services Unspecified Account information disclosure
10671| [9715] Microsoft PowerPoint 2007 DirectShow Runtime quartz.dll GetMaxSampleSize denial of service
10672| [9397] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Array privilege escalation
10673| [9394] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 on 64-bit Array memory corruption
10674| [9393] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Permission privilege escalation
10675| [8738] Microsoft Visio 2003 SP3/2007 SP3/2010 SP1 XML Parser File information disclosure
10676| [8737] Microsoft Word 2003 SP3 Shape Data Parser File memory corruption
10677| [8736] Microsoft Publisher 2003 SP3 PUB File memory corruption
10678| [8735] Microsoft Publisher 2003 SP3/2007 SP3/2010 SP1 PUB File memory corruption
10679| [8734] Microsoft Publisher 2003 SP3 PUB File memory corruption
10680| [8733] Microsoft Publisher 2003 SP3 PUB File memory corruption
10681| [8732] Microsoft Publisher 2003 SP3 PUB File memory corruption
10682| [8731] Microsoft Publisher 2003 SP3 PUB File memory corruption
10683| [8730] Microsoft Publisher 2003 SP3 PUB File memory corruption
10684| [8729] Microsoft Publisher 2003 SP3 PUB File memory corruption
10685| [8728] Microsoft Publisher 2003 SP3 PUB File memory corruption
10686| [8727] Microsoft Publisher 2003 SP3 PUB File memory corruption
10687| [8726] Microsoft Publisher 2003 PUB File Eingabe memory corruption
10688| [8723] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 XML File spoofing
10689| [7643] Microsoft Windows Server 2008 R2/Server 2012 NFS Server NULL Pointer Dereference denial of service
10690| [7642] Microsoft Exchange 2007/2010 Outlook Web Access vspdx.dll) privilege escalation
10691| [7641] Microsoft Windows XP/Vista/Server 2003/Server 2008 DirectShow Quartz.dll memory corruption
10692| [8589] Microsoft System Center Operations Manager 2007 SP1/2007 R2 ViewTypeManager.aspx cross site scripting
10693| [7252] Microsoft System Center Operations Manager 2007 ExecuteTask.aspx cross site scripting
10694| [7251] Microsoft System Center Operations Manager 2007 cross site scripting
10695| [7248] Microsoft Windows 7/Server 2008 R2 Print Spooler privilege escalation
10696| [7121] Microsoft Exchange 2007/2010 RSS Feed denial of service
10697| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
10698| [62914] Microsoft Office 2003 SP3/2007 SP3/2008/2010 SP1/2011 Spreadsheet Use-After-Free memory corruption
10699| [7058] Microsoft Windows 7/Server 2008 R2 DHCPv6 Message denial of service
10700| [6935] Microsoft Office Excel 2003/2007/2010 Input Sanitizer File Stack-based memory corruption
10701| [6934] Microsoft Office Excel 2003/2007/2010 Input Sanitizer memory corruption
10702| [6933] Microsoft Office Excel 2003/2007/2010 SerAuxErrBar File memory corruption
10703| [6929] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Web Proxy Setting Auto-Discovery memory corruption
10704| [6927] Microsoft .NET Framework 2.0 SP2/3.5.1 Trusted Code Function information disclosure
10705| [6918] Microsoft Excel 2007 SP2 Input Sanitizer File memory corruption
10706| [6830] Microsoft Word 2007/2010 File memory corruption
10707| [6819] Microsoft Excel 2007 File memory corruption
10708| [6627] Microsoft Windows 7/Server 2008 R2 Kerberos denial of service
10709| [6626] Microsoft SharePoint/Lync/Infopath 2007/2010 HTML Sanitization cross site scripting
10710| [6622] Microsoft Word 2003/2007/2010/- RTF Document memory corruption
10711| [6621] Microsoft Word 2007 PAPX memory corruption
10712| [62239] Microsoft Systems Management Server 2003 Configuration Manager Reflected cross site scripting
10713| [5945] Microsoft Office 2007/2010 Computer Graphics Metafile memory corruption
10714| [5939] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Print Spooler Service memory corruption
10715| [5938] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Remote Administration Protocol netapi32.dll RAP Request denial of service
10716| [5933] Microsoft SQL Server 2000/2005/2008/2008 R2 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
10717| [5932] Microsoft Office 2003/2007/2010 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
10718| [5654] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 information disclosure
10719| [5653] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
10720| [5652] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
10721| [5650] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
10722| [5649] Microsoft Office 2003/2007/2010 libraries memory corruption
10723| [5645] Microsoft SharePoint 2007/2010/3.0 Reflected cross site scripting
10724| [5643] Microsoft SharePoint 2007/2010 information disclosure
10725| [5642] Microsoft SharePoint 2007 cross site request forgery
10726| [5553] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Font atmfd.dll denial of service
10727| [5524] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
10728| [5518] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 memory corruption
10729| [5362] Microsoft Office 2003/2007 GDI+ memory corruption
10730| [5291] Microsoft Visual Studio 2008 Incremental Linker link.exe ConvertRgImgSymToRgImgSymEx memory corruption
10731| [5268] Microsoft Office 2008 on Mac RTF Pfragment File memory corruption
10732| [5080] Microsoft SQL Server 2005/2008/2008R2 CREATE DATABASE sql injection
10733| [5050] Microsoft Office 2007 WPS Converter Heap-based memory corruption
10734| [5049] Microsoft SQL Server 2000/2005/2008 MSCOMCTL.OCX privilege escalation
10735| [5048] Microsoft Office 2003/2007/2010 MSCOMCTL.OCX privilege escalation
10736| [5046] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Windows Authenticode Signature Verification WinVerifyTrust Signature privilege escalation
10737| [4803] Microsoft Windows Server 2003/Server 2008 DNS Server Domain Resource Record Query Parser denial of service
10738| [4802] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Protocol denial of service
10739| [4798] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Service memory corruption
10740| [60205] Microsoft .NET Framework 2.0 SP2/3.5.1 Heap-based memory corruption
10741| [4642] Microsoft .NET Framework 2.0 SP2/3.5.1/4 XAML Browser Application memory corruption
10742| [60065] Microsoft Windows 2000 mod_sql unknown vulnerability
10743| [4535] Microsoft Windows XP/Server 2003 Object Packager packager.exe privilege escalation
10744| [4534] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Line21 DirectShow Filter Quartz.dll/Qdvd.dll Media File memory corruption
10745| [4533] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Multimedia Library winmm.dll MIDI File memory corruption
10746| [4507] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 Forms Authentication Redirect
10747| [59666] Microsoft Publisher 2003/2007 "Publisher memory corruption
10748| [4482] Microsoft Word 2007/2010/2011 Document Parser memory corruption
10749| [4480] Microsoft Excel 2003 memory corruption
10750| [4478] Microsoft Windows XP/Server 2003 OLE Objects Memory Management memory corruption
10751| [4477] Microsoft PowerPoint 2007 OfficeArt Use-After-Free memory corruption
10752| [4474] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Active Directory Query memory corruption
10753| [4473] Microsoft Powerpoint 2007/2010 DLL-Loader memory corruption
10754| [4471] Microsoft Office 2003/2007 Publisher Out-of-Bounds memory corruption
10755| [4470] Microsoft Office 2003 SP3 memory corruption
10756| [4453] Microsoft Excel 2003 Record Parser memory corruption
10757| [4446] Microsoft Office 2008/2007 OfficeArt Record Parser memory corruption
10758| [4445] Microsoft Office 2007/2010/2011 Word Document Parser memory corruption
10759| [4438] Microsoft Windows Vista/7/Server 2008 TCP/IP Reference Counter denial of service
10760| [5358] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 TrueType Font Handling memory corruption
10761| [59005] Microsoft Host Integration Server 2004 denial of service
10762| [58492] Microsoft SharePoint Server 2007 Spreadsheet memory corruption
10763| [58491] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
10764| [58490] Microsoft Office Compatibility Pack 2007 Spreadsheet memory corruption
10765| [58489] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
10766| [58488] Microsoft Office 2007/2010 memory corruption
10767| [4412] Microsoft Office 2003/2007 Library Loader Designfehler
10768| [4411] Microsoft Excel 2003 memory corruption
10769| [4409] Microsoft Windows Server 2003/Server 2008 WINS unknown vulnerability
10770| [58240] Microsoft Visio 2003/2007 memory corruption
10771| [58237] Microsoft Visio 2003/2007/2010 memory corruption
10772| [4396] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
10773| [4393] Microsoft Windows Server 2008 DNS Service memory corruption
10774| [4391] Microsoft .NET Framework 2.0 SP2/3.5.1/4 Socket Restriction privilege escalation
10775| [4390] Microsoft Windows Server 2008 Remote Desktop Web Access cross site scripting
10776| [4388] Microsoft Windows Vista/7/Server 2008 File Metadata Parser denial of service
10777| [57691] Microsoft SQL Server 2008 Web Service information disclosure
10778| [57690] Microsoft Excel 2002/2003 Spreadsheet memory corruption
10779| [57689] Microsoft Excel 2002 Spreadsheet memory corruption
10780| [57688] Microsoft Excel 2002 Spreadsheet memory corruption
10781| [57687] Microsoft Excel 2002/2003/2007 Spreadsheet memory corruption
10782| [57686] Microsoft Excel 2002 Spreadsheet memory corruption
10783| [57685] Microsoft Excel 2002/2003/2007 Array Access memory corruption
10784| [57684] Microsoft Excel 2002/2003/2007/2010 Spreadsheet memory corruption
10785| [4369] Microsoft Excel 2002/2003/2007 memory corruption
10786| [4367] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
10787| [4362] Microsoft Windows Vista/7/Server 2008 denial of service
10788| [57420] Microsoft PowerPoint 2002/2003 memory corruption
10789| [4349] Microsoft Office 2004/2008/2007 Presentation File Parser memory corruption
10790| [4348] Microsoft Powerpoint 2002/2003/2007 memory corruption
10791| [57077] Microsoft Excel 2002 Uninitialized Memory memory corruption
10792| [57078] Microsoft Office 2003/2007/Xp docx unknown vulnerability
10793| [57079] Microsoft PowerPoint 2002/2003/2007/2010 memory corruption
10794| [57076] Microsoft Excel 2002/2003 memory corruption
10795| [57075] Microsoft Excel 2002/2003 memory corruption
10796| [57074] Microsoft Excel 2002 memory corruption
10797| [57073] Microsoft Excel 2002/2003/2007/2010 memory corruption
10798| [4334] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 JIT Compiler memory corruption
10799| [4301] Microsoft Windows Server 2003 SMB Browser Heap-based denial of service
10800| [56475] Microsoft Office 2004/2008 memory corruption
10801| [56414] Microsoft Visio 2002/2003/2007 ELEMENTS.DLL memory corruption
10802| [56413] Microsoft Visio 2002/2003/2007 Exception ORMELEMS.DLL memory corruption
10803| [4298] Microsoft Windows 7/Server 2008 JScript/VBScript Engine information disclosure
10804| [4297] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Compact Font Format Driver privilege escalation
10805| [4296] Microsoft Windows XP/Server 2003 LSASS Authentication Request unknown vulnerability
10806| [4295] Microsoft Windows 7/Server 2008 Kerberos weak authentication
10807| [4294] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys unknown vulnerability
10808| [4293] Microsoft Windows XP/Server 2003 Kerberos CRC32 Checksum privilege escalation
10809| [4292] Microsoft Windows XP/Server 2003 CSRSS Logoff privilege escalation
10810| [4289] Microsoft Excel 2007 Shape Data Parser memory corruption
10811| [4286] Microsoft Powerpoint 2007 OfficeArt Container Parser memory corruption
10812| [4279] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 MHTML cross site scripting
10813| [56176] Microsoft Windows XP/7/Server 2003 fxscover.exe CDrawPoly::Serialize memory corruption
10814| [55772] Microsoft Publisher 2002 pubconv.dll memory corruption
10815| [55771] Microsoft Publisher 2002/2003/2010 memory corruption
10816| [55765] Microsoft Office 2003/Xp Integer memory corruption
10817| [55764] Microsoft Office 2003/Xp memory corruption
10818| [55750] Microsoft Publisher 2002/2003 pubconv.dll memory corruption
10819| [55749] Microsoft Publisher 2002/2003/2007/2010 pubconv.dll memory corruption
10820| [55748] Microsoft Publisher 2002/2003/2007 pubconv.dll memory corruption
10821| [4230] Microsoft Exchange 2007 on 64-bit RPC store.exe MAPI Request denial of service
10822| [4229] Microsoft SharePoint 2007 Document Conversion Launcher Service Eingabeung\xC3\xBCltigkeit
10823| [4228] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
10824| [4224] Microsoft Windows Vista/7/Server 2008 Consent User Interface privilege escalation
10825| [4231] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys GreEnableEUDC denial of service
10826| [55420] Microsoft Office 2007/2010 memory corruption
10827| [55419] Microsoft Office 2004/2008/2011/Xp memory corruption
10828| [55412] Microsoft PowerPoint Viewer 2007 memory corruption
10829| [55411] Microsoft PowerPoint 2002/2003 memory corruption
10830| [4204] Microsoft Windows Server 2008 Color Control Panel Eingabeung\xC3\xBCltigkeit
10831| [54995] Microsoft Office 2004/2008 memory corruption
10832| [54994] Microsoft Office 2004/2008 Out-of-Bounds memory corruption
10833| [54993] Microsoft Office Compatibility Pack 2007 memory corruption
10834| [54992] Microsoft Excel 2002 memory corruption
10835| [54991] Microsoft Office 2004 Future memory corruption
10836| [54990] Microsoft Office 2004 memory corruption
10837| [54989] Microsoft Office 2004/2008 memory corruption
10838| [54988] Microsoft Excel 2002 memory corruption
10839| [54987] Microsoft Excel 2002 memory corruption
10840| [54986] Microsoft Excel 2002/2003 memory corruption
10841| [54985] Microsoft Office Compatibility Pack 2003/2004/2007/2008 memory corruption
10842| [54984] Microsoft Office 2004/2008 memory corruption
10843| [54983] Microsoft Excel 2002 Integer memory corruption
10844| [54980] Microsoft Word 2002/2003 memory corruption
10845| [54979] Microsoft Word 2002 memory corruption
10846| [54978] Microsoft Word 2002 memory corruption
10847| [54977] Microsoft Word 2002 Heap-based memory corruption
10848| [54976] Microsoft Word 2002 memory corruption
10849| [54975] Microsoft Word 2002 memory corruption
10850| [54974] Microsoft Word 2002 memory corruption
10851| [54973] Microsoft Word 2002 memory corruption
10852| [54972] Microsoft Word 2002 memory corruption
10853| [54971] Microsoft Word 2002 memory corruption
10854| [4197] Microsoft SharePoint 2007/3.0 cross site scripting
10855| [4196] Microsoft Word 2002/2003/2007/2010 Stack-based memory corruption
10856| [4194] Microsoft Windows Vista/7/Server 2008 SChannel Client Certificate Request denial of service
10857| [54774] Microsoft Word 2003 word_crash_11.8326.8324_poc.doc denial of service
10858| [54757] Microsoft SharePoint Server 2007 HTML Sanitization SafeHTML cross site scripting
10859| [4186] Microsoft Outlook 2002/2003/2007 Content Parser Heap-based memory corruption
10860| [54584] Microsoft Visual C++ 2005 AtlTraceTool8.exe unknown vulnerability
10861| [54554] Microsoft Groove 2007 mso.dll memory corruption
10862| [4187] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack Ipv4SetEchoRequestCreate() denial of service
10863| [54322] Microsoft Word 2002/2003 memory corruption
10864| [54321] Microsoft Office Compatibility Pack 2007 memory corruption
10865| [54320] Microsoft Office Compatibility Pack 2007 memory corruption
10866| [54319] Microsoft Office Compatibility Pack 2007 memory corruption
10867| [54318] Microsoft .NET Framework 2.0 SP1/2.0 SP2/3.5/3.5 SP1/3.5.1 Interfaces memory corruption
10868| [4165] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
10869| [4162] Microsoft Windows Vista/7/Server 2008 Kernel memory corruption
10870| [4159] Microsoft Excel 2002/2003 SXDB PivotTable Cache Data Record memory corruption
10871| [4149] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Shell Shortcut Parser memory corruption
10872| [54083] Microsoft Access 2003 ActiveX Control ACCWIZ.dll memory corruption
10873| [4146] Microsoft Outlook 2002/2003/2007 SMB Attachment PR_ATTACH_METHOD memory corruption
10874| [4145] Microsoft Access 2003/2007 ActiveX ACCWIZ.dll memory corruption
10875| [54617] Microsoft Outlook Web Access up to 2007 cross site request forgery
10876| [4151] Microsoft Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel memory corruption
10877| [53591] Microsoft Windows Server 2003 GetServerName cross site scripting
10878| [53505] Microsoft Excel 2002/2007 memory corruption
10879| [53501] Microsoft Excel 2002 memory corruption
10880| [53500] Microsoft Excel 2002 memory corruption
10881| [53499] Microsoft Excel 2002 memory corruption
10882| [53495] Microsoft Excel 2002/2003/2007 memory corruption
10883| [53494] Microsoft Excel 2002 Stack-based memory corruption
10884| [53504] Microsoft Excel 2002 memory corruption
10885| [53503] Microsoft Excel 2002 Stack-Based memory corruption
10886| [53502] Microsoft Excel 2002 Heap-based memory corruption
10887| [53498] Microsoft Excel 2002 Stack-based memory corruption
10888| [53497] Microsoft Excel 2002 memory corruption
10889| [53496] Microsoft Excel 2002 memory corruption
10890| [53493] Microsoft Excel 2002/2003/2007 memory corruption
10891| [4133] Microsoft Office 2003/2007/Xp COM Object Instantiator memory corruption
10892| [53366] Microsoft ASP.NET 2.0 cross site scripting
10893| [53385] Microsoft Exchange Server 2007 Outlook Web Access cross site scripting
10894| [53164] Microsoft Office 2003/2007/Xp ActiveX Control VBE6.DLL memory corruption
10895| [53054] Microsoft VISIO 2002/2003/2007 VISIODWG.DLL memory corruption
10896| [4125] Microsoft SharePoint 2007/3.0 help.aspx cross site scripting
10897| [52777] Microsoft Publisher 2002/2003/2007 memory corruption
10898| [52773] Microsoft Visio 2002/2003/2007 memory corruption
10899| [52772] Microsoft Visio 2002/2003/2007 memory corruption
10900| [4107] Microsoft Windows 7/Server 2008 Kernel denial of service
10901| [4103] Microsoft Windows Server 2003 Media Services Stack-based memory corruption
10902| [52543] Microsoft Virtual PC 2007 unknown vulnerability
10903| [52148] Microsoft Office 2004/2008/2007 Uninitialized Memory memory corruption
10904| [52147] Microsoft Office 2004/2008/2007 Spreadsheet Uninitialized Memory memory corruption
10905| [52146] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
10906| [52145] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
10907| [52144] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
10908| [52143] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
10909| [4090] Microsoft Excel 2002/2003/2007 memory corruption
10910| [52036] Microsoft Windows 2000 MsgBox memory corruption
10911| [51995] Microsoft SharePoint Server up to 2006 cross site scripting
10912| [51810] Microsoft Office 2004/Xp MSO.DLL memory corruption
10913| [51802] Microsoft PowerPoint 2003 Stack-based memory corruption
10914| [51801] Microsoft PowerPoint 2003 Stack-based memory corruption
10915| [51800] Microsoft PowerPoint 2002/2003 Use-After-Free memory corruption
10916| [51799] Microsoft PowerPoint 2002/2003 memory corruption
10917| [51798] Microsoft PowerPoint 2002/2003 Heap-based memory corruption
10918| [4082] Microsoft Powerpoint 2002 memory corruption
10919| [54550] Microsoft PowerPoint 2007 rpawinet.dll memory corruption
10920| [54556] Microsoft Visio 2003 mfc71enu.dll unknown vulnerability
10921| [51497] Microsoft Windows Live Messenger 2009 ActiveX Control msnmsgr.exe denial of service
10922| [51133] Microsoft Windows 2000 SP4/XP SP2/SP3/Server 2003 SP2 memory corruption
10923| [51074] Microsoft Office 2002/2003 Integer memory corruption
10924| [4069] Microsoft Project 2007/2003 Project Memory Validator memory corruption
10925| [50794] Microsoft Office 2004/2008 Spreadsheet memory corruption
10926| [50793] Microsoft Office 2004/2008 Spreadsheet memory corruption
10927| [50792] Microsoft Office 2004/2008 Spreadsheet memory corruption
10928| [50791] Microsoft Office 2004/2008 Spreadsheet memory corruption
10929| [50790] Microsoft Office 2004/2008 Spreadsheet Heap-based memory corruption
10930| [50788] Microsoft Office 2004/2008 Spreadsheet memory corruption
10931| [50787] Microsoft Office 2004/2008 Spreadsheet memory corruption
10932| [50786] Microsoft Windows 2000 llssrv.exe memory corruption
10933| [50789] Microsoft Office 2004/2008 Spreadsheet memory corruption
10934| [4056] Microsoft Word 2002/2003 File Information Block Parser Stack-based memory corruption
10935| [50660] Microsoft SharePoint Server 2007 unknown vulnerability
10936| [50443] Microsoft Office Powerpoint 2007 Integer memory corruption
10937| [50432] Microsoft .NET Framework 2.0/2.0 SP1/2.0 SP2/3.5/3.5 SP1 memory corruption
10938| [49866] Microsoft Windows Server 2003 memory corruption
10939| [4031] Microsoft Windows Vista/Server 2008 SMB Processor EducatedScholar memory corruption
10940| [4030] Microsoft Windows Vista/Server 2008 Wireless LAN AutoConfig Service Heap-based memory corruption
10941| [4029] Microsoft Windows 2000/XP TCP/IP Window Size denial of service
10942| [49745] Microsoft Windows Server 2003 denial of service
10943| [49394] Microsoft Windows Server 2003 memory corruption
10944| [49198] Microsoft Visual Studio 2005 information disclosure
10945| [49047] Microsoft Virtual Server 2005 privilege escalation
10946| [49046] Microsoft Windows Server 2003 quartz.dll memory corruption
10947| [49045] Microsoft Windows Server 2003 quartz.dll memory corruption
10948| [49044] Microsoft ISA Server 2006 privilege escalation
10949| [3999] Microsoft Office 2007 Pointer memory corruption
10950| [4000] Microsoft Office 2003/Xp/Sp3 Web Components memory corruption
10951| [48894] Microsoft Windows Server 2003 msvidctl.dll memory corruption
10952| [48572] Microsoft Office Powerpoint 2002 FL21WIN.DLL memory corruption
10953| [48517] Microsoft Windows 2000 Memory Leak memory corruption
10954| [48516] Microsoft Windows Server 2008 unknown vulnerability
10955| [48512] Microsoft Windows Server 2008 unknown vulnerability
10956| [48515] Microsoft Office Word Viewer 2003 memory corruption
10957| [48514] Microsoft Office Word Viewer 2003 Stack-based memory corruption
10958| [48554] Microsoft Excel 2000/2003/2007 memory corruption
10959| [48157] Microsoft Office PowerPoint 2002 Sound memory corruption
10960| [48156] Microsoft Office PowerPoint 2000 Stack-based memory corruption
10961| [48154] Microsoft Office PowerPoint 2002 Sound PP7X32.DLL memory corruption
10962| [48152] Microsoft Office PowerPoint 2002 PP4X32.DLL memory corruption
10963| [48150] Microsoft Office PowerPoint 2002 Sound memory corruption
10964| [48147] Microsoft Office PowerPoint 2002 Sound memory corruption
10965| [48146] Microsoft Office PowerPoint 2002 Integer memory corruption
10966| [48155] Microsoft Office PowerPoint 2002 Notes Container Heap-based memory corruption
10967| [48153] Microsoft Office PowerPoint 2002 Sound memory corruption
10968| [48151] Microsoft Office PowerPoint 2002 Stack-based memory corruption
10969| [48149] Microsoft Office PowerPoint 2002 memory corruption
10970| [48148] Microsoft Office PowerPoint 2002 Sound memory corruption
10971| [3974] Microsoft Powerpoint 2000/2002/2003 Sound Data Stack-based memory corruption
10972| [3973] Microsoft Powerpoint 2000/2002/2003 Notes Container Stack-based memory corruption
10973| [3972] Microsoft Powerpoint 2000/2002/2003 BuildList memory corruption
10974| [3971] Microsoft Powerpoint 2000/2002/2003 Object Stack-based memory corruption
10975| [3970] Microsoft Powerpoint 2000/2002/2003 Paragraph Stack-based memory corruption
10976| [3969] Microsoft Powerpoint 2000/2002/2003 Atom Stack-based memory corruption
10977| [47719] Microsoft Windows 2000 Stack-based memory corruption
10978| [47720] Microsoft Internet Security And Acceleration Server 2006 Forms Authentication cookieauth.dll cross site scripting
10979| [47716] Microsoft Office Converter Pack 2003 WPFT632.CNV memory corruption
10980| [47715] Microsoft Windows 2000 Wordpad memory corruption
10981| [47718] Microsoft Excel 2000/2002/2003/2007 Spreadsheet memory corruption
10982| [3960] Microsoft Windows XP/2000/Server 2003 DirectShow MJPEG memory corruption
10983| [3952] Microsoft ISA Server 2004/2006 denial of service
10984| [3946] Microsoft PowerPoint 2004/2000/2002/2003 memory corruption
10985| [47091] Microsoft Windows Server 2008 unknown vulnerability
10986| [47090] Microsoft Windows Server 2008 unknown vulnerability
10987| [3939] Microsoft Windows 2000 DNS Designfehler
10988| [3938] Microsoft Windows 2000 SSL weak authentication
10989| [3937] Microsoft Windows 2000 memory corruption
10990| [3932] Microsoft Excel 2004/2000/2002/2003/2007 Object Reference Designfehler
10991| [46620] Microsoft Windows Live Messenger 2009 msnmsgr.exe denial of service
10992| [46455] Microsoft Exchange Server 2007 denial of service
10993| [46454] Microsoft Exchange Server 2007 memory corruption
10994| [46453] Microsoft Visio 2002/2003/2007 memory corruption
10995| [46452] Microsoft Visio 2002/2003/2007 memory corruption
10996| [46451] Microsoft Visio 2002/2003/2007 memory corruption
10997| [46327] Microsoft Word 2007 information disclosure
10998| [45758] Microsoft Money 2006 ActiveX Control prtstb06.dll denial of service
10999| [45381] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
11000| [45380] Microsoft Windows Vista SP1/Server 2008 Search memory corruption
11001| [45379] Microsoft Office SharePoint Server 2007 denial of service
11002| [3896] Microsoft SQL Server up to 2005 sp_replwritetovarbin memory corruption
11003| [3892] Microsoft Excel 2000/2002/2003 Formula memory corruption
11004| [3891] Microsoft Excel 2000/2002/2003 memory corruption
11005| [3890] Microsoft Excel 2000/2002/2003 NAME Index memory corruption
11006| [3889] Microsoft Word 2000/2002/2003/2007 Table Property Stack-based memory corruption
11007| [3888] Microsoft Word 2000/2002/2003/2007 RTF Stylesheet memory corruption
11008| [3887] Microsoft Word 2000/2002/2003/2007 memory corruption
11009| [3886] Microsoft Word 2000/2002/2003/2007 ControlWord Heap-based memory corruption
11010| [3885] Microsoft Word 2000/2002/2003/2007 memory corruption
11011| [3884] Microsoft Word 2000/2002/2003/2007 memory corruption
11012| [3883] Microsoft Word 2000/2002/2003/2007 RTF Heap-based memory corruption
11013| [3882] Microsoft Word 2000/2002/2003/2007 LFO memory corruption
11014| [3880] Microsoft Visual Basic up to 2003 ActiveX Control Mschrt20.ocx memory corruption
11015| [3879] Microsoft Visual Basic up to 2003 ActiveX Control mscomct2.ocx memory corruption
11016| [3878] Microsoft Visual Basic up to 2003 ActiveX Control mshflxgd.ocx memory corruption
11017| [3877] Microsoft Visual Basic up to 2003 ActiveX Control msflxgrd.ocx memory corruption
11018| [3876] Microsoft Visual Basic up to 2003 ActiveX Control msdatgrd.ocx memory corruption
11019| [45197] Microsoft Windows 2000 nskey.dll memory corruption
11020| [45063] Microsoft Windows Server 2003 Active Directory unknown vulnerability
11021| [45040] Microsoft .NET Framework 2.0.50727 Code Access Security unknown vulnerability
11022| [44855] DjVu Activex Control For Microsoft Office 2000 3.0 ActiveX Control DjVu_ActiveX_MSOffice.dll memory corruption
11023| [44665] Microsoft Peachtree Accounting 2004 ActiveX Control PAWWeb11.ocx unknown vulnerability
11024| [44589] Microsoft Exchange Server 2003 Outlook Web Access unknown vulnerability
11025| [3845] Microsoft Windows 2000 SP4 Active Directory memory corruption
11026| [44533] Microsoft Windows 2000 mqsvc.exe memory corruption
11027| [3844] Microsoft Excel 2003 REPT memory corruption
11028| [3843] Microsoft Excel up to 2007 BIFF File Heap-based memory corruption
11029| [3842] Microsoft Excel 2003 VBA Performance Cache Stack-based Eingabeung\xC3\xBCltigkeit
11030| [44405] Microsoft Digital Image 2006 ActiveX Control PipPPush.DLL unknown vulnerability
11031| [44047] Microsoft SQL Server 2000 ActiveX Control SQLVDIRLib.SQLVDirControl memory corruption
11032| [43981] Microsoft Organization Chart 2.00 orgchart.exe memory corruption
11033| [43957] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
11034| [43956] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
11035| [43955] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
11036| [43952] Microsoft Office 2003/2007/Xp URI memory corruption
11037| [43676] Microsoft Windows XP/Vista/2000/Server 2003 memory corruption
11038| [43675] Microsoft Windows XP/Vista/2000/Server 2003 of memory corruption
11039| [43662] Microsoft Office Powerpoint Viewer up to 2003 memory corruption
11040| [43661] Microsoft Office Powerpoint Viewer 2003 memory corruption
11041| [43660] Microsoft Office Powerpoint Viewer 2003 Integer memory corruption
11042| [43657] Microsoft Office 2000/2003/Xp memory corruption
11043| [43654] Microsoft SharePoint Server 2007 memory corruption
11044| [43653] Microsoft Office 2000/2002/2004/2008 memory corruption
11045| [43652] Microsoft Office 2000/2002/2003/2004/2008 memory corruption
11046| [3797] Microsoft Windows Vista/Server 2008 IPsec Policy Designfehler
11047| [3796] Microsoft Office 2000 WPG memory corruption
11048| [3795] Microsoft Office 2000/2003/Xp BMP Image BMPIMP32.FLT memory corruption
11049| [3794] Microsoft Office 2000/2003/Xp PICT bits_per_pixel memory corruption
11050| [3793] Microsoft Office 2000/2003/Xp PICT memory corruption
11051| [3792] Microsoft Office 2000 EPS File memory corruption
11052| [3783] Microsoft Word 2002 memory corruption
11053| [43103] Microsoft Exchange Srv 2007 Sp1 Outlook Web Access cross site scripting
11054| [43102] Microsoft Windows 2000 SP4/Server 2003 SP2/Server 2008 DNS Cache privilege escalation
11055| [3778] Microsoft Exchange 2003/2007 Outlook Web Access cross site scripting
11056| [3777] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
11057| [43087] Microsoft Office Snapshot Viewer ActiveX up to Office 2003 Snapshot Viewer ActiveX Control snapview.ocx memory corruption
11058| [43096] Microsoft Publisher 2003/2007 Crypto API unknown vulnerability
11059| [42816] Microsoft Word 2000/2003 memory corruption
11060| [42732] Microsoft Windows XP/Vista/Server 2003 denial of service
11061| [42731] Microsoft Windows Server 2003 denial of service
11062| [3732] Microsoft Windows 2000/Server 2003 WINS memory corruption
11063| [3701] Microsoft Word 2003 CSS Heap-based memory corruption
11064| [3700] Microsoft Word 2003 RTF Document Heap-based memory corruption
11065| [42065] Microsoft SharePoint Server 2.0 Rich Text Editor cross site scripting
11066| [41881] Microsoft Office 2003/2007/2007 Sp1/Xp memory corruption
11067| [41880] Microsoft Project 2000/2002/2003 memory corruption
11068| [41879] Microsoft Windows 2000/Server 2003/Vista Stack-based memory corruption
11069| [41878] Microsoft Windows 2000/Server 2003/Vista spoofing
11070| [41877] Microsoft Windows Server 2003 vbscript.dll memory corruption
11071| [3671] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 memory corruption
11072| [3670] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 Object memory corruption
11073| [41455] Microsoft Office 2000/2003/2004/Xp memory corruption
11074| [41454] Microsoft Excel 2000/2002/2003/2007 memory corruption
11075| [41453] Microsoft Excel 2000/2002/2003 memory corruption
11076| [41452] Microsoft Excel 2000/2002/2003/2007 memory corruption
11077| [41451] Microsoft Excel 2000/2002/2003 memory corruption
11078| [41450] Microsoft Excel 2000 memory corruption
11079| [41449] Microsoft Excel 2000/2002/2003 memory corruption
11080| [41448] Microsoft Office 2000/Xp Office Web Components memory corruption
11081| [3648] Microsoft Excel 2003 memory corruption
11082| [3647] Microsoft Outlook up to 2007 mailto URI memory corruption
11083| [41003] Microsoft Office 2000/2003/2004/Xp memory corruption
11084| [41002] Microsoft Office 2000/2003/Xp memory corruption
11085| [41001] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
11086| [41000] Microsoft Works 2005/8.0 memory corruption
11087| [40998] Microsoft Publisher 2000/2002/2003 memory corruption
11088| [40994] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
11089| [40987] Microsoft Windows 2000 denial of service
11090| [40736] Microsoft ActiveX 2.0 ActiveX Control privilege escalation
11091| [3552] Microsoft Excel 2000/2002/2003 File memory corruption
11092| [40242] Microsoft Publisher 2000/2002/2003/2007 Crash denial of service
11093| [40020] Microsoft Office 2007 ZIP Container unknown vulnerability
11094| [39769] Microsoft Windows 2000 cryptgenrandom weak encryption
11095| [39749] Microsoft Windows 2000 msjet40.dll memory corruption
11096| [39655] Microsoft Windows Server 2003 spoofing
11097| [39324] Microsoft Windows Mobile 2005 SMS unknown vulnerability
11098| [3373] Microsoft Word 2000/2002 memory corruption
11099| [38999] Microsoft Windows Server 2003 explorer.exe denial of service
11100| [38899] Microsoft ISA Server 2004 information disclosure
11101| [38728] Microsoft SQL Server 2005 Enterprise Manager sqldmo.dll memory corruption
11102| [38326] Microsoft Windows 2000 attemptwrite memory corruption
11103| [3241] Microsoft Excel 2000/2003/2004/XP SP3 rtWnDesk memory corruption
11104| [3223] Microsoft Windows XP/Server 2003 URI Eingabeung\xC3\xBCltigkeit
11105| [3212] Microsoft DirectX February 2006 RLE Compression Targa Files Heap-based memory corruption
11106| [37739] Microsoft Excel 2000/2002/2003/2004/2007 memory corruption
11107| [37738] Microsoft Office 2002/2003 memory corruption
11108| [3176] Microsoft Excel 2000/2002/2003/2007 File Attribute memory corruption
11109| [3175] Microsoft Excel 2000/2002/2003/2007 Active Worksheet memory corruption
11110| [3174] Microsoft Excel 2000/2002/2003/2007 Version Information memory corruption
11111| [3172] Microsoft Office Publisher 2007 Pointer memory corruption
11112| [37566] Microsoft Excel 2003 unknown vulnerability
11113| [37526] Microsoft Windows 2000/Server 2003 denial of service
11114| [37248] Microsoft Visio 2002 Packaging memory corruption
11115| [37251] Microsoft Windows 2000 memory corruption
11116| [3119] Microsoft Visio 2002 Object memory corruption
11117| [3118] Microsoft Visio 2002 Data memory corruption
11118| [37093] Microsoft Windows Server 2003 Error Message unknown vulnerability
11119| [37010] Microsoft Office 2000 ActiveX Control ouactrl.ocx memory corruption
11120| [36628] Microsoft Word 2000/2002/2003/2004 winword.exe memory corruption
11121| [36616] Microsoft Works 2004/2005/2006 memory corruption
11122| [36621] Microsoft Exchange Server 2000 Integer denial of service
11123| [36620] Microsoft Exchange Server 2000 Outlook Web Access cross site scripting
11124| [36619] Microsoft Exchange Server 2000/2003/2007 memory corruption
11125| [36618] Microsoft Exchange Server 2000 NULL Pointer Dereference denial of service
11126| [36617] Microsoft Excel 2000/2002/2003/2004 memory corruption
11127| [36623] Microsoft BizTalk Server 2004 ActiveX Control capicom.dll memory corruption
11128| [3067] Microsoft Office 2000/2003/2004/2007/Xp Drawing Object memory corruption
11129| [3065] Microsoft Excel 2000/2002/2003/2007 Filter Stack-based memory corruption
11130| [3064] Microsoft Excel 2000/2002/2003/2004/2007 set Font memory corruption
11131| [3063] Microsoft Excel 2000/2002/2003/2007 BIFF Record Stack-based memory corruption
11132| [3012] Microsoft Windows 2000/Server 2003 DNS Service Stack-based memory corruption
11133| [36039] Microsoft Content Management Server 2001 memory corruption
11134| [36052] Microsoft Windows 2000 Heap-based memory corruption
11135| [36051] Microsoft Word 2007 file798-1.doc memory corruption
11136| [36050] Microsoft Word 2007 file789-1.doc memory corruption
11137| [36040] Microsoft Content Management Server 2001 cross site scripting
11138| [3004] Microsoft Windows up to 2003/XP URL Parser memory corruption
11139| [36041] Microsoft .NET Framework 2.0.50727.42 cross site scripting
11140| [2990] Microsoft Windows 2000/XP/Vista Animated Cursor Stack-based memory corruption
11141| [36515] Microsoft Windows 2000/XP/Server 2003 memory corruption
11142| [35846] Microsoft Windows 2000/Server 2003 Default Configuration information disclosure
11143| [35373] Microsoft Excel 2003 denial of service
11144| [35372] Microsoft Office 2003 denial of service
11145| [35206] Microsoft Windows XP/Server 2003 Crash denial of service
11146| [35161] Microsoft ISA Server 2004 unknown vulnerability
11147| [35236] Microsoft Publisher 2007 memory corruption
11148| [2939] Microsoft Word 2000 memory corruption
11149| [34994] Microsoft Windows 2000 OLE Dialog memory corruption
11150| [34993] Microsoft Office 2000/2003/Xp memory corruption
11151| [35001] Microsoft Office 2000/2003/2004/Xp memory corruption
11152| [35000] Microsoft Word 2000/2002/2003 memory corruption
11153| [2933] Microsoft Windows XP SP2/2000 SP4/Server 2003 SP1 OLE Dialog Stack-based memory corruption
11154| [2894] Microsoft Office 2000/2003/2004/Xp Undefined String Format String
11155| [2884] Microsoft Word 2000/2002/2003 memory corruption
11156| [34321] Microsoft Office 2000/2003/2004/Xp Spreadsheet Heap-based memory corruption
11157| [34320] Microsoft Office 2000/2003/2004/Xp memory corruption
11158| [34319] Microsoft Office 2000/2003/2004/Xp memory corruption
11159| [34318] Microsoft Office 2000/2003/2004/Xp memory corruption
11160| [34322] Microsoft Office 2000/2003/Xp memory corruption
11161| [2811] Microsoft Windows 2000/XP/Server 2003 VML Vector Markup Language Integer memory corruption
11162| [2810] Microsoft Outlook 2000/2002/2003 Office Saved Search OSS File memory corruption
11163| [2809] Microsoft Outlook 2000/2002/2003 Header denial of service
11164| [2808] Microsoft Outlook 2000/2002/2003 Meeting VEVENT memory corruption
11165| [2807] Microsoft Excel 2000/2002/2003 XLS File memory corruption
11166| [34126] Microsoft Office 2003 memory corruption
11167| [34122] Microsoft Office Web Components 2000 memory corruption
11168| [2789] Microsoft Windows 2000/XP RPC Request NetrWkstaUserEnum() denial of service
11169| [2765] Microsoft Project Server 2003 pdsrequest.asp weak authentication
11170| [33851] Microsoft Word 2000/2002/2003 12122006-djtest.doc memory corruption
11171| [2739] Microsoft Windows 2000 Remote Installation Service Fehlende Authentifizierung
11172| [2738] Microsoft Windows 2000/XP/Server 2003 SNMP memory corruption
11173| [2737] Microsoft Windows XP/Server 2003 Manifest denial of service
11174| [33766] Microsoft Word 2000/2002/2003 memory corruption
11175| [2718] Microsoft Word 2000/2002/2003 DOC Document memory corruption
11176| [2717] Microsoft Windows 2000 Print Spooler Memory Consumption denial of service
11177| [2689] Microsoft Windows up to 2000 SP4 Active Directory denial of service
11178| [2688] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware denial of service
11179| [2687] Microsoft Windows 2000/XP/Server 2003 Agent ActiveX ACF File Heap-based memory corruption
11180| [2686] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware memory corruption
11181| [2684] Microsoft Windows 2000/XP Workstation Service Stack-based memory corruption
11182| [2659] Microsoft Windows 2000/XP GDI Crash Designfehler
11183| [2655] Microsoft Windows 2000/XP/Server 2003 XML Core Services Designfehler
11184| [33067] Microsoft Visual Studio .net 2005 ActiveX Control wmiscriptutils.dll memory corruption
11185| [2610] Microsoft PowerPoint 2003 PPT Document NULL Pointer Dereference denial of service
11186| [32693] Microsoft Word 2004 memory corruption
11187| [32686] Microsoft Office 2000/2001/2003/2004 Integer memory corruption
11188| [32690] Microsoft Office 2000/2003/2004/Xp memory corruption
11189| [32676] Microsoft Office 2000/2001/2003/2004 memory corruption
11190| [32675] Microsoft Office 2000/2003/2004/Xp memory corruption
11191| [32694] Microsoft Windows 2000 memory corruption
11192| [32689] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11193| [32688] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11194| [32687] Microsoft Word 2000/2002 memory corruption
11195| [32685] Microsoft Office 2000/2001/2003/2004 memory corruption
11196| [2601] Microsoft Windows XP/Server 2003 IPv6 Stack denial of service
11197| [2600] Microsoft Windows XP/Server 2003 IPv6 Stack TCP denial of service
11198| [2599] Microsoft Windows XP/Server 2003 IPv6 Stack ICMP denial of service
11199| [2598] Microsoft Windows XP/Server 2003 Object Packager Designfehler
11200| [2597] Microsoft Office 2003/Xp Smart-Tag Parser memory corruption
11201| [2596] Microsoft Office 2000/2003/2004/Xp Value Read memory corruption
11202| [2595] Microsoft Office 2000/2001/2003/2004 Diagram Value memory corruption
11203| [2594] Microsoft Office 2000/2001/2003/2004 Document memory corruption
11204| [2593] Microsoft ASP.NET 2.0 cross site scripting
11205| [2571] Microsoft PowerPoint up to 2003 Document memory corruption
11206| [2554] Microsoft PowerPoint 2000 memory corruption
11207| [2522] Microsoft Windows 2000/XP/Server 2003 Indexing Service cross site scripting
11208| [2521] Microsoft Publisher 2000/2002/2003 PUB File Stack-based memory corruption
11209| [2508] Microsoft Word 2000 memory corruption
11210| [2478] Microsoft Internet Explorer up to 6 on Win 2000 HTTP 1.1 Compression Heap-based memory corruption
11211| [31692] Microsoft PowerPoint 2000/2001/2002/2003 memory corruption
11212| [2436] Microsoft Windows 2000/XP/Server 2003 Kernel memory corruption
11213| [2435] Microsoft Windows 2000/XP/Server 2003 Exception memory corruption
11214| [2434] Microsoft Windows 2000/XP/Server 2003 Winlogon race condition
11215| [2433] Microsoft Windows 2000 Management Console cross site scripting
11216| [2432] Microsoft Windows 2000/XP/Server 2003 DNS Resolver Heap-based memory corruption
11217| [2431] Microsoft Windows 2000/XP/Server 2003 Winsock API memory corruption
11218| [2430] Microsoft Windows 2000/XP/Server 2003 RPC ELV memory corruption
11219| [2426] Microsoft Windows 2000/XP/Server 2003 WMF File gdi32.dll denial of service
11220| [2415] Microsoft Windows 2000/XP/Server 2003 SMB File srv.sys denial of service
11221| [31527] Microsoft Internet Explorer 6.0 on Win 2000 ActiveX Object Stack-Based denial of service
11222| [31358] Microsoft PowerPoint 2003 powerpnt.exe denial of service
11223| [31354] Microsoft PowerPoint 2003 memory corruption
11224| [31351] Microsoft ISA Server 2004 Filters unknown vulnerability
11225| [2382] Microsoft PowerPoint up to 2003 Presentation Open/Close memory corruption
11226| [2378] Microsoft PowerPoint 2000/2002/2003 Document Parser memory corruption
11227| [31318] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11228| [31317] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11229| [31316] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11230| [31313] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11231| [31312] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11232| [31311] Microsoft Excel 2000/2002/2003/XP memory corruption
11233| [31310] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
11234| [31237] Microsoft Office 2000/2003/Xp memory corruption
11235| [31235] Microsoft Office 2000/2003/Xp memory corruption
11236| [2371] Microsoft NET Framework up to 2.0 URL Validator unknown vulnerability
11237| [2370] Microsoft Windows 2000/XP/Server 2003 Server Protocol Driver Server Message Block Heap-based memory corruption
11238| [2369] Microsoft Windows 2000/XP/Server 2003 Server Service Mailslot Heap-based memory corruption
11239| [2367] Microsoft Office 2000/2003/XP Document String memory corruption
11240| [2366] Microsoft Windows 2000/XP/Server 2003 DHCP Client memory corruption
11241| [2365] Microsoft Office 2000/2003/XP PNG Image memory corruption
11242| [2364] Microsoft Office 2000/2003/XP GIF Image memory corruption
11243| [31233] Microsoft Office 2000/2003/Xp mso.dll lscreateline memory corruption
11244| [31238] Microsoft Internet Explorer 6.0 on Win 2000 Crash denial of service
11245| [2357] Microsoft Excel up to 2003 on Asian System Document Repair Style memory corruption
11246| [31133] Microsoft Windows XP/Server 2003 explorer.exe memory corruption
11247| [2325] Microsoft Excel up to 2003 Hyperlink hlink.dll Long Hyperlink memory corruption
11248| [2324] Microsoft Excel 2000/2002/2003/2004 XLS File memory corruption
11249| [30801] Microsoft Windows up to 2000 Connection Manager Stack-based memory corruption
11250| [2312] Microsoft Exchange 2000 Outlook Web Access cross site scripting
11251| [2311] Microsoft Windows 2000/XP/Server 2003 MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk memory corruption
11252| [2310] Microsoft Windows 2000 RPC spoofing
11253| [2309] Microsoft Windows 2000/XP/Server 2003 Routing and Remote Access Service RPC Request memory corruption
11254| [2308] Microsoft PowerPoint 2000/2002/2003/2004 PPT Document memory corruption
11255| [2307] Microsoft Windows 2000/XP/Server 2003 JScript Object memory corruption
11256| [2306] Microsoft Windows 2000/XP/Server 2003 IP Source Routing memory corruption
11257| [2305] Microsoft Windows XP/Server 2003 ART Image Heap-based memory corruption
11258| [2294] Microsoft Word up to 2003 DOC Document Backdoor Designfehler
11259| [2275] Microsoft Windows XP/Server 2003 mhtml URI inetcomm.dll memory corruption
11260| [2253] Microsoft Word up to 2003 Backdoor memory corruption
11261| [2221] Microsoft Windows 2000/XP CHM Archive itss.dll memory corruption
11262| [30131] Microsoft Windows NT 4.0/XP/2000/Server 2003 Distributed Transaction Coordinator Crash denial of service
11263| [2218] Microsoft Windows 2000/XP/Server 2003 MSDTC Heap-based denial of service
11264| [2217] Microsoft Exchange 2000/2003 Calender Collaboration Data Object memory corruption
11265| [2190] Microsoft Office 2003 mailto URI unknown vulnerability
11266| [2147] Microsoft Windows 2000/XP/Server 2003 COM Object memory corruption
11267| [2135] Microsoft FrontPage Server Extensions 2002 cross site scripting
11268| [29524] Microsoft ISA Server 2004 unknown vulnerability
11269| [134750] Microsoft ASP.NET Core 2.1/2.2 denial of service
11270| [134745] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
11271| [134744] Microsoft Windows up to Server 2019 GDI information disclosure
11272| [134743] Microsoft SharePoint Server 2013 SP1/2016 cross site scripting
11273| [134742] Microsoft SharePoint Enterprise Server 2016/2019 cross site scripting
11274| [134741] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11275| [134740] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
11276| [134739] Microsoft SharePoint Foundation 2010 SP2/2013 SP2 cross site scripting
11277| [134738] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11278| [134737] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11279| [134736] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
11280| [134735] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11281| [134734] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11282| [134733] Microsoft Windows up to Server 2019 Unified Write Filter privilege escalation
11283| [134731] Microsoft Windows up to Server 2019 Symlink privilege escalation
11284| [134729] Microsoft Windows up to Server 2019 Storage Service privilege escalation
11285| [134725] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11286| [134724] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11287| [134723] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11288| [134722] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11289| [134721] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11290| [134720] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11291| [134719] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11292| [134718] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11293| [134717] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11294| [134716] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11295| [134715] Microsoft Windows up to Server 2019 Win32k memory corruption
11296| [134714] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11297| [134713] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11298| [134712] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11299| [134710] Microsoft Windows up to Server 2019 GDI information disclosure
11300| [134709] Microsoft Windows up to Server 2019 Kernel privilege escalation
11301| [134706] Microsoft Windows up to Server 2019 Error Reporting privilege escalation
11302| [134704] Microsoft SQL Server 2017 Analysis Services information disclosure
11303| [134701] Microsoft Windows up to Server 2019 Windows Defender Application Control privilege escalation
11304| [134700] Microsoft Windows up to Server 2019 Diagnostic Hub privilege escalation
11305| [134699] Microsoft Windows up to Server 2019 NDIS ndis.sys memory corruption
11306| [134698] Microsoft Windows up to Server 2019 OLE memory corruption
11307| [134697] Microsoft Office/Word 2016/2019/365 ProPlus memory corruption
11308| [134684] Microsoft Windows up to Server 2019 DHCP Server memory corruption
11309| [134678] Microsoft Windows up to Server 2019 GDI+ memory corruption
11310| [133236] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11311| [133235] Microsoft Azure DevOps Server 2019 privilege escalation
11312| [133234] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11313| [133232] Microsoft Azure DevOps Server 2019 cross site scripting
11314| [133229] Microsoft Azure DevOps Server 2019 cross site scripting
11315| [133224] Microsoft Exchange Server 2013 CU22/2016 CU11/2016 CU12/2019/2019 CU1 Outlook Web Access privilege escalation
11316| [133223] Microsoft Azure DevOps Server 2019 Content Security Policy privilege escalation
11317| [133222] Microsoft Windows up to Server 2019 Remote Registry Service memory corruption
11318| [133221] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11319| [133220] Microsoft Windows up to Server 2019 GDI Memory information disclosure
11320| [133219] Microsoft Windows up to Server 2019 Win32k Memory information disclosure
11321| [133218] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11322| [133217] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11323| [133216] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
11324| [133215] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
11325| [133214] Microsoft Windows up to Server 2019 AppX Deployment Service privilege escalation
11326| [133213] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
11327| [133212] Microsoft Windows up to Server 2019 Terminal Services Memory information disclosure
11328| [133211] Microsoft Windows up to Server 2019 Task Scheduler information disclosure
11329| [133209] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
11330| [133206] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016/2019 cross site scripting
11331| [133205] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
11332| [133204] Microsoft Office/Excel up to 2019 memory corruption
11333| [133203] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11334| [133202] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11335| [133201] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11336| [133200] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
11337| [133199] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
11338| [133198] Microsoft Exchange Server up to 2019 CU1 Outlook Web Access cross site scripting
11339| [133197] Microsoft ASP.NET Core 2.2 Request denial of service
11340| [133196] Microsoft Windows up to Server 2019 Win32k information disclosure
11341| [133195] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
11342| [133194] Microsoft Windows up to Server 2019 GDI Memory information disclosure
11343| [133193] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
11344| [133192] Microsoft Windows up to Server 2019 OLE Automation privilege escalation
11345| [133189] Microsoft Windows up to Server 2019 CSRSS memory corruption
11346| [133188] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
11347| [133187] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
11348| [133186] Microsoft Windows up to Server 2019 TCP/IP Stack Fragmented IP Packet information disclosure
11349| [133185] Microsoft Windows up to Server 2019 Win32k memory corruption
11350| [133184] Microsoft Office 2016 for Mac/2019/365 ProPlus Graphics Component memory corruption
11351| [133183] Microsoft Windows up to Server 2019 Win32k memory corruption
11352| [133182] Microsoft Windows up to Server 2019 Win32k memory corruption
11353| [133181] Microsoft Office/Excel/PowerPoint up to 2019 URL Document Code Execution
11354| [133180] Microsoft Windows up to Server 2019 MS XML Code Execution
11355| [133179] Microsoft Windows up to Server 2019 MS XML Code Execution
11356| [133177] Microsoft Windows up to Server 2019 Device Guard luafv.sys privilege escalation
11357| [133174] Microsoft Windows up to Server 2019 GDI+ privilege escalation
11358| [133173] Microsoft Windows up to Server 2019 IOleCvt Interface privilege escalation
11359| [133166] Microsoft Windows up to Server 2019 MS XML Code Execution
11360| [133165] Microsoft Windows up to Server 2019 MS XML Code Execution
11361| [133164] Microsoft Windows up to Server 2019 MS XML Code Execution
11362| [133163] Microsoft Windows up to Server 2019 MS XML Code Execution
11363| [133162] Microsoft Windows up to Server 2019 MS XML Code Execution
11364| [131687] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 3.2/2018 Updated 1.2 cross site scripting
11365| [131685] Microsoft Windows up to Server 2019 SMB information disclosure
11366| [131684] Microsoft Visual Studio 2017 Version 15.9 C++ Redistributable Installer privilege escalation
11367| [131681] Microsoft Windows up to Server 2019 Win32k memory corruption
11368| [131679] Microsoft Windows up to Server 2019 Kernel information disclosure
11369| [131675] Microsoft SharePoint 2013 SP1/2016 cross site scripting
11370| [131674] Microsoft Windows up to Server 2019 Win32k information disclosure
11371| [131673] Microsoft Windows up to Server 2019 Kernel information disclosure
11372| [131672] Microsoft Windows up to Server 2019 GDI information disclosure
11373| [131671] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
11374| [131668] Microsoft Windows up to Server 2019 AppX Deployment Server privilege escalation
11375| [131667] Microsoft Windows up to Server 2019 Comctl32.dll memory corruption
11376| [131663] Microsoft Windows up to Server 2019 Print Spooler information disclosure
11377| [131658] Microsoft Windows up to Server 2019 information disclosure
11378| [131657] Microsoft Windows up to Server 2019 denial of service
11379| [131656] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
11380| [131653] Microsoft Windows up to Server 2019 SMB information disclosure
11381| [131652] Microsoft Windows up to Server 2019 SMB information disclosure
11382| [131651] Microsoft Windows up to Server 2019 Kernel information disclosure
11383| [131650] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V denial of service
11384| [131649] Microsoft Windows up to Server 2019 Kernel memory corruption
11385| [131648] Microsoft Windows up to Server 2019 Hyper-V denial of service
11386| [131644] Microsoft Windows up to Server 2019 Hyper-V denial of service
11387| [131638] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11388| [131632] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
11389| [131631] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
11390| [131630] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
11391| [131629] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
11392| [131628] Microsoft Windows up to Server 2019 ActiveX memory corruption
11393| [131619] Microsoft Windows up to Server 2019 MS XML privilege escalation
11394| [131334] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
11395| [131333] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
11396| [131330] Microsoft Exchange Server 2010 SP3 UR26/2013 CU22/2016 CU12/2019 CU1 privilege escalation
11397| [131329] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 information disclosure
11398| [131328] Microsoft Windows up to Server 2016 Kernel information disclosure
11399| [130832] Microsoft 2013 SP1 spoofing
11400| [130828] Microsoft Exchange Server 2010 SP3/2013 CU22/2016 CU12/2019 CU1 EWS privilege escalation
11401| [130826] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
11402| [130825] Microsoft Office up to 2019 Connectivity Engine memory corruption
11403| [130824] Microsoft Office up to 2019 Connectivity Engine memory corruption
11404| [130823] Microsoft Office up to 2019 Connectivity Engine privilege escalation
11405| [130822] Microsoft Office up to 2019 Connectivity Engine privilege escalation
11406| [130821] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11407| [130820] Microsoft Windows up to Server 2012 R2 GDI information disclosure
11408| [130818] Microsoft Windows up to Server 2019 GDI information disclosure
11409| [130817] Microsoft Windows up to Server 2019 Storage Service privilege escalation
11410| [130814] Microsoft Windows up to Server 2019 privilege escalation
11411| [130809] Microsoft Windows up to Server 2019 Defender Firewall Security privilege escalation
11412| [130808] Microsoft Windows up to Server 2019 information disclosure
11413| [130807] Microsoft Windows up to Server 2019 Hyper-V information disclosure
11414| [130806] Microsoft Windows up to Server 2019 SMB privilege escalation
11415| [130805] Microsoft Windows up to Server 2019 Device Guard privilege escalation
11416| [130804] Microsoft Windows up to Server 2019 Device Guard privilege escalation
11417| [130803] Microsoft Windows up to Server 2019 SMB privilege escalation
11418| [130802] Microsoft Windows up to Server 2019 Win32k information disclosure
11419| [130801] Microsoft Windows up to Server 2019 Device Guard privilege escalation
11420| [130800] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11421| [130799] Microsoft Windows up to Server 2016 Win32k memory corruption
11422| [130798] Microsoft Windows up to Server 2019 GDI information disclosure
11423| [130797] Microsoft Windows up to Server 2019 GDI information disclosure
11424| [130796] Microsoft Windows up to Server 2019 GDI information disclosure
11425| [130793] Microsoft Windows up to Server 2019 GDI information disclosure
11426| [130792] Microsoft Windows up to Server 2019 HID information disclosure
11427| [130791] Microsoft Windows up to Server 2019 HID information disclosure
11428| [130790] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11429| [130789] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11430| [130788] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11431| [130787] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11432| [130786] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11433| [130785] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus Security Feature Phishing spoofing
11434| [130784] Microsoft Windows up to Server 2019 GDI+ memory corruption
11435| [130782] Microsoft Windows up to Server 2019 DHCP Server memory corruption
11436| [130781] Microsoft Windows up to Server 2019 GDI+ memory corruption
11437| [129847] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 1.2/2018 Update 3.2 information disclosure
11438| [129846] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
11439| [129845] Microsoft Skype for Business 2015 CU 8 Request cross site scripting
11440| [128765] Microsoft Visual Studio 2017 Version 15.9 C++ Construct privilege escalation
11441| [128764] Microsoft Exchange Server 2010 SP3/2013 CU21/2016 CU10/2016 CU11/2019 PowerShell API information disclosure
11442| [128762] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus Word memory corruption
11443| [128761] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11444| [128760] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11445| [128759] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11446| [128758] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11447| [128757] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11448| [128756] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11449| [128755] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11450| [128754] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11451| [128753] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11452| [128752] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11453| [128751] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
11454| [128750] Microsoft Windows up to Server 2019 Runtime privilege escalation
11455| [128749] Microsoft Windows up to Server 2019 Kernel information disclosure
11456| [128747] Microsoft ASP.NET Core 2.1 Web Request denial of service
11457| [128746] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
11458| [128745] Microsoft Office up to 2019 Word Macro information disclosure
11459| [128744] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
11460| [128743] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
11461| [128742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
11462| [128741] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11463| [128740] Microsoft SharePoint Enterprise Server 2013 SP1 cross site scripting
11464| [128739] Microsoft Windows up to Server 2019 Kernel information disclosure
11465| [128738] Microsoft Windows up to Server 2019 Subsystem for Linux information disclosure
11466| [128737] Microsoft Windows up to Server 2019 COM Desktop Broker privilege escalation
11467| [128736] Microsoft Windows up to Server 2019 Kernel information disclosure
11468| [128735] Microsoft ASP.NET Core 2.1/2.2 Web Request denial of service
11469| [128733] Microsoft Windows up to Server 2019 Authentication Request privilege escalation
11470| [128732] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus MSHTML Engine privilege escalation
11471| [128729] Microsoft Visual Studio 2010 SP1/2012 Update 5 vscontent File information disclosure
11472| [128728] Microsoft Windows up to Server 2019 Kernel information disclosure
11473| [128727] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
11474| [128726] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
11475| [128725] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
11476| [128718] Microsoft Windows up to Server 2019 Hyper-V memory corruption
11477| [128717] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V memory corruption
11478| [127925] Microsoft SharePoint Enterprise Server 2016 Web Request cross site scripting
11479| [127882] Microsoft Dynamics NAV 2016/2017 Web Request cross site scripting
11480| [127881] Microsoft Windows 10 1809/Server 2019 Object denial of service
11481| [127880] Microsoft Windows up to Server 2019 Win32k Object memory corruption
11482| [127828] Microsoft Windows up to Server 2019 Win32k memory corruption
11483| [127827] Microsoft Windows 10 1809/Server 2019 DirectX information disclosure
11484| [127826] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Win32k ASLR privilege escalation
11485| [127825] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 privilege escalation
11486| [127824] Microsoft Excel up to 2019 Out-of-Bounds memory corruption
11487| [127823] Microsoft Windows up to Server 2012 R2 Kernel information disclosure
11488| [127821] Microsoft Windows up to Server 2019 Connected User Experiences and Telemetry Service denial of service
11489| [127820] Microsoft Windows up to Server 2019 Kernel memory corruption
11490| [127819] Microsoft Exchange Server 2016 CU10/2016 CU11 Profile Data privilege escalation
11491| [127817] Microsoft Excel up to 2019 information disclosure
11492| [127816] Microsoft Windows up to Server 2019 GDI information disclosure
11493| [127815] Microsoft Windows up to Server 2019 GDI information disclosure
11494| [127814] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 Search cross site request forgery
11495| [127812] Microsoft Windows up to Server 2019 Remote Procedure Call information disclosure
11496| [127809] Microsoft PowerPoint 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus memory corruption
11497| [127806] Microsoft Outlook up to 2019 memory corruption
11498| [127805] Microsoft Excel up to 2019 memory corruption
11499| [127804] Microsoft Excel up to 2019 memory corruption
11500| [127803] Microsoft Windows up to Server 2019 Text-To-Speech memory corruption
11501| [127801] Microsoft Windows up to Server 2019 DNS Server privilege escalation
11502| [126938] Microsoft Team Foundation Server 2018 Update 1.1/2018 Update 3 Code Execution
11503| [126755] Microsoft .NET Core 2.1 privilege escalation
11504| [126754] Microsoft Skype for Business/Lync Server 2013 SP1/2016 Emoji denial of service
11505| [126750] Microsoft Windows up to Server 2019 ALPC privilege escalation
11506| [126749] Microsoft Exchange Server 2010/2013/2016/2019 privilege escalation
11507| [126748] Microsoft Office 2019/365 ProPlus Outlook Message information disclosure
11508| [126747] Microsoft SharePoint Enterprise Server 2013 SP1 Folder information disclosure
11509| [126746] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
11510| [126745] Microsoft Project 2010 SP2/2013 SP1/2016 memory corruption
11511| [126744] Microsoft Office up to 2019 Word memory corruption
11512| [126743] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
11513| [126742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
11514| [126739] Microsoft Windows up to Server 2012 R2 Win32k information disclosure
11515| [126737] Microsoft Windows up to Server 2012 R2 DirectX information disclosure
11516| [126736] Microsoft Windows up to Server 2019 Win32k memory corruption
11517| [126735] Microsoft Windows up to Server 2019 DirectX privilege escalation
11518| [126734] Microsoft Office 2019/365 ProPlus information disclosure
11519| [126733] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DirectX memory corruption
11520| [126730] Microsoft Windows up to Server 2019 Active Directory Federation Services cross site scripting
11521| [126728] Microsoft Office/SharePoint 2010 SP2 Word memory corruption
11522| [126727] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
11523| [126726] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
11524| [126725] Microsoft Windows up to Server 2019 DirectX memory corruption
11525| [126722] Microsoft Windows up to Server 2019 PowerShell privilege escalation
11526| [126718] Microsoft Windows up to Server 2016 Search memory corruption
11527| [126717] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2019 memory corruption
11528| [126716] Microsoft Office up to 2019 Excel memory corruption
11529| [126715] Microsoft Office 2016/2019/365 ProPlus Excel memory corruption
11530| [126714] Microsoft Windows up to Server 2019 PowerShell unknown vulnerability
11531| [126713] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
11532| [126712] Microsoft Windows up to Server 2016 Graphics Component memory corruption
11533| [126711] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
11534| [125123] Microsoft Windows up to Server 2019 Codecs Library information disclosure
11535| [125122] Microsoft Windows up to Server 2016 TCP/IP information disclosure
11536| [125121] Microsoft Windows up to Server 2019 DirectX memory corruption
11537| [125120] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
11538| [125119] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
11539| [125116] Microsoft Exchange Server 2013 CU21/2016 CU10 privilege escalation
11540| [125115] Microsoft Windows up to Server 2019 Theme API privilege escalation
11541| [125114] Microsoft Windows up to Server 2019 Windows Shell privilege escalation
11542| [125113] Microsoft Windows up to Server 2019 Kernel memory corruption
11543| [125111] Microsoft Windows up to Server 2019 Device Guard Code Integrity Policy privilege escalation
11544| [125110] Microsoft Windows up to Server 2019 DNS Global Blocklist privilege escalation
11545| [125109] Microsoft Windows up to Server 2019 NTFS privilege escalation
11546| [125108] Microsoft Windows up to Server 2019 Filter Manager memory corruption
11547| [125107] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11548| [125106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11549| [125105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11550| [125104] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11551| [125102] Microsoft Office/Word 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
11552| [125100] Microsoft Office/Powerpoint 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
11553| [125099] Microsoft Office/Excel up to 2019 Protected View memory corruption
11554| [125098] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
11555| [125097] Microsoft Windows up to Server 2019 DirectX Graphics memory corruption
11556| [125096] Microsoft Windows up to Server 2019 Win32k memory corruption
11557| [125095] Microsoft Exchange Server 2013 CU21/2016 CU10 Outlook Web Access cross site scripting
11558| [125093] Microsoft Windows up to Server 2019 Hyper-V memory corruption
11559| [125092] Microsoft Windows up to Server 2019 Hyper-V memory corruption
11560| [125091] Microsoft Windows up to Server 2019 MS XML privilege escalation
11561| [124371] Microsoft Exchange Server up to 2010 SP3 Outlook Web Access /owa/auth/logon.aspx Parameter Server-Side Request Forgery
11562| [124217] Microsoft Windows Server 2012/Server 2016 Active Directory Federation Services /adfs/ls Server-Side Request Forgery
11563| [123995] Microsoft Lync 2011 on Mac Security Feature Messages Download privilege escalation
11564| [123881] Microsoft Windows up to Server 2016 Sandbox privilege escalation
11565| [123874] Microsoft Windows up to Server 2016 Kernel information disclosure
11566| [123872] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 SMB information disclosure
11567| [123868] Microsoft Windows up to Server 2016 Hyper-V denial of service
11568| [123864] Microsoft Windows up to Server 2016 Hyper-V information disclosure
11569| [123862] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2013 RT SP1/2016 cross site scripting
11570| [123861] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
11571| [123860] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11572| [123859] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
11573| [123851] Microsoft Windows up to Server 2016 ALPC privilege escalation
11574| [123849] Microsoft Windows up to Server 2016 SMB denial of service
11575| [123846] Microsoft Office 2016 on Win/Mac memory corruption
11576| [123844] Microsoft Word 2013 SP1/2013 RT SP1/2016 PDF File memory corruption
11577| [123843] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11578| [123842] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11579| [123830] Microsoft Windows up to Server 2016 Hyper-V memory corruption
11580| [123828] Microsoft Windows up to Server 2016 Win32k Graphics privilege escalation
11581| [123827] Microsoft Windows up to Server 2016 Image memory corruption
11582| [123825] Microsoft Windows up to Server 2016 MSXML Parser privilege escalation
11583| [123823] Microsoft Windows up to Server 2016 Hyper-V privilege escalation
11584| [122887] Microsoft Office 2016 on Mac AutoUpdate memory corruption
11585| [122886] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
11586| [122885] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
11587| [122884] Microsoft Windows up to Server 2016 Win32k memory corruption
11588| [122883] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
11589| [122875] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
11590| [122874] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11591| [122873] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R information disclosure
11592| [122872] Microsoft SharePoint Enterprise Server 2013 SP1/2016 information disclosure
11593| [122871] Microsoft PowerPoint 2010 SP2 memory corruption
11594| [122870] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R memory corruption
11595| [122861] Microsoft Windows up to Server 2016 Microsoft COM for Windows privilege escalation
11596| [122850] Microsoft Visual Studio 2015 Update 3/2017/2017 Version 15.8 Diagnostic Hub privilege escalation
11597| [122849] Microsoft Windows up to Server 2016 Diagnostic Hub privilege escalation
11598| [122848] Microsoft Windows Security Feature 2FA weak authentication
11599| [122834] Microsoft Windows up to Server 2016 LNK memory corruption
11600| [122825] Microsoft Windows up to Server 2016 Graphics memory corruption
11601| [122823] Microsoft SQL Server 2016 SP1/2016 SP2/2017 memory corruption
11602| [121208] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R Attachment privilege escalation
11603| [121118] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11604| [121116] Microsoft Windows up to Server 2016 Sandbox privilege escalation
11605| [121114] Microsoft Access 2013 SP1/2016/2016 C2R memory corruption
11606| [121111] Microsoft Windows up to Server 2016 Kernel memory corruption
11607| [121110] Microsoft Windows up to Server 2016 Wordpad privilege escalation
11608| [121107] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll denial of service
11609| [121106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
11610| [121105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11611| [121098] Microsoft Office 2016/2016 C2R memory corruption
11612| [121092] Microsoft Windows up to Server 2016 FTP Server denial of service
11613| [121090] Microsoft Visual Studio up to 2017 Version 15.8 Preview privilege escalation
11614| [119479] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016 memory corruption
11615| [119477] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016 information disclosure
11616| [119476] Microsoft Publisher 2010 SP2 OLE Object PUB File privilege escalation
11617| [119475] Microsoft Outlook 2010 SP2/2013 RT SP1/2013 SP1/2016 Attachment privilege escalation
11618| [119474] Microsoft Windows up to Server 2016 GDI information disclosure
11619| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
11620| [119468] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11621| [119467] Microsoft Windows up to Server 2016 Hypervisor privilege escalation
11622| [119465] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11623| [119464] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11624| [119463] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11625| [119461] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11626| [119460] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11627| [119459] Microsoft Windows up to Server 2016 memory corruption
11628| [119457] Microsoft Windows up to Server 2016 Desktop Bridge privilege escalation
11629| [119456] Microsoft Windows up to Server 2016 Kernel information disclosure
11630| [119455] Microsoft Windows up to Server 2016 denial of service
11631| [119454] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
11632| [119452] Microsoft Windows up to Server 2016 HIDParser memory corruption
11633| [119448] Microsoft Windows up to Server 2016 Code Integrity Module denial of service
11634| [119447] Microsoft Windows up to Server 2016 NTFS privilege escalation
11635| [119441] Microsoft Windows up to Server 2016 Media Foundation memory corruption
11636| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
11637| [119436] Microsoft Windows up to Server 2016 memory corruption
11638| [119431] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
11639| [118120] Microsoft Office 2016 on Mac XML Data Code Execution
11640| [117561] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1 Web Request cross site scripting
11641| [117560] Microsoft Exchange Server up to 2016 CU9 Code Execution memory corruption
11642| [117559] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access Web Request cross site scripting
11643| [117558] Microsoft Windows up to Server 2016 Code Execution memory corruption
11644| [117507] Microsoft Infopath 2013 SP1 memory corruption
11645| [117505] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
11646| [117504] Microsoft Office 2010 SP2 information disclosure
11647| [117503] Microsoft Exchange Server 2013 CU19/2013 CU20/2016 CU8/2016 CU9 Outlook Web Access cross site scripting
11648| [117502] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
11649| [117501] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11650| [117500] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access cross site scripting
11651| [117499] Microsoft Exchange Server up to 2016 CU9 information disclosure
11652| [117498] Microsoft Office 2016 C2R Security Feature privilege escalation
11653| [117497] Microsoft SharePoint Enterprise Server 2010/2013 SP1/2016 cross site scripting
11654| [117480] Microsoft Windows up to Server 2016 COM Serialized privilege escalation
11655| [117473] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11656| [117472] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11657| [117471] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11658| [117470] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11659| [117469] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11660| [117468] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11661| [117444] Microsoft Windows up to Server 2016 Hyper-V vSMB memory corruption
11662| [117443] Microsoft Windows up to Server 2016 Hyper-V memory corruption
11663| [117442] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
11664| [116132] Microsoft Office 2016 Memory information disclosure
11665| [116051] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11666| [116050] Microsoft SharePoint Enterprise Server 2010 SP2/2013/2016 cross site scripting
11667| [116049] Microsoft SharePoint Enterprise Server 2013/2016 privilege escalation
11668| [116048] Microsoft Windows up to Server 2016 DirectX Graphics Kernel Subsystem memory corruption
11669| [116047] Microsoft Windows up to Server 2016 OpenType Font Driver atmfd.dll memory corruption
11670| [116046] Microsoft SharePoint Enterprise Server 2013/2016 Share cross site scripting
11671| [116045] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11672| [116039] Microsoft Windows up to Server 2016 Remote Desktop Protocol denial of service
11673| [116031] Microsoft Windows up to Server 2016 Kernel ASLR information disclosure
11674| [116030] Microsoft Windows up to Server 2016 SNMP Service denial of service
11675| [116026] Microsoft Windows up to Server 2016 Kernel information disclosure
11676| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
11677| [116023] Microsoft Office up to 2016 C2R information disclosure
11678| [116022] Microsoft Excel 2010 SP2 memory corruption
11679| [116020] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Active Directory privilege escalation
11680| [116019] Microsoft Windows up to Server 2016 Kernel information disclosure
11681| [116018] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11682| [116017] Microsoft Excel up to 2016 C2R memory corruption
11683| [116016] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Graphics memory corruption
11684| [116014] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
11685| [116013] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1 memory corruption
11686| [116008] Microsoft Windows up to Server 2016 Graphics memory corruption
11687| [116007] Microsoft Windows up to Server 2016 Graphics memory corruption
11688| [116006] Microsoft Windows up to Server 2016 Graphics memory corruption
11689| [116005] Microsoft Windows up to Server 2016 Graphics memory corruption
11690| [116004] Microsoft Windows up to Server 2016 Graphics memory corruption
11691| [116003] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
11692| [115994] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
11693| [115804] Microsoft Windows up to Server 2016 Malware Protection Engine privilege escalation
11694| [114579] Microsoft Exchange Server up to 2017 CU8 Outlook Web Access information disclosure
11695| [114574] Microsoft SharePoint Enterprise Server 2016 privilege escalation
11696| [114573] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11697| [114571] Microsoft Exchange Server 2016 CU7/2016 CU8 Outlook Web Access information disclosure
11698| [114570] Microsoft Exchange Server 2010 SP3/2013 CU18/2013 CU19/2016 CU7/2016 CU8 Outlook Web Access Fake privilege escalation
11699| [114565] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Kernel information disclosure
11700| [114564] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11701| [114562] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11702| [114560] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11703| [114559] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11704| [114558] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11705| [114557] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11706| [114556] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11707| [114555] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11708| [114554] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11709| [114553] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11710| [114552] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11711| [114551] Microsoft Excel up to 2016 C2R Security Feature privilege escalation
11712| [114549] Microsoft Access 2010 SP2/2013 SP1/2016 memory corruption
11713| [114548] Microsoft Windows up to Server 2016 CNG Security Feature cng.sys privilege escalation
11714| [114547] Microsoft Windows up to Server 2016 Kernel information disclosure
11715| [114546] Microsoft Windows up to Server 2016 Kernel information disclosure
11716| [114545] Microsoft Windows up to Server 2016 Kernel information disclosure
11717| [114544] Microsoft Windows up to Server 2016 Kernel information disclosure
11718| [114543] Microsoft Windows up to Server 2016 Kernel information disclosure
11719| [114542] Microsoft Windows up to Server 2016 Kernel information disclosure
11720| [114541] Microsoft Windows up to Server 2016 Kernel information disclosure
11721| [114540] Microsoft Windows up to Server 2016 Kernel information disclosure
11722| [114536] Microsoft Windows up to Server 2016 CredSSP privilege escalation
11723| [114535] Microsoft Windows up to Server 2016 Hyper-V denial of service
11724| [114531] Microsoft Windows up to Server 2016 Windows Installer privilege escalation
11725| [114530] Microsoft Windows up to Server 2016 GDI privilege escalation
11726| [114529] Microsoft Windows up to Server 2016 GDI privilege escalation
11727| [114527] Microsoft Windows up to Server 2016 Kernel information disclosure
11728| [114526] Microsoft Windows up to Server 2016 Kernel information disclosure
11729| [114525] Microsoft Windows up to Server 2016 Kernel information disclosure
11730| [114522] Microsoft Windows 10 1607/10 1703/Server 2016 Desktop Bridge privilege escalation
11731| [114521] Microsoft Windows up to Server 2016 Video Control privilege escalation
11732| [114520] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge privilege escalation
11733| [114518] Microsoft Windows up to Server 2016 Remote Assistance information disclosure
11734| [114517] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge VFS privilege escalation
11735| [114516] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
11736| [113835] Microsoft Identity Manager 2016 SP1 cross site scripting
11737| [113264] Microsoft Windows 8.1/RT 8.1/Server 2012 R2 SMBv2/SMBv3 denial of service
11738| [113260] Microsoft Windows up to Server 2016 Kernel memory corruption
11739| [113259] Microsoft Windows 10/Server 2016/Server 1709 NTFS privilege escalation
11740| [113254] Microsoft Windows up to Server 2016 Kernel information disclosure
11741| [113253] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
11742| [113252] Microsoft Windows up to Server 2016 Kernel memory corruption
11743| [113250] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
11744| [113249] Microsoft Windows up to Server 2016 Kernel memory corruption
11745| [113248] Microsoft Windows up to Server 2016 Kernel information disclosure
11746| [113243] Microsoft Windows 10/Server 2016 MultiPoint Management privilege escalation
11747| [113242] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
11748| [113241] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
11749| [113240] Microsoft Windows 10/Server 2016/Server 1709 AppContainer privilege escalation
11750| [113237] Microsoft SharePoint Enterprise Server 2016 cross site scripting
11751| [113236] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11752| [113233] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Uninitialized Memory information disclosure
11753| [113232] Microsoft Excel 2016 memory corruption
11754| [113230] Microsoft Windows up to Server 2016 Scripting Engine information disclosure
11755| [113229] Microsoft Windows up to Server 2016 StructuredQuery memory corruption
11756| [111580] Microsoft Office 2016 on Mac Email Attachment spoofing
11757| [111571] Microsoft SharePoint Enterprise Server 2013/2016 Access cross site scripting
11758| [111567] Microsoft Office 2010/2013/2016 memory corruption
11759| [111564] Microsoft Word 2016 memory corruption
11760| [111562] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
11761| [111561] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
11762| [128730] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
11763| [111358] Microsoft Windows up to Server 2016 IPsec denial of service
11764| [110553] Microsoft Office 2016 C2R information disclosure
11765| [110552] Microsoft SharePoint Enterprise Server 2016 Web Request privilege escalation
11766| [110551] Microsoft Excel 2016 C2R memory corruption
11767| [110550] Microsoft PowerPoint 2013 SP1/2013 RT SP1/2016 information disclosure
11768| [110549] Microsoft Exchange Server 2016 CU6/2016 CU7 Outlook Web Access privilege escalation
11769| [110547] Microsoft Windows up to Server 2016 its:// Protocol information disclosure
11770| [110531] Microsoft Windows 10/Server 2016 Device Guard privilege escalation
11771| [110522] Microsoft Windows up to Server 2016 RRAS privilege escalation
11772| [110350] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
11773| [110318] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
11774| [109391] Microsoft SharePoint Enterprise Server 2016 Project Server cross site request forgery
11775| [109389] Microsoft Excel 2016 Click-to-Run memory corruption
11776| [109360] Microsoft Windows up to Server 2016 Windows Search denial of service
11777| [107759] Microsoft Windows up to Server 2016 SMB denial of service
11778| [107757] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11779| [107756] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11780| [107753] Microsoft Windows 10/Server 2016 SMB privilege escalation
11781| [107744] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
11782| [107741] Microsoft Outlook 2016 Secure Connection Mail information disclosure
11783| [107740] Microsoft Windows up to Server 2016 Graphics memory corruption
11784| [107739] Microsoft Windows up to Server 2016 Graphics memory corruption
11785| [107738] Microsoft Windows up to Server 2016 Search information disclosure
11786| [107734] Microsoft Windows 10/Server 2016 SMB privilege escalation
11787| [107732] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
11788| [107730] Microsoft Windows up to Server 2016 Search Remote memory corruption
11789| [107729] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11790| [107728] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11791| [107727] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
11792| [107724] Microsoft Windows up to Server 2016 Text Services Framework memory corruption
11793| [107723] Microsoft Windows up to Server 2016 SMB information disclosure
11794| [107698] Microsoft Office 2016 memory corruption
11795| [107593] InFocus Mondopad 2.2.08 Excel Spreadsheet Microsoft Office Document Credentials information disclosure
11796| [106544] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
11797| [106531] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
11798| [106529] Microsoft PowerPoint 2016 memory corruption
11799| [106523] Microsoft Windows up to Server 2016 PDF Library memory corruption
11800| [106518] Microsoft Edge on Win10/Server 2016 memory corruption
11801| [106516] Microsoft Windows up to Server 2016 PDF Library memory corruption
11802| [106498] Microsoft Windows up to Server 2016 Shell privilege escalation
11803| [106496] Microsoft Windows up to Server 2016 Uniscribe information disclosure
11804| [106495] Microsoft Windows up to Server 2012 R2 Uniscribe memory corruption
11805| [106492] Microsoft Windows Server 2012/Server 2012 R2/Server 2016 DHCP Service memory corruption
11806| [106489] Microsoft Windows up to Server 2016 Graphics Win32k win32k!fsc_CalcGrayRow memory corruption
11807| [106474] Microsoft Office 2016 memory corruption
11808| [106473] Microsoft SharePoint Server 2013 SP1 cross site scripting
11809| [106472] Microsoft Windows up to Server 2016 Bluetooth Driver Object BlueBorne spoofing
11810| [106470] Microsoft Excel 2011 on Mac memory corruption
11811| [106455] Microsoft Exchange Server 2013/2016 information disclosure
11812| [106454] Microsoft Windows up to Server 2016 Windows NetBT Session Services race condition memory corruption
11813| [105048] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
11814| [105047] Microsoft Edge on Win10/Server 2016 Scripting Engine EntryCall memory corruption
11815| [105046] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
11816| [105040] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
11817| [105038] Microsoft Edge on Win10/Server 2016 Javascript Engine Out-of-Bounds memory corruption
11818| [105037] Microsoft Edge on Win10/Server 2016 Javascript Engine PreVisitCatch memory corruption
11819| [105035] Microsoft SharePoint Server 2010 SP2 cross site scripting
11820| [105033] Microsoft Edge 38.14393.1066.0 on Win10/Server 2016 Use-After-Free information disclosure
11821| [105029] Microsoft Edge on Win10/Server 2016 Javascript Engine ProcessLinkFailedAsmJsModule memory corruption
11822| [105027] Microsoft Edge on Win10/Server 2016 _SelectValueInternal information disclosure
11823| [105024] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
11824| [105023] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
11825| [105017] Microsoft Windows up to Server 2016 Error Reporting information disclosure
11826| [105013] Microsoft Windows 10 1607/10 1703/Server 2016 Hyper-V denial of service
11827| [105011] Microsoft Windows up to Server 2016 Windows Search memory corruption
11828| [105010] Microsoft Windows up to Server 2016 Win32k memory corruption
11829| [105009] Microsoft Windows up to Server 2016 Input Method Editor memory corruption
11830| [105008] Microsoft SQL Server 2012/2014/2016 Analysis Services information disclosure
11831| [104990] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
11832| [104989] Microsoft Windows up to Server 2016 NetBIOS denial of service
11833| [104584] Microsoft Outlook up to 2016 C2R Document File privilege escalation
11834| [104583] Microsoft Outlook up to 2016 C2R Email memory corruption
11835| [104582] Microsoft Outlook up to 2016 C2R Object memory corruption
11836| [103468] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 Open Redirect
11837| [103446] Microsoft Windows up to Server 2016 Search Object privilege escalation
11838| [103445] Microsoft Windows up to Server 2016 Wordpad privilege escalation
11839| [103444] Microsoft Windows up to Server 2016 Explorer denial of service
11840| [103442] Microsoft Windows 10/Server 2016 HoloLens WiFi Packet privilege escalation
11841| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
11842| [103431] Microsoft Windows up to Server 2016 PowerShell PSObject Object privilege escalation
11843| [103429] Microsoft Windows up to Server 2016 Kerberos weak authentication
11844| [103426] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
11845| [103425] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
11846| [103420] Microsoft Windows up to Server 2016 Kerberos Bypass privilege escalation
11847| [103417] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
11848| [102544] Microsoft Edge on Win10/Server 2016 Fetch API information disclosure
11849| [102543] Microsoft Edge on Win10/Server 2016 Javascript XML DOM Object information disclosure
11850| [102463] Microsoft Project Server 2013 SP1 cross site scripting
11851| [102460] Microsoft Outlook 2016 on Mac HTML spoofing
11852| [102448] Microsoft SharePoint Enterprise Server 2016 Reflected cross site scripting
11853| [102446] Microsoft Office up to 2016 privilege escalation
11854| [102445] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 privilege escalation
11855| [102443] Microsoft Office up to 2016 privilege escalation
11856| [102412] Microsoft Windows up to Server 2016 PDF information disclosure
11857| [102397] Microsoft Outlook 2010 SP1/2013 SP1/2016 DLL Loader privilege escalation
11858| [102396] Microsoft Office 2013 SP1/2016 DLL Loader privilege escalation
11859| [102386] Microsoft Windows up to Server 2012 R2 Uniscribe privilege escalation
11860| [102385] Microsoft Windows up to Server 2016 Font Library privilege escalation
11861| [102376] Microsoft Windows up to Server 2016 CAB File privilege escalation
11862| [102375] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
11863| [102374] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
11864| [102373] Microsoft Windows up to Server 2016 Uniscribe Font USP10!MergeLigRecords memory corruption
11865| [101817] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
11866| [101816] Microsoft Windows up to Server 2016 Malware Protection Engine setCaller memory corruption
11867| [101815] Microsoft Windows up to Server 2016 Malware Protection Engine Use-After-Free memory corruption
11868| [101814] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
11869| [101813] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
11870| [101812] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
11871| [101811] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
11872| [101810] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
11873| [101028] Microsoft Windows 10/Server 2016 Hyper-V vSMB privilege escalation
11874| [101020] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
11875| [101019] Microsoft Skype for Business 2016 memory corruption
11876| [101018] Microsoft SharePoint 2010 SP2/2013 SP1/2016 memory corruption
11877| [101016] Microsoft PowerPoint 2011 on Mac memory corruption
11878| [101015] Microsoft PowerPoint 2011 on Mac memory corruption
11879| [101014] Microsoft Office 2010 SP2/2016 memory corruption
11880| [101013] Microsoft Office 2010 SP2/2016 memory corruption
11881| [101002] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
11882| [101001] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
11883| [101000] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
11884| [100999] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
11885| [100918] Microsoft Windows 8/8.1/10/Server 2012/Server 2016 Malware Protection Service Type Confusion privilege escalation
11886| [99697] Microsoft SharePoint Server 2010 SP1/2010 SP2 Excel Services cross site scripting
11887| [99683] Microsoft Windows 10 1607/10 1703/Server 2012 R2/Server 2016 Active Directory Lockout privilege escalation
11888| [99682] Microsoft Outlook 2011 on Mac HTML Tag Validator spoofing
11889| [99681] Microsoft Windows up to Server 2016 OLE Integrity-Level Check privilege escalation
11890| [99667] Microsoft Windows 10/Server 2016 Active Directory Service Unresponsive denial of service
11891| [98272] Microsoft Windows up to 10/Server 2016 Local Session privilege escalation
11892| [98096] Microsoft Exchange 2013 SP1 privilege escalation
11893| [98095] Microsoft Lync for Mac 2011 Certificate Validation weak authentication
11894| [98094] Microsoft SharePoint Server 2013 SP1 cross site scripting
11895| [98093] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
11896| [98091] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
11897| [98090] Microsoft SharePoint Server 2010 SP2/2013 SP1 information disclosure
11898| [98089] Microsoft Office Web Apps 2013 SP1 memory corruption
11899| [98082] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 denial of service
11900| [98081] Microsoft Excel up to 2016 information disclosure
11901| [98080] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
11902| [98079] Microsoft Word 2016 memory corruption
11903| [98076] Microsoft Lync/Skype for Business 2010/2013/2016 Graphics Component privilege escalation
11904| [98075] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
11905| [98074] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
11906| [98073] Microsoft Office 2010 SP2/Word Viewer Graphics Component information disclosure
11907| [98069] Microsoft Windows up to Server 2012 R2 Color Management memory corruption
11908| [98056] Microsoft Windows up to Server 2016 DNS Query information disclosure
11909| [98054] Microsoft Windows up to Server 2016 SMBv2/SMBv3 NULL Pointer Dereference memory corruption
11910| [98017] Microsoft Windows up to Server 2016 PDF memory corruption
11911| [98015] Microsoft Windows 10/Server 2016 Hyper-V denial of service
11912| [98013] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
11913| [98007] Microsoft Windows 10/Server 2016 Hyper-V Network Switch denial of service
11914| [98006] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
11915| [96521] Microsoft Windows 8.1/10/Server 2012/Server 2016 SMB Response mrxsmb20.sys denial of service
11916| [95781] Microsoft PowerPoint 2016 Java Embedded Object privilege escalation
11917| [95125] Microsoft Word/SharePoint Enterprise Server 2016 Document privilege escalation
11918| [94451] Microsoft Office 2011 memory corruption
11919| [94447] Microsoft Office 2010 SP2 memory corruption
11920| [94446] Microsoft Office 2016 memory corruption
11921| [94444] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL Loader memory corruption
11922| [94443] Microsoft Office up to 2016 information disclosure
11923| [94442] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
11924| [93964] Microsoft Windows 7 Excel Starter 2010 XXE information disclosure
11925| [93543] Microsoft SQL Server 2016 FILESTREAM Path privilege escalation
11926| [93540] Microsoft Excel 2010 SP2/2011/2016 memory corruption
11927| [93416] Microsoft SQL Server up to 2012 SP3/2014 SP2/2016 Server Agent atxcore.dll privilege escalation
11928| [93415] Microsoft SQL Server 2016 MDS API cross site scripting
11929| [93414] Microsoft SQL Server up to 2012 SP3 RDBMS Engine privilege escalation
11930| [93413] Microsoft SQL Server up to 2014 SP2/2016 RDBMS Engine privilege escalation
11931| [93412] Microsoft SQL Server 2016 RDBMS Engine privilege escalation
11932| [93393] Microsoft Office up to 2016 memory corruption
11933| [93392] Microsoft Office up to 2016 memory corruption
11934| [93391] Microsoft Office up to 2016 memory corruption
11935| [93389] Microsoft Windows up to Server 2016 Media Foundation memory corruption
11936| [93388] Microsoft Windows up to Server 2016 Animation Manager Stylesheets memory corruption
11937| [92587] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 Transaction Manager privilege escalation
11938| [92584] Microsoft Office up to 2016 memory corruption
11939| [91571] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
11940| [91570] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
11941| [91556] Microsoft Exchange 2016 Meeting Invation cross site scripting
11942| [91555] Microsoft Exchange 2013/2016 Link spoofing
11943| [91550] Microsoft Office 2016 memory corruption
11944| [91547] Microsoft Office 2010 memory corruption
11945| [91543] Microsoft Office up to 2016 memory corruption
11946| [91541] Microsoft Office 2013/2016 APP-V ASLR privilege escalation
11947| [90711] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF privilege escalation
11948| [90710] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 Netlogon privilege escalation
11949| [90704] Microsoft Office 2013/2013 RT/2016 memory corruption
11950| [89043] Microsoft Office up to 2016 memory corruption
11951| [89041] Microsoft Office up to 2016 memory corruption
11952| [89040] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 memory corruption
11953| [89038] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature privilege escalation
11954| [89037] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
11955| [87961] Microsoft Windows up to Server 2012 R2 Search denial of service
11956| [87959] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
11957| [87958] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF memory corruption
11958| [87957] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
11959| [87956] Microsoft Exchange 2013/2016 Oracle Outside In Libraries information disclosure
11960| [87944] Microsoft Windows Server 2012/Server 2012 R2 Virtual PCI Memory information disclosure
11961| [87940] Microsoft Windows Server 2012/Server 2012 R2 DNS Server Use-After-Free memory corruption
11962| [87936] Microsoft Office up to 2016 memory corruption
11963| [87166] Microsoft Windows up to Server 2012 R2 DirectX Graphics Kernel Subsystem privilege escalation
11964| [87156] Microsoft Windows 8.1/RT 8.1/10/Server 2012 R2 Shell memory corruption
11965| [87149] Microsoft Office up to 2016 memory corruption
11966| [87148] Microsoft Office 2010 Graphics memory corruption
11967| [87146] Microsoft Office 2011/2013/2013 RT/2016 memory corruption
11968| [82229] Microsoft Excel 2010 SP2 Office Document memory corruption
11969| [82223] Microsoft Windows 8.1/10/Server 2012 R2 Hyper-V Memory information disclosure
11970| [82222] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Memory information disclosure
11971| [82221] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Hyper-V privilege escalation
11972| [81274] Microsoft Office up to 2016 memory corruption
11973| [81270] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
11974| [81269] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
11975| [81268] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
11976| [80886] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
11977| [80885] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP memory corruption
11978| [80878] Microsoft Windows Server 2012 R2 Active Directory Federation Service denial of service
11979| [80874] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP privilege escalation
11980| [80870] Microsoft Office up to 2016 memory corruption
11981| [80868] Microsoft Office up to 2016 memory corruption
11982| [80867] Microsoft Office up to 2016 memory corruption
11983| [80865] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 DLL Loader memory corruption
11984| [80860] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Reader memory corruption
11985| [80859] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
11986| [80231] Microsoft Excel up to 2016 Office Document memory corruption
11987| [80229] Microsoft Exchange Server 2013 SP1/2013 CU 10/2013 CU 11/2016 Outlook Web Access cross site scripting
11988| [80228] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
11989| [80227] Microsoft Exchange Server 2013 SP1/2013 CU 10/2016 Outlook Web Access cross site scripting
11990| [80226] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
11991| [80218] Microsoft Office up to 2016 ASLR privilege escalation
11992| [80217] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
11993| [80216] Microsoft Office up to 2016 Office Document memory corruption
11994| [80206] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
11995| [128763] Microsoft Exchange Server 2016 CU10/2016 CU11/2019 memory corruption
11996| [79508] Microsoft Windows up to Server 2012 R2 Library Loader memory corruption
11997| [79500] Microsoft Office 2010/2011/2016 memory corruption
11998| [79183] Microsoft Windows up to Server 2012 R2 IPsec denial of service
11999| [79173] Microsoft Windows up to Server 2012 R2 Graphics information disclosure
12000| [79117] Microsoft Outlook 2011/2016 on Mac HTML spoofing
12001| [78375] Microsoft SharePoint Server/SharePoint Foundation 2013 SP1 cross site scripting
12002| [77645] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
12003| [77644] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
12004| [77638] Microsoft Lync Server 2013 cross site scripting
12005| [77628] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
12006| [77612] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access Stack-Based information disclosure
12007| [77050] Microsoft Office up to 2016 memory corruption
12008| [77037] Microsoft Windows Server 2012/Server 2012 R2 System Center Operations Manager cross site scripting
12009| [76461] Microsoft Windows up to Server 2012 R2 Domain-Controller Communication Credentials information disclosure
12010| [76460] Microsoft Windows 7 SP1/8/Server 2012 RDP Server Service memory corruption
12011| [76448] Microsoft Windows 8.1/Server 2012 R2 Hyper-V memory corruption
12012| [75793] Microsoft Exchange Server 2013 CU8 cross site scripting
12013| [75792] Microsoft Exchange Server 2013 SP1 CU8 cross site request forgery
12014| [75791] Microsoft Office 2013 SP1 Office Document Uninitialized Memory memory corruption
12015| [75787] Microsoft Exchange Server 2013 SP1 CU8 Same Origin Policy privilege escalation
12016| [75786] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
12017| [66976] Microsoft Access 2010 VBA Datatype denial of service
12018| [74848] Microsoft SharePoint Foundation/SharePoint Server 2013 SP1 cross site scripting
12019| [74842] Microsoft Windows 8.1/Server 2012 R2 Hyper-V denial of service
12020| [74836] Microsoft Project Server 2010 SP2/2013 SP1 cross site scripting
12021| [74835] Microsoft Office 2011 on Mac Use-After-Free cross site scripting
12022| [74834] Microsoft Windows Server 2012 R2 Active Directory Federation Services 3.0 privilege escalation
12023| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
12024| [74393] Microsoft SharePoint Server 2013 Foundation cross site scripting
12025| [73967] Microsoft Office up to 2013 SP1 Office File memory corruption
12026| [73966] Microsoft Office up to 2013 SP1 RTF File memory corruption
12027| [73965] Microsoft Office up to 2013 SP1 Use-After-Free memory corruption
12028| [73961] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 Remote Desktop Protocol Object Management denial of service
12029| [69162] Microsoft System Center Virtual Machine Manager 2012 privilege escalation
12030| [69160] Microsoft Windows up to Server 2012 Process privilege escalation
12031| [69156] Microsoft Office 2010 Object memory corruption
12032| [68593] Microsoft Windows up to Server 2012 Network Location Awareness Service privilege escalation
12033| [68417] Microsoft Exchange 2013 Outlook Web Access Token spoofing
12034| [68191] Microsoft SharePoint 2010 cross site scripting
12035| [67828] Microsoft ASP.NET MVC 2/3/4/5/5.1 System.Web.Mvc.dll cross site scripting
12036| [67518] Microsoft Lync 2013 denial of service
12037| [67517] Microsoft Lync 2013 Script Reflected cross site scripting
12038| [67516] Microsoft Lync 2010/2013 denial of service
12039| [67362] Microsoft Windows up to Server 2012 R2 Remote Procedure Call privilege escalation
12040| [67360] Microsoft SharePoint 2013 App Permission Management cross site scripting
12041| [13549] Microsoft Windows 7/8/8.1/Server 2012 Remote Desktop Protocol weak encryption
12042| [13547] Microsoft Lync 2010/2013 Meeting cross site scripting
12043| [13228] Microsoft Office 2013 Document privilege escalation
12044| [68577] Microsoft ASP.NET 2014.3.1209 Telerik UI RadAsyncUpload directory traversal
12045| [12267] Microsoft Forefront Security for Exchange Server 2010 Mail memory corruption
12046| [12263] Microsoft Windows up to Server 2012 Direct2D 2D Geometric Figure memory corruption
12047| [12238] Microsoft Windows 8/Server 2012/RT IPv6 denial of service
12048| [12185] Microsoft .NET Framework 2/4 HMAC weak authentication
12049| [12183] Microsoft .NET Framework 2/4 DTD denial of service
12050| [11673] Microsoft Windows Live Movie Maker 2011 WAV File denial of service
12051| [11468] Microsoft Exchange 2010/2013 cross site scripting
12052| [11466] Microsoft Office 2013 File Response information disclosure
12053| [11457] Microsoft SharePoint Server/Office Web Apps 2010 SP1/2010 SP2/2013 W3WP Service Account privilege escalation
12054| [11150] Microsoft Windows 8/Server 2012 Hyper-V Data Structure Value Crash privilege escalation
12055| [11004] Microsoft Windows Server 2012 R2 RDP Restricted Admin Mode weak authentication
12056| [10250] Microsoft SharePoint Server up to 2013 W3WP Process denial of service
12057| [10249] Microsoft SharePoint 2010/2003/2007/2.0/3.0 Workflow memory corruption
12058| [10248] Microsoft SharePoint Server up to 2013 cross site scripting
12059| [9943] Microsoft Windows Server 2012 NAT Driver ICMP Packet denial of service
12060| [8739] Microsoft Windows Essentials up to 2012 Windows Writer Eingabe information disclosure
12061| [8725] Microsoft Lync 2010/2013 Use-After-Free memory corruption
12062| [8722] Microsoft Windows 8/Server 2012/RT HTTP.sys denial of service
12063| [8206] Microsoft SharePoint Server 2010 SP1 HTML Sanitization Component cross site scripting
12064| [8203] Microsoft Windows up to 2012 AD LDAP Query denial of service
12065| [8200] Microsoft SharePoint Server 2013 ACL information disclosure
12066| [7971] Microsoft Office for Mac 2011 up to 14.3.1 on Mac HTML5 Mail Message Parser File information disclosure
12067| [7969] Microsoft OneNote 2010 SP1 ONE File information disclosure
12068| [7968] Microsoft SharePoint Server 2010 SP1 Input Validator Eingabe Crash denial of service
12069| [7967] Microsoft SharePoint Server 2010 SP1 User Account Eingabe Crash information disclosure
12070| [7966] Microsoft SharePoint Server 2010 SP1 Eingabe Crash cross site scripting
12071| [7965] Microsoft SharePoint Server 2010 SP1 User Account Callback URL privilege escalation
12072| [7964] Microsoft Visio 2010 Tree Object Type File memory corruption
12073| [7343] Microsoft Lync 2012 HTTP Format String
12074| [7258] Microsoft Windows up to 8/Server 2012 SSL/TLS race condition
12075| [7230] Microsoft Excel 2010 SP1 on 32-bit XLS File Formatting Information Crash denial of service
12076| [6831] Microsoft Office Picture Manager 2010 File memory corruption
12077| [62720] EMC NetWorker Module for Microsoft Applications up to 2.2.0 memory corruption
12078| [6624] Microsoft SQL Server up to 2012 Report Manager cross site scripting
12079| [62238] Microsoft Visual Studio Team Foundation Server 2010 cross site scripting
12080| [5946] Microsoft Visio/Visio Viewer up to 2010 SP1 File memory corruption
12081| [5644] Microsoft SharePoint 2010 scriptesx.ashx cross site scripting
12082| [5641] Microsoft SharePoint 2010 cross site scripting
12083| [60943] Microsoft Dynamics AX 2012 Enterprise Portal cross site scripting
12084| [12311] Microsoft Lync 2010 Search race condition
12085| [60570] Microsoft Forefront Unified Access Gateway 2010 information disclosure
12086| [60569] Microsoft Forefront Unified Access Gateway 2010 spoofing
12087| [60208] Microsoft Visio Viewer 2010 memory corruption
12088| [60207] Microsoft Visio Viewer 2010 memory corruption
12089| [60206] Microsoft Visio Viewer 2010 memory corruption
12090| [4640] Microsoft SharePoint 2010 inplview.aspx cross site scripting
12091| [4636] Microsoft SharePoint 2010 wizardlist.aspx cross site scripting
12092| [4635] Microsoft SharePoint 2010 themeweb.aspx cross site scripting
12093| [59008] Microsoft Forefront Unified Access Gateway 2010 Crash denial of service
12094| [58995] Microsoft Forefront Unified Access Gateway 2010 memory corruption
12095| [58994] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
12096| [58993] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
12097| [4424] Microsoft Host Integration Server up to 2010 denial of service
12098| [4420] Microsoft Forefront Unified Access Gateway 2010 memory corruption
12099| [58487] Microsoft SharePoint Foundation 2010 cross site scripting
12100| [58486] Microsoft SharePoint Foundation 2010 Reflected cross site scripting
12101| [58485] Microsoft SharePoint Foundation 2010 EditForm.aspx cross site scripting
12102| [4414] Microsoft SharePoint 2010 cross site scripting
12103| [4413] Microsoft SharePoint 2010/2007/3.0 XML/XLS Designfehler
12104| [91971] Microsoft Skype 2.2.x/5.2.x/5.3.x denial of service
12105| [57693] Microsoft Forefront Threat Management Gateway 2010 NSPLookupServiceNext memory corruption
12106| [4332] Microsoft PowerPoint 2010/2007 memory corruption
12107| [56028] Microsoft Data Access Components 2.8 memory corruption
12108| [55777] Microsoft Windows Movie Maker 2.6 memory corruption
12109| [55424] Microsoft Forefront Unified Access Gateway 2010 Signurl.asp cross site scripting
12110| [55415] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
12111| [55414] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
12112| [55413] Microsoft Forefront Unified Access Gateway 2010 spoofing
12113| [54341] Microsoft Windows Movie Maker 2.1 memory corruption
12114| [54549] Microsoft PowerPoint 2010 pptimpconv.dll memory corruption
12115| [4009] Microsoft NET Framework 2.x/3.x denial of service
12116| [45681] Microsoft Internet Explorer 8 Beta 2 privilege escalation
12117| [45449] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
12118| [45448] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
12119| [45446] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
12120| [2927] Microsoft Data Access Components 2.x ADODB.Connection ActiveX Control memory corruption
12121| [32692] Microsoft XML Core Services up to 2.6 memory corruption
12122| [32691] Microsoft XML Core Services up to 2.6 memory corruption
12123| [29608] Microsoft Data Access Components 2.7 memory corruption
12124|
12125| MITRE CVE - https://cve.mitre.org:
12126| [CVE-2013-3661] The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
12127| [CVE-2013-3660] The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
12128| [CVE-2013-3174] DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."
12129| [CVE-2013-3173] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overwrite Vulnerability."
12130| [CVE-2013-3172] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to cause a denial of service (system hang) via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."
12131| [CVE-2013-3171] The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."
12132| [CVE-2013-3167] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."
12133| [CVE-2013-3154] The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."
12134| [CVE-2013-3138] Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
12135| [CVE-2013-3136] The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
12136| [CVE-2013-3134] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."
12137| [CVE-2013-3133] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
12138| [CVE-2013-3132] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Delegate Reflection Bypass Vulnerability."
12139| [CVE-2013-3131] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
12140| [CVE-2013-1345] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Vulnerability."
12141| [CVE-2013-1340] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."
12142| [CVE-2013-1339] The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
12143| [CVE-2013-1336] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."
12144| [CVE-2013-1335] Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
12145| [CVE-2013-1334] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."
12146| [CVE-2013-1332] dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."
12147| [CVE-2013-1331] Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
12148| [CVE-2013-1329] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
12149| [CVE-2013-1328] Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
12150| [CVE-2013-1327] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
12151| [CVE-2013-1323] Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
12152| [CVE-2013-1322] Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
12153| [CVE-2013-1321] Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
12154| [CVE-2013-1320] Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
12155| [CVE-2013-1319] Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
12156| [CVE-2013-1318] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
12157| [CVE-2013-1317] Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."
12158| [CVE-2013-1316] Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."
12159| [CVE-2013-1302] Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
12160| [CVE-2013-1301] Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
12161| [CVE-2013-1300] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."
12162| [CVE-2013-1295] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "CSRSS Memory Corruption Vulnerability."
12163| [CVE-2013-1294] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
12164| [CVE-2013-1293] The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application that leverages improper handling of objects in memory, aka "NTFS NULL Pointer Dereference Vulnerability."
12165| [CVE-2013-1292] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
12166| [CVE-2013-1291] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 Gold and SP1, and Windows 8 allows local users to cause a denial of service (reboot) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability" or "Win32k Font Parsing Vulnerability."
12167| [CVE-2013-1287] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1286.
12168| [CVE-2013-1286] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.
12169| [CVE-2013-1285] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1286 and CVE-2013-1287.
12170| [CVE-2013-1283] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
12171| [CVE-2013-1281] The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
12172| [CVE-2013-1280] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Reference Count Vulnerability."
12173| [CVE-2013-1279] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1278.
12174| [CVE-2013-1278] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1279.
12175| [CVE-2013-1277] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12176| [CVE-2013-1276] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12177| [CVE-2013-1275] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12178| [CVE-2013-1274] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12179| [CVE-2013-1273] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12180| [CVE-2013-1272] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12181| [CVE-2013-1271] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12182| [CVE-2013-1270] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12183| [CVE-2013-1269] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12184| [CVE-2013-1268] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12185| [CVE-2013-1267] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12186| [CVE-2013-1266] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12187| [CVE-2013-1265] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12188| [CVE-2013-1264] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12189| [CVE-2013-1263] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12190| [CVE-2013-1262] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12191| [CVE-2013-1261] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12192| [CVE-2013-1260] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12193| [CVE-2013-1259] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12194| [CVE-2013-1258] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12195| [CVE-2013-1257] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12196| [CVE-2013-1256] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12197| [CVE-2013-1255] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12198| [CVE-2013-1254] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12199| [CVE-2013-1253] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12200| [CVE-2013-1252] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12201| [CVE-2013-1251] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12202| [CVE-2013-1250] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12203| [CVE-2013-1249] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12204| [CVE-2013-1248] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
12205| [CVE-2013-0095] Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability."
12206| [CVE-2013-0077] Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
12207| [CVE-2013-0076] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."
12208| [CVE-2013-0075] The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
12209| [CVE-2013-0073] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."
12210| [CVE-2013-0013] The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability."
12211| [CVE-2013-0011] The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulnerability."
12212| [CVE-2013-0010] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
12213| [CVE-2013-0009] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.
12214| [CVE-2013-0008] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."
12215| [CVE-2013-0004] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability."
12216| [CVE-2013-0003] Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."
12217| [CVE-2013-0002] Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."
12218| [CVE-2013-0001] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka "System Drawing Information Disclosure Vulnerability."
12219| [CVE-2012-5672] Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
12220| [CVE-2012-4791] Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
12221| [CVE-2012-4786] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
12222| [CVE-2012-4776] The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."
12223| [CVE-2012-4774] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted (1) file name or (2) subfolder name that triggers use of unallocated memory as the destination of a copy operation, aka "Windows Filename Parsing Vulnerability."
12224| [CVE-2012-2897] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."
12225| [CVE-2012-2556] The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."
12226| [CVE-2012-2553] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
12227| [CVE-2012-2552] Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
12228| [CVE-2012-2551] The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."
12229| [CVE-2012-2543] Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1
12230| [CVE-2012-2539] Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
12231| [CVE-2012-2536] Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
12232| [CVE-2012-2530] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
12233| [CVE-2012-2529] Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Windows Kernel Integer Overflow Vulnerability."
12234| [CVE-2012-2528] Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
12235| [CVE-2012-2527] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
12236| [CVE-2012-2524] Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
12237| [CVE-2012-2520] Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
12238| [CVE-2012-2519] Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
12239| [CVE-2012-1896] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
12240| [CVE-2012-1895] The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
12241| [CVE-2012-1893] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability."
12242| [CVE-2012-1890] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability."
12243| [CVE-2012-1887] Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
12244| [CVE-2012-1886] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
12245| [CVE-2012-1885] Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
12246| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
12247| [CVE-2012-1867] Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."
12248| [CVE-2012-1866] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability."
12249| [CVE-2012-1865] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864.
12250| [CVE-2012-1864] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865.
12251| [CVE-2012-1863] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
12252| [CVE-2012-1862] Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."
12253| [CVE-2012-1860] Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."
12254| [CVE-2012-1858] The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
12255| [CVE-2012-1856] The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
12256| [CVE-2012-1855] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."
12257| [CVE-2012-1854] Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12258| [CVE-2012-1851] Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
12259| [CVE-2012-1850] The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability."
12260| [CVE-2012-1848] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."
12261| [CVE-2012-1847] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12262| [CVE-2012-1537] Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
12263| [CVE-2012-1528] Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability."
12264| [CVE-2012-1527] Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability."
12265| [CVE-2012-1459] The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
12266| [CVE-2012-1457] The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
12267| [CVE-2012-1453] The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
12268| [CVE-2012-1443] The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
12269| [CVE-2012-1420] The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
12270| [CVE-2012-1194] The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
12271| [CVE-2012-0185] Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
12272| [CVE-2012-0184] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12273| [CVE-2012-0183] Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
12274| [CVE-2012-0182] Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
12275| [CVE-2012-0181] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."
12276| [CVE-2012-0180] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."
12277| [CVE-2012-0179] Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."
12278| [CVE-2012-0178] Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."
12279| [CVE-2012-0177] Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."
12280| [CVE-2012-0175] The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."
12281| [CVE-2012-0174] Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."
12282| [CVE-2012-0173] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.
12283| [CVE-2012-0167] Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
12284| [CVE-2012-0165] GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."
12285| [CVE-2012-0163] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
12286| [CVE-2012-0161] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
12287| [CVE-2012-0160] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
12288| [CVE-2012-0159] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview
12289| [CVE-2012-0158] The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12290| [CVE-2012-0157] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."
12291| [CVE-2012-0156] DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability."
12292| [CVE-2012-0154] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."
12293| [CVE-2012-0152] The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
12294| [CVE-2012-0151] The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
12295| [CVE-2012-0150] Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."
12296| [CVE-2012-0149] afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
12297| [CVE-2012-0148] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
12298| [CVE-2012-0143] Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
12299| [CVE-2012-0142] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12300| [CVE-2012-0141] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
12301| [CVE-2012-0015] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
12302| [CVE-2012-0014] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."
12303| [CVE-2012-0013] Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."
12304| [CVE-2012-0009] Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
12305| [CVE-2012-0008] Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
12306| [CVE-2012-0006] The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability."
12307| [CVE-2012-0005] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."
12308| [CVE-2012-0004] Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
12309| [CVE-2012-0003] Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."
12310| [CVE-2012-0002] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."
12311| [CVE-2012-0001] The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
12312| [CVE-2011-5046] The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."
12313| [CVE-2011-4434] Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
12314| [CVE-2011-3417] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
12315| [CVE-2011-3416] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
12316| [CVE-2011-3415] Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
12317| [CVE-2011-3414] The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
12318| [CVE-2011-3413] Microsoft PowerPoint 2007 SP2
12319| [CVE-2011-3412] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."
12320| [CVE-2011-3411] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."
12321| [CVE-2011-3410] Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."
12322| [CVE-2011-3408] Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability."
12323| [CVE-2011-3406] Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability."
12324| [CVE-2011-3403] Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."
12325| [CVE-2011-3402] Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."
12326| [CVE-2011-3400] Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
12327| [CVE-2011-3397] The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."
12328| [CVE-2011-3396] Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."
12329| [CVE-2011-2019] Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
12330| [CVE-2011-2018] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
12331| [CVE-2011-2016] Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
12332| [CVE-2011-2014] The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability."
12333| [CVE-2011-2013] Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."
12334| [CVE-2011-2011] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
12335| [CVE-2011-2008] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
12336| [CVE-2011-2007] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
12337| [CVE-2011-2005] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
12338| [CVE-2011-2004] Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.
12339| [CVE-2011-2003] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."
12340| [CVE-2011-2002] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka "Win32k TrueType Font Type Translation Vulnerability."
12341| [CVE-2011-1991] Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability."
12342| [CVE-2011-1990] Microsoft Excel 2007 SP2
12343| [CVE-2011-1989] Microsoft Excel 2003 SP3 and 2007 SP2
12344| [CVE-2011-1988] Microsoft Excel 2003 SP3 and 2007 SP2
12345| [CVE-2011-1987] Array index error in Microsoft Excel 2003 SP3 and 2007 SP2
12346| [CVE-2011-1986] Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
12347| [CVE-2011-1985] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability."
12348| [CVE-2011-1984] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
12349| [CVE-2011-1983] Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."
12350| [CVE-2011-1982] Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
12351| [CVE-2011-1980] Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability."
12352| [CVE-2011-1979] Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
12353| [CVE-2011-1978] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."
12354| [CVE-2011-1976] Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
12355| [CVE-2011-1975] Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
12356| [CVE-2011-1974] NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
12357| [CVE-2011-1972] Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
12358| [CVE-2011-1971] The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."
12359| [CVE-2011-1970] The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
12360| [CVE-2011-1968] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability."
12361| [CVE-2011-1967] Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."
12362| [CVE-2011-1966] The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
12363| [CVE-2011-1965] Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."
12364| [CVE-2011-1894] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
12365| [CVE-2011-1893] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
12366| [CVE-2011-1892] Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
12367| [CVE-2011-1888] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
12368| [CVE-2011-1887] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
12369| [CVE-2011-1885] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
12370| [CVE-2011-1884] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12371| [CVE-2011-1883] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12372| [CVE-2011-1882] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12373| [CVE-2011-1881] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
12374| [CVE-2011-1880] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
12375| [CVE-2011-1879] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12376| [CVE-2011-1878] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12377| [CVE-2011-1877] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
12378| [CVE-2011-1876] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12379| [CVE-2011-1875] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12380| [CVE-2011-1874] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
12381| [CVE-2011-1873] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."
12382| [CVE-2011-1872] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
12383| [CVE-2011-1871] Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."
12384| [CVE-2011-1870] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability."
12385| [CVE-2011-1869] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
12386| [CVE-2011-1868] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
12387| [CVE-2011-1508] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."
12388| [CVE-2011-1284] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability."
12389| [CVE-2011-1283] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability."
12390| [CVE-2011-1282] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability."
12391| [CVE-2011-1281] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability."
12392| [CVE-2011-1280] The XML Editor in Microsoft InfoPath 2007 SP2 and 2010
12393| [CVE-2011-1279] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."
12394| [CVE-2011-1278] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."
12395| [CVE-2011-1277] Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
12396| [CVE-2011-1276] Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
12397| [CVE-2011-1275] Microsoft Excel 2002 SP3
12398| [CVE-2011-1274] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
12399| [CVE-2011-1273] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12400| [CVE-2011-1272] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
12401| [CVE-2011-1270] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
12402| [CVE-2011-1269] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
12403| [CVE-2011-1268] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
12404| [CVE-2011-1267] The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
12405| [CVE-2011-1264] Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
12406| [CVE-2011-1263] Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
12407| [CVE-2011-1253] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Class Inheritance Vulnerability."
12408| [CVE-2011-1252] Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
12409| [CVE-2011-1249] The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
12410| [CVE-2011-1248] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."
12411| [CVE-2011-1247] Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Active Accessibility Insecure Library Loading Vulnerability."
12412| [CVE-2011-1242] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12413| [CVE-2011-1241] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12414| [CVE-2011-1240] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12415| [CVE-2011-1239] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12416| [CVE-2011-1238] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12417| [CVE-2011-1237] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12418| [CVE-2011-1236] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12419| [CVE-2011-1235] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12420| [CVE-2011-1234] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12421| [CVE-2011-1233] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12422| [CVE-2011-1232] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12423| [CVE-2011-1231] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12424| [CVE-2011-1230] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12425| [CVE-2011-1229] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12426| [CVE-2011-1228] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12427| [CVE-2011-1227] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12428| [CVE-2011-1226] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12429| [CVE-2011-1225] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12430| [CVE-2011-0980] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."
12431| [CVE-2011-0979] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12432| [CVE-2011-0978] Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
12433| [CVE-2011-0977] Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
12434| [CVE-2011-0976] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
12435| [CVE-2011-0677] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12436| [CVE-2011-0676] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
12437| [CVE-2011-0675] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12438| [CVE-2011-0674] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12439| [CVE-2011-0672] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12440| [CVE-2011-0671] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12441| [CVE-2011-0670] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12442| [CVE-2011-0667] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12443| [CVE-2011-0666] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12444| [CVE-2011-0665] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12445| [CVE-2011-0664] Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
12446| [CVE-2011-0662] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
12447| [CVE-2011-0661] The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
12448| [CVE-2011-0660] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
12449| [CVE-2011-0658] Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."
12450| [CVE-2011-0657] DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
12451| [CVE-2011-0656] Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12452| [CVE-2011-0655] Microsoft PowerPoint 2007 SP2 and 2010
12453| [CVE-2011-0654] Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.
12454| [CVE-2011-0107] Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
12455| [CVE-2011-0105] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
12456| [CVE-2011-0104] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
12457| [CVE-2011-0103] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."
12458| [CVE-2011-0101] Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, doubly-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
12459| [CVE-2011-0098] Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12460| [CVE-2011-0097] Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12461| [CVE-2011-0096] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
12462| [CVE-2011-0093] ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
12463| [CVE-2011-0092] The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
12464| [CVE-2011-0091] Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
12465| [CVE-2011-0090] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
12466| [CVE-2011-0089] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
12467| [CVE-2011-0088] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability."
12468| [CVE-2011-0087] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."
12469| [CVE-2011-0086] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability."
12470| [CVE-2011-0043] Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
12471| [CVE-2011-0042] SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
12472| [CVE-2011-0041] Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
12473| [CVE-2011-0040] The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
12474| [CVE-2011-0039] The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
12475| [CVE-2011-0034] Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted parameter values in an OpenType font, aka "OpenType Font Stack Overflow Vulnerability."
12476| [CVE-2011-0033] The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
12477| [CVE-2011-0032] Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
12478| [CVE-2011-0031] The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
12479| [CVE-2011-0030] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
12480| [CVE-2011-0028] WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."
12481| [CVE-2010-5082] Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."
12482| [CVE-2010-4701] Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
12483| [CVE-2010-4669] The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
12484| [CVE-2010-4562] Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
12485| [CVE-2010-4398] Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
12486| [CVE-2010-4182] Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown
12487| [CVE-2010-3974] fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."
12488| [CVE-2010-3970] Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."
12489| [CVE-2010-3966] Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."
12490| [CVE-2010-3965] Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
12491| [CVE-2010-3964] Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
12492| [CVE-2010-3963] Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability."
12493| [CVE-2010-3961] The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."
12494| [CVE-2010-3960] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."
12495| [CVE-2010-3959] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."
12496| [CVE-2010-3958] The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."
12497| [CVE-2010-3957] Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."
12498| [CVE-2010-3956] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."
12499| [CVE-2010-3955] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."
12500| [CVE-2010-3954] Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."
12501| [CVE-2010-3946] Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."
12502| [CVE-2010-3945] Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
12503| [CVE-2010-3944] win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
12504| [CVE-2010-3943] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."
12505| [CVE-2010-3942] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."
12506| [CVE-2010-3941] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."
12507| [CVE-2010-3940] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."
12508| [CVE-2010-3939] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."
12509| [CVE-2010-3937] Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."
12510| [CVE-2010-3338] The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
12511| [CVE-2010-3337] Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.
12512| [CVE-2010-3336] Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."
12513| [CVE-2010-3335] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."
12514| [CVE-2010-3334] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
12515| [CVE-2010-3333] Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
12516| [CVE-2010-3332] Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."
12517| [CVE-2010-3324] The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
12518| [CVE-2010-3243] Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."
12519| [CVE-2010-3242] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
12520| [CVE-2010-3241] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
12521| [CVE-2010-3240] Microsoft Excel 2002 SP3 and 2007 SP2
12522| [CVE-2010-3239] Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
12523| [CVE-2010-3238] Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
12524| [CVE-2010-3237] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
12525| [CVE-2010-3236] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
12526| [CVE-2010-3235] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
12527| [CVE-2010-3234] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
12528| [CVE-2010-3233] Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
12529| [CVE-2010-3232] Microsoft Excel 2003 SP3 and 2007 SP2
12530| [CVE-2010-3231] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
12531| [CVE-2010-3230] Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
12532| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
12533| [CVE-2010-3227] Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."
12534| [CVE-2010-3223] The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
12535| [CVE-2010-3222] Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability."
12536| [CVE-2010-3221] Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
12537| [CVE-2010-3220] Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
12538| [CVE-2010-3219] Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
12539| [CVE-2010-3218] Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."
12540| [CVE-2010-3217] Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
12541| [CVE-2010-3216] Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."
12542| [CVE-2010-3215] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."
12543| [CVE-2010-3214] Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010
12544| [CVE-2010-3213] Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
12545| [CVE-2010-3200] MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc.
12546| [CVE-2010-3190] Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1
12547| [CVE-2010-3148] Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
12548| [CVE-2010-3147] Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
12549| [CVE-2010-3146] Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability."
12550| [CVE-2010-3144] Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or INS file, aka "Internet Connection Signup Wizard Insecure Library Loading Vulnerability."
12551| [CVE-2010-3142] Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
12552| [CVE-2010-2750] Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."
12553| [CVE-2010-2748] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."
12554| [CVE-2010-2747] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
12555| [CVE-2010-2746] Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
12556| [CVE-2010-2744] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."
12557| [CVE-2010-2742] The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."
12558| [CVE-2010-2741] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
12559| [CVE-2010-2740] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."
12560| [CVE-2010-2739] Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.
12561| [CVE-2010-2738] The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
12562| [CVE-2010-2729] The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability."
12563| [CVE-2010-2728] Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."
12564| [CVE-2010-2573] Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."
12565| [CVE-2010-2572] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
12566| [CVE-2010-2571] Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."
12567| [CVE-2010-2570] Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."
12568| [CVE-2010-2569] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."
12569| [CVE-2010-2568] Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
12570| [CVE-2010-2567] The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the-middle attackers to execute arbitrary code via a malformed response, aka "RPC Memory Corruption Vulnerability."
12571| [CVE-2010-2566] The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."
12572| [CVE-2010-2563] The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter, aka "WordPad Word 97 Text Converter Memory Corruption Vulnerability."
12573| [CVE-2010-2562] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."
12574| [CVE-2010-2555] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."
12575| [CVE-2010-2554] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
12576| [CVE-2010-2552] Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (system hang) via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."
12577| [CVE-2010-2551] The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 packet, aka "SMB Variable Validation Vulnerability."
12578| [CVE-2010-2550] The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."
12579| [CVE-2010-2549] Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
12580| [CVE-2010-2265] Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.
12581| [CVE-2010-2091] Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
12582| [CVE-2010-2084] Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.
12583| [CVE-2010-1903] Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability."
12584| [CVE-2010-1902] Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
12585| [CVE-2010-1901] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
12586| [CVE-2010-1900] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
12587| [CVE-2010-1898] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
12588| [CVE-2010-1897] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
12589| [CVE-2010-1896] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability."
12590| [CVE-2010-1895] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."
12591| [CVE-2010-1894] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
12592| [CVE-2010-1893] Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."
12593| [CVE-2010-1892] The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability."
12594| [CVE-2010-1891] The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability."
12595| [CVE-2010-1890] The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability."
12596| [CVE-2010-1889] Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."
12597| [CVE-2010-1887] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability."
12598| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
12599| [CVE-2010-1885] The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."
12600| [CVE-2010-1883] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."
12601| [CVE-2010-1882] Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
12602| [CVE-2010-1881] The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
12603| [CVE-2010-1880] Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
12604| [CVE-2010-1735] The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
12605| [CVE-2010-1734] The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
12606| [CVE-2010-1690] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
12607| [CVE-2010-1689] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
12608| [CVE-2010-1263] Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
12609| [CVE-2010-1257] Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2
12610| [CVE-2010-1255] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."
12611| [CVE-2010-1253] Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2
12612| [CVE-2010-1252] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
12613| [CVE-2010-1251] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
12614| [CVE-2010-1250] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
12615| [CVE-2010-1249] Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.
12616| [CVE-2010-1248] Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
12617| [CVE-2010-1247] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.
12618| [CVE-2010-1246] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."
12619| [CVE-2010-1245] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
12620| [CVE-2010-1225] The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."
12621| [CVE-2010-1175] Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."
12622| [CVE-2010-0917] Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution when the F1 key is pressed, a different vulnerability than CVE-2010-0483.
12623| [CVE-2010-0824] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and CVE-2010-1245.
12624| [CVE-2010-0823] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
12625| [CVE-2010-0822] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."
12626| [CVE-2010-0821] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
12627| [CVE-2010-0820] Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2
12628| [CVE-2010-0819] Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability."
12629| [CVE-2010-0818] The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability."
12630| [CVE-2010-0817] Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.
12631| [CVE-2010-0815] VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."
12632| [CVE-2010-0814] The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."
12633| [CVE-2010-0812] Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
12634| [CVE-2010-0811] Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability."
12635| [CVE-2010-0810] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
12636| [CVE-2010-0719] An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
12637| [CVE-2010-0487] The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."
12638| [CVE-2010-0486] The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."
12639| [CVE-2010-0485] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."
12640| [CVE-2010-0484] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."
12641| [CVE-2010-0483] vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
12642| [CVE-2010-0482] The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."
12643| [CVE-2010-0481] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
12644| [CVE-2010-0480] Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."
12645| [CVE-2010-0479] Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."
12646| [CVE-2010-0478] Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
12647| [CVE-2010-0477] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
12648| [CVE-2010-0476] The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."
12649| [CVE-2010-0278] A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
12650| [CVE-2010-0270] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
12651| [CVE-2010-0269] The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."
12652| [CVE-2010-0268] Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
12653| [CVE-2010-0266] Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
12654| [CVE-2010-0265] Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
12655| [CVE-2010-0264] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."
12656| [CVE-2010-0263] Microsoft Office Excel 2007 SP1 and SP2
12657| [CVE-2010-0262] Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
12658| [CVE-2010-0261] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
12659| [CVE-2010-0260] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2
12660| [CVE-2010-0258] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12661| [CVE-2010-0257] Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."
12662| [CVE-2010-0256] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
12663| [CVE-2010-0254] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
12664| [CVE-2010-0252] The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
12665| [CVE-2010-0250] Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."
12666| [CVE-2010-0249] Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4
12667| [CVE-2010-0243] Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
12668| [CVE-2010-0242] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
12669| [CVE-2010-0241] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."
12670| [CVE-2010-0240] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."
12671| [CVE-2010-0239] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
12672| [CVE-2010-0238] Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."
12673| [CVE-2010-0237] The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
12674| [CVE-2010-0236] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."
12675| [CVE-2010-0235] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."
12676| [CVE-2010-0234] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."
12677| [CVE-2010-0233] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."
12678| [CVE-2010-0232] The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
12679| [CVE-2010-0231] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
12680| [CVE-2010-0035] The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."
12681| [CVE-2010-0034] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
12682| [CVE-2010-0033] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
12683| [CVE-2010-0032] Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
12684| [CVE-2010-0031] Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
12685| [CVE-2010-0030] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
12686| [CVE-2010-0029] Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
12687| [CVE-2010-0028] Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
12688| [CVE-2010-0027] The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
12689| [CVE-2010-0026] The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."
12690| [CVE-2010-0025] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
12691| [CVE-2010-0024] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."
12692| [CVE-2010-0023] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
12693| [CVE-2010-0022] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
12694| [CVE-2010-0021] Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
12695| [CVE-2010-0020] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
12696| [CVE-2010-0018] Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4
12697| [CVE-2010-0017] Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
12698| [CVE-2010-0016] The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
12699| [CVE-2009-4313] ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.
12700| [CVE-2009-4312] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe.
12701| [CVE-2009-4311] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.
12702| [CVE-2009-4310] Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file.
12703| [CVE-2009-4309] Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.
12704| [CVE-2009-4210] The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.
12705| [CVE-2009-3830] The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
12706| [CVE-2009-3678] Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."
12707| [CVE-2009-3677] The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka "MS-CHAP Authentication Bypass Vulnerability."
12708| [CVE-2009-3676] The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
12709| [CVE-2009-3675] LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."
12710| [CVE-2009-3450] Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.
12711| [CVE-2009-3135] Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."
12712| [CVE-2009-3134] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12713| [CVE-2009-3133] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability."
12714| [CVE-2009-3132] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12715| [CVE-2009-3131] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12716| [CVE-2009-3130] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability."
12717| [CVE-2009-3129] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12718| [CVE-2009-3128] Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."
12719| [CVE-2009-3127] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability."
12720| [CVE-2009-3126] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability."
12721| [CVE-2009-3103] Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
12722| [CVE-2009-3020] win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232. NOTE: some of these details are obtained from third party information.
12723| [CVE-2009-2653] ** DISPUTED ** The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend.'
12724| [CVE-2009-2532] Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."
12725| [CVE-2009-2526] Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."
12726| [CVE-2009-2524] Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability."
12727| [CVE-2009-2523] The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."
12728| [CVE-2009-2519] The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."
12729| [CVE-2009-2517] The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
12730| [CVE-2009-2516] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."
12731| [CVE-2009-2515] Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka "Windows Kernel Integer Underflow Vulnerability."
12732| [CVE-2009-2514] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability."
12733| [CVE-2009-2513] The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability."
12734| [CVE-2009-2511] Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability."
12735| [CVE-2009-2510] The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncation in X.509 Common Name Vulnerability," a related issue to CVE-2009-2408.
12736| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
12737| [CVE-2009-2508] The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability."
12738| [CVE-2009-2507] A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory Corruption in Indexing Service Vulnerability."
12739| [CVE-2009-2506] Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3
12740| [CVE-2009-2505] The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."
12741| [CVE-2009-2504] Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "GDI+ .NET API Vulnerability."
12742| [CVE-2009-2503] GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability."
12743| [CVE-2009-2502] Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
12744| [CVE-2009-2501] Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."
12745| [CVE-2009-2500] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability."
12746| [CVE-2009-2498] Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
12747| [CVE-2009-2497] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."
12748| [CVE-2009-2496] Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
12749| [CVE-2009-2495] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
12750| [CVE-2009-2494] The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability."
12751| [CVE-2009-2493] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1
12752| [CVE-2009-1930] The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.
12753| [CVE-2009-1929] Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2
12754| [CVE-2009-1928] Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2
12755| [CVE-2009-1926] Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."
12756| [CVE-2009-1925] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."
12757| [CVE-2009-1924] Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."
12758| [CVE-2009-1923] Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
12759| [CVE-2009-1922] The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."
12760| [CVE-2009-1546] Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability."
12761| [CVE-2009-1545] Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka "Malformed AVI Header Vulnerability."
12762| [CVE-2009-1544] Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability."
12763| [CVE-2009-1542] The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."
12764| [CVE-2009-1539] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability."
12765| [CVE-2009-1538] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
12766| [CVE-2009-1537] Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
12767| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
12768| [CVE-2009-1534] Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
12769| [CVE-2009-1533] Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
12770| [CVE-2009-1491] McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
12771| [CVE-2009-1216] Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA)
12772| [CVE-2009-1141] Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
12773| [CVE-2009-1139] Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
12774| [CVE-2009-1138] The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.
12775| [CVE-2009-1137] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.
12776| [CVE-2009-1136] The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."
12777| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
12778| [CVE-2009-1134] Excel in 2007 Microsoft Office System SP1 and SP2
12779| [CVE-2009-1133] Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
12780| [CVE-2009-1132] Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
12781| [CVE-2009-1131] Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability."
12782| [CVE-2009-1130] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
12783| [CVE-2009-1129] Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
12784| [CVE-2009-1128] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
12785| [CVE-2009-1127] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability."
12786| [CVE-2009-1126] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
12787| [CVE-2009-1125] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability."
12788| [CVE-2009-1124] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."
12789| [CVE-2009-1123] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
12790| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
12791| [CVE-2009-1043] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
12792| [CVE-2009-1011] Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow.
12793| [CVE-2009-0901] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1
12794| [CVE-2009-0568] The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."
12795| [CVE-2009-0566] Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
12796| [CVE-2009-0565] Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2
12797| [CVE-2009-0563] Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12798| [CVE-2009-0562] The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."
12799| [CVE-2009-0561] Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
12800| [CVE-2009-0560] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
12801| [CVE-2009-0559] Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."
12802| [CVE-2009-0558] Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."
12803| [CVE-2009-0557] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
12804| [CVE-2009-0556] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
12805| [CVE-2009-0554] Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
12806| [CVE-2009-0553] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
12807| [CVE-2009-0552] Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
12808| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
12809| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
12810| [CVE-2009-0549] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
12811| [CVE-2009-0320] Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack."
12812| [CVE-2009-0239] Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."
12813| [CVE-2009-0238] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
12814| [CVE-2009-0235] Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."
12815| [CVE-2009-0234] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger "unnecessary lookups," aka "DNS Server Response Validation Vulnerability."
12816| [CVE-2009-0233] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka "DNS Server Query Validation Vulnerability."
12817| [CVE-2009-0232] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow Vulnerability."
12818| [CVE-2009-0231] The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."
12819| [CVE-2009-0230] The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
12820| [CVE-2009-0229] The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
12821| [CVE-2009-0228] Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a a crafted ShareName in a response to an RPC request, related to "printing data structures," aka "Buffer Overflow in Print Spooler Vulnerability."
12822| [CVE-2009-0227] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137.
12823| [CVE-2009-0226] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.
12824| [CVE-2009-0225] Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
12825| [CVE-2009-0224] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
12826| [CVE-2009-0223] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
12827| [CVE-2009-0222] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
12828| [CVE-2009-0221] Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."
12829| [CVE-2009-0220] Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
12830| [CVE-2009-0202] Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
12831| [CVE-2009-0102] Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
12832| [CVE-2009-0100] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
12833| [CVE-2009-0099] The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."
12834| [CVE-2009-0098] Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."
12835| [CVE-2009-0097] Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
12836| [CVE-2009-0096] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
12837| [CVE-2009-0095] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
12838| [CVE-2009-0094] The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.
12839| [CVE-2009-0093] Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.
12840| [CVE-2009-0091] Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
12841| [CVE-2009-0090] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."
12842| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
12843| [CVE-2009-0088] The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."
12844| [CVE-2009-0087] Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2
12845| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
12846| [CVE-2009-0085] The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."
12847| [CVE-2009-0083] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."
12848| [CVE-2009-0082] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability."
12849| [CVE-2009-0081] The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."
12850| [CVE-2009-0079] The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
12851| [CVE-2009-0078] The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability."
12852| [CVE-2008-7217] Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
12853| [CVE-2008-6819] win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.
12854| [CVE-2008-6219] nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.
12855| [CVE-2008-6063] Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.
12856| [CVE-2008-5912] An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
12857| [CVE-2008-5823] An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.
12858| [CVE-2008-5416] Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier
12859| [CVE-2008-5232] Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown
12860| [CVE-2008-5112] The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.
12861| [CVE-2008-5100] The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.
12862| [CVE-2008-5044] Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
12863| [CVE-2008-4844] Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
12864| [CVE-2008-4841] The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.
12865| [CVE-2008-4837] Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12866| [CVE-2008-4835] SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."
12867| [CVE-2008-4834] Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."
12868| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
12869| [CVE-2008-4295] Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
12870| [CVE-2008-4269] The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."
12871| [CVE-2008-4268] The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
12872| [CVE-2008-4266] Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3
12873| [CVE-2008-4265] Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."
12874| [CVE-2008-4264] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12875| [CVE-2008-4261] Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
12876| [CVE-2008-4256] The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability."
12877| [CVE-2008-4255] Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability."
12878| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
12879| [CVE-2008-4250] The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
12880| [CVE-2008-4114] srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
12881| [CVE-2008-4110] Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
12882| [CVE-2008-4038] Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."
12883| [CVE-2008-4037] Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
12884| [CVE-2008-4036] Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."
12885| [CVE-2008-4032] Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
12886| [CVE-2008-4031] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12887| [CVE-2008-4030] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12888| [CVE-2008-4028] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12889| [CVE-2008-4027] Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12890| [CVE-2008-4026] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12891| [CVE-2008-4025] Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
12892| [CVE-2008-4024] Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
12893| [CVE-2008-4023] Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."
12894| [CVE-2008-4019] Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
12895| [CVE-2008-3956] orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
12896| [CVE-2008-3704] Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."
12897| [CVE-2008-3648] nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
12898| [CVE-2008-3636] Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.
12899| [CVE-2008-3479] Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
12900| [CVE-2008-3477] Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability."
12901| [CVE-2008-3471] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
12902| [CVE-2008-3466] Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
12903| [CVE-2008-3465] Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
12904| [CVE-2008-3464] afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."
12905| [CVE-2008-3460] WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
12906| [CVE-2008-3068] Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
12907| [CVE-2008-3021] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
12908| [CVE-2008-3020] Microsoft Office 2000 SP3 and XP SP3
12909| [CVE-2008-3019] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
12910| [CVE-2008-3018] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
12911| [CVE-2008-3015] Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."
12912| [CVE-2008-3014] Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability."
12913| [CVE-2008-3013] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
12914| [CVE-2008-3012] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability."
12915| [CVE-2008-3009] Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
12916| [CVE-2008-3007] Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
12917| [CVE-2008-3006] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
12918| [CVE-2008-3005] Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
12919| [CVE-2008-3004] Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3
12920| [CVE-2008-3003] Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
12921| [CVE-2008-2752] Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.
12922| [CVE-2008-2540] Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
12923| [CVE-2008-2463] The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
12924| [CVE-2008-2252] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."
12925| [CVE-2008-2251] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled Exception Vulnerability." NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510.
12926| [CVE-2008-2250] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
12927| [CVE-2008-2249] Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow Vulnerability."
12928| [CVE-2008-2246] Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
12929| [CVE-2008-2245] Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file.
12930| [CVE-2008-2244] Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
12931| [CVE-2008-1898] A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
12932| [CVE-2008-1888] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
12933| [CVE-2008-1547] Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.
12934| [CVE-2008-1457] The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
12935| [CVE-2008-1456] Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.
12936| [CVE-2008-1455] A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1
12937| [CVE-2008-1454] Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
12938| [CVE-2008-1451] The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
12939| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
12940| [CVE-2008-1445] Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.
12941| [CVE-2008-1444] Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
12942| [CVE-2008-1441] Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
12943| [CVE-2008-1440] Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."
12944| [CVE-2008-1436] Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
12945| [CVE-2008-1435] Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."
12946| [CVE-2008-1434] Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
12947| [CVE-2008-1092] Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
12948| [CVE-2008-1091] Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."
12949| [CVE-2008-1090] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."
12950| [CVE-2008-1089] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."
12951| [CVE-2008-1088] Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."
12952| [CVE-2008-1087] Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
12953| [CVE-2008-1086] The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.
12954| [CVE-2008-1084] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
12955| [CVE-2008-1083] Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
12956| [CVE-2008-0121] A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."
12957| [CVE-2008-0120] Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
12958| [CVE-2008-0119] Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."
12959| [CVE-2008-0118] Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
12960| [CVE-2008-0117] Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
12961| [CVE-2008-0116] Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
12962| [CVE-2008-0115] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
12963| [CVE-2008-0114] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
12964| [CVE-2008-0113] Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
12965| [CVE-2008-0112] Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
12966| [CVE-2008-0111] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
12967| [CVE-2008-0110] Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
12968| [CVE-2008-0109] Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
12969| [CVE-2008-0108] Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."
12970| [CVE-2008-0106] Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
12971| [CVE-2008-0105] Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."
12972| [CVE-2008-0104] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."
12973| [CVE-2008-0103] Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."
12974| [CVE-2008-0102] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."
12975| [CVE-2008-0088] Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
12976| [CVE-2008-0087] The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.
12977| [CVE-2008-0086] Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
12978| [CVE-2008-0083] The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
12979| [CVE-2008-0081] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
12980| [CVE-2008-0080] Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.
12981| [CVE-2008-0020] Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015.
12982| [CVE-2008-0015] Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
12983| [CVE-2008-0011] Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."
12984| [CVE-2007-6753] Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
12985| [CVE-2007-6357] Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
12986| [CVE-2007-6329] Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
12987| [CVE-2007-6043] The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
12988| [CVE-2007-6026] Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
12989| [CVE-2007-5587] Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
12990| [CVE-2007-5352] Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
12991| [CVE-2007-5348] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."
12992| [CVE-2007-4991] The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
12993| [CVE-2007-4916] Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
12994| [CVE-2007-4814] Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
12995| [CVE-2007-3930] Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.
12996| [CVE-2007-3924] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape
12997| [CVE-2007-3899] Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."
12998| [CVE-2007-3898] The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
12999| [CVE-2007-3896] The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
13000| [CVE-2007-3890] Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
13001| [CVE-2007-3670] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
13002| [CVE-2007-3490] Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
13003| [CVE-2007-3300] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.
13004| [CVE-2007-3040] Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
13005| [CVE-2007-3039] Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
13006| [CVE-2007-3036] Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
13007| [CVE-2007-3034] Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
13008| [CVE-2007-3030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
13009| [CVE-2007-3029] Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
13010| [CVE-2007-3028] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.
13011| [CVE-2007-2999] Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
13012| [CVE-2007-2967] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.
13013| [CVE-2007-2966] Buffer overflow in the LHA decompresion component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
13014| [CVE-2007-2903] Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
13015| [CVE-2007-2593] The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
13016| [CVE-2007-2581] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
13017| [CVE-2007-2374] Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
13018| [CVE-2007-2228] rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
13019| [CVE-2007-2224] Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
13020| [CVE-2007-2221] Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
13021| [CVE-2007-2219] Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.
13022| [CVE-2007-2218] Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
13023| [CVE-2007-2217] Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.
13024| [CVE-2007-1911] Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow.
13025| [CVE-2007-1910] Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.
13026| [CVE-2007-1765] Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038
13027| [CVE-2007-1756] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".
13028| [CVE-2007-1754] PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
13029| [CVE-2007-1748] Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
13030| [CVE-2007-1747] Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.
13031| [CVE-2007-1645] Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812.
13032| [CVE-2007-1537] \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
13033| [CVE-2007-1512] Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
13034| [CVE-2007-1347] Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
13035| [CVE-2007-1239] Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
13036| [CVE-2007-1238] Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file.
13037| [CVE-2007-1215] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
13038| [CVE-2007-1214] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
13039| [CVE-2007-1213] The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
13040| [CVE-2007-1212] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
13041| [CVE-2007-1211] Unspecified kernel GDI functions in Microsoft Windows 2000 SP4
13042| [CVE-2007-1205] Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
13043| [CVE-2007-1203] Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.
13044| [CVE-2007-1202] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
13045| [CVE-2007-1201] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
13046| [CVE-2007-1117] Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
13047| [CVE-2007-1090] Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.
13048| [CVE-2007-1083] Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
13049| [CVE-2007-0948] Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
13050| [CVE-2007-0947] Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
13051| [CVE-2007-0946] Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.
13052| [CVE-2007-0945] Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4
13053| [CVE-2007-0944] Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
13054| [CVE-2007-0942] Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
13055| [CVE-2007-0940] Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
13056| [CVE-2007-0939] Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."
13057| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
13058| [CVE-2007-0936] Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."
13059| [CVE-2007-0934] Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption.
13060| [CVE-2007-0913] Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues.
13061| [CVE-2007-0870] Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.
13062| [CVE-2007-0843] The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
13063| [CVE-2007-0811] Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.
13064| [CVE-2007-0671] Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
13065| [CVE-2007-0612] Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll
13066| [CVE-2007-0515] Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.
13067| [CVE-2007-0351] Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
13068| [CVE-2007-0221] Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
13069| [CVE-2007-0220] Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
13070| [CVE-2007-0216] wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."
13071| [CVE-2007-0215] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.
13072| [CVE-2007-0214] The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
13073| [CVE-2007-0213] Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
13074| [CVE-2007-0211] The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
13075| [CVE-2007-0209] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.
13076| [CVE-2007-0208] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
13077| [CVE-2007-0069] Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."
13078| [CVE-2007-0066] The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
13079| [CVE-2007-0065] Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.
13080| [CVE-2007-0064] Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
13081| [CVE-2007-0043] The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
13082| [CVE-2007-0042] Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
13083| [CVE-2007-0041] The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
13084| [CVE-2007-0040] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
13085| [CVE-2007-0039] The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.
13086| [CVE-2007-0038] Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765
13087| [CVE-2007-0035] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."
13088| [CVE-2007-0034] Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
13089| [CVE-2007-0033] Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
13090| [CVE-2007-0031] Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.
13091| [CVE-2007-0030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
13092| [CVE-2007-0029] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability."
13093| [CVE-2007-0028] Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.
13094| [CVE-2007-0027] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
13095| [CVE-2007-0026] The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
13096| [CVE-2007-0025] The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
13097| [CVE-2007-0024] Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."
13098| [CVE-2006-7210] Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
13099| [CVE-2006-7192] Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.
13100| [CVE-2006-7027] Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.
13101| [CVE-2006-6723] The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.
13102| [CVE-2006-6696] Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
13103| [CVE-2006-6617] projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
13104| [CVE-2006-6561] Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.
13105| [CVE-2006-6456] Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
13106| [CVE-2006-6296] The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.
13107| [CVE-2006-6134] Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
13108| [CVE-2006-6133] Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
13109| [CVE-2006-5994] Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
13110| [CVE-2006-5758] The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
13111| [CVE-2006-5586] The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."
13112| [CVE-2006-5585] The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."
13113| [CVE-2006-5584] The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
13114| [CVE-2006-5583] Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."
13115| [CVE-2006-5574] Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.
13116| [CVE-2006-5296] PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.
13117| [CVE-2006-4854] ** REJECT ** Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E. NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009.
13118| [CVE-2006-4704] Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
13119| [CVE-2006-4702] Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
13120| [CVE-2006-4696] Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
13121| [CVE-2006-4695] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."
13122| [CVE-2006-4694] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow.
13123| [CVE-2006-4693] Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651.
13124| [CVE-2006-4692] Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
13125| [CVE-2006-4691] Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
13126| [CVE-2006-4689] Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
13127| [CVE-2006-4688] Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
13128| [CVE-2006-4534] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
13129| [CVE-2006-4495] Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
13130| [CVE-2006-4274] ** REJECT ** Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJ_MDROPPER.BH. NOTE: on 20060822, it was determined that TROJ_MDROPPER.BH was exploiting CVE-2006-0009, so this is not a new vulnerability.
13131| [CVE-2006-4219] The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.
13132| [CVE-2006-4183] Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
13133| [CVE-2006-4071] Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
13134| [CVE-2006-3992] Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
13135| [CVE-2006-3942] The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research
13136| [CVE-2006-3897] Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
13137| [CVE-2006-3880] ** DISPUTED ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
13138| [CVE-2006-3877] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
13139| [CVE-2006-3876] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.
13140| [CVE-2006-3875] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.
13141| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
13142| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
13143| [CVE-2006-3868] Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.
13144| [CVE-2006-3867] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875.
13145| [CVE-2006-3864] Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.
13146| [CVE-2006-3841] Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
13147| [CVE-2006-3660] Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
13148| [CVE-2006-3656] Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
13149| [CVE-2006-3655] Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
13150| [CVE-2006-3652] Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. NOTE: as of 20060715, this could not be reproduced by third parties.
13151| [CVE-2006-3651] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
13152| [CVE-2006-3650] Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
13153| [CVE-2006-3649] Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
13154| [CVE-2006-3648] Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
13155| [CVE-2006-3647] Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
13156| [CVE-2006-3643] Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability."
13157| [CVE-2006-3590] mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
13158| [CVE-2006-3510] The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
13159| [CVE-2006-3493] Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.
13160| [CVE-2006-3449] Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."
13161| [CVE-2006-3448] Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
13162| [CVE-2006-3445] Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
13163| [CVE-2006-3444] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
13164| [CVE-2006-3443] Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."
13165| [CVE-2006-3441] Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
13166| [CVE-2006-3440] Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
13167| [CVE-2006-3439] Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
13168| [CVE-2006-3436] Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
13169| [CVE-2006-3435] PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
13170| [CVE-2006-3434] Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
13171| [CVE-2006-3431] Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.
13172| [CVE-2006-3059] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
13173| [CVE-2006-2492] Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
13174| [CVE-2006-2389] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
13175| [CVE-2006-2388] Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
13176| [CVE-2006-2387] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
13177| [CVE-2006-2380] Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
13178| [CVE-2006-2379] Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
13179| [CVE-2006-2378] Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
13180| [CVE-2006-2374] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
13181| [CVE-2006-2373] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
13182| [CVE-2006-2372] Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.
13183| [CVE-2006-2371] Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
13184| [CVE-2006-2370] Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
13185| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
13186| [CVE-2006-2094] Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.
13187| [CVE-2006-2055] Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
13188| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
13189| [CVE-2006-1651] ** DISPUTED ** Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."
13190| [CVE-2006-1540] MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll
13191| [CVE-2006-1316] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.
13192| [CVE-2006-1315] The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability."
13193| [CVE-2006-1314] Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
13194| [CVE-2006-1313] Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
13195| [CVE-2006-1311] The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1
13196| [CVE-2006-1309] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
13197| [CVE-2006-1308] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.
13198| [CVE-2006-1306] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
13199| [CVE-2006-1305] Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
13200| [CVE-2006-1304] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
13201| [CVE-2006-1302] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."
13202| [CVE-2006-1301] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.
13203| [CVE-2006-1300] Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
13204| [CVE-2006-1257] The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
13205| [CVE-2006-1193] Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
13206| [CVE-2006-1184] Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
13207| [CVE-2006-0988] The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
13208| [CVE-2006-0935] Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
13209| [CVE-2006-0187] By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.
13210| [CVE-2006-0034] Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
13211| [CVE-2006-0033] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
13212| [CVE-2006-0032] Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
13213| [CVE-2006-0031] Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
13214| [CVE-2006-0030] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
13215| [CVE-2006-0029] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
13216| [CVE-2006-0028] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
13217| [CVE-2006-0023] Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
13218| [CVE-2006-0022] Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
13219| [CVE-2006-0021] Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
13220| [CVE-2006-0020] An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
13221| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
13222| [CVE-2006-0013] Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
13223| [CVE-2006-0012] Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
13224| [CVE-2006-0010] Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
13225| [CVE-2006-0009] Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
13226| [CVE-2006-0008] The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
13227| [CVE-2006-0007] Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
13228| [CVE-2006-0006] Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
13229| [CVE-2006-0004] Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
13230| [CVE-2006-0002] Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
13231| [CVE-2006-0001] Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
13232| [CVE-2005-4717] Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
13233| [CVE-2005-4269] mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.
13234| [CVE-2005-4131] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
13235| [CVE-2005-3981] ** DISPUTED ** NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE.
13236| [CVE-2005-3945] The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
13237| [CVE-2005-3644] PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
13238| [CVE-2005-3177] CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
13239| [CVE-2005-3176] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
13240| [CVE-2005-3175] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
13241| [CVE-2005-3174] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
13242| [CVE-2005-3173] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
13243| [CVE-2005-3172] The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
13244| [CVE-2005-3171] Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
13245| [CVE-2005-3170] The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
13246| [CVE-2005-3169] Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
13247| [CVE-2005-3168] The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
13248| [CVE-2005-2122] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
13249| [CVE-2005-2120] Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
13250| [CVE-2005-2118] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
13251| [CVE-2005-2117] Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
13252| [CVE-2005-1985] The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
13253| [CVE-2005-1984] Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
13254| [CVE-2005-1983] Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
13255| [CVE-2005-1982] Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
13256| [CVE-2005-1981] Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
13257| [CVE-2005-1907] The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
13258| [CVE-2005-1683] Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
13259| [CVE-2005-1218] The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
13260| [CVE-2005-1216] Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
13261| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
13262| [CVE-2005-1208] Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
13263| [CVE-2005-1207] Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
13264| [CVE-2005-1206] Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
13265| [CVE-2005-1205] The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
13266| [CVE-2005-1052] Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
13267| [CVE-2005-0921] Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
13268| [CVE-2005-0820] Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
13269| [CVE-2005-0738] Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
13270| [CVE-2005-0564] Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
13271| [CVE-2005-0558] Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.
13272| [CVE-2005-0551] Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
13273| [CVE-2005-0550] Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
13274| [CVE-2005-0545] Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.
13275| [CVE-2005-0063] The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
13276| [CVE-2005-0061] The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
13277| [CVE-2005-0060] Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
13278| [CVE-2005-0059] Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
13279| [CVE-2005-0058] Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.
13280| [CVE-2005-0048] Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
13281| [CVE-2004-2527] The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
13282| [CVE-2004-2482] Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
13283| [CVE-2004-2365] Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
13284| [CVE-2004-2339] ** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
13285| [CVE-2004-1080] The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
13286| [CVE-2004-0963] Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
13287| [CVE-2004-0897] The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
13288| [CVE-2004-0892] Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
13289| [CVE-2004-0846] Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
13290| [CVE-2004-0840] The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
13291| [CVE-2004-0728] The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
13292| [CVE-2004-0726] The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.
13293| [CVE-2004-0575] Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
13294| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
13295| [CVE-2004-0573] Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
13296| [CVE-2004-0540] Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
13297| [CVE-2004-0503] Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
13298| [CVE-2004-0379] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
13299| [CVE-2004-0284] Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
13300| [CVE-2004-0214] Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
13301| [CVE-2004-0211] The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
13302| [CVE-2004-0210] The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
13303| [CVE-2004-0209] Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
13304| [CVE-2004-0208] The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
13305| [CVE-2004-0207] "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
13306| [CVE-2004-0206] Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
13307| [CVE-2004-0204] Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
13308| [CVE-2004-0202] IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
13309| [CVE-2004-0201] Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
13310| [CVE-2004-0199] Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
13311| [CVE-2004-0124] The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
13312| [CVE-2004-0121] Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
13313| [CVE-2004-0120] The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
13314| [CVE-2004-0116] An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
13315| [CVE-2003-1378] Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
13316| [CVE-2003-1106] The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
13317| [CVE-2003-0908] The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
13318| [CVE-2003-0906] Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
13319| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
13320| [CVE-2003-0839] Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
13321| [CVE-2003-0825] The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
13322| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
13323| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
13324| [CVE-2003-0821] Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
13325| [CVE-2003-0820] Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
13326| [CVE-2003-0819] Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
13327| [CVE-2003-0818] Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
13328| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
13329| [CVE-2003-0806] Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
13330| [CVE-2003-0719] Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
13331| [CVE-2003-0665] Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
13332| [CVE-2003-0664] Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
13333| [CVE-2003-0662] Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
13334| [CVE-2003-0660] The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval.
13335| [CVE-2003-0533] Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
13336| [CVE-2003-0526] Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
13337| [CVE-2003-0506] Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
13338| [CVE-2003-0505] Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
13339| [CVE-2003-0496] Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
13340| [CVE-2003-0352] Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
13341| [CVE-2003-0345] Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
13342| [CVE-2003-0232] Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
13343| [CVE-2003-0231] Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
13344| [CVE-2003-0230] Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
13345| [CVE-2003-0227] The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
13346| [CVE-2003-0118] SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
13347| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
13348| [CVE-2003-0110] The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
13349| [CVE-2003-0109] Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
13350| [CVE-2003-0011] Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
13351| [CVE-2003-0007] Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
13352| [CVE-2003-0003] Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
13353| [CVE-2003-0002] Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
13354| [CVE-2002-2101] Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
13355| [CVE-2002-2100] Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
13356| [CVE-2002-1984] Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
13357| [CVE-2002-1981] Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.
13358| [CVE-2002-1933] The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
13359| [CVE-2002-1932] Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
13360| [CVE-2002-1876] Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
13361| [CVE-2002-1873] Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
13362| [CVE-2002-1872] Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
13363| [CVE-2002-1776] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
13364| [CVE-2002-1712] Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
13365| [CVE-2002-1256] The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
13366| [CVE-2002-1255] Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
13367| [CVE-2002-1214] Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
13368| [CVE-2002-1184] The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
13369| [CVE-2002-1145] The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
13370| [CVE-2002-1141] An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."
13371| [CVE-2002-1140] The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
13372| [CVE-2002-1138] Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
13373| [CVE-2002-1137] Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
13374| [CVE-2002-1123] Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
13375| [CVE-2002-1117] Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
13376| [CVE-2002-1056] Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
13377| [CVE-2002-0982] Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
13378| [CVE-2002-0975] Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.
13379| [CVE-2002-0863] Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
13380| [CVE-2002-0861] Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
13381| [CVE-2002-0860] The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
13382| [CVE-2002-0859] Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
13383| [CVE-2002-0729] Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
13384| [CVE-2002-0727] The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
13385| [CVE-2002-0724] Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".
13386| [CVE-2002-0721] Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
13387| [CVE-2002-0719] SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
13388| [CVE-2002-0718] Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
13389| [CVE-2002-0700] Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
13390| [CVE-2002-0699] Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
13391| [CVE-2002-0695] Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
13392| [CVE-2002-0694] The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
13393| [CVE-2002-0693] Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
13394| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
13395| [CVE-2002-0650] The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
13396| [CVE-2002-0649] Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
13397| [CVE-2002-0645] SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
13398| [CVE-2002-0644] Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
13399| [CVE-2002-0643] The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
13400| [CVE-2002-0642] The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
13401| [CVE-2002-0641] Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
13402| [CVE-2002-0624] Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
13403| [CVE-2002-0623] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
13404| [CVE-2002-0622] The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
13405| [CVE-2002-0621] Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
13406| [CVE-2002-0620] Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
13407| [CVE-2002-0619] The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
13408| [CVE-2002-0618] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
13409| [CVE-2002-0617] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
13410| [CVE-2002-0616] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."
13411| [CVE-2002-0597] LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
13412| [CVE-2002-0444] Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
13413| [CVE-2002-0443] Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
13414| [CVE-2002-0373] The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
13415| [CVE-2002-0371] Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
13416| [CVE-2002-0368] The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
13417| [CVE-2002-0224] The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
13418| [CVE-2002-0187] Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
13419| [CVE-2002-0186] Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
13420| [CVE-2002-0154] Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
13421| [CVE-2002-0152] Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
13422| [CVE-2002-0055] SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
13423| [CVE-2002-0054] SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
13424| [CVE-2002-0050] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
13425| [CVE-2002-0049] Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
13426| [CVE-2002-0034] The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
13427| [CVE-2002-0018] In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
13428| [CVE-2001-1533] ** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE.
13429| [CVE-2001-1451] Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
13430| [CVE-2001-1319] Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
13431| [CVE-2001-1099] The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
13432| [CVE-2001-0986] SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
13433| [CVE-2001-0718] Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
13434| [CVE-2001-0666] Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
13435| [CVE-2001-0658] Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
13436| [CVE-2001-0628] Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
13437| [CVE-2001-0547] Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
13438| [CVE-2001-0546] Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
13439| [CVE-2001-0542] Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
13440| [CVE-2001-0538] Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
13441| [CVE-2001-0509] Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
13442| [CVE-2001-0505] Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
13443| [CVE-2001-0504] Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activites such as mail relaying.
13444| [CVE-2001-0501] Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
13445| [CVE-2001-0351] Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.
13446| [CVE-2001-0350] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
13447| [CVE-2001-0349] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
13448| [CVE-2001-0348] Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.
13449| [CVE-2001-0347] Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
13450| [CVE-2001-0346] Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.
13451| [CVE-2001-0345] Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
13452| [CVE-2001-0344] An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
13453| [CVE-2001-0340] An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
13454| [CVE-2001-0261] Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
13455| [CVE-2001-0245] Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
13456| [CVE-2001-0244] Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
13457| [CVE-2001-0240] Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
13458| [CVE-2001-0239] Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
13459| [CVE-2001-0237] Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
13460| [CVE-2001-0146] IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
13461| [CVE-2001-0048] The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.
13462| [CVE-2001-0005] Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
13463| [CVE-2001-0003] Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
13464| [CVE-2000-1218] The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
13465| [CVE-2000-1217] Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
13466| [CVE-2000-1209] The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
13467| [CVE-2000-1139] The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
13468| [CVE-2000-1088] The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
13469| [CVE-2000-1087] The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
13470| [CVE-2000-1086] The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
13471| [CVE-2000-1085] The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
13472| [CVE-2000-1079] Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
13473| [CVE-2000-0942] The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
13474| [CVE-2000-0854] When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
13475| [CVE-2000-0771] Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
13476| [CVE-2000-0765] Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
13477| [CVE-2000-0756] Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
13478| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
13479| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
13480| [CVE-2000-0637] Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
13481| [CVE-2000-0621] Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
13482| [CVE-2000-0597] Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
13483| [CVE-2000-0331] Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
13484| [CVE-2000-0277] Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
13485| [CVE-2013-2557] The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
13486| [CVE-2013-2556] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
13487| [CVE-2013-2554] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787.
13488| [CVE-2013-2553] Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0912.
13489| [CVE-2013-2552] Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
13490| [CVE-2013-2551] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
13491| [CVE-2013-1347] Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
13492| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
13493| [CVE-2013-1290] Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."
13494| [CVE-2013-1289] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
13495| [CVE-2013-1284] Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
13496| [CVE-2013-0096] Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
13497| [CVE-2013-0086] Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."
13498| [CVE-2013-0085] Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."
13499| [CVE-2013-0084] Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."
13500| [CVE-2013-0083] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
13501| [CVE-2013-0080] Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."
13502| [CVE-2013-0079] Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
13503| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
13504| [CVE-2012-4969] Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
13505| [CVE-2012-4792] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
13506| [CVE-2012-3456] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
13507| [CVE-2012-3455] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
13508| [CVE-2012-2290] The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel.
13509| [CVE-2012-2284] The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
13510| [CVE-2012-1945] Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
13511| [CVE-2012-1894] Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability."
13512| [CVE-2012-1892] Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
13513| [CVE-2012-1891] Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
13514| [CVE-2012-1888] Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
13515| [CVE-2012-1876] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
13516| [CVE-2012-1861] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
13517| [CVE-2012-1859] Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."
13518| [CVE-2012-1857] Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."
13519| [CVE-2012-1849] Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."
13520| [CVE-2012-1545] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
13521| [CVE-2012-1436] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
13522| [CVE-2012-1435] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \50\4B\4C\49\54\45 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
13523| [CVE-2012-1434] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
13524| [CVE-2012-1433] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
13525| [CVE-2012-0447] Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
13526| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
13527| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
13528| [CVE-2012-0145] Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
13529| [CVE-2012-0144] Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
13530| [CVE-2012-0138] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
13531| [CVE-2012-0137] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
13532| [CVE-2012-0136] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
13533| [CVE-2012-0020] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
13534| [CVE-2012-0019] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
13535| [CVE-2012-0018] Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."
13536| [CVE-2012-0017] Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."
13537| [CVE-2011-4695] Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
13538| [CVE-2011-2012] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
13539| [CVE-2011-2010] The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
13540| [CVE-2011-1969] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
13541| [CVE-2011-1897] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
13542| [CVE-2011-1896] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
13543| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
13544| [CVE-2011-1891] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
13545| [CVE-2011-1890] Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."
13546| [CVE-2011-1889] The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
13547| [CVE-2011-1417] Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
13548| [CVE-2011-1347] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
13549| [CVE-2011-1346] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
13550| [CVE-2011-1345] Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
13551| [CVE-2011-1265] The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."
13552| [CVE-2011-0653] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
13553| [CVE-2011-0647] The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
13554| [CVE-2011-0627] Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
13555| [CVE-2011-0037] Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
13556| [CVE-2011-0027] Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
13557| [CVE-2011-0026] Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."
13558| [CVE-2010-4643] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
13559| [CVE-2010-4253] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
13560| [CVE-2010-4121] ** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only."
13561| [CVE-2010-3967] Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."
13562| [CVE-2010-3962] Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.
13563| [CVE-2010-3936] Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."
13564| [CVE-2010-3889] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
13565| [CVE-2010-3888] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
13566| [CVE-2010-3497] Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)."
13567| [CVE-2010-3454] Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
13568| [CVE-2010-3453] The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.
13569| [CVE-2010-3141] Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
13570| [CVE-2010-2743] The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.
13571| [CVE-2010-2734] Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."
13572| [CVE-2010-2733] Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."
13573| [CVE-2010-2732] Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
13574| [CVE-2010-2564] Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."
13575| [CVE-2010-1184] The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.
13576| [CVE-2010-1118] Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
13577| [CVE-2010-1117] Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
13578| [CVE-2010-0806] Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
13579| [CVE-2010-0716] _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.
13580| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
13581| [CVE-2008-5750] Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
13582| [CVE-2008-5556] ** DISPUTED ** The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design."
13583| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
13584| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
13585| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
13586| [CVE-2008-5552] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
13587| [CVE-2008-5551] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
13588| [CVE-2008-5180] Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
13589| [CVE-2008-4211] Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."
13590| [CVE-2007-5351] Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."
13591| [CVE-2007-2729] Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
13592| [CVE-2007-1534] DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.
13593| [CVE-2007-0341] Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
13594| [CVE-2006-5559] The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.
13595| [CVE-2006-4686] Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
13596| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
13597| [CVE-2006-1359] Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
13598| [CVE-2006-0761] Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.
13599| [CVE-2006-0753] Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
13600| [CVE-2006-0544] urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.
13601| [CVE-2006-0003] Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
13602| [CVE-2005-1929] Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product.
13603| [CVE-2005-0852] Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.
13604| [CVE-2004-1322] Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
13605| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
13606| [CVE-2003-0903] Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
13607| [CVE-2003-0353] Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
13608| [CVE-2002-1918] Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
13609| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
13610| [CVE-2002-1015] RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
13611| [CVE-2002-0697] Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
13612| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
13613| [CVE-2001-1218] Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
13614| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
13615| [CVE-1999-1097] Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
13616|
13617| SecurityFocus - https://www.securityfocus.com/bid/:
13618| [83154] Microsoft Windows 2000 Server CVE-2004-0540 Remote Security Vulnerability
13619| [45297] Microsoft Exchange Server 2007 Infinite Loop Remote Denial of Service Vulnerability
13620| [43419] Microsoft Excel 2002 Memory Corruption Vulnerability
13621| [43189] Microsoft Visual C++ 2008 Redistributable Package DLL Loading Arbitrary Code Execution Vulnerability
13622| [42742] Microsoft PowerPoint 2007 Multiple DLL Loading Arbitrary Code Execution Vulnerability
13623| [42695] Microsoft Groove 2007 'mso.dll' DLL Loading Arbitrary Code Execution Vulnerability
13624| [42681] Microsoft Visio 2003 'mfc71enu.dll' DLL Loading Arbitrary Code Execution Vulnerability
13625| [41843] Microsoft Outlook Web Access for Exchange Server 2003 Cross Site Request Forgery Vulnerability
13626| [39776] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
13627| [37196] RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities
13628| [36940] RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
13629| [36633] RETIRED: Microsoft October 2009 Advance Notification Multiple Vulnerabilities
13630| [36239] RETIRED: Microsoft September 2009 Advance Notification Multiple Vulnerabilities
13631| [35974] RETIRED: Microsoft August 2009 Advance Notification Multiple Vulnerabilities
13632| [35617] RETIRED: Microsoft July 2009 Advance Notification Multiple Vulnerabilities
13633| [35213] RETIRED: Microsoft June 2009 Advance Notification Multiple Vulnerabilities
13634| [34867] RETIRED: Microsoft May 2009 Advance Notification Multiple Vulnerabilities
13635| [34532] Microsoft IAG 2007 ActiveX Control Multiple Stack Based Buffer Overflow Vulnerabilities
13636| [34469] Microsoft Word 2000 WordPerfect Converter Remote Code Execution Vulnerability
13637| [34450] RETIRED: Microsoft April 2009 Advance Notification Multiple Vulnerabilities
13638| [34005] RETIRED: Microsoft March 2009 Advance Notification Multiple Vulnerabilities
13639| [33639] RETIRED: Microsoft February 2009 Advance Notification Multiple Vulnerabilities
13640| [33170] RETIRED: Microsoft January 2009 Advance Notification Multiple Vulnerabilities
13641| [32632] RETIRED: Microsoft December 2008 Advance Notification Multiple Vulnerabilities
13642| [32153] Retired: Microsoft November 2008 Advance Notification Multiple Vulnerabilities
13643| [31667] Retired: Microsoft October 2008 Advance Notification Multiple Vulnerabilities
13644| [31129] RETIRED: Microsoft SQL Server 2000 'sqlvdir.dll' ActiveX Buffer Overflow Vulnerability
13645| [31014] RETIRED: Microsoft September 2008 Advance Notification Multiple Vulnerabilities
13646| [30593] RETIRED: Microsoft August 2008 Advance Notification Multiple Vulnerabilities
13647| [30075] RETIRED: Microsoft July 2008 Advance Notification Multiple Vulnerabilities
13648| [29576] RETIRED: Microsoft June 2008 Advance Notification Multiple Vulnerabilities
13649| [29108] RETIRED: Microsoft May 2008 Advance Notification Multiple Vulnerabilities
13650| [28598] RETIRED: Microsoft April 2008 Advance Notification Multiple Vulnerabilities
13651| [28124] Retired: Microsoft March 2008 Advance Notification Multiple Vulnerabilities
13652| [27674] RETIRED: Microsoft February 2008 Advance Notification Multiple Vulnerabilities
13653| [27119] RETIRED: Microsoft January 2008 Advance Notification Multiple Vulnerabilities
13654| [26739] RETIRED: Microsoft December 2007 Advance Notification Multiple Vulnerabilities
13655| [26414] Microsoft Forms 2.0 ActiveX Control Memory Access Violation Denial of Service Vulnerabilities
13656| [26380] Retired: Microsoft November 2007 Advance Notification Multiple Vulnerabilities
13657| [25991] RETIRED: Microsoft Office 2000 and XP Unspecified Word Document Handling DoS Vulnerability
13658| [25922] RETIRED: Microsoft October 2007 Advance Notification Multiple Vulnerabilities
13659| [25573] RETIRED: Microsoft September 2007 Advance Notification Multiple Vulnerabilities
13660| [25247] Retired: Microsoft August 2007 Advance Notification Multiple Vulnerabilities
13661| [24771] Retired: Microsoft July 2007 Advance Notification Multiple Vulnerabilities
13662| [24366] RETIRED: Microsoft June 2007 Advance Notification Multiple Vulnerabilities
13663| [24118] Microsoft Office 2000 UA OUACTRL.OCX ActiveX Control Buffer Overflow Vulnerability
13664| [23800] RETIRED: Microsoft May 2007 Advance Notification Multiple Vulnerabilities
13665| [23380] Microsoft Word 2007 WWLib.DLL Unspecified Document File Buffer Overflow Vulnerability
13666| [23335] RETIRED: Microsoft April 2007 Advance Notification Multiple Vulnerabilities
13667| [22716] Microsoft Office 2003 Denial of Service Vulnerability
13668| [22567] Microsoft Word 2000/2002 Document Stream Remote Code Execution Vulnerability
13669| [22328] RETIRED: Microsoft Word 2003 Unspecified Code Execution Vulnerability
13670| [22225] Microsoft Word 2000 Malformed Function Code Execution Vulnerability
13671| [21611] Microsoft Project Server 2003 PDSRequest.ASP XML Request Information Disclosure Vulnerability
13672| [21495] Microsoft Windows 2000 Remote Installation Service Remote Code Execution Vulnerability
13673| [20843] Microsoft Visual Studio 2005 WMI Object Broker Remote Code Execution Vulnerability
13674| [19636] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
13675| [19388] Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
13676| [17134] Microsoft Commerce Server 2002 Authentication Bypass Vulnerability
13677| [16634] Microsoft PowerPoint 2000 Remote Information Disclosure Vulnerability
13678| [14772] Microsoft Exchange Server 2003 Exchange Information Store Denial Of Service Vulnerability
13679| [14093] Microsoft Update Rollup 1 for Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
13680| [13564] Microsoft SQL Server 2000 Multiple Vulnerabilities
13681| [13008] Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability
13682| [12972] Microsoft Windows Server 2003 Service Pack 1 Released - Multiple Vulnerabilities Fixed
13683| [12913] Microsoft Outlook 2002 Connector For IBM Lotus Domino Policy Bypass Vulnerability
13684| [12824] Microsoft InfoPath 2003 Insecure Information Storage Vulnerability
13685| [12641] Microsoft Windows 2000 Group Policy Bypass Vulnerability
13686| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
13687| [11820] Microsoft Windows 2000 Resource Kit W3Who.DLL Multiple Remote Vulnerabilities
13688| [11446] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
13689| [11387] Microsoft Windows 2003 Services Default SACL Access Right Weakness
13690| [10901] Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
13691| [10693] Microsoft Windows 2000 Media Player Control Media Preview Script Execution Vulnerability
13692| [10484] Microsoft ISA Server 2000 FTP Bounce Filtering Vulnerability
13693| [10480] Microsoft ISA Server 2000 Site And Content Rule Bypass Vulnerability
13694| [10440] Microsoft Windows 2000 Domain Expired Account Security Policy Violation Weakness
13695| [10369] Microsoft Outlook 2003 Media File Script Execution Vulnerability
13696| [10307] Microsoft Outlook 2003 Predictable File Location Weakness
13697| [10114] Microsoft Windows 2000 Domain Controller LDAP Denial Of Service Vulnerability
13698| [9409] Microsoft Exchange Server 2003 Outlook Web Access Random Mailbox Access Vulnerability
13699| [9408] Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability
13700| [9118] Microsoft Exchange Server 2003 Outlook Web Access Lowered Security Settings Weakness
13701| [8833] Microsoft Windows 2000 TroubleShooter ActiveX Control Buffer Overflow Vulnerability
13702| [8522] Multiple Microsoft Windows 2003 Stack Protection Implementation Weaknesses
13703| [8397] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
13704| [8104] Microsoft Windows 2000 Unauthorized RPC Connection Weakness
13705| [8098] Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
13706| [8093] Microsoft Windows 2000 Active Directory Forest Origin Validation Vulnerability
13707| [8090] Microsoft Windows 2000 ShellExecute() Buffer Overflow Vulnerability
13708| [8089] Microsoft Windows 2000 Unspecified Cryptnet.DLL Memory Leakage Vulnerability
13709| [8086] Microsoft Windows 2000 Port Name Buffers Potential Buffer Overflow Vulnerability
13710| [8085] Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
13711| [8083] Microsoft Windows 2000 Domain Controller Spoofing Vulnerability
13712| [8081] Microsoft Windows 2000 USBH_IoctlGetNodeConnectionDriverKeyName Information Disclosure Vulnerability
13713| [8063] Microsoft Commerce Server 2002 Weak Registry Key Permissions Weakness
13714| [8045] Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
13715| [7930] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
13716| [7788] Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability
13717| [7469] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
13718| [7360] Microsoft Windows 2000/XP Registry Editor Custom Permissions Weakness
13719| [7102] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
13720| [6769] Microsoft Windows 2000 RPC Service Privilege Escalation Vulnerability
13721| [6766] Microsoft Windows 2000 NetBIOS Continuation Packets Kernel Memory Leak Vulnerability
13722| [6667] Microsoft Outlook 2002 V1 Exchange Server Security Certificate Information Leakage Vulnerability
13723| [6319] Microsoft Outlook 2002 Email Header Processing Denial of Service Vulnerability
13724| [6030] Microsoft Windows 2000 SNMP Printer Query Denial of Service Vulnerability
13725| [5972] Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness
13726| [5922] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
13727| [5480] Microsoft Windows 2000 Network Connection Manager Privilege Elevation Vulnerability
13728| [5422] Microsoft Content Management Server 2001 SQL Injection Vulnerability
13729| [5421] Microsoft Content Management Server 2001 Arbitrary Upload Location Vulnerability
13730| [5420] Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
13731| [5415] Microsoft Windows 2000 Insecure Default File Permissions Vulnerability
13732| [5413] Microsoft Exchange 2000 Post Authorization License Exhaustion Denial Of Service Vulnerability
13733| [5412] Microsoft Exchange 2000 Multiple MSRPC Denial Of Service Vulnerabilities
13734| [5312] Microsoft SQL Server 2000 Resolution Service Denial of Service Vulnerability
13735| [5311] Microsoft SQL Server 2000 Resolution Service Stack Overflow Vulnerability
13736| [5310] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
13737| [5309] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
13738| [5307] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
13739| [5253] Microsoft Windows 2000 Narrator Password Disclosure Vulnerability
13740| [5205] Microsoft SQL Server 2000 Incorrect Registry Key Permissions Vulnerability
13741| [5111] Microsoft Commerce Server 2000 OWC Package Installer Local Command Execution Vulnerability
13742| [5014] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
13743| [4881] Microsoft Exchange 2000 Malformed Mail Attribute DoS Vulnerability
13744| [4853] Microsoft Commerce Server 2000 Profile Service Buffer Overflow Vulnerability
13745| [4852] Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability
13746| [4847] Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability
13747| [4797] Microsoft MSDE/SQL Server 2000 Desktop Engine Default Configuration Vulnerability
13748| [4683] Microsoft Windows 2000 / NT Path Precedence Vulnerability
13749| [4532] Microsoft Windows 2000 Lanman Denial of Service Vulnerability
13750| [4438] Microsoft Windows 2000 Group Policy Evasion Vulnerability
13751| [4426] Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
13752| [4287] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
13753| [4256] Microsoft Windows 2000 Password Policy Bypass Vulnerability
13754| [4157] Microsoft Commerce Server 2000 ISAPI Buffer Overflow Vulnerability
13755| [4095] Microsoft Windows 2000 Server Terminal Services Failure To Lock Terminal Vulnerability
13756| [3652] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability
13757| [3481] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
13758| [3479] Microsoft Windows 2000 NTFS With Macintosh Client Directory Permission Vulnerability
13759| [3445] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
13760| [3339] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
13761| [3305] Norton AntiVirus for Microsoft Exchange 2000 Information Disclosure Vulnerability
13762| [3291] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
13763| [3215] Microsoft Windows 2000 IrDA Buffer Overflow Denial of Service Vulnerability
13764| [3185] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
13765| [3184] Microsoft Windows 2000 RunAs User Credentials Exposure Vulnerability
13766| [3146] Microsoft Windows 2000 System File Replacement Vulnerability
13767| [3115] Microsoft Windows NT and 2000 Command Prompt Reboot Vulnerability
13768| [3063] Microsoft Windows 2000 Unauthorized Password Change Vulnerability
13769| [3033] Microsoft Windows 2000 Task Manager Process Termination Vulnerability
13770| [2988] Microsoft Windows 2000 SMTP Improper Authentication Vulnerability
13771| [2929] Microsoft Windows 2000 LDAP SSL Password Modification Vulnerability
13772| [2849] Microsoft Windows 2000 Telnet Privilege Escalation Vulnerability
13773| [2846] Microsoft Windows 2000 Telnet System Call DoS Vulnerability
13774| [2844] Microsoft Windows 2000 Telnet Service DoS Vulnerability
13775| [2843] Microsoft Windows 2000 Telnet Multiple Sessions DoS Vulnerability
13776| [2838] Microsoft Windows 2000 Telnet Username DoS Vulnerability
13777| [2460] Microsoft Windows 2000 Event Viewer Buffer Overflow Vulnerability
13778| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
13779| [2394] Microsoft Windows 2000 Domain Controller DoS Vulnerability
13780| [2341] Microsoft Windows 2000 Network DDE Escalated Privileges Vulnerability
13781| [2326] Microsoft Windows 2000 RDP DoS Vulnerability
13782| [2133] Microsoft Windows 2000 Directory Services Restore Mode Blank Password Vulnerability
13783| [2066] Microsoft Windows NT 4.0 / 2000 SNMP Registry Key Modification Vulnerability
13784| [2018] Microsoft Windows 2000 Telnet Session Timeout DoS Vulnerability
13785| [2007] Microsoft Windows 2000 DNS Memory Leak Vulnerability
13786| [1973] Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
13787| [1958] Microsoft Exchange 2000 Server EUSR_EXSTOREEVENT Account Vulnerability
13788| [1933] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
13789| [1899] Microsoft Windows 2000 ActiveX Control Buffer Overflow Vulnerability
13790| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
13791| [1758] Microsoft Windows 2000 Unattended Install OEMPreinstall Vulnerability
13792| [1753] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
13793| [1748] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
13794| [1745] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
13795| [1729] Microsoft Windows 2000 Simplified Chinese IME Vulnerability
13796| [1695] Microsoft Proxy 2.0 FTP Permissions Bypass Vulnerability
13797| [1692] Microsoft Proxy 2.0 Internal Network Access Vulnerability
13798| [1683] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
13799| [1673] Microsoft Windows 2000 Malformed RPC Packet DoS Vulnerability
13800| [1651] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
13801| [1632] Microsoft Windows 98 / NT 4.0 / 2000 File Extension Validation Vulnerability
13802| [1620] Microsoft Windows 9x / NT 4.0 / 2000 NetBIOS Cache Corruption Vulnerability
13803| [1613] Microsoft Windows 2000 Local Security Policy Corruption Vulnerability
13804| [1566] Microsoft Word 97 / 2000 Mail Merge Code Execution Vulnerability
13805| [1561] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow Vulnerability
13806| [1535] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
13807| [1507] Microsoft Windows NT 4.0 / 2000 Unspecified Executable Path Vulnerability
13808| [1451] Microsoft Excel 97 / 2000 Register.ID Vulnerability
13809| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
13810| [1415] Microsoft Windows 2000 Remote CPU-overload Vulnerability
13811| [1414] Microsoft Windows 2000 Telnet Server DoS Vulnerability
13812| [1399] Microsoft Internet Explorer 5.01 and Excel/Powerpoint 2000 ActiveX Object Execution Vulnerability
13813| [1398] Microsoft Internet Explorer 5.01 and Access 2000 / 97 VBA Code Execution Vulnerability
13814| [1350] Microsoft Windows 2000 Windows Station Access Vulnerability
13815| [1304] Microsoft Windows NT 4.0 / 2000 SMB Write Request DoS Vulnerability
13816| [1301] Microsoft Windows NT 4.0 / 2000 Ignored SMB Response DoS Vulnerability
13817| [1295] Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
13818| [1198] Microsoft Windows 2000 Default SYSKEY Configuration Vulnerability
13819| [1197] Microsoft Office 2000 UA Control Vulnerability
13820| [990] Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
13821| [945] Microsoft SMS 2.0 Default Permissions Vulnerability
13822| [539] Microsoft Windows 2000 EFS Vulnerability
13823| [180] Microsoft Windows April Fools 2001 Vulnerability
13824| [71487] Microsoft December 2014 Advance Notification Multiple Vulnerabilities
13825| [70966] RETIRED: Microsoft November 2014 Advance Notification Multiple Vulnerabilities
13826| [70367] RETIRED: Microsoft October 2014 Advance Notification Multiple Vulnerabilities
13827| [69636] RETIRED: Microsoft September 2014 Advance Notification Multiple Vulnerabilities
13828| [69108] Microsoft August 2014 Advance Notification Multiple Vulnerabilities
13829| [68367] Microsoft July 2014 Advance Notification Multiple Vulnerabilities
13830| [67905] Microsoft June 2014 Advance Notification Multiple Vulnerabilities
13831| [67298] Microsoft May 2014 Advance Notification Multiple Vulnerabilities
13832| [66639] RETIRED: Microsoft April 2014 Advance Notification Multiple Vulnerabilities
13833| [66016] Microsoft March 2014 Notification Multiple Vulnerabilities
13834| [65426] Microsoft February 2014 Notification Multiple Vulnerabilities
13835| [64757] RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
13836| [64083] RETIRED: Microsoft December 2013 Advance Notification Multiple Vulnerabilities
13837| [63604] RETIRED: Microsoft November 2013 Advance Notification Multiple Vulnerabilities
13838| [62797] RETIRED: Microsoft October 2013 Advance Notification Multiple Vulnerabilities
13839| [62228] RETIRED: Microsoft September 2013 Advance Notification Multiple Vulnerabilities
13840| [62181] Microsoft Office Pinyin IME 2010 CVE-2013-3859 Local Privilege Escalation Vulnerability
13841| [61686] Microsoft August 2013 Advance Notification Multiple Vulnerabilities
13842| [60960] RETIRED: Microsoft July 2013 Advance Notification Multiple Vulnerabilities
13843| [60394] Microsoft June 2013 Advance Notification Multiple Vulnerabilities
13844| [59785] RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities
13845| [58881] RETIRED: Microsoft April 2013 Advance Notification Multiple Vulnerabilities
13846| [58380] RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities
13847| [57846] RETIRED: Microsoft February 2013 Advance Notification Multiple Vulnerabilities
13848| [57137] RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities
13849| [56838] RETIRED: Microsoft December 2012 Advance Notification Multiple Vulnerabilities
13850| [56450] RETIRED: Microsoft November 2012 Advance Notification Multiple Vulnerabilities
13851| [56304] Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability
13852| [55794] RETIRED: Microsoft October 2012 Advance Notification Multiple Vulnerabilities
13853| [55472] RETIRED: Microsoft September 2012 Advance Notification Multiple Vulnerabilities
13854| [54944] RETIRED: Microsoft August 2012 Advance Notification Multiple Vulnerabilities
13855| [54318] RETIRED: Microsoft July 2012 Advance Notification Multiple Vulnerabilities
13856| [53862] RETIRED: Microsoft June 2012 Advance Notification Multiple Vulnerabilities
13857| [53372] RETIRED: Microsoft May 2012 Advance Notification Multiple Vulnerabilities
13858| [52910] RETIRED: Microsoft April 2012 Advance Notification Multiple Vulnerabilities
13859| [52366] RETIRED: Microsoft March 2012 Advance Notification Multiple Vulnerabilities
13860| [51944] RETIRED: Microsoft February 2012 Advance Notification Multiple Vulnerabilities
13861| [51289] RETIRED: Microsoft January 2012 Advance Notification Multiple Vulnerabilities
13862| [50980] RETIRED: Microsoft December 2011 Advance Notification Multiple Vulnerabilities
13863| [50513] RETIRED: Microsoft November 2011 Advance Notification Multiple Vulnerabilities
13864| [49994] RETIRED: Microsoft October 2011 Advance Notification Multiple Vulnerabilities
13865| [49515] RETIRED: Microsoft September 2011 Advance Notification Multiple Vulnerabilities
13866| [49017] RETIRED: Microsoft August 2011 Advance Notification Multiple Vulnerabilities
13867| [48616] RETIRED: Microsoft July 2011 Advance Notification Multiple Vulnerabilities
13868| [48235] Microsoft Lync Server 2010 'ReachJoin.aspx' Remote Command Injection Vulnerability
13869| [48193] RETIRED: Microsoft June 2011 Advance Notification Multiple Vulnerabilities
13870| [47725] RETIRED: Microsoft May 2011 Advance Notification Multiple Vulnerabilities
13871| [47255] RETIRED: Microsoft April 2011 Advance Notification Multiple Vulnerabilities
13872| [46675] RETIRED: Microsoft March 2011 Advance Notification Multiple Vulnerabilities
13873| [46132] RETIRED: Microsoft February 2011 Advance Notification Multiple Vulnerabilities
13874| [45696] RETIRED: Microsoft January 2011 Advance Notification Multiple Vulnerabilities
13875| [45307] RETIRED: Microsoft December 2010 Advance Notification Multiple Vulnerabilities
13876| [44649] RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities
13877| [43831] RETIRED: Microsoft October 2010 Advance Notification Multiple Vulnerabilities
13878| [43115] RETIRED: Microsoft September 2010 Advance Notification Multiple Vulnerabilities
13879| [42234] RETIRED: Microsoft August 2010 Advance Notification Multiple Vulnerabilities
13880| [41474] RETIRED: Microsoft July 2010 Advance Notification Multiple Vulnerabilities
13881| [40548] RETIRED: Microsoft June 2010 Advance Notification Multiple Vulnerabilities
13882| [39961] RETIRED: Microsoft May 2010 Advance Notification Multiple Vulnerabilities
13883| [39313] RETIRED: Microsoft April 2010 Advance Notification Multiple Vulnerabilities
13884| [38540] RETIRED: Microsoft March 2010 Advance Notification Multiple Vulnerabilities
13885| [38096] RETIRED: Microsoft February 2010 Advance Notification Multiple Vulnerabilities
13886| [37887] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
13887| [37664] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
13888| [32642] Microsoft Word RTF Malformed Control Word Variant 2 Remote Code Execution Vulnerability
13889|
13890| IBM X-Force - https://exchange.xforce.ibmcloud.com:
13891| [82417] Microsoft Windows Knowledge Base Article 2801261 update is not installed
13892| [82415] Microsoft Windows Knowledge Base Article 2807986 update is not installed
13893| [82410] Microsoft Windows Knowledge Base Article 2809289 update is not installed
13894| [81859] Microsoft Windows Knowledge Base Article 2802968 update is not installed
13895| [81857] Microsoft Windows Knowledge Base Article 2809279 update is not installed
13896| [81668] Microsoft Windows Knowledge Base Article 2800277 update is not installed
13897| [77323] Microsoft Windows Knowledge Base Article 2706045 update is not installed
13898| [75949] Microsoft Windows Knowledge Base Article 2707960 update is not installed
13899| [75942] Microsoft Windows Knowledge Base Article 2706726 update is not installed
13900| [75934] Microsoft Windows Knowledge Base Article 2709162 update is not installed
13901| [75926] Microsoft Windows Knowledge Base Article 2709100 update is not installed
13902| [75905] Microsoft Windows Knowledge Base Article 2707956 update is not installed
13903| [71991] Microsoft Windows Knowledge Base Article 2607664 update is not installed
13904| [71542] Microsoft Windows Knowledge Base Article 2607702 update is not installed
13905| [70945] Microsoft Windows Knowledge Base Article 2603381 update is not installed
13906| [70150] Microsoft Windows Knowledge Base Article 2607670 update is not installed
13907| [67755] Microsoft Windows Knowledge Base Article 2503665 update is not installed
13908| [67749] Microsoft Windows Knowledge Base Article 2507938 update is not installed
13909| [66845] Microsoft Windows Knowledge Base Article 2506014 update is not installed
13910| [66844] Microsoft Windows Knowledge Base Article 2501584 update is not installed
13911| [66448] Microsoft Windows Knowledge Base Article 2508272 update is not installed
13912| [66442] Microsoft Windows Knowledge Base Article 2509553 update is not installed
13913| [66440] Microsoft Windows Knowledge Base Article 2508429 update is not installed
13914| [66438] Microsoft Windows Knowledge Base Article 2507618 update is not installed
13915| [66430] Microsoft Windows Knowledge Base Article 2503658 update is not installed
13916| [66425] Microsoft Windows Knowledge Base Article 2506223 update is not installed
13917| [65570] Microsoft Windows Knowledge Base Article 2500212 update is not installed
13918| [65568] Microsoft Windows Knowledge Base Article 2508062 update is not installed
13919| [63840] Microsoft Visual C++ 2008 Redistributable Package dynamic-linked library (DLL) code execution
13920| [63780] Microsoft PowerPoint 2007 dynamic-linked library (rpawinet.dll) code execution
13921| [63775] Microsoft Visio 2003 dynamic-linked library (mfc71enu.dll) code execution
13922| [63586] Microsoft Windows Knowledge Base Article 2207559 update is not installed
13923| [63573] Microsoft Windows Knowledge Base Article 2407132 update is not installed
13924| [62797] Microsoft Windows Knowledge Base Article 2305420 update is not installed
13925| [62149] Microsoft Windows Knowledge Base Article 2207566 update is not installed
13926| [62133] Microsoft Windows Knowledge Base Article 2405882 update is not installed
13927| [53980] Microsoft Windows 2000 License Logging Server buffer overflow
13928| [53601] Microsoft Office 2008 for Mac user ID 502 security bypass
13929| [50973] Microsoft Windows Server 2003 and Vista win32k.sys denial of service
13930| [50759] Microsoft Windows 2000 Active Directory LDAP code execution
13931| [48595] Microsoft Word 2007 Email as PDF information disclosure
13932| [46102] Microsoft Windows 2003 SP2 is not installed on the system
13933| [46101] Microsoft Windows 2003 SP1 is not installed on the system
13934| [45186] Microsoft SQL Server 2000 SQLVDIRLib.SQLVDirControl ActiveX control buffer overflow
13935| [37200] Microsoft SQL Server 2000 Service Pack 1 update is not installed
13936| [37198] Microsoft SQL Server 2000 Service Pack 3 update is not installed
13937| [34634] Microsoft Windows Server 2003 Active Directory information disclosure
13938| [34599] Microsoft Windows Server 2003 terminal server security bypass
13939| [34473] Microsoft Office 2000 ActiveX control buffer overflow
13940| [33713] Microsoft Word 2007 multiple unspecified denial of service
13941| [33712] Microsoft Word 2007 wwlib.dll buffer overflow
13942| [32631] Microsoft SQL Server 2000 Service Pack 2 update is not installed
13943| [31821] Microsoft Windows time zone update for year 2007
13944| [31196] Microsoft Office 2003 Brazilian Grammar Checker buffer overflow
13945| [30905] Microsoft Project Server 2003 pdsrequest.asp information disclosure
13946| [29546] Microsoft Windows 2000/2003 user logoff initiated
13947| [29545] Microsoft Windows 2000/2003 system time changed
13948| [29544] Microsoft Windows 2000/2003 system security access removed
13949| [29543] Microsoft Windows 2000/2003 security access granted
13950| [29542] Microsoft Windows 2000/2003 SAM notification package loaded
13951| [29541] Microsoft Windows 2000/2003 primary security token issued
13952| [29540] Microsoft Windows 2000/2003 user password reset successful
13953| [29539] Microsoft Windows 2000/2003 object indirectly accessed
13954| [29538] Microsoft Windows 2000/2003 object handle duplicated
13955| [29537] Microsoft Windows 2000/2003 logon with explicit credentials success
13956| [29536] Microsoft Windows 2000/2003 logon attempt using explicit credentials unsuccessful
13957| [29535] Microsoft Windows 2000/2003 IPSEC policy agent failed
13958| [29534] Microsoft Windows 2000/2003 IPSEC policy agent disabled
13959| [29533] Microsoft Windows 2000/2003 IPSEC policy agent changed
13960| [29532] Microsoft Windows 2000/2003 IKE security association established
13961| [29531] Microsoft Windows 2000/2003 IKE quick mode association ended
13962| [29530] Microsoft Windows 2000/2003 IKE main mode association ended
13963| [29529] Microsoft Windows 2000/2003 IKE association negotiation failed
13964| [29528] Microsoft Windows 2000/2003 IKE association peer authentication failed
13965| [29527] Microsoft Windows 2000/2003 IKE association failed invalid proposal
13966| [29526] Microsoft Windows 2000/2003 IKE association failed authentication parameters
13967| [29525] Microsoft Windows 2000/2003 DPAPI master key backup attempted
13968| [29524] Microsoft Windows 2000/2003 DPAPI key recovery attempted
13969| [29523] Microsoft Windows 2000/2003 DPAPI auditable data unprotected
13970| [29522] Microsoft Windows 2000/2003 administrative group security descriptor set
13971| [29521] Microsoft Windows 2000/2003 account name changed
13972| [29507] Microsoft Office 2003 unspecified PowerPoint NULL pointer dereference denial of service
13973| [28512] Microsoft Internet Explorer multiple Windows 2000 COM object denial of service
13974| [28005] Microsoft Windows 2000 Management Console (MMC) resource file cross-site scripting
13975| [26118] Microsoft Office 2003 mailto: information disclosure
13976| [25330] Microsoft Commerce Server 2002 authfiles/login.asp authentication bypass
13977| [24474] Microsoft Windows 2000 LDAP client accepts untrusted CA
13978| [24473] Microsoft Windows 2000 event ID 565 not logged
13979| [24472] Microsoft Windows 2000 Event ID 1704 records incorrect group policy settings
13980| [24407] Microsoft Windows 2000 SECEDIT command fails to set ACLs correctly
13981| [24405] Microsoft Windows 2000 UPN credentials with trailing dot group policy bypass
13982| [24403] Microsoft Windows 2000 WideCharToMultiByte() incorrect Japanese character conversion
13983| [24402] Microsoft Windows 2000 Terminal Service client IP not logged
13984| [24400] Microsoft Windows 2000 domain authentication can be bypassed by a local administrator
13985| [23066] Microsoft Windows XP and 2000 Server MSRPC memory allocation denial of service
13986| [22318] Microsoft SQL Server 2000 Service Pack 4 update is not installed
13987| [22183] Microsoft Exchange Server 2003 public folder denial of service
13988| [21345] Microsoft Windows 2000 Update Rollup 1 for Service Pack 4 has not been installed
13989| [21315] Microsoft Outlook 2002 connector for Domino bypass restrictions
13990| [19969] Multiple Microsoft Windows Server 2003 Edition printer driver denial of service
13991| [19965] Multiple Microsoft Windows Server 2003 Editions SMB redirector denial of service
13992| [19727] Microsoft Windows 2000 GDI32.DLL denial of service
13993| [19629] Microsoft Exchange Server 2003 folder denial of service
13994| [17826] Microsoft Outlook 2003 CID security bypass
13995| [17624] Microsoft Windows XP and Windows Server 2003 Compressed Folders buffer overflow
13996| [17621] Microsoft Windows 2003 SMTP service code execution
13997| [17560] Microsoft Windows 2000 and XP GDI library denial of service
13998| [17521] Microsoft Windows 2000 Service Pack 4 is not installed
13999| [16913] Microsoft Windows 2003 users with Synchronize directory service data privilege
14000| [16912] Microsoft Windows 2003 groups with Synchronize directory service data privilege
14001| [16909] Microsoft Windows 2003 groups with Remove computer from docking station privilege
14002| [16907] Microsoft Windows 2003 users with Create global objects privilege
14003| [16905] Microsoft Windows 2003 users or groups with Create global objects privilege
14004| [16851] Microsoft Windows 2003 and XP WinKey and U key denial of service
14005| [16704] Microsoft Windows 2000 Media Player control code execution
14006| [16582] Microsoft Windows Server 2003 kernel CPU denial of service
14007| [16572] Microsoft Windows 2003 Users with Impersonate a client after authentication privilege
14008| [16570] Microsoft Windows 2003 Users with Create global objects privilege
14009| [16564] Microsoft Windows 2003 Groups with Create global objects privilege
14010| [16562] Microsoft Windows 2003 Groups with "
14011| [16522] Microsoft Windows 2003 Impersonate a client after authentication privilege
14012| [16521] Microsoft Windows 2003 Deny Logon Through Terminal Services privilege
14013| [16520] Microsoft Windows 2003 Create global objects privilege
14014| [16276] Microsoft Windows 2000 Advanced Server fully qualified domain name security bypass
14015| [16173] Microsoft Outlook 2003 OLE object bypass restricted security zone
14016| [16119] Microsoft Outlook 2000 URL spoofing
14017| [16104] Microsoft Outlook 2003 predictable file location could allow code execution
14018| [16095] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
14019| [15704] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
14020| [15700] Microsoft Windows 2000 Domain Controller LSASS LDAP message denial of service
14021| [15632] Microsoft Windows 2000 Utility Manger allows privilege escalation
14022| [15414] Microsoft Outlook 2002 mailto URL allows execution of code
14023| [15263] Microsoft Windows XP and 2000 Server kernel allows elevated privileges
14024| [15057] Microsoft Windows XP and Windows Server 2003 smbmount Linux client denial of service
14025| [15038] Microsoft Windows 2000 Server Windows Media Services denial of service
14026| [15037] Microsoft Windows Server 2003 WINS /GS flag denial of service
14027| [14178] Microsoft ISA Exchange Server 2003 MS04-002 patch is not installed
14028| [14167] Microsoft ISA Server 2000 H.323 filter buffer overflow
14029| [13426] Microsoft Windows 2000 and XP RPC race condition
14030| [13423] Microsoft Windows 2000 Local Troubleshooter ActiveX control buffer overflow
14031| [13407] Microsoft Windows 2000 Server mqsvc.exe MQLocateBegin packet buffer overflow
14032| [13385] Microsoft Windows Server 2003 "
14033| [13211] Microsoft Windows 2000 and XP URG memory leak
14034| [13171] Microsoft Windows Server 2003 can allow attacker to bypass mechanism used to detect buffer overflows
14035| [13131] Microsoft Windows 2000 Message Queue Manager buffer overflow
14036| [12684] Microsoft Exchange Server OWA Outlook 2003 denial of service
14037| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
14038| [12620] Microsoft Windows 2000 Server SMTP FILETIME denial of service
14039| [12543] Microsoft Windows 2000 Accessibility Utility Manager could allow an attacker to gain privileges
14040| [12493] Microsoft Windows Shell32.dll 2000 ShellExecute function buffer overflow
14041| [12489] Microsoft Windows 2000 Server Active Directory buffer overflow
14042| [12128] Microsoft Windows 2000 and Windows NT MS03-019 patch is not installed
14043| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
14044| [12048] Microsoft Windows 2000 and Windows Server 2003 LAN Manager hash creation enabled
14045| [11901] Microsoft BizTalk Server 2002 SQL injection
14046| [11900] Microsoft BizTalk Server 2002 HTTP Receiver function buffer overflow
14047| [11816] Microsoft Windows 2000 Terminal Services MSGINA.DLL insecure access permissions
14048| [11696] Microsoft Windows 2000 Terminal Services man-in-the-middle attack
14049| [11617] Microsoft Windows 2000 MS03-007 patch is not installed on the system
14050| [11546] Microsoft Windows 2000 Windows Help Facility .cnt file buffer overflow
14051| [11329] Microsoft Windows NT and 2000 cmd.exe CD path name buffer overflow
14052| [11274] Microsoft Windows 2000 NetBIOS continuation packets denial of service
14053| [11273] Microsoft Windows 2000 RPC service could allow an attacker to gain elevated privileges
14054| [11216] Microsoft Windows NT and 2000 command prompt denial of service
14055| [11141] Microsoft Windows 2000 Terminal Services MSGINA.DLL denial of service
14056| [11133] Microsoft Outlook 2002 using V1 Exchange Server Security certificates transmits plaintext emails
14057| [10843] Microsoft Windows 2000 and XP SMB signing group policy modification
14058| [10431] Microsoft Windows 2000 SNMP LANMAN Extension memory leak denial of service
14059| [10400] Microsoft Windows 2000 RPC TCP port 135 denial of service
14060| [10377] Microsoft Windows XP and 2000 administrative alerts fail when security event log is full
14061| [10199] Microsoft Windows 2000/XP PPTP packet buffer overflow
14062| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
14063| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
14064| [9946] Microsoft Windows 2000 Terminal Services session screensaver fails to lock the console
14065| [9856] Microsoft Windows 2000 NCM handler routine could allow elevated privileges
14066| [9779] Microsoft Windows 2000 weak system partition permissions
14067| [9752] Microsoft Windows 2000 Service Pack 3 is not installed
14068| [9746] Microsoft Windows 2000 HTML Help item parameter buffer overflow
14069| [9625] Microsoft Windows 2000 Narrator allows login information to be audible
14070| [9154] Microsoft Data Engine (MSDE) and Microsoft SQL Server 2000 Desktop Engine have a default blank "
14071| [8867] Microsoft Windows 2000 LanMan denial of service
14072| [8813] Microsoft Windows 2000 Terminal Services allows attacker to bypass group policy settings
14073| [8759] Microsoft Windows 2000 could allow an attacker to block the application of Group Policy settings
14074| [8752] Microsoft Windows NT, 2000, and XP MUP buffer overflow
14075| [8739] Microsoft Windows 2000 DCOM memory leak
14076| [8708] Microsoft Outlook 2000 and 2002 executes embedded script in object tag when replying or forwarding HTML mail
14077| [8402] Microsoft Windows 2000 allows an attacker to bypass password policy
14078| [8307] Microsoft Windows 2000, Windows XP, and Exchange 2000 SMTP data transfer command denial of service
14079| [8304] Microsoft Windows 2000 and Exchange 5.5 SMTP service unauthorized mail privileges
14080| [8254] Microsoft Commerce Server 2000 AuthFilter ISAPI filter buffer overflow
14081| [8199] Microsoft Windows 2000 Terminal Services unlocked client
14082| [8094] Microsoft Windows 2000 and Interix 2.2 Telnet protocol option buffer overflow
14083| [8092] Microsoft Exchange 2000 System Attendant sets incorrect registry permissions
14084| [8043] Microsoft Windows NT, 2000, and XP using NTFS could allow files to be hidden
14085| [8037] Microsoft Windows 2000 empty TCP packet denial of service
14086| [8023] Microsoft Windows NT and Windows 2000 SIDs could allow an attacker to gain elevated privileges in another domain
14087| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
14088| [7667] Microsoft Windows 2000 IKE UDP packet flood denial of service
14089| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
14090| [7538] Microsoft Windows 2000 and XP Terminal services allow an attacker to spoof IP addresses
14091| [7533] Microsoft Windows 2000 RunAs service denial of service
14092| [7532] Microsoft Windows 2000 RunAs service allows local attacker to bypass pipe authentication
14093| [7531] Microsoft Windows 2000 RunAs service reveals sensitive information
14094| [7528] Microsoft Windows NT and Windows 2000 malformed RPC request denial of service
14095| [7409] Microsoft Windows 2000 and Windows XP GDI denial of service
14096| [7302] Microsoft Windows NT and 2000 Terminal Server malformed RDP packet series denial of service
14097| [7008] Microsoft Windows 2000 IrDA device denial of service
14098| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
14099| [6931] Microsoft Windows 2000 without Service Pack 2
14100| [6919] Microsoft Windows 2000 Task Manager does not terminate malicious files with the same name as a system process
14101| [6912] Microsoft Windows NT and 2000 Terminal Server RDP memory leak denial of service
14102| [6876] Microsoft Windows 2000 could allow an attacker to change network passwords
14103| [6803] Microsoft Windows 2000 SMTP service allows mail relaying
14104| [6745] Microsoft Windows 2000 LDAP function could allow domain user password change
14105| [6669] Microsoft Windows 2000 Telnet system call denial of service
14106| [6668] Microsoft Windows 2000 Telnet handle leak denial of service
14107| [6667] Microsoft Windows 2000 Telnet multiple idle sessions denial of service
14108| [6666] Microsoft Windows 2000 Telnet username denial of service
14109| [6665] Microsoft Windows 2000 Telnet service weak domain authentication
14110| [6664] Microsoft Windows 2000 Telnet service predictable pipe names could allow elevation of privileges
14111| [6652] Microsoft Exchange 2000 OWA script execution
14112| [6590] Microsoft Windows 2000 debug registers allow attacker to gain elevated privileges
14113| [6506] Microsoft Windows 2000 Server Kerberos denial of service
14114| [6443] Microsoft Windows 2000 catalog file could remove installed hotfixes
14115| [6160] Microsoft Windows 2000 event viewer buffer overflow
14116| [6136] Microsoft Windows 2000 domain controller denial of service
14117| [6035] Microsoft Windows 2000 Server RDP denial of service
14118| [5973] Microsoft Windows 2000 EFS allows local user to recover sensitive data
14119| [5936] Microsoft Windows 2000 Server Directory Service Restore Mode allows user to login with blank password
14120| [5800] Microsoft Windows 2000 Index Service ActiveX controls allow unauthorized access to file information
14121| [5623] Microsoft Windows NT and 2000 Phone Book service buffer overflow
14122| [5598] Microsoft Windows 2000 Telnet daemon could allow a denial of service
14123| [5585] Microsoft Windows 2000 brute force attack
14124| [5502] Microsoft Windows 2000 Indexing Services ixsso.query
14125| [5467] Microsoft Windows 2000 System Monitor ActiveX control buffer overflow
14126| [5399] Microsoft Windows NT and 2000 Network Monitor buffer overflow
14127| [5301] Microsoft Windows 2000 Simplified Chinese IME State Recognition
14128| [5263] Microsoft Office 2000 executes .dll without users knowledge
14129| [5242] Microsoft Windows 2000 Telnet client NTLM authentication weakness
14130| [5222] Microsoft Windows 2000 malformed RPC packet denial of service
14131| [5203] Microsoft Windows 2000 still image service
14132| [5171] Microsoft Windows 2000 Local Security Policy corruption
14133| [5080] Microsoft Office 2000 HTML object tag buffer overflow
14134| [5033] Microsoft Windows 2000 without Service Pack 1
14135| [5031] Microsoft Windows 2000 Service Control Manager named pipe could allow a unauthorized user to gain privileges
14136| [5015] Microsoft Windows NT and 2000 executable path
14137| [4887] Microsoft Windows 2000 Kerberos ticket renewed
14138| [4886] Microsoft Windows 2000 logon session reconnected
14139| [4885] Microsoft Windows 2000 logon session disconnected
14140| [4882] Microsoft Windows 2000 Kerberos pre-authentication failed
14141| [4873] Microsoft Windows 2000 user account mapped for logon
14142| [4872] Microsoft Windows 2000 account logon failed
14143| [4871] Microsoft Windows 2000 account used for logon
14144| [4855] Microsoft Windows 2000 group type change
14145| [4842] Microsoft Internet Explorer and Microsoft Powerpoint 2000 ActiveX object execution
14146| [4841] Microsoft Internet Explorer and Microsoft Access 2000 VBA code execution
14147| [4823] Microsoft Windows 2000 Telnet server binary stream denial of service
14148| [4819] Microsoft Windows 2000 default SYSKEY configuration
14149| [4787] Microsoft Windows 2000 user account locked out
14150| [4786] Microsoft Windows 2000 computer account created
14151| [4785] Microsoft Windows 2000 computer account changed
14152| [4784] Microsoft Windows 2000 computer account deleted
14153| [4714] Microsoft Windows 2000 "
14154| [4589] Microsoft Windows 2000 protected store can be compromised by brute force attack
14155| [4278] Microsoft Windows 2000 unattended install does not secure All Users profile
14156| [4138] Microsoft Windows 2000 system file integrity feature is disabled
14157| [4086] Microsoft Windows 2000 may not start Jaz drives correctly
14158| [4085] Microsoft Windows 2000 non-Gregorial calendar error
14159| [4084] Microsoft Windows 2000 may prevent Adobe FrameMaker files from being saved in some formats
14160| [4083] Microsoft Windows 2000 Terminal Services may damage Office files saved as HTML
14161| [4082] Microsoft Windows 2000 and Iomega parallel port drives display error
14162| [4080] Microsoft Windows 2000 AOL image support
14163| [4079] Microsoft Windows 2000 High Encryption Pack
14164| [3854] Microsoft Office 2000 security setting
14165| [1376] Microsoft Proxy 2.0 denial of service
14166| [86256] Microsoft Windows Knowledge Base Article 2876063 update is not installed
14167| [86097] Microsoft Windows Knowledge Base Article 2859537 update is not installed
14168| [86091] Microsoft Windows Knowledge Base Article 2868623 update is not installed
14169| [86089] Microsoft Windows Knowledge Base Article 2862772 update is not installed
14170| [86075] Microsoft Windows Knowledge Base Article 2850869 update is not installed
14171| [86073] Microsoft Windows Knowledge Base Article 2873872 update is not installed
14172| [86070] Microsoft Windows Knowledge Base Article 2849568 update is not installed
14173| [85245] Microsoft Windows Knowledge Base Article 2848295 update is not installed
14174| [85244] Microsoft Windows Knowledge Base Article 2847927 update is not installed
14175| [85243] Microsoft Windows Knowledge Base Article 2861561 update is not installed
14176| [85236] Microsoft Windows Knowledge Base Article 2850851 update is not installed
14177| [85227] Microsoft Windows Knowledge Base Article 2847883 update is not installed
14178| [85223] Microsoft Windows Knowledge Base Article 2846071 update is not installed
14179| [85205] Microsoft Windows Knowledge Base Article 2845187 update is not installed
14180| [84621] Microsoft Windows Knowledge Base Article 2845690 update is not installed
14181| [84619] Microsoft Windows Knowledge Base Article 2839894 update is not installed
14182| [84617] Microsoft Windows Knowledge Base Article 2839571 update is not installed
14183| [84615] Microsoft Windows Knowledge Base Article 2839229 update is not installed
14184| [84613] Microsoft Windows Knowledge Base Article 2838727 update is not installed
14185| [84156] Microsoft Windows Knowledge Base Article 2847204 update is not installed
14186| [83912] Microsoft Windows Knowledge Base Article 2829254 update is not installed
14187| [83910] Microsoft Windows Knowledge Base Article 2829530 update is not installed
14188| [83898] Microsoft Windows Knowledge Base Article 2830397 update is not installed
14189| [83886] Microsoft Windows Knowledge Base Article 2830399 update is not installed
14190| [83884] Microsoft Windows Knowledge Base Article 2834692 update is not installed
14191| [83882] Microsoft Windows Knowledge Base Article 2834695 update is not installed
14192| [83880] Microsoft Windows Knowledge Base Article 2836440 update is not installed
14193| [83876] Microsoft Windows Knowledge Base Article 2840221 update is not installed
14194| [83192] Microsoft Windows Knowledge Base Article 2817183 update is not installed
14195| [83100] Microsoft Windows Knowledge Base Article 2830914 update is not installed
14196| [83098] Microsoft Windows Knowledge Base Article 2829996 update is not installed
14197| [83093] Microsoft Windows Knowledge Base Article 2828223 update is not installed
14198| [83091] Microsoft Windows Knowledge Base Article 2813170 update is not installed
14199| [83088] Microsoft Windows Knowledge Base Article 2827663 update is not installed
14200| [83086] Microsoft Windows Knowledge Base Article 2823482 update is not installed
14201| [83084] Microsoft Windows Knowledge Base Article 2821818 update is not installed
14202| [83082] Microsoft Windows Knowledge Base Article 2820917 update is not installed
14203| [82600] Microsoft Windows Knowledge Base Article 2813707 update is not installed
14204| [82424] Microsoft Windows Knowledge Base Article 2814124 update is not installed
14205| [82422] Microsoft Windows Knowledge Base Article 2780176 update is not installed
14206| [82401] Microsoft Windows Knowledge Base Article 2813682 update is not installed
14207| [82399] Microsoft Windows Knowledge Base Article 2816264 update is not installed
14208| [81683] Microsoft Windows Knowledge Base Article 2780091 update is not installed
14209| [81681] Microsoft Windows Knowledge Base Article 2784242 update is not installed
14210| [81680] Microsoft Windows Knowledge Base Article 2790113 update is not installed
14211| [81678] Microsoft Windows Knowledge Base Article 2790655 update is not installed
14212| [81676] Microsoft Windows Knowledge Base Article 2790978 update is not installed
14213| [81674] Microsoft Windows Knowledge Base Article 2797052 update is not installed
14214| [81672] Microsoft Windows Knowledge Base Article 2799494 update is not installed
14215| [81666] Microsoft Windows Knowledge Base Article 2778344 update is not installed
14216| [81634] Microsoft Windows Knowledge Base Article 2792100 update is not installed
14217| [81339] Microsoft Windows Knowledge Base Article 2799329 update is not installed
14218| [80875] Microsoft Windows Knowledge Base Article 2756145 update is not installed
14219| [80872] Microsoft Windows Knowledge Base Article 2769324 update is not installed
14220| [80867] Microsoft Windows Knowledge Base Article 2769327 update is not installed
14221| [80865] Microsoft Windows Knowledge Base Article 2769369 update is not installed
14222| [80863] Microsoft Windows Knowledge Base Article 2778930 update is not installed
14223| [80861] Microsoft Windows Knowledge Base Article 2785220 update is not installed
14224| [80365] Microsoft Windows Knowledge Base Article 2761465 update is not installed
14225| [80360] Microsoft Windows Knowledge Base Article 2765809 update is not installed
14226| [80358] Microsoft Windows Knowledge Base Article 2770660 update is not installed
14227| [80356] Microsoft Windows Knowledge Base Article 2780642 update is not installed
14228| [80352] Microsoft Windows Knowledge Base Article 2783534 update is not installed
14229| [80349] Microsoft Windows Knowledge Base Article 2784126 update is not installed
14230| [79693] Microsoft Windows Knowledge Base Article 2745030 update is not installed
14231| [79687] Microsoft Windows Knowledge Base Article 2761451 update is not installed
14232| [79683] Microsoft Windows Knowledge Base Article 2761226 update is not installed
14233| [79679] Microsoft Windows Knowledge Base Article 2758857 update is not installed
14234| [79677] Microsoft Windows Knowledge Base Article 2727528 update is not installed
14235| [78864] Microsoft Windows Knowledge Base Article 2754670 update is not installed
14236| [78862] Microsoft Windows Knowledge Base Article 2743555 update is not installed
14237| [78858] Microsoft Windows Knowledge Base Article 2754849 update is not installed
14238| [78856] Microsoft Windows Knowledge Base Article 2724197 update is not installed
14239| [78853] Microsoft Windows Knowledge Base Article 2741517 update is not installed
14240| [78851] Microsoft Windows Knowledge Base Article 2742319 update is not installed
14241| [78848] Microsoft Windows Knowledge Base Article 2742321 update is not installed
14242| [78760] Microsoft Windows Knowledge Base Article 2744842 update is not installed
14243| [78077] Microsoft Windows Knowledge Base Article 2741528 update is not installed
14244| [78075] Microsoft Windows Knowledge Base Article 2720184 update is not installed
14245| [78071] Microsoft Windows Knowledge Base Article 2748552 update is not installed
14246| [77512] Microsoft Windows Knowledge Base Article 2740358 update is not installed
14247| [77362] Microsoft Windows Knowledge Base Article 2733918 update is not installed
14248| [77360] Microsoft Windows Knowledge Base Article 2733829 update is not installed
14249| [77357] Microsoft Windows Knowledge Base Article 2733594 update is not installed
14250| [77352] Microsoft Windows Knowledge Base Article 2731879 update is not installed
14251| [77350] Microsoft Windows Knowledge Base Article 2731847 update is not installed
14252| [77348] Microsoft Windows Knowledge Base Article 2723135 update is not installed
14253| [77346] Microsoft Windows Knowledge Base Article 2722913 update is not installed
14254| [77342] Microsoft Windows Knowledge Base Article 2720573 update is not installed
14255| [77325] Microsoft Windows Knowledge Base Article 2719584 update is not installed
14256| [76808] Microsoft Windows Knowledge Base Article 2721015 update is not installed
14257| [76725] Microsoft Windows Knowledge Base Article 2722479 update is not installed
14258| [76724] Microsoft Windows Knowledge Base Article 2719177 update is not installed
14259| [76721] Microsoft Windows Knowledge Base Article 2718523 update is not installed
14260| [76718] Microsoft Windows Knowledge Base Article 2698365 update is not installed
14261| [76711] Microsoft Windows Knowledge Base Article 2695502 update is not installed
14262| [76704] Microsoft Windows Knowledge Base Article 2691442 update is not installed
14263| [76702] Microsoft Windows Knowledge Base Article 2655992 update is not installed
14264| [75963] Microsoft Windows Knowledge Base Article 2699988 update is not installed
14265| [75939] Microsoft Windows Knowledge Base Article 2685939 update is not installed
14266| [75928] Microsoft Windows Knowledge Base Article 2711167 update is not installed
14267| [75136] Microsoft Windows Knowledge Base Article 2693777 update is not installed
14268| [75132] Microsoft Windows Knowledge Base Article 2690533 update is not installed
14269| [75130] Microsoft Windows Knowledge Base Article 2688338 update is not installed
14270| [75127] Microsoft Windows Knowledge Base Article 2681578 update is not installed
14271| [75123] Microsoft Windows Knowledge Base Article 2680352 update is not installed
14272| [75116] Microsoft Windows Knowledge Base Article 2597981 update is not installed
14273| [74556] Microsoft Windows Knowledge Base Article 2639185 update is not installed
14274| [74384] Microsoft Windows Knowledge Base Article 2675157 update is not installed
14275| [74378] Microsoft Windows Knowledge Base Article 2671605 update is not installed
14276| [74373] Microsoft Windows Knowledge Base Article 2664258 update is not installed
14277| [74369] Microsoft Windows Knowledge Base Article 2663860 update is not installed
14278| [73543] Microsoft Windows Knowledge Base Article 2671387 update is not installed
14279| [73540] Microsoft Windows Knowledge Base Article 2665364 update is not installed
14280| [73538] Microsoft Windows Knowledge Base Article 2651019 update is not installed
14281| [73536] Microsoft Windows Knowledge Base Article 2651018 update is not installed
14282| [73533] Microsoft Windows Knowledge Base Article 2647170 update is not installed
14283| [73530] Microsoft Windows Knowledge Base Article 2641653 update is not installed
14284| [72887] Microsoft Windows Knowledge Base Article 2663841 update is not installed
14285| [72873] Microsoft Windows Knowledge Base Article 2663830 update is not installed
14286| [72867] Microsoft Windows Knowledge Base Article 2663510 update is not installed
14287| [72857] Microsoft Windows Knowledge Base Article 2661637 update is not installed
14288| [72855] Microsoft Windows Knowledge Base Article 2660465 update is not installed
14289| [72853] Microsoft Windows Knowledge Base Article 2653956 update is not installed
14290| [72851] Microsoft Windows Knowledge Base Article 2654428 update is not installed
14291| [72849] Microsoft Windows Knowledge Base Article 2651026 update is not installed
14292| [72846] Microsoft Windows Knowledge Base Article 2647516 update is not installed
14293| [72841] Microsoft Windows Knowledge Base Article 2645640 update is not installed
14294| [72838] Microsoft Windows Knowledge Base Article 2643719 update is not installed
14295| [72029] Microsoft Windows Knowledge Base Article 2638420 update is not installed
14296| [72003] Microsoft Windows Knowledge Base Article 2646524 update is not installed
14297| [71998] Microsoft Windows Knowledge Base Article 2644615 update is not installed
14298| [71995] Microsoft Windows Knowledge Base Article 2643584 update is not installed
14299| [71994] Microsoft Windows Knowledge Base Article 2636391 update is not installed
14300| [71565] Microsoft Windows Knowledge Base Article 2648048 update is not installed
14301| [71562] Microsoft Windows Knowledge Base Article 2640241 update is not installed
14302| [71560] Microsoft Windows Knowledge Base Article 2640045 update is not installed
14303| [71558] Microsoft Windows Knowledge Base Article 2639417 update is not installed
14304| [71557] Microsoft Windows Knowledge Base Article 2639142 update is not installed
14305| [71554] Microsoft Windows Knowledge Base Article 2633171 update is not installed
14306| [71552] Microsoft Windows Knowledge Base Article 2624667 update is not installed
14307| [71550] Microsoft Windows Knowledge Base Article 2620712 update is not installed
14308| [71548] Microsoft Windows Knowledge Base Article 2618451 update is not installed
14309| [71546] Microsoft Windows Knowledge Base Article 2618444 update is not installed
14310| [71538] Microsoft Windows Knowledge Base Article 2590602 update is not installed
14311| [70951] Microsoft Windows Knowledge Base Article 2630837 update is not installed
14312| [70949] Microsoft Windows Knowledge Base Article 2620704 update is not installed
14313| [70947] Microsoft Windows Knowledge Base Article 2617657 update is not installed
14314| [70943] Microsoft Windows Knowledge Base Article 2588516 update is not installed
14315| [70152] Microsoft Windows Knowledge Base Article 2623699 update is not installed
14316| [70140] Microsoft Windows Knowledge Base Article 2652016 update is not installed
14317| [70130] Microsoft Windows Knowledge Base Article 2586448 update is not installed
14318| [70115] Microsoft Windows Knowledge Base Article 2567053 update is not installed
14319| [69501] Microsoft Windows Knowledge Base Article 2587634 update is not installed
14320| [69498] Microsoft Windows Knowledge Base Article 2587505 update is not installed
14321| [69492] Microsoft Windows Knowledge Base Article 2571621 update is not installed
14322| [69490] Microsoft Windows Knowledge Base Article 2570947 update is not installed
14323| [68840] Microsoft Windows Knowledge Base Article 2451858 update is not installed
14324| [68833] Microsoft Windows Knowledge Base Article 2567943 update is not installed
14325| [68831] Microsoft Windows Knowledge Base Article 2570222 update is not installed
14326| [68829] Microsoft Windows Knowledge Base Article 2567951 update is not installed
14327| [68827] Microsoft Windows Knowledge Base Article 2578230 update is not installed
14328| [68825] Microsoft Windows Knowledge Base Article 2546250 update is not installed
14329| [68823] Microsoft Windows Knowledge Base Article 2559049 update is not installed
14330| [68816] Microsoft Windows Knowledge Base Article 2556532 update is not installed
14331| [68814] Microsoft Windows Knowledge Base Article 2560656 update is not installed
14332| [68812] Microsoft Windows Knowledge Base Article 2560978 update is not installed
14333| [68809] Microsoft Windows Knowledge Base Article 2562485 update is not installed
14334| [68806] Microsoft Windows Knowledge Base Article 2566454 update is not installed
14335| [68804] Microsoft Windows Knowledge Base Article 2563894 update is not installed
14336| [68801] Microsoft Windows Knowledge Base Article 2567680 update is not installed
14337| [68315] Microsoft Windows Knowledge Base Article 2555917 update is not installed
14338| [68299] Microsoft Windows Knowledge Base Article 2566220 update is not installed
14339| [68283] Microsoft Windows Knowledge Base Article 2560847 update is not installed
14340| [67955] Microsoft Windows Knowledge Base Article 2530548 update is not installed
14341| [67943] Microsoft Windows Knowledge Base Article 2544521 update is not installed
14342| [67762] Microsoft Windows Knowledge Base Article 2543893 update is not installed
14343| [67759] Microsoft Windows Knowledge Base Article 2544893 update is not installed
14344| [67757] Microsoft Windows Knowledge Base Article 2476490 update is not installed
14345| [67753] Microsoft Windows Knowledge Base Article 2514842 update is not installed
14346| [67751] Microsoft Windows Knowledge Base Article 2518295 update is not installed
14347| [67737] Microsoft Windows Knowledge Base Article 2520426 update is not installed
14348| [67733] Microsoft Windows Knowledge Base Article 2525694 update is not installed
14349| [67731] Microsoft Windows Knowledge Base Article 2525835 update is not installed
14350| [67728] Microsoft Windows Knowledge Base Article 2535512 update is not installed
14351| [67725] Microsoft Windows Knowledge Base Article 2536275 update is not installed
14352| [67722] Microsoft Windows Knowledge Base Article 2536276 update is not installed
14353| [67718] Microsoft Windows Knowledge Base Article 2537146 update is not installed
14354| [67709] Microsoft Windows Knowledge Base Article 2538814 update is not installed
14355| [67302] Microsoft Windows Knowledge Base Article 2545814 update is not installed
14356| [67101] Microsoft Windows Knowledge Base Article 2524426 update is not installed
14357| [66446] Microsoft Windows Knowledge Base Article 2514666 update is not installed
14358| [66444] Microsoft Windows Knowledge Base Article 2511455 update is not installed
14359| [66436] Microsoft Windows Knowledge Base Article 2497640 update is not installed
14360| [66432] Microsoft Windows Knowledge Base Article 2527308 update is not installed
14361| [66428] Microsoft Windows Knowledge Base Article 2489979 update is not installed
14362| [66423] Microsoft Windows kernel-mode driver (win32k.sys) variant 29 privilege escalation
14363| [66422] Microsoft Windows kernel-mode driver (win32k.sys) variant 28 privilege escalation
14364| [66421] Microsoft Windows kernel-mode driver (win32k.sys) variant 27 privilege escalation
14365| [66420] Microsoft Windows kernel-mode driver (win32k.sys) variant 26 privilege escalation
14366| [66419] Microsoft Windows kernel-mode driver (win32k.sys) variant 25 privilege escalation
14367| [66418] Microsoft Windows kernel-mode driver (win32k.sys) variant 24 privilege escalation
14368| [66417] Microsoft Windows kernel-mode driver (win32k.sys) variant 23 privilege escalation
14369| [66416] Microsoft Windows kernel-mode driver (win32k.sys) variant 22 privilege escalation
14370| [66415] Microsoft Windows kernel-mode driver (win32k.sys) variant 21 privilege escalation
14371| [66414] Microsoft Windows kernel-mode driver (win32k.sys) variant 20 privilege escalation
14372| [66396] Microsoft Windows kernel-mode driver (win32k.sys) variant 2 privilege escalation
14373| [66394] Microsoft Windows Knowledge Base Article 2485663 update is not installed
14374| [65588] Microsoft Windows Knowledge Base Article 2489279 update is not installed
14375| [65581] Microsoft Windows Knowledge Base Article 2510030 update is not installed
14376| [65580] Microsoft Windows Knowledge Base Article 2489283 update is not installed
14377| [65575] Microsoft Windows Knowledge Base Article 2489293 update is not installed
14378| [65573] Microsoft Windows Knowledge Base Article 2494047 update is not installed
14379| [64973] Microsoft Windows Knowledge Base Article 2478960 update is not installed
14380| [64971] Microsoft Windows Knowledge Base Article 2479628 update is not installed
14381| [64927] Microsoft Windows Knowledge Base Article 2393802 update is not installed
14382| [64925] Microsoft Windows Knowledge Base Article 2451879 update is not installed
14383| [64920] Microsoft Windows Knowledge Base Article 2475792 update is not installed
14384| [64918] Microsoft Windows Knowledge Base Article 2476687 update is not installed
14385| [64916] Microsoft Windows Knowledge Base Article 2478953 update is not installed
14386| [64914] Microsoft Windows Knowledge Base Article 2482017 update is not installed
14387| [64910] Microsoft Windows Knowledge Base Article 2483185 update is not installed
14388| [64909] Microsoft Windows Knowledge Base Article 2484015 update is not installed
14389| [64907] Microsoft Windows Knowledge Base Article 2485376 update is not installed
14390| [64905] Microsoft Windows Knowledge Base Article 2489256 update is not installed
14391| [64902] Microsoft Windows Knowledge Base Article 2496930 update is not installed
14392| [64342] Microsoft Windows Knowledge Base Article 2451910 update is not installed
14393| [64339] Microsoft Windows Knowledge Base Article 2478935 update is not installed
14394| [63584] Microsoft Windows Knowledge Base Article 2424434 update is not installed
14395| [63582] Microsoft Windows Knowledge Base Article 2423089 update is not installed
14396| [63580] Microsoft Windows Knowledge Base Article 2436673 update is not installed
14397| [63571] Microsoft Windows Knowledge Base Article 2440591 update is not installed
14398| [63569] Microsoft Windows Knowledge Base Article 2385678 update is not installed
14399| [63566] Microsoft Windows Knowledge Base Article 2442962 update is not installed
14400| [63564] Microsoft Windows Knowledge Base Article 2345316 update is not installed
14401| [63562] Microsoft Windows Knowledge Base Article 2296199 update is not installed
14402| [63558] Microsoft Windows Knowledge Base Article 2416400 update is not installed
14403| [63550] Microsoft Windows Knowledge Base Article 2447961 update is not installed
14404| [63548] Microsoft Windows Knowledge Base Article 2443105 update is not installed
14405| [63546] Microsoft Windows Knowledge Base Article 2455005 update is not installed
14406| [63544] Microsoft Windows Knowledge Base Article 2292970 update is not installed
14407| [62805] Microsoft Windows Knowledge Base Article 2316074 update is not installed
14408| [62793] Microsoft Windows Knowledge Base Article 2293386 update is not installed
14409| [62789] Microsoft Windows Knowledge Base Article 2423930 update is not installed
14410| [62170] Microsoft Windows Knowledge Base Article 2296011 update is not installed
14411| [62166] Microsoft Windows Knowledge Base Article 2294255 update is not installed
14412| [62163] Microsoft Windows Knowledge Base Article 2281679 update is not installed
14413| [62154] Microsoft Windows Knowledge Base Article 2279986 update is not installed
14414| [62147] Microsoft Windows Knowledge Base Article 2160841 update is not installed
14415| [62134] Microsoft Windows Knowledge Base Article 2412048 update is not installed
14416| [62129] Microsoft Windows Knowledge Base Article 2387149 update is not installed
14417| [62126] Microsoft Windows Knowledge Base Article 2378111 update is not installed
14418| [62123] Microsoft Windows Knowledge Base Article 2360937 update is not installed
14419| [62118] Microsoft Windows Knowledge Base Article 2293211 update is not installed
14420| [62104] Microsoft Windows Knowledge Base Article 2360131 update is not installed
14421| [62098] Microsoft Windows Knowledge Base Article 2293194 update is not installed
14422| [62069] Microsoft Windows Knowledge Base Article 2418042 update is not installed
14423| [61519] Microsoft Windows Knowledge Base Article 2121546 update is not installed
14424| [61517] Microsoft Windows Knowledge Base Article 2259922 update is not installed
14425| [61514] Microsoft Windows Knowledge Base Article 2267960 update is not installed
14426| [61510] Microsoft Windows Knowledge Base Article 2315011 update is not installed
14427| [61507] Microsoft Windows Knowledge Base Article 2320113 update is not installed
14428| [61504] Microsoft Windows Knowledge Base Article 2347290 update is not installed
14429| [60736] Microsoft Windows Knowledge Base Article 2265906 update is not installed
14430| [60734] Microsoft Windows Knowledge Base Article 2269638 update is not installed
14431| [60728] Microsoft Windows Knowledge Base Article 2269707 update is not installed
14432| [60724] Microsoft Windows Knowledge Base Article 2286198 update is not installed
14433| [60713] Microsoft Windows Knowledge Base Article 2183461 update is not installed
14434| [60698] Microsoft Windows Knowledge Base Article 2160329 update is not installed
14435| [60686] Microsoft Windows Knowledge Base Article 2115168 update is not installed
14436| [60684] Microsoft Windows Knowledge Base Article 2079403 update is not installed
14437| [60680] Microsoft Windows Knowledge Base Article 2264072 update is not installed
14438| [59901] Microsoft Windows Knowledge Base Article 2229593 update is not installed
14439| [59898] Microsoft Windows Knowledge Base Article 2229593 update is not installed
14440| [58913] Microsoft Windows Knowledge Base Article 2027452 update is not installed
14441| [58891] Microsoft Windows Knowledge Base Article 2028554 update is not installed
14442| [17004] Microsoft Windows XP Service Pack 2 is not installed on the system
14443| [9187] Microsoft Passport SDK 2.1 Component Configuration Document (CCD) permission
14444| [9146] Microsoft Passport SDK 2.1 events reporting disabled
14445| [9068] Microsoft Passport SDK 2.1 registry default permission exposure
14446| [9067] Microsoft Passport SDK 2.1 default test site exposure
14447| [9066] Microsoft Passport SDK 2.1 Adventure Works Sample Site exposure
14448| [9065] Microsoft Passport SDK 2.1 Adventure Works Sample Site global.asa file default permission exposure
14449| [9064] Microsoft Passport SDK 2.1 default time window exposure
14450| [1271] Microsoft IIS version 2 installed
14451| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
14452|
14453| Exploit-DB - https://www.exploit-db.com:
14454| [30756] Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilities
14455| [30749] Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability
14456| [30636] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (2)
14457| [30635] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (1)
14458| [30281] Microsoft .Net Framework <= 2.0 - Multiple Null Byte Injection Vulnerabilities
14459| [29664] Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability
14460| [29660] Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
14461| [29630] Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability
14462| [29524] Microsoft Word 2000 - Malformed Function Code Execution Vulnerability
14463| [28420] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
14464| [28357] Microsoft Windows Explorer 2000/2003/XP Drag and Drop Remote Code Execution Vulnerability
14465| [28227] Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability
14466| [28226] Microsoft PowerPoint 2003 PPT File Closure Memory Corruption
14467| [28225] Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
14468| [28224] Microsoft PowerPoint 2003 mso.dll PPT Processing Unspecified Code Execution
14469| [28198] Microsoft Office 2000/2002 Property Code Execution Vulnerability
14470| [28189] Microsoft Excel 2000-2004 Style Handling and Repair Remote Code Execution Vulnerability
14471| [28087] Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
14472| [28005] Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability
14473| [26690] Microsoft Windows 2000/2003/XP CreateRemoteThread Local Denial of Service Vulnerability
14474| [26517] Microsoft Office PowerPoint 2007 - Crash PoC
14475| [26341] Microsoft Windows 2000/2003/XP MSDTC TIP Denial of Service Vulnerability
14476| [26222] Microsoft Windows 2000/2003/XP Keyboard Event Privilege Escalation Weakness
14477| [25384] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (2)
14478| [25383] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (1)
14479| [25231] Microsoft Windows 2000/2003/XP Graphical Device Interface Library Denial of Service Vulnerability
14480| [25085] Microsoft Office XP 2000/2002 HTML Link Processing Remote Buffer Overflow Vulnerability
14481| [25084] Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability
14482| [25050] Microsoft Windows 2000/2003/XP winhlp32 Phrase Heap Overflow Vulnerability
14483| [25049] Microsoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability
14484| [24686] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
14485| [24277] Microsoft Windows 2000/NT 4 POSIX Subsystem Buffer Overflow Local Privilege Escalation Vulnerability
14486| [24114] Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
14487| [24101] Microsoft Outlook 2003 Predictable File Location Weakness
14488| [23989] Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability
14489| [23796] Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
14490| [23019] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
14491| [22919] Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities
14492| [22883] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (2)
14493| [22882] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)
14494| [22837] Microsoft Windows 2000/NT 4 Media Services NSIISlog.DLL Remote Buffer Overflow
14495| [22782] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
14496| [22591] Microsoft Office Excel 2007 - WriteAV Crash PoC
14497| [22555] Microsoft BizTalk Server 2000/2002 DTA RawCustomSearchField.asp SQL Injection
14498| [22554] Microsoft BizTalk Server 2000/2002 DTA rawdocdata.asp SQL Injection Vulnerability
14499| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
14500| [22528] Microsoft Windows 2000 RegEdit.EXE Registry Key Value Buffer Overflow Vulnerability
14501| [22354] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
14502| [21920] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
14503| [21718] Microsoft SQL 2000/7.0 Agent Jobs Privilege Elevation Vulnerability
14504| [21693] Microsoft SQL Server 2000 User Authentication Remote Buffer Overflow Vulnerability
14505| [21652] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
14506| [21651] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
14507| [21650] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
14508| [21549] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
14509| [21541] Microsoft SQL Server 2000 SQLXML Script Injection Vulnerability
14510| [21540] Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability
14511| [21389] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (2)
14512| [21388] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (1)
14513| [21344] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
14514| [21258] Microsoft Windows 2000/NT 4 NTFS File Hiding Vulnerability
14515| [21246] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (2)
14516| [21245] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (1)
14517| [21172] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (2)
14518| [21171] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)
14519| [21131] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
14520| [21123] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
14521| [21113] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
14522| [21099] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
14523| [21069] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
14524| [20907] Microsoft Windows 2000 Telnet Username DoS Vulnerability
14525| [20802] Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
14526| [20763] Microsoft ISA Server 2000 Web Proxy DoS Vulnerability
14527| [20571] Microsoft Outlook 2000 0/98 0/Express 5.5 Concealed Attachment Vulnerability
14528| [20481] Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability
14529| [20399] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
14530| [20335] Microsoft Indexing Services for Windows 2000/NT 4.0 .htw Cross-Site Scripting Vulnerability
14531| [20305] Microsoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability
14532| [20265] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
14533| [20257] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
14534| [20255] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
14535| [20222] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
14536| [20209] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
14537| [20133] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
14538| [20122] Microsoft Office SharePoint Server 2007 Remote Code Execution
14539| [20096] Microsoft IIS 2.0/3.0/4.0/5.0/5.1 Internal IP Address Disclosure Vulnerability
14540| [20048] Microsoft Windows 2000 Remote CPU-overload Vulnerability
14541| [20047] Microsoft Windows 2000 Telnet Server DoS Vulnerability
14542| [19830] Microsoft Index Server 2.0 '%20' ASP Source Disclosure Vulnerability
14543| [19742] microsoft iis 3.0/4.0,microsoft index server 2.0 - Directory Traversal
14544| [19734] Microsoft Virtual Machine 2000 Series/3000 Series getSystemResource Vulnerability
14545| [19731] microsoft index server 2.0/indexing services for windows 2000 - Directory Traversal
14546| [19728] Microsoft Systems Management Server 2.0 Default Permissions Vulnerability
14547| [19425] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (2)
14548| [19424] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (1)
14549| [19376] Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
14550| [19143] "Microsoft Windows ""April Fools 2001"" Vulnerability"
14551| [19118] Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability
14552| [18334] Microsoft Office 2003 Home/Pro 0day
14553| [18087] MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
14554| [18078] Microsoft Excel 2003 11.8335.8333 Use After Free
14555| [18067] Microsoft Excel 2007 SP2 Buffer Overwrite Exploit
14556| [17305] "Microsoft Windows Vista/Server 2008 ""nsiproxy.sys"" Local Kernel DoS Exploit"
14557| [14971] MOAUB #11 - Microsoft Office Word 2007 sprmCMajority Buffer Overflow
14558| [14782] Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)
14559| [14746] Microsoft Office Groove 2007 DLL Hijacking Exploit (mso.dll)
14560| [14744] Microsoft Visio 2003 DLL Hijacking Exploit (mfc71enu.dll)
14561| [12450] Microsoft SharePoint Server 2007 XSS Vulnerability
14562| [10068] Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution
14563| [4121] Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC
14564| [3973] Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote DoS Exploit
14565| [3690] microsoft office word 2007 - Multiple Vulnerabilities
14566| [3260] Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
14567| [2523] Microsoft Office 2003 PPT Local Buffer Overflow PoC
14568| [2091] Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)
14569| [2001] Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
14570| [1999] Microsoft Word 2000/2003 Hlink Local Buffer Overflow Exploit PoC
14571| [1988] Microsoft Excel 2003 Hlink Local Buffer Overflow Exploit (italian)
14572| [1986] Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit (french)
14573| [1958] Microsoft Excel 2003 Hlink Stack/SEH Buffer Overflow Exploit
14574| [28238] Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Vulnerability MS13-067
14575| [23034] Microsoft URLScan 2.5/ RSA Security SecurID 5.0 Configuration Enumeration Weakness
14576| [22850] Microsoft Office OneNote 2010 Crash PoC
14577| [22679] Microsoft Visio 2010 Crash PoC
14578| [22655] Microsoft Publisher 2013 Crash PoC
14579| [22621] Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability
14580| [22330] Microsoft Office Excel 2010 Crash PoC
14581| [22310] Microsoft Office Publisher 2010 Crash PoC
14582| [22237] Microsoft Office Picture Manager 2010 Crash PoC
14583| [22215] Microsoft Office Word 2010 Crash PoC
14584| [19451] Microsoft Windows 98 a/98 b/98SE,Solaris 2.6 IRDP Vulnerability
14585| [19440] Microsoft Windows NT 4.0/SP 1/SP 2/Sp 3/SP 4/SP 5 Malformed Dialer Entry Vulnerability
14586| [19372] Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability
14587| [17164] Microsoft Reader <= 2.1.1.3143 NULL Byte Write
14588| [17163] Microsoft Reader <= 2.1.1.3143 Array Overflow
14589| [17162] Microsoft Reader <= 2.1.1.3143 Integer Overflow
14590| [17161] Microsoft Reader <= 2.1.1.3143 Heap Overflow
14591| [17160] Microsoft Reader <= 2.1.1.3143 Integer Overflow
14592| [14731] Microsoft Windows Movie Maker <= 2.6.4038.0 DLL Hijacking Exploit (hhctrl.ocx)
14593| [14723] Microsoft Power Point 2010 DLL Hijacking Exploit (pptimpconv.dll)
14594|
14595| OpenVAS (Nessus) - http://www.openvas.org:
14596| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
14597| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
14598| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
14599| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
14600| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
14601| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
14602| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
14603| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
14604| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
14605| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
14606| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
14607| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
14608| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
14609|
14610| SecurityTracker - https://www.securitytracker.com:
14611| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
14612| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
14613| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
14614| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
14615| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
14616| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
14617| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
14618| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
14619| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
14620| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
14621| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
14622| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
14623| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
14624| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
14625| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
14626| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
14627| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
14628| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
14629| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
14630| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
14631| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
14632| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
14633| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
14634| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
14635| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
14636| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
14637| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
14638| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
14639| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
14640| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
14641| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
14642| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
14643| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
14644| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
14645| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
14646| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
14647| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
14648| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
14649| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
14650| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
14651| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
14652| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
14653| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
14654| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
14655| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
14656| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
14657| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
14658| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
14659| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
14660| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
14661| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
14662| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
14663| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
14664| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
14665| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
14666| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
14667| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
14668| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
14669| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
14670|
14671| OSVDB - http://www.osvdb.org:
14672| [90257] Microsoft Windows Server 2003 ICACLS.EXE Permission Inheritance Weakness
14673| [86790] Microsoft Virtual PC 2007 Crafted x86 Instruction Sequence Handling Local DoS
14674| [86061] Microsoft Windows Server 2008 R1 CSRSS ReadConsole / CloseHandle Local DoS
14675| [79442] Microsoft Windows Server 2008 DNS Server Service Cache Update Policy Deleted Domain Name Resolving Weakness
14676| [72670] Microsoft Windows Server 2003 ActiveDirectory BROWSER ELECTION Remote Overflow
14677| [68554] Microsoft Windows Server 2008 Shared Cluster Disks Addition Default Permission Weakness
14678| [62251] Microsoft Windows Server 2008 Hyper-V Crafted Instruction Sequence DoS
14679| [60329] Microsoft Windows 2000 NetBIOS Continuation Packet Remote DoS
14680| [59733] Microsoft Windows 2000 Terminal Services Screensaver Screen Minimization Locking Weakness
14681| [59731] Microsoft Windows 2000 DCOM Client Alter Context Request Remote Information Disclosure
14682| [59730] Microsoft Windows 2000 Terminal Services Disconnect Feature Local Privilege Escalation
14683| [59514] Microsoft Windows 2000 Task Manager Uppercase Process Name Termination Weakness
14684| [59509] Microsoft Windows 2000 Encrypted File System Cleartext Backup File Local Disclosure
14685| [59346] Microsoft Windows 2000 Crafted TCP/UDP Traffic CPU Consumption Remote DoS
14686| [55836] Microsoft ISA Server 2006 Radius OTP Security Bypass
14687| [53663] Microsoft Office Word 2000 WordPerfect 6.x Converter Document Handling Stack Corruption
14688| [50589] Microsoft SQL Server 2000 sp_replwritetovarbin() Stored Procedure Overflow
14689| [37629] Microsoft Windows 2000 RPC Authentication Unspecified Information Disclosure
14690| [37628] Microsoft Windows 2000 RPC Authentication Crafted Request Remote DoS
14691| [36034] Microsoft Office 2000 Controllo ActiveX (OUACTRL.OCX) HelpPopup Method Overflow
14692| [34489] Microsoft Office 2003 Malformed WMF File Handling DoS
14693| [34488] Microsoft Excel 2003 XLS Handling Corrupt Format DoS
14694| [31251] Microsoft Office 2003 Brazilian Portuguese Grammar Checker Arbitrary Code Execution
14695| [29529] Microsoft Windows 2000 creator.dll ActiveX COM Object Memory Corruption
14696| [29528] Microsoft Windows 2000 msdxm.ocx ActiveX COM Object Memory Corruption
14697| [29527] Microsoft Windows 2000 myinfo.dll ActiveX COM Object Memory Corruption
14698| [29526] Microsoft Windows 2000 ciodm.dll ActiveX COM Object Memory Corruption
14699| [28539] Microsoft Word 2000 Unspecified Code Execution
14700| [24121] Microsoft Commerce Server 2002 authfiles/login.asp Authentication Bypass
14701| [24081] Microsoft Outlook 2003 Unspecified Malformed Word Attachment DoS
14702| [23484] Microsoft SQLServer 2000 sp_addalias Procedure Privileged Alias Creation
14703| [23234] Microsoft SQLServer 2000 Unspecified Invalid Client Buffer DoS
14704| [23231] Microsoft SQL Server 2000 SQL Profiler Multiple Method DoS
14705| [23205] Microsoft SQLServer 2000 Crafted Sort Command User Mode Scheduler (UMS) Bypass DoS
14706| [23203] Microsoft SQL Server 2000 Database Name Transact-SQL Statement Privilege Escalation
14707| [23202] Microsoft SQLServer 2000 sysmembers Virtual Table Query Overflow
14708| [23201] Microsoft SQL Server 2000 Dynamic Transact-SQL Statement Disclosure
14709| [23200] Microsoft SQLServer 2000 Encrypted Stored Procedure Dynamic Query Disclosure
14710| [21907] Microsoft Office InfoPath 2003 Mshtml.dll Form Handling DoS
14711| [21598] Microsoft Windows 2000 NetBIOS Port Malformed TCP Packet Parsing Remote DoS
14712| [20256] Microsoft Windows 2000 NTFS Volume Macintosh Client Directory Permission Modification
14713| [20222] Microsoft Windows 2000 runas.exe Named Pipe Spoofing Information Disclosure
14714| [20221] Microsoft Windows 2000 runas.exe Named Pipe Single Thread DoS
14715| [20220] Microsoft Windows 2000 runas.exe Cleartext Authentication Information Disclosure
14716| [20002] Microsoft Windows 2000 CHKDSK Fix Mode File ACL Failure
14717| [20001] Microsoft Windows 2000 Terminal Service Client Connection IP Logging Failure
14718| [20000] Microsoft Windows 2000 Domain Administrator Computer Lock Bypass
14719| [19999] Microsoft Windows 2000 FQDN Domain Login Password Expiry Bypass
14720| [19998] Microsoft Windows 2000 UPN Credentialed Login Group Policy Failure
14721| [19997] Microsoft Windows 2000 WideCharToMultiByte Function String Termination Issue
14722| [19996] Microsoft Windows 2000 Event ID 1704 Group Policy Failure
14723| [19995] Microsoft Windows 2000 SECEDIT Long Folder ACL Set Issue
14724| [19994] Microsoft Windows 2000 audit directory service access 565 Event Logging Failure
14725| [19993] Microsoft Windows 2000 LDAPS CA Trust Issue
14726| [19264] Microsoft Exchange Server 2003 Crafted IMAP4 Folder Listing Request DoS
14727| [17031] Microsoft ISA Server 2000 SecureNAT Traffic Saturation DoS
14728| [15343] Microsoft Windows Server 2003 Malformed HTTP Cookie Header CGI DoS
14729| [15341] Microsoft Windows Server 2003 SMB Redirector Processing DoS
14730| [15340] Microsoft Windows Server 2003 Terminal Service Client Print DoS
14731| [15338] Microsoft Windows Server 2003 Terminal Session Close DoS
14732| [15337] Microsoft Windows Server 2003 CreateProcessWithLogonW() Function Process Disclosure
14733| [15336] Microsoft Windows Server 2003 Shutdown.exe Shut Down Failure
14734| [15335] Microsoft Windows Server 2003 MIT Kerberos Realm Authentication Group Policy Failure
14735| [15334] Microsoft Windows Server 2003 Shared Folder Permission Weakness
14736| [15333] Microsoft Windows Server 2003 EFS File Copy LDAP Connection DoS
14737| [15332] Microsoft Windows Server 2003 Citrix Metaframe Encryption Policy Failure
14738| [15331] Microsoft Windows Server 2003 Home Folder Path Permission Inheritance Failure
14739| [14617] Microsoft Exchange Server 2003 Folder Handling DoS
14740| [14430] Microsoft Commerce Server 2000 Profile Service Affected API Overflow
14741| [13996] Microsoft Windows 2000 IKE Malformed Packet Saturation Remote DoS
14742| [13762] Microsoft 2000 Domain Controller Directory Service Restore Mode Blank Password
14743| [13761] Microsoft Exchange 2000 Malformed URL Request DoS
14744| [13475] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution Variant
14745| [13474] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution
14746| [13441] Microsoft Windows 2000 Security Interface Change Password Option Account Enumeration
14747| [13437] Microsoft Windows 2000 Debug Register Local Privilege Escalation
14748| [13424] Microsoft Windows 2000 Current Password Change Policy Bypass
14749| [13423] Microsoft Windows 2000 Terminal Server SYSVOL Share Connection Saturation Restriction Bypass
14750| [13415] Microsoft Windows 2000 System Root Folder Search Path Permission Weakness
14751| [13410] Microsoft Windows 2000 Accessibility Utility Manager Arbitrary Code Execution
14752| [11958] Microsoft Outlook 2003 Image Rendering Security Policy Bypass
14753| [11945] Microsoft Outlook 2002 IFRAME Tag Embedded URL
14754| [11944] Microsoft Outlook 2002 HREF Tag Embedded JavaScript Execution
14755| [11750] Microsoft Windows 2000 Message Queue Manager Queue Registration Request Overflow DoS
14756| [11712] Microsoft ISA Server 2000 H.323 Filter Overflow
14757| [10633] Microsoft Windows 2000 Protected Store Weak Encryption Default
14758| [9386] Microsoft Windows 2000 msinfo32.exe msinfo_file Variable Overflow
14759| [8243] Microsoft SMS Port 2702 DoS
14760| [7202] Microsoft PowerPoint 2000 File Loader Overflow
14761| [7179] Microsoft Windows 2000 Event Viewer Snap-in Overflow
14762| [6971] Microsoft ISA Server 2000 ICMP Rule Bypass During Startup
14763| [6970] Microsoft ISA Server 2000 Web Publishing Unencrypted Credentials Disclosure
14764| [6969] Microsoft ISA Server 2000 Invalid DNS Request DoS
14765| [6968] Microsoft ISA Server 2000 FTP Port Scan Bounce Weakness
14766| [6967] Microsoft ISA Server 2000 UDP Packet Winsock DoS
14767| [6965] Microsoft ISA Server 2000 SSL Packet DoS
14768| [6964] Microsoft ISA Server 2000 DNS Intrusion Detection Filter DoS
14769| [6515] Microsoft Windows 2000 Domain Expired Account Authentication
14770| [5179] Microsoft Windows 2000 microsoft-ds DoS
14771| [5171] Microsoft Word 2002 Mail Merge Tool Execute Arbitrary Script
14772| [4779] Microsoft Desktop Engine (MSDE) 2000 Stored Procedure SQL Injection
14773| [4778] Microsoft SQL Server 2000 Stored Procedure SQL Injection
14774| [4777] Microsoft Desktop Engine (MSDE) 2000 Database Consistency Checkers (DBCCs) Overflow
14775| [4776] Microsoft SQL Server 2000 Database Consistency Checkers (DBCCs) 2000 Overflow
14776| [4170] Microsoft Windows 2000 Server Media Services TCP Packet Handling Remote DoS
14777| [4168] Microsoft Outlook 2002 mailto URI Script Injection
14778| [3490] Microsoft Exchange 2003 OWA Mailbox Access Information Disclosure
14779| [2705] Microsoft Windows 2000 Windows Troubleshooter ActiveX Overflow
14780| [2655] Microsoft Windows Server 2003 Shell Folders Arbitrary File Access
14781| [2540] Microsoft Windows 2003 Server Buffer Overflow Protection Mechanism Bypass
14782| [2244] Microsoft Windows 2000 ShellExecute() API Let
14783| [2237] Microsoft Windows 2000 Active Directory Lsass.exe Overflow
14784| [1949] Symantec Norton Anti-Virus for Microsoft Exchange 2000 INBOX Path Information Disclosure
14785| [1764] Microsoft Windows 2000 Domain Controller DoS
14786| [1758] Microsoft Windows 2000 Network DDE Escalated Privileges
14787| [1755] Microsoft Windows 2000 RDP Malformed Packet Handling Remote DoS
14788| [1672] Microsoft Windows 2000 Telnet Session Timeout DoS
14789| [1633] Microsoft Windows 2000 System Monitor ActiveX LogFileName Parameter Validation Overflow
14790| [1621] Microsoft Indexing Services for Windows 2000 .htw XSS
14791| [1591] Microsoft Windows 2000 OEMPreinstall Installation Permission Weakness
14792| [1578] Microsoft Windows 2000 Simplified Chinese IME Local Privilege Escalation
14793| [1500] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow
14794| [1437] Microsoft Windows 2000 Telnet Server Binary Zero Parsing Remote DoS
14795| [1399] Microsoft Windows 2000 Windows Station Access
14796| [1328] Microsoft Office 2000 UA Control ActiveX (Ouactrl.ocx) Show Me Function Remote Code Execution
14797| [1297] Microsoft Windows 2000 Active Directory Object Attribute
14798| [1292] Microsoft Windows NT 4.0 / 2000 cmd.exe Buffer Overflow
14799| [773] Microsoft Windows 2000 Group Policy File Lock DoS
14800| [515] Microsoft Windows 2000 LDAP Server Arbitrary User Password Modification
14801| [454] Microsoft Windows 2000 NTLM Domain Account Lockout Policy Bypass
14802| [403] Microsoft Windows 2000 Still Image Service WM_USER Message Local Overflow
14803| [398] Microsoft Windows 2000 Malformed RPC Traffic Local Security Policy Corruption DoS
14804| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
14805| [69085] Microsoft Office 2010 RTF File Handling pFragments Buffer Overflow Arbitrary Code Execution
14806|_
14807Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
14808Device type: general purpose|specialized|phone
14809Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Vista|Phone (89%)
14810OS CPE: cpe:/o:microsoft:windows_server_2008 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows
14811Aggressive OS guesses: Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (88%), Microsoft Windows 7 Professional or Windows 8 (88%), Microsoft Windows 7 SP1 or Windows Server 2008 SP2 or 2008 R2 SP1 (88%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (88%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (88%)
14812No exact OS matches for host (test conditions non-ideal).
14813Network Distance: 13 hops
14814Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
14815
14816TRACEROUTE (using port 80/tcp)
14817HOP RTT ADDRESS
148181 180.13 ms 10.247.200.1
148192 181.29 ms 213.184.122.97
148203 180.16 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
148214 180.36 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
148225 180.71 ms bzq-219-189-2.cablep.bezeqint.net (62.219.189.2)
148236 241.90 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
148247 240.54 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
148258 242.16 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
148269 239.20 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1482710 243.60 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1482811 242.11 ms s13-49.stratogen.net (109.233.49.13)
1482912 245.66 ms s100-54.cust.stratogen.net (109.233.54.100)
1483013 242.47 ms s10-140-54-212.cust.stratogen.net (212.54.140.10)
14831#######################################################################################################################################
14832http://212.54.140.10 [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://www.jobtrain.co.uk/], Title[Document Moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[sameorigin], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
14833https://www.jobtrain.co.uk/ [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://jobtrain.co.uk], Title[Object moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[ALLOW-FROM https://www.jobtrain.co.uk/], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
14834https://jobtrain.co.uk [200 OK] Apache, Country[UNITED KINGDOM][GB], Email[enquiries@jobtrain.co.uk], Google-Analytics[UA-12529237-3], HTML5, HTTPServer[Apache], IP[87.247.244.117], JQuery, Open-Graph-Protocol[website], Script[application/ld+json,text/javascript], Title[Applicant Tracking System UK | Online Candidate Management | Jobtrain], UncommonHeaders[link,upgrade], WordPress, X-UA-Compatible[IE=9]
14835#######################################################################################################################################
14836
14837wig - WebApp Information Gatherer
14838
14839
14840Scanning https://jobtrain.co.uk...
14841___________________________________________________ SITE INFO ____________________________________________________
14842IP Title
1484387.247.244.117 Applicant Tracking System UK | Online Candidate Management | Jobtrain
14844
14845____________________________________________________ VERSION _____________________________________________________
14846Name Versions Type
14847WordPress 3.8 | 3.8.1 | 3.8.2 | 3.8.3 | 3.8.4 | 3.8.5 | 3.8.6 | 3.8.7 CMS
14848 3.8.8 | 3.9 | 3.9.1 | 3.9.2 | 3.9.3 | 3.9.4 | 3.9.5 | 3.9.6
14849 4.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.1 | 4.1.1
14850 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5 | 4.2 | 4.2.1 | 4.2.2
14851Apache Platform
14852
14853__________________________________________________ INTERESTING ___________________________________________________
14854URL Note Type
14855/readme.html Readme file Interesting
14856/install.php Installation file Interesting
14857/test.php Test file Interesting
14858/test.htm Test file Interesting
14859
14860_____________________________________________________ TOOLS ______________________________________________________
14861Name Link Software
14862wpscan https://github.com/wpscanteam/wpscan WordPress
14863CMSmap https://github.com/Dionach/CMSmap WordPress
14864
14865________________________________________________ VULNERABILITIES _________________________________________________
14866Affected #Vulns Link
14867WordPress 3.8 12 http://cvedetails.com/version/162922
14868WordPress 3.8.1 12 http://cvedetails.com/version/162923
14869WordPress 3.8.2 7 http://cvedetails.com/version/176067
14870WordPress 3.8.3 7 http://cvedetails.com/version/176068
14871WordPress 3.8.4 8 http://cvedetails.com/version/176069
14872WordPress 3.9 8 http://cvedetails.com/version/176070
14873WordPress 3.9.1 15 http://cvedetails.com/version/169908
14874WordPress 3.9.2 10 http://cvedetails.com/version/176071
14875WordPress 3.9.3 1 http://cvedetails.com/version/185080
14876WordPress 4.0 9 http://cvedetails.com/version/176072
14877WordPress 4.0.1 1 http://cvedetails.com/version/185081
14878WordPress 4.1 1 http://cvedetails.com/version/185082
14879WordPress 4.1.1 2 http://cvedetails.com/version/185079
14880WordPress 4.2 1 http://cvedetails.com/version/185048
14881WordPress 4.2.1 1 http://cvedetails.com/version/184019
14882WordPress 4.2.2 2 http://cvedetails.com/version/185073
14883
14884__________________________________________________________________________________________________________________
14885Time: 99.3 sec Urls: 579 Fingerprints: 40401
14886########################################################################################################################################
14887HTTP/1.1 302 Redirect
14888Content-Length: 150
14889Content-Type: text/html; charset=UTF-8
14890Location: https://www.jobtrain.co.uk/
14891Server:
14892alternateHostName: www.jobtrain.co.uk
14893Server:
14894X-Frame-Options: sameorigin
14895X-Powered-By: Jobtrain
14896X-XSS-Protection: 1; mode=block
14897X-Content-Type-Options: nosniff
14898X-ASPNET-VERSION:
14899Date: Wed, 07 Aug 2019 10:31:28 GMT
14900
14901HTTP/1.1 302 Redirect
14902Content-Length: 150
14903Content-Type: text/html; charset=UTF-8
14904Location: https://www.jobtrain.co.uk/
14905Server:
14906alternateHostName: www.jobtrain.co.uk
14907Server:
14908X-Frame-Options: sameorigin
14909X-Powered-By: Jobtrain
14910X-XSS-Protection: 1; mode=block
14911X-Content-Type-Options: nosniff
14912X-ASPNET-VERSION:
14913Date: Wed, 07 Aug 2019 10:31:28 GMT
14914
14915HTTP/1.1 302 Found
14916Cache-Control: private
14917Content-Length: 139
14918Content-Type: text/html; charset=utf-8
14919Location: https://jobtrain.co.uk
14920Server:
14921X-AspNet-Version:
14922alternateHostName: www.jobtrain.co.uk
14923Server:
14924X-Frame-Options: ALLOW-FROM https://www.jobtrain.co.uk/
14925X-Powered-By: Jobtrain
14926X-XSS-Protection: 1; mode=block
14927X-Content-Type-Options: nosniff
14928Date: Wed, 07 Aug 2019 10:31:30 GMT
14929
14930HTTP/2 503
14931date: Wed, 07 Aug 2019 10:31:31 GMT
14932server: Apache
14933pragma: no-cache
14934cache-control: no-cache, must-revalidate, private
14935expires: Sat, 26 Jul 1997 05:00:00 GMT
14936retry-after: 3600
14937content-type: text/html; charset=UTF-8
14938########################################################################################################################################
14939Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:31 EDT
14940Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
14941Host is up.
14942
14943PORT STATE SERVICE VERSION
14944123/udp open|filtered ntp
14945Too many fingerprints match this host to give specific OS details
14946
14947TRACEROUTE (using proto 1/icmp)
14948HOP RTT ADDRESS
149491 185.76 ms 10.247.200.1
149502 186.96 ms 213.184.122.97
149513 185.82 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
149524 185.96 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
149535 256.83 ms bzq-179-124-30.cust.bezeqint.net (212.179.124.30)
149546 251.80 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
149557 252.37 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
149568 249.26 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
149579 252.20 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
1495810 251.86 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1495911 245.25 ms s13-49.stratogen.net (109.233.49.13)
1496012 ... 30
14961#######################################################################################################################################
14962Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:33 EDT
14963Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
14964Host is up (0.24s latency).
14965
14966PORT STATE SERVICE VERSION
14967443/tcp open ssl/http Microsoft IIS httpd 7.5
14968|_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)
14969| vulscan: VulDB - https://vuldb.com:
14970| [68404] Microsoft IIS 7.5 Error Message mypage cross site scripting
14971| [6924] Microsoft IIS 7.5 Log File Permission information disclosure
14972| [5623] Microsoft IIS up to 7.5 File Name Tilde privilege escalation
14973| [4234] Microsoft IIS 7.5 FTP Server Telnet IAC Character Heap-based denial of service
14974| [4179] Microsoft IIS 7.5 FastCGI Request Header memory corruption
14975| [98097] Microsoft IIS 7.0/7.5/8.0/8.5/10 /uncpath/ cross site scripting
14976| [6925] Microsoft IIS 7.0/7.5 FTP Command information disclosure
14977| [4484] Microsoft Windows Phone 7.5 SMS Service denial of service
14978|
14979| MITRE CVE - https://cve.mitre.org:
14980| [CVE-2012-2532] Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
14981| [CVE-2012-2531] Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
14982| [CVE-2010-3972] Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
14983| [CVE-2010-2730] Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
14984| [CVE-2010-1899] Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
14985| [CVE-2010-1256] Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
14986| [CVE-2013-0941] EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
14987| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
14988| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
14989| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
14990| [CVE-2009-2521] Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability."
14991| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
14992| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
14993| [CVE-2008-0074] Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
14994| [CVE-2007-2931] Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
14995| [CVE-2007-1278] Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
14996| [CVE-2006-5858] Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.
14997| [CVE-2006-5028] Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.
14998| [CVE-2006-0363] The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program. NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort. Perhaps this issue should not be included in CVE.
14999|
15000| SecurityFocus - https://www.securityfocus.com/bid/:
15001| [55569] Microsoft Windows Phone 7 SSL Certificate 'Common Name' Validation Security Bypass Vulnerability
15002| [28820] Microsoft Works 7 'WkImgSrv.dll' ActiveX Control Remote Code Execution Vulnerability
15003| [28498] Microsoft Internet Explorer 7 Popup Window Address Bar URI Spoofing Vulnerability
15004| [24483] Microsoft Internet Explorer 7 HTTP Authentication International Domain Name Spoofing Weakness
15005| [20728] Microsoft Internet Explorer 7 Popup Window Address Bar Spoofing Weakness
15006| [18736] Microsoft Internet Explorer 7 Denial of Service Vulnerability
15007| [5877] Microsoft SQL Server 7.0/2000 DBCC Buffer Overflow Vulnerability
15008| [4108] Microsoft Visual C++ 7/Visual C++.Net Buffer Overflow Protection Weakness
15009| [1714] Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability
15010| [1444] Microsoft SQL Server 7.0 Stored Procedure Vulnerability
15011| [1281] Microsoft SQL Server 7.0 System Administrator Password Disclosure Vulnerability
15012| [817] Microsoft SQL Server 7.0 NULL Data DoS Vulnerability
15013| [90065] Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0174 Local Privilege Escalation Vulnerability
15014| [86059] Microsoft IIS CVE-1999-0561 Remote Security Vulnerability
15015| [56440] Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability
15016| [56439] Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability
15017| [54276] Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability
15018| [54251] Microsoft IIS File Enumeration Weakness
15019| [53906] Microsoft IIS Authentication Bypass and Source Code Disclosure Vulnerabilities
15020| [45542] Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
15021| [43140] Microsoft IIS Repeated Parameter Request Denial of Service Vulnerability
15022| [43138] Microsoft IIS Request Header Buffer Overflow Vulnerability
15023| [41314] Microsoft IIS 5.1 Alternate Data Stream Authentication Bypass Vulnerability
15024| [40573] Microsoft IIS Authentication Remote Code Execution Vulnerability
15025| [37460] RETIRED: Microsoft IIS Malformed Local Filename Security Bypass Vulnerability
15026| [36276] RETIRED: Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
15027| [36273] Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
15028| [36189] Microsoft IIS FTPd NLST Remote Buffer Overflow Vulnerability
15029| [35232] Microsoft IIS 5.0 WebDAV Authentication Bypass Vulnerability
15030| [34993] Microsoft IIS Unicode Requests to WebDAV Multiple Authentication Bypass Vulnerabilities
15031| [33374] Microsoft IIS HTTP TRACK Method Information Disclosure Vulnerability
15032| [27101] Microsoft IIS File Change Notification Local Privilege Escalation Vulnerability
15033| [21865] Apache And Microsoft IIS Range Denial of Service Vulnerability
15034| [18858] Microsoft IIS ASP Remote Code Execution Vulnerability
15035| [14764] Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
15036| [10706] Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerability
15037| [9660] Microsoft IIS Unspecified Remote Denial Of Service Vulnerability
15038| [9313] Microsoft IIS Failure To Log Undocumented TRACK Requests Vulnerability
15039| [8244] Microsoft Multiple IIS 6.0 Web Admin Vulnerabilities
15040| [8092] Microsoft IIS _VTI_BOT Malicious WebBot Elevated Permissions Vulnerability
15041| [8035] Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerability
15042| [7735] Microsoft IIS WebDAV PROPFIND and SEARCH Method Denial of Service Vulnerability
15043| [7734] Microsoft IIS SSINC.DLL Server Side Includes Buffer Overflow Vulnerability
15044| [7733] Microsoft IIS ASP Header Denial Of Service Vulnerability
15045| [7731] Microsoft IIS Redirection Error Page Cross-Site Scripting Vulnerability
15046| [7492] Microsoft IIS User Existence Disclosure Vulnerability
15047| [6795] Microsoft IIS False Logging Weakness
15048| [6789] Microsoft IIS Malformed HTTP Get Request Denial Of Service Vulnerability
15049| [6072] Microsoft IIS Administrative Pages Cross Site Scripting Vulnerabilities
15050| [6071] Microsoft IIS Script Source Access File Upload Vulnerability
15051| [6070] Microsoft IIS WebDAV Denial Of Service Vulnerability
15052| [6069] Microsoft IIS Out Of Process Privilege Escalation Vulnerability
15053| [6068] Multiple Microsoft IIS Vulnerabilities
15054| [5907] Microsoft IIS Malformed HTTP HOST Header Field Denial Of Service Vulnerability
15055| [5900] Microsoft IIS IDC Extension Cross Site Scripting Vulnerability
15056| [5213] Microsoft IIS SMTP Service Encapsulated SMTP Address Vulnerability
15057| [4855] Microsoft IIS HTR Chunked Encoding Transfer Heap Overflow Vulnerability
15058| [4846] Microsoft IIS 5.0 Denial Of Service Vulnerability
15059| [4543] Microsoft IIS CodeBrws.ASP File Extension Check Out By One Vulnerability
15060| [4525] Microsoft IIS CodeBrws.ASP Source Code Disclosure Vulnerability
15061| [4490] Microsoft IIS Chunked Encoding Heap Overflow Variant Vulnerability
15062| [4487] Microsoft IIS HTTP Redirect Cross Site Scripting Vulnerability
15063| [4486] Microsoft IIS HTTP Error Page Cross Site Scripting Vulnerability
15064| [4485] Microsoft IIS Chunked Encoding Transfer Heap Overflow Vulnerability
15065| [4483] Microsoft IIS Help File Search Cross Site Scripting Vulnerability
15066| [4482] Microsoft IIS FTP Connection Status Request Denial of Service Vulnerability
15067| [4479] Microsoft IIS ISAPI Filter Access Violation Denial of Service Vulnerability
15068| [4478] Microsoft IIS ASP Server-Side Include Buffer Overflow Vulnerability
15069| [4476] Microsoft IIS HTTP Header Field Delimiter Buffer Overflow Vulnerability
15070| [4474] Microsoft IIS HTR ISAPI Extension Buffer Overflow Vulnerability
15071| [4235] Microsoft IIS Authentication Method Disclosure Vulnerability
15072| [4084] Microsoft IIS 5.1 Frontpage Server Extensions File Source Disclosure Vulnerability
15073| [4078] Microsoft IIS 5.1 Frontpage Extensions Path Disclosure Information Vulnerability
15074| [3667] Microsoft IIS False Content-Length Field DoS Vulnerability
15075| [3195] Microsoft IIS MIME Header Denial of Service Vulnerability
15076| [3194] Microsoft IIS WebDAV Invalid Request Denial of Service Vulnerability
15077| [3193] Microsoft IIS 5.0 In-Process Table Privelege Elevation Vulnerability
15078| [3191] Microsoft IIS 4.0 URL Redirection DoS Vulnerability
15079| [3190] Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability
15080| [2977] Microsoft IIS Device File Remote DoS Vulnerability
15081| [2973] Microsoft IIS Device File Local DoS Vulnerability
15082| [2909] Microsoft IIS Unicode .asp Source Code Disclosure Vulnerability
15083| [2719] Microsoft IIS Various Domain User Account Access Vulnerability
15084| [2717] Microsoft IIS FTP Denial of Service Vulnerability
15085| [2690] Microsoft IIS WebDAV 'Propfind' Server Restart Vulnerability
15086| [2674] Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability
15087| [2654] Microsoft IIS Long URL Denial of Service Vulnerability
15088| [2483] Microsoft IIS WebDAV 'Search' Denial of Service Vulnerability
15089| [2453] Microsoft IIS WebDAV Denial of Service Vulnerability
15090| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
15091| [2440] Microsoft IIS Multiple Invalid URL Request DoS Vulnerability
15092| [2313] Microsoft IIS File Fragment Disclosure Vulnerability
15093| [2280] Microsoft IIS 3.0/4.0 Upgrade BDIR.HTR Vulnerability
15094| [2218] Microsoft IIS '../..' Denial of Service Vulnerability
15095| [2144] Microsoft IIS Front Page Server Extension DoS Vulnerability
15096| [2110] Microsoft IIS 4.0 IISADMPWD Proxied Password Attack
15097| [2100] Microsoft IIS Far East Edition DBCS File Disclosure Vulnerability
15098| [2074] Microsoft IIS Appended Dot Script Source Disclosure Vulnerability
15099| [1912] Microsoft IIS Executable File Parsing Vulnerability
15100| [1911] Microsoft IIS 4.0 ISAPI Buffer Overflow Vulnerability
15101| [1832] Microsoft IIS 4.0/5.0 Session ID Cookie Disclosure Vulnerability
15102| [1819] Microsoft IIS 4.0 Pickup Directory DoS Vulnerability
15103| [1818] Microsoft IIS 3.0 newdsn.exe File Creation Vulnerability
15104| [1814] Microsoft IIS 3.0 %2e ASP Source Disclosure Vulnerability
15105| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
15106| [1806] Microsoft IIS and PWS Extended Unicode Directory Traversal Vulnerability
15107| [1756] Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability
15108| [1642] Microsoft NT 4.0 and IIS 4.0 Invalid URL Request DoS Vulnerability
15109| [1595] Microsoft IIS Cross Site Scripting .shtml Vulnerability
15110| [1594] Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability
15111| [1578] Microsoft IIS 5.0 Translate: f Source Disclosure Vulnerability
15112| [1565] Microsoft IIS 4.0/5.0 File Permission Canonicalization Vulnerability
15113| [1499] Microsoft IIS Internal IP Address Disclosure Vulnerability
15114| [1488] Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerability
15115| [1476] Microsoft IIS 3.0 .htr Missing Variable Denial of Service Vulnerability
15116| [1193] Microsoft IIS 4.0/5.0 Malformed Filename Request Vulnerability
15117| [1191] Microsoft IIS 4.0/5.0 Malformed .htr Request Vulnerability
15118| [1190] Microsoft IIS 4.0/5.0 Malformed File Extension DoS Vulnerability
15119| [1101] Microsoft IIS 4.0/5.0 Escaped Characters Vulnerability
15120| [1081] Microsoft IIS UNC Mapped Virtual Host Vulnerability
15121| [1066] Microsoft IIS 4.0 Chunked Transfer Encoding Buffer Overflow Vulnerability
15122| [1065] Microsoft IIS UNC Path Disclosure Vulnerability
15123| [886] Microsoft IIS Escape Character Parsing Vulnerability
15124| [882] Microsoft IIS Virtual Directory Naming Vulnerability
15125| [658] Microsoft IIS FTP NO ACCESS Read/Delete File Vulnerability
15126| [657] Microsoft IIS 4.0 Domain Resolution Vulnerability
15127| [582] Microsoft IIS And PWS 8.3 Directory Name Vulnerability
15128| [190] Microsoft VisualInterDev 6.0 - IIS4- Management With No Authentication Vulnerability
15129|
15130| IBM X-Force - https://exchange.xforce.ibmcloud.com:
15131| [78620] Microsoft Windows Phone 7 domain name spoofing
15132| [66401] Microsoft Windows kernel-mode driver (win32k.sys) variant 7 privilege escalation
15133| [29670] Microsoft Internet Explorer 7 is installed
15134| [76716] Microsoft IIS FTP denial of service
15135| [76664] Microsoft IIS tilde information disclosure
15136| [61513] Microsoft Internet Information Services (IIS) URL authentication bypass
15137| [58864] Microsoft Internet Information Services (IIS) authentication code execution
15138| [55031] Microsoft Internet Information Services (IIS) filenames security bypass
15139| [53034] Microsoft Internet Information Services (IIS) directory listings denial of service
15140| [52915] Microsoft Internet Information Services (IIS) FTP buffer overflow
15141| [52243] Microsoft IIS With .NET Path Disclosure
15142| [52241] Microsoft IIS servervariables_vbscript.asp Information Disclosure
15143| [52240] Microsoft IIS Sample Application Physical Path Disclosure
15144| [52233] Microsoft IIS With .NET Path Disclosure
15145| [50573] Microsoft Internet Information Services (IIS) WebDAV security bypass
15146| [45584] Microsoft IIS adsiis.dll ActiveX control denial of service
15147| [42899] Microsoft IIS HTTP request smuggling
15148| [39235] Microsoft IIS root folders file change notification privilege escalation
15149| [39230] Microsoft IIS HTML encoded ASP code execution
15150| [34434] Microsoft IIS Hit-highlighting security bypass
15151| [34418] Microsoft Internet Information Server (IIS) AUX/.aspx denial of service
15152| [32074] Microsoft IIS iissamples directory present
15153| [31644] Microsoft IIS Web server access.cnf file detected
15154| [31642] Microsoft IIS Web server service.cnf file detected
15155| [31638] Microsoft IIS Web server svcacl.cnf file detected
15156| [31630] Microsoft Internet Information Services IISAdmin directory detected
15157| [27854] Microsoft IIS ASP cache virtual server information disclosure
15158| [26796] Microsoft Internet Information Services (IIS) ASP buffer overflow
15159| [16872] Microsoft Internet Information Server (IIS) ActivePerl command execution
15160| [16656] Microsoft Internet Information Server (IIS) MS04-021 patch is not installed
15161| [16578] Microsoft Internet Information Server (IIS) redirect buffer overflow
15162| [14077] Microsoft Internet Information Server (IIS) fails to properly log HTTP TRACK requests
15163| [13116] Microsoft IIS MS03-018 patch is not installed on the system
15164| [13088] Microsoft IIS running RealSecure Server Sensor ISAPI plug-in denial of service
15165| [12687] Microsoft IIS Remote Administration Tool allows attacker to reset administrative password
15166| [12686] Microsoft IIS Remote Administration Tool could allow an attacker to obtain valid session IDs
15167| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
15168| [12100] Microsoft IIS long WebDAV requests containing XML denial of service
15169| [12099] Microsoft IIS Response.AddHeader denial of service
15170| [12098] Microsoft IIS Server-Side Include (SSI) long file name buffer overflow
15171| [12097] Microsoft IIS redirect error cross-site scripting
15172| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
15173| [11918] Microsoft IIS authentication mechanism could allow an attacker to determine valid user account names
15174| [11537] Microsoft IIS WebDAV service is running on the system
15175| [11533] Microsoft IIS WebDAV long request buffer overflow
15176| [10590] Microsoft Internet Information Server (IIS) MS02-062 patch
15177| [10504] Microsoft IIS script source access could be bypassed to upload .COM files
15178| [10503] Microsoft IIS WebDAV memory allocation denial of service
15179| [10502] Microsoft IIS out-of-process applications could be used to gain elevated privileges
15180| [10501] Microsoft IIS administrative Web pages cross-site scripting
15181| [10370] Microsoft IIS HTTP HOST header denial of service
15182| [10294] Microsoft IIS .idc extension error message cross-site scripting
15183| [10184] Microsoft IIS 5.0 resource utilization denial of service
15184| [9791] Microsoft Exchange IIS license exhaustion denial of service
15185| [9580] Microsoft IIS SMTP service encapsulated addresses could allow mail relaying
15186| [9327] Microsoft IIS ISAPI HTR chunked encoding heap buffer overflow
15187| [9123] Microsoft IIS 5.0 Log Files Directory Permission Exposure
15188| [8853] Microsoft IIS CodeBrws.asp sample script can be used to view arbitrary file source code
15189| [8811] Microsoft IIS MS02-018 patch is not installed on the system
15190| [8804] Microsoft IIS redirected URL error cross-site scripting
15191| [8803] Microsoft IIS HTTP error page cross-site scripting
15192| [8802] Microsoft IIS Help File search cross-site scripting
15193| [8801] Microsoft IIS FTP session status request denial of service
15194| [8800] Microsoft IIS FrontPage Server Extensions and ASP.NET ISAPI filter error handling denial of service
15195| [8799] Microsoft IIS HTR ISAPI ISM.DLL extension buffer overflow
15196| [8798] Microsoft IIS SSI safety check buffer overflow
15197| [8797] Microsoft IIS ASP HTTP header parsing buffer overflow
15198| [8796] Microsoft IIS ASP data transfer heap buffer overflow
15199| [8795] Microsoft IIS ASP chunked encoding heap buffer overflow
15200| [8388] Microsoft Windows NT Server with IIS 4.0 could allow users to bypass "
15201| [8385] Microsoft IIS specially-crafted request reveals IP address
15202| [8382] Microsoft IIS authentication error messages reveal configuration information
15203| [8191] Microsoft IIS 5.1 specially-crafted .cnf file request could reveal file contents
15204| [8174] Microsoft IIS 5.1 .cnf file request could reveal sensitive information
15205| [8056] Microsoft IIS is running on the system
15206| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
15207| [7691] Microsoft IIS HTTP GET request with false "
15208| [7640] Microsoft IIS is present on the system
15209| [7613] Microsoft IIS allows attackers to create fake log entries
15210| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
15211| [7559] Microsoft Index Server installed with IIS 4.0 could allow a local attacker to obtain physical path information
15212| [7558] Microsoft IIS FileSystemObject in showfile.asp could allow remote attackers to read arbitrary files
15213| [7202] Microsoft IIS 4.0/5.0 escaped percent found
15214| [7201] Microsoft IIS 4.0/5.0 malformed double percent sequence
15215| [7199] Microsoft IIS 4.0/5.0 malformed hex sequence
15216| [6995] Microsoft IIS %u Unicode wide character encoding detected
15217| [6994] Microsoft IIS %u Unicode encoding detected
15218| [6985] Microsoft IIS relative path usage in system file process table could allow elevated privileges
15219| [6984] Microsoft IIS specially-crafted SSI directives buffer overflow
15220| [6983] Microsoft IIS invalid MIME header denial of service
15221| [6982] Microsoft IIS WebDAV long invalid request denial of service
15222| [6981] Microsoft IIS URL redirection denial of service
15223| [6963] Microsoft IIS HTTPS connection could reveal internal IP address
15224| [6858] Microsoft IIS cross-site scripting patch denial of service
15225| [6800] Microsoft IIS device file request can crash the ASP processor
15226| [6742] Microsoft IIS reveals .asp source code with Unicode extensions
15227| [6705] Microsoft IIS idq.dll ISAPI extension buffer overflow
15228| [6549] Microsoft IIS WebDAV lock method memory leak can cause a denial of service
15229| [6545] Microsoft IIS FTP weak domain authentication
15230| [6535] Microsoft IIS FTP wildcard processing function denial of service
15231| [6534] Microsoft IIS URL decoding error could allow remote code execution
15232| [6485] Microsoft IIS 5.0 ISAPI Internet Printing Protocol extension buffer overflow
15233| [6205] Microsoft IIS WebDAV denial of service
15234| [6171] Microsoft IIS and Exchange malformed URL request denial of service
15235| [6029] Microsoft IIS CmdAsp could allow remote attackers to gain privileges
15236| [5903] Microsoft IIS 5.0 allows the viewing of files through malformed URL
15237| [5823] Microsoft IIS Web form submission denial of service
15238| [5729] Microsoft IIS Far East editions file disclosure
15239| [5510] Microsoft Internet Information Service (IIS) ISAPI buffer overflow
15240| [5470] Microsoft Internet Information Service (IIS) invalid executable filename passing
15241| [5441] Microsoft IIS .htw cross-site scripting
15242| [5377] Microsoft IIS Unicode translation error allows remote command execution
15243| [5335] Microsoft IIS Index Server directory traversal
15244| [5202] Microsoft IIS invalid URL allows attackers to crash service
15245| [5156] Microsoft IIS Cross-Site Scripting
15246| [5106] Microsoft IIS 4.0 discloses internal IP addresses
15247| [5104] Microsoft IIS allows remote attackers to obtain source code fragments using +.htr
15248| [5071] Microsoft IIS canonicalization error applies incorrect permissions to certain types of files
15249| [4960] Microsoft IIS on Win2kPro security button restriction
15250| [4951] Microsoft IIS absent directory browser argument
15251| [4790] Microsoft IIS \mailroot\pickup directory denial of service
15252| [4757] Microsoft IIS server-side includes (SSI) #exec directive
15253| [4558] Microsoft IIS is installed on a domain controller
15254| [4448] Microsoft IIS ISM.DLL could allow users to read file contents
15255| [4430] Microsoft IIS malformed URL extension data denial of service
15256| [4392] Microsoft IIS could reveal source code of ASP files in some virtual directories
15257| [4302] Microsoft IIS malformed AuthChangUrl request can cause the server to stop servicing requests
15258| [4279] Microsoft IIS escape characters denial of service
15259| [4204] Microsoft IIS virtual UNC share source read
15260| [4183] Microsoft IIS could disclose path of network shares
15261| [4117] Microsoft IIS chunked encoding post or put denial of service
15262| [3986] Microsoft IIS ASP could be used to gain sensitive information
15263| [3892] Microsoft IIS Long URL with excessive forward slashes passed to ASP causes an access violation
15264| [3306] Microsoft IIS could allow remote access to servers marked as Restrict Access
15265| [3115] Microsoft IIS and SiteServer denial of service caused by malformed HTTP requests
15266| [2675] Microsoft IIS 4.0 samples installation on Web server
15267| [2673] Microsoft IIS samples installation on Web server
15268| [2671] Microsoft IIS Passive FTP patch not applied (asp.dll out of date)
15269| [2670] Microsoft IIS Passive FTP patch not applied (wam.dll out of date)
15270| [2669] Microsoft IIS Passive FTP patch not applied (w3svc.dll out of date)
15271| [2668] Microsoft IIS Passive FTP patch not applied (infocomm.dll out of date)
15272| [2662] Microsoft IIS CGI overflow
15273| [2412] Microsoft IIS account is member of Domain Users
15274| [2381] Microsoft IIS and SiteServer Showcode.asp sample file allows remote file viewing
15275| [2302] Microsoft IIS using double-byte code pages could allow remote attackers to retrieve source code
15276| [2282] Microsoft IIS bdir.htr allows remote traversal of directory structure
15277| [2281] Microsoft IIS buffer overflow in HTR requests can allow remote code execution
15278| [2229] Microsoft IIS ExAir sample site denial of service
15279| [2185] Microsoft IIS and Site Server sample programs can be used to remotely view files
15280| [1823] Microsoft IIS long GET request denial of service
15281| [1735] Microsoft IIS with Visual InterDev no authentication
15282| [1656] Microsoft IIS 4.0 allows user to avoid HTTP request logging
15283| [1654] Microsoft IIS remote FTP buffer overflow
15284| [1638] Microsoft IIS crashes processing some GET commands
15285| [1530] Microsoft IIS 3.0 newdsn.exe sample application allows remote creation of arbitrary files
15286| [1368] Microsoft IIS 4.0 allows file execution in the Web site directory
15287| [1273] Microsoft IIS special characters allowed in shell
15288| [1272] Microsoft IIS CGI scripts run as system
15289| [1271] Microsoft IIS version 2 installed
15290| [1270] Microsoft IIS incorrect permissions on restricted item
15291| [1269] Microsoft IIS incorrect Web permissions
15292| [1268] Microsoft IIS SSI #exec enabled
15293| [1216] Microsoft IIS SSL patch not applied
15294| [1215] Microsoft IIS Passive FTP patch not applied
15295| [1212] Microsoft IIS unauthorized ODBC data access with RDS
15296| [1125] Microsoft IIS ASP DATA issue could reveal source code
15297| [949] Microsoft IIS server script debugging enabled
15298| [948] Microsoft IIS samples installed on Web server
15299| [936] Microsoft IIS NTFS insecure permissions
15300| [935] Microsoft IIS executable paths
15301| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
15302| [336] Microsoft IIS ASP dot bug
15303| [256] Microsoft IIS can be remotely crashed by excessively long client requests
15304| [7] Microsoft IIS ASP source visible
15305|
15306| Exploit-DB - https://www.exploit-db.com:
15307| [19033] microsoft iis 6.0 and 7.5 - Multiple Vulnerabilities
15308| [17476] Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]
15309|
15310| OpenVAS (Nessus) - http://www.openvas.org:
15311| [902914] Microsoft IIS GET Request Denial of Service Vulnerability
15312| [902796] Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability
15313| [902694] Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)
15314| [901120] Microsoft IIS Authentication Remote Code Execution Vulnerability (982666)
15315| [900944] Microsoft IIS FTP Server 'ls' Command DOS Vulnerability
15316| [900874] Microsoft IIS FTP Service Remote Code Execution Vulnerabilities (975254)
15317| [900711] Microsoft IIS WebDAV Remote Authentication Bypass Vulnerability
15318| [900567] Microsoft IIS Security Bypass Vulnerability (970483)
15319| [802806] Microsoft IIS Default Welcome Page Information Disclosure Vulnerability
15320| [801669] Microsoft Windows IIS FTP Server DOS Vulnerability
15321| [801520] Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability
15322| [100952] Microsoft IIS FTPd NLST stack overflow
15323| [11443] Microsoft IIS UNC Mapped Virtual Host Vulnerability
15324| [10680] Test Microsoft IIS Source Fragment Disclosure
15325| [903041] Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)
15326| [903037] Microsoft JScript and VBScript Engines Remote Code Execution Vulnerability (2706045)
15327| [903036] Microsoft Windows Networking Components Remote Code Execution Vulnerabilities (2733594)
15328| [903035] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)
15329| [903033] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2718523)
15330| [903026] Microsoft Office Remote Code Execution Vulnerabilities (2663830)
15331| [903017] Microsoft Office Remote Code Execution Vulnerability (2639185)
15332| [903000] Microsoft Expression Design Remote Code Execution Vulnerability (2651018)
15333| [902936] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)
15334| [902934] Microsoft .NET Framework Remote Code Execution Vulnerability (2745030)
15335| [902933] Microsoft Windows Shell Remote Code Execution Vulnerabilities (2727528)
15336| [902932] Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities (2761451)
15337| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
15338| [902930] Microsoft Office Remote Code Execution Vulnerabilities (2720184)
15339| [902923] Microsoft Internet Explorer Multiple Vulnerabilities (2722913)
15340| [902922] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2723135)
15341| [902921] Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)
15342| [902920] Microsoft Office Remote Code Execution Vulnerability (2731879)
15343| [902919] Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)
15344| [902916] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2711167)
15345| [902913] Microsoft Office Remote Code Execution Vulnerabilities-2663830 (Mac OS X)
15346| [902912] Microsoft Office Word Remote Code Execution Vulnerability-2680352 (Mac OS X)
15347| [902911] Microsoft Office Word Remote Code Execution Vulnerability (2680352)
15348| [902910] Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)
15349| [902909] Microsoft Windows Service Pack Missing Multiple Vulnerabilities
15350| [902908] Microsoft Windows DirectWrite Denial of Service Vulnerability (2665364)
15351| [902906] Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)
15352| [902900] Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
15353| [902846] Microsoft Windows TLS Protocol Information Disclosure Vulnerability (2655992)
15354| [902845] Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)
15355| [902842] Microsoft Lync Remote Code Execution Vulnerabilities (2707956)
15356| [902841] Microsoft .NET Framework Remote Code Execution Vulnerability (2706726)
15357| [902839] Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability
15358| [902833] Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
15359| [902832] MS Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
15360| [902829] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2664258)
15361| [902828] Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)
15362| [902818] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
15363| [902817] Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)
15364| [902811] Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities (2651026)
15365| [902807] Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
15366| [902798] Microsoft SMB Signing Enabled and Not Required At Server
15367| [902797] Microsoft SMB Signing Information Disclosure Vulnerability
15368| [902785] Microsoft AntiXSS Library Information Disclosure Vulnerability (2607664)
15369| [902784] Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)
15370| [902783] Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)
15371| [902782] MicroSoft Windows Server Service Remote Code Execution Vulnerability (921883)
15372| [902766] Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)
15373| [902746] Microsoft Active Accessibility Remote Code Execution Vulnerability (2623699)
15374| [902727] Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)
15375| [902708] Microsoft Remote Desktop Protocol Denial of Service Vulnerability (2570222)
15376| [902696] Microsoft Internet Explorer Multiple Vulnerabilities (2761465)
15377| [902693] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)
15378| [902692] Microsoft Office Excel ReadAV Arbitrary Code Execution Vulnerability
15379| [902689] Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
15380| [902688] Microsoft System Center Configuration Manager XSS Vulnerability (2741528)
15381| [902687] Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)
15382| [902686] Microsoft Internet Explorer Multiple Vulnerabilities (2719177)
15383| [902683] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2685939)
15384| [902682] Microsoft Internet Explorer Multiple Vulnerabilities (2699988)
15385| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
15386| [902677] Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)
15387| [902676] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (2688338)
15388| [902670] Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
15389| [902663] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
15390| [902662] MicroSoft SMB Server Trans2 Request Remote Code Execution Vulnerability
15391| [902660] Microsoft SMB Transaction Parsing Remote Code Execution Vulnerability
15392| [902658] Microsoft RDP Server Private Key Information Disclosure Vulnerability
15393| [902649] Microsoft Internet Explorer Multiple Vulnerabilities (2647516)
15394| [902642] Microsoft Internet Explorer Multiple Vulnerabilities (2618444)
15395| [902626] Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)
15396| [902625] Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
15397| [902613] Microsoft Internet Explorer Multiple Vulnerabilities (2559049)
15398| [902609] Microsoft Windows CSRSS Privilege Escalation Vulnerabilities (2507938)
15399| [902598] Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)
15400| [902597] Microsoft Windows Media Remote Code Execution Vulnerability (2648048)
15401| [902596] Microsoft Windows OLE Remote Code Execution Vulnerability (2624667)
15402| [902588] Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability
15403| [902581] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2604930)
15404| [902580] Microsoft Host Integration Server Denial of Service Vulnerabilities (2607670)
15405| [902567] Microsoft Office Remote Code Execution Vulnerabilites (2587634)
15406| [902566] Microsoft Windows WINS Local Privilege Escalation Vulnerability (2571621)
15407| [902552] Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)
15408| [902551] Microsoft .NET Framework Information Disclosure Vulnerability (2567951)
15409| [902523] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)
15410| [902522] Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)
15411| [902518] Microsoft .NET Framework Security Bypass Vulnerability
15412| [902516] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
15413| [902502] Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)
15414| [902501] Microsoft JScript and VBScript Scripting Engines Remote Code Execution Vulnerability (2514666)
15415| [902496] Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
15416| [902495] Microsoft Office Remote Code Execution Vulnerability (2590602)
15417| [902494] Microsoft Office Excel Remote Code Execution Vulnerability (2640241)
15418| [902493] Microsoft Publisher Remote Code Execution Vulnerabilities (2607702)
15419| [902492] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)
15420| [902487] Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
15421| [902484] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)
15422| [902464] Microsoft Visio Remote Code Execution Vulnerabilities (2560978)
15423| [902463] Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)
15424| [902455] Microsoft Visio Remote Code Execution Vulnerability (2560847)
15425| [902445] Microsoft XML Editor Information Disclosure Vulnerability (2543893)
15426| [902443] Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
15427| [902440] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)
15428| [902430] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)
15429| [902425] Microsoft Windows SMB Accessible Shares
15430| [902423] Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)
15431| [902411] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)
15432| [902410] Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)
15433| [902403] Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability
15434| [902395] Microsoft Bluetooth Stack Remote Code Execution Vulnerability (2566220)
15435| [902378] Microsoft Office Excel Remote Code Execution Vulnerabilities (2537146)
15436| [902377] Microsoft Windows OLE Automation Remote Code Execution Vulnerability (2476490)
15437| [902365] Microsoft GDI+ Remote Code Execution Vulnerability (2489979)
15438| [902364] Microsoft Office Remote Code Execution Vulnerabilites (2489293)
15439| [902351] Microsoft Groove Remote Code Execution Vulnerability (2494047)
15440| [902337] Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)
15441| [902336] Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)
15442| [902325] Microsoft Internet Explorer 'CSS Import Rule' Use-after-free Vulnerability
15443| [902324] Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
15444| [902319] Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)
15445| [902290] Microsoft Windows Active Directory SPN Denial of Service (2478953)
15446| [902289] Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)
15447| [902288] Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)
15448| [902287] Microsoft Visio Remote Code Execution Vulnerabilities (2451879)
15449| [902285] Microsoft Internet Explorer Information Disclosure Vulnerability (2501696)
15450| [902281] Microsoft Windows Data Access Components Remote Code Execution Vulnerabilities (2451910)
15451| [902280] Microsoft Windows BranchCache Remote Code Execution Vulnerability (2385678)
15452| [902277] Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)
15453| [902276] Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)
15454| [902274] Microsoft Publisher Remote Code Execution Vulnerability (2292970)
15455| [902269] Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)
15456| [902265] Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)
15457| [902264] Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)
15458| [902263] Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)
15459| [902262] Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)
15460| [902256] Microsoft Windows win32k.sys Driver 'CreateDIBPalette()' BOF Vulnerability
15461| [902255] Microsoft Visual Studio Insecure Library Loading Vulnerability
15462| [902254] Microsoft Office Products Insecure Library Loading Vulnerability
15463| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
15464| [902246] Microsoft Internet Explorer 'toStaticHTML()' Cross Site Scripting Vulnerability
15465| [902243] Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)
15466| [902232] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (978886)
15467| [902231] Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
15468| [902230] Microsoft .NET Common Language Runtime Remote Code Execution Vulnerability (2265906)
15469| [902229] Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)
15470| [902228] Microsoft Office Word Remote Code Execution Vulnerabilities (2269638)
15471| [902227] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
15472| [902226] Microsoft Windows Shell Remote Code Execution Vulnerability (2286198)
15473| [902217] Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability (978212)
15474| [902210] Microsoft IE cross-domain IFRAME gadgets keystrokes steal Vulnerability
15475| [902193] Microsoft .NET Framework XML HMAC Truncation Vulnerability (981343)
15476| [902192] Microsoft Office COM Validation Remote Code Execution Vulnerability (983235)
15477| [902191] Microsoft Internet Explorer Multiple Vulnerabilities (982381)
15478| [902183] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability
15479| [902178] Microsoft Visual Basic Remote Code Execution Vulnerability (978213)
15480| [902176] Microsoft SharePoint '_layouts/help.aspx' Cross Site Scripting Vulnerability
15481| [902166] Microsoft Internet Explorer 'neutering' Mechanism XSS Vulnerability
15482| [902159] Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability (980232)
15483| [902158] Microsoft Office Publisher Remote Code Execution Vulnerability (981160)
15484| [902157] Microsoft 'ISATAP' Component Spoofing Vulnerability (978338)
15485| [902156] Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)
15486| [902155] Microsoft Internet Explorer Multiple Vulnerabilities (980182)
15487| [902151] Microsoft Internet Explorer Denial of Service Vulnerability - Mar10
15488| [902133] Microsoft Office Excel Multiple Vulnerabilities (980150)
15489| [902117] Microsoft DirectShow Remote Code Execution Vulnerability (977935)
15490| [902116] Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)
15491| [902115] Microsoft Kerberos Denial of Service Vulnerability (977290)
15492| [902114] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)
15493| [902112] Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)
15494| [902095] Microsoft Office Excel Remote Code Execution Vulnerability (2269707)
15495| [902094] Microsoft Windows Kernel Mode Drivers Privilege Elevation Vulnerabilities (2160329)
15496| [902093] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)
15497| [902080] Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)
15498| [902069] Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
15499| [902068] Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
15500| [902067] Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (979559)
15501| [902039] Microsoft Visio Remote Code Execution Vulnerabilities (980094)
15502| [902038] Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)
15503| [902033] Microsoft Windows '.ani' file Denial of Service vulnerability
15504| [902015] Microsoft Paint Remote Code Execution Vulnerability (978706)
15505| [901305] Microsoft Windows IP-HTTPS Component Security Feature Bypass Vulnerability (2765809)
15506| [901304] Microsoft Windows File Handling Component Remote Code Execution Vulnerability (2758857)
15507| [901301] Microsoft Windows Kerberos Denial of Service Vulnerability (2743555)
15508| [901212] Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)
15509| [901211] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)
15510| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
15511| [901209] Microsoft Windows Media Center Remote Code Execution Vulnerabilities (2604926)
15512| [901208] Microsoft Internet Explorer Multiple Vulnerabilities (2586448)
15513| [901205] Microsoft Windows Components Remote Code Execution Vulnerabilities (2570947)
15514| [901193] Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
15515| [901183] Internet Information Services (IIS) FTP Service Remote Code Execution Vulnerability (2489256)
15516| [901180] Microsoft Internet Explorer Multiple Vulnerabilities (2482017)
15517| [901169] Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
15518| [901166] Microsoft Office Remote Code Execution Vulnerabilites (2423930)
15519| [901164] Microsoft Windows SChannel Denial of Service Vulnerability (2207566)
15520| [901163] Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))
15521| [901162] Microsoft Internet Explorer Multiple Vulnerabilities (2360131)
15522| [901161] Microsoft ASP.NET Information Disclosure Vulnerability (2418042)
15523| [901151] Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)
15524| [901150] Microsoft Windows Print Spooler Service Remote Code Execution Vulnerability(2347290)
15525| [901140] Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)
15526| [901139] Microsoft Internet Explorer Multiple Vulnerabilities (2183461)
15527| [901119] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)
15528| [901102] Microsoft Windows Media Services Remote Code Execution Vulnerability (980858)
15529| [901097] Microsoft Internet Explorer Multiple Vulnerabilities (978207)
15530| [901095] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)
15531| [901069] Microsoft Office Project Remote Code Execution Vulnerability (967183)
15532| [901065] Microsoft Windows IAS Remote Code Execution Vulnerability (974318)
15533| [901064] Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)
15534| [901063] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
15535| [901048] Microsoft Windows Active Directory Denial of Service Vulnerability (973309)
15536| [901041] Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
15537| [901012] Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)
15538| [900973] Microsoft Office Word Remote Code Execution Vulnerability (976307)
15539| [900965] Microsoft Windows SMB2 Negotiation Protocol Remote Code Execution Vulnerability
15540| [900964] Microsoft .NET Common Language Runtime Code Execution Vulnerability (974378)
15541| [900963] Microsoft Windows Kernel Privilege Escalation Vulnerability (971486)
15542| [900957] Microsoft Windows Patterns & Practices EntLib DOS Vulnerability
15543| [900956] Microsoft Windows Patterns & Practices EntLib Version Detection
15544| [900929] Microsoft JScript Scripting Engine Remote Code Execution Vulnerability (971961)
15545| [900908] Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)
15546| [900907] Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)
15547| [900898] Microsoft Internet Explorer 'XSS Filter' XSS Vulnerabilities - Nov09
15548| [900897] Microsoft Internet Explorer PDF Information Disclosure Vulnerability - Nov09
15549| [900891] Microsoft Internet Denial Of Service Vulnerability - Nov09
15550| [900887] Microsoft Office Excel Multiple Vulnerabilities (972652)
15551| [900886] Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities (969947)
15552| [900881] Microsoft Windows Indexing Service ActiveX Vulnerability (969059)
15553| [900880] Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)
15554| [900879] Microsoft Windows Media Player ASF Heap Overflow Vulnerability (974112)
15555| [900878] Microsoft Products GDI Plus Code Execution Vulnerabilities (957488)
15556| [900877] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
15557| [900876] Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)
15558| [900873] Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)
15559| [900863] Microsoft Internet Explorer 'window.print()' DOS Vulnerability
15560| [900838] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
15561| [900837] Microsoft DHTML Editing Component ActiveX Remote Code Execution Vulnerability (956844)
15562| [900836] Microsoft Internet Explorer Address Bar Spoofing Vulnerability
15563| [900826] Microsoft Internet Explorer 'location.hash' DOS Vulnerability
15564| [900814] Microsoft Windows WINS Remote Code Execution Vulnerability (969883)
15565| [900813] Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)
15566| [900809] Microsoft Visual Studio ATL Remote Code Execution Vulnerability (969706)
15567| [900808] Microsoft Visual Products Version Detection
15568| [900757] Microsoft Windows Media Player '.AVI' File DOS Vulnerability
15569| [900741] Microsoft Internet Explorer Information Disclosure Vulnerability Feb10
15570| [900740] Microsoft Windows Kernel Could Allow Elevation of Privilege (977165)
15571| [900690] Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)
15572| [900689] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371))
15573| [900670] Microsoft Office Excel Remote Code Execution Vulnerabilities (969462)
15574| [900589] Microsoft ISA Server Privilege Escalation Vulnerability (970953)
15575| [900588] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
15576| [900568] Microsoft Windows Search Script Execution Vulnerability (963093)
15577| [900566] Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)
15578| [900476] Microsoft Excel Remote Code Execution Vulnerabilities (968557)
15579| [900465] Microsoft Windows DNS Memory Corruption Vulnerability - Mar09
15580| [900461] Microsoft MSN Live Messneger Denial of Service Vulnerability
15581| [900445] Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
15582| [900404] Microsoft Windows RTCP Unspecified Remote DoS Vulnerability
15583| [900400] Microsoft Internet Explorer Unicode String DoS Vulnerability
15584| [900391] Microsoft Office Publisher Remote Code Execution Vulnerability (969516)
15585| [900366] Microsoft Internet Explorer Web Script Execution Vulnerabilites
15586| [900365] Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
15587| [900337] Microsoft Internet Explorer Denial of Service Vulnerability - Apr09
15588| [900336] Microsoft Windows Media Player MID File Integer Overflow Vulnerability
15589| [900328] Microsoft Internet Explorer Remote Code Execution Vulnerability (963027)
15590| [900314] Microsoft XML Core Service Information Disclosure Vulnerability
15591| [900303] Microsoft Internet Explorer HTML Form Value DoS Vulnerability
15592| [900299] Microsoft Report Viewer Information Disclosure Vulnerability (2578230)
15593| [900297] Microsoft Windows Kernel Denial of Service Vulnerability (2556532)
15594| [900296] Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)
15595| [900295] Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)
15596| [900294] Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)
15597| [900288] Microsoft Distributed File System Remote Code Execution Vulnerabilities (2535512)
15598| [900287] Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)
15599| [900285] Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)
15600| [900282] Microsoft DNS Resolution Remote Code Execution Vulnerability (2509553)
15601| [900281] Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)
15602| [900280] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2508429)
15603| [900279] Microsoft SMB Client Remote Code Execution Vulnerabilities (2511455)
15604| [900278] Microsoft Internet Explorer Multiple Vulnerabilities (2497640)
15605| [900273] Microsoft Remote Desktop Client Remote Code Execution Vulnerability (2508062)
15606| [900267] Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)
15607| [900266] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (2424434)
15608| [900263] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)
15609| [900262] Microsoft Internet Explorer Multiple Vulnerabilities (2416400)
15610| [900261] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386)
15611| [900248] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (981997)
15612| [900246] Microsoft Media Decompression Remote Code Execution Vulnerability (979902)
15613| [900245] Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)
15614| [900241] Microsoft Outlook Express and Windows Mail Remote Code Execution Vulnerability (978542)
15615| [900240] Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)
15616| [900237] Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)
15617| [900236] Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)
15618| [900235] Microsoft Windows Media Player Could Allow Remote Code Execution (979402)
15619| [900232] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (975561)
15620| [900230] Microsoft Windows SMB Server Multiple Vulnerabilities (971468)
15621| [900229] Microsoft Data Analyzer ActiveX Control Vulnerability (978262)
15622| [900228] Microsoft Office (MSO) Remote Code Execution Vulnerability (978214)
15623| [900227] Microsoft Windows Shell Handler Could Allow Remote Code Execution Vulnerability (975713)
15624| [900223] Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)
15625| [900192] Microsoft Internet Explorer Information Disclosure Vulnerability
15626| [900187] Microsoft Internet Explorer Argument Injection Vulnerability
15627| [900178] Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability
15628| [900173] Microsoft Windows Media Player Version Detection
15629| [900172] Microsoft Windows Media Player 'MIDI' or 'DAT' File DoS Vulnerability
15630| [900170] Microsoft iExplorer '&NBSP
15631| [900131] Microsoft Internet Explorer Denial of Service Vulnerability
15632| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
15633| [900120] Microsoft Organization Chart Remote Code Execution Vulnerability
15634| [900108] Microsoft Windows NSlookup.exe Remote Code Execution Vulnerability
15635| [900097] Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution
15636| [900095] Microsoft ISA Server and Forefront Threat Management Gateway DoS Vulnerability (961759)
15637| [900093] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
15638| [900080] Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
15639| [900079] Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)
15640| [900064] Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)
15641| [900063] Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173)
15642| [900061] Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070)
15643| [900058] Microsoft XML Core Services Remote Code Execution Vulnerability (955218)
15644| [900048] Microsoft Excel Remote Code Execution Vulnerability (956416)
15645| [900047] Microsoft Office nformation Disclosure Vulnerability (957699)
15646| [900046] Microsoft Office Remote Code Execution Vulnerabilities (955047)
15647| [900033] Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities (949785)
15648| [900029] Microsoft Office Filters Could Allow Remote Code Execution Vulnerabilities (924090)
15649| [900028] Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)
15650| [900025] Microsoft Office Version Detection
15651| [900006] Microsoft Word Could Allow Remote Code Execution Vulnerability
15652| [900004] Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
15653| [855384] Solaris Update for snmp/mibiisa 108870-36
15654| [855273] Solaris Update for snmp/mibiisa 108869-36
15655| [803028] Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
15656| [803007] Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)
15657| [802912] Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
15658| [802888] Microsoft Windows Media Service Handshake Sequence DoS Vulnerability
15659| [802886] Microsoft Sidebar and Gadgets Remote Code Execution Vulnerability (2719662)
15660| [802864] Microsoft XML Core Services Remote Code Execution Vulnerability (2719615)
15661| [802774] Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)
15662| [802726] Microsoft SMB Signing Disabled
15663| [802708] Microsoft Internet Explorer Code Execution and DoS Vulnerabilities
15664| [802634] Microsoft Windows Unauthorized Digital Certificates Spoofing Vulnerability (2718704)
15665| [802500] Microsoft Windows TrueType Font Parsing Privilege Elevation Vulnerability
15666| [802468] Compatibility Issues Affecting Signed Microsoft Binaries (2749655)
15667| [802462] Microsoft ActiveSync Null Pointer Dereference Denial Of Service Vulnerability
15668| [802426] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)
15669| [802383] Microsoft Windows Color Control Panel Privilege Escalation Vulnerability
15670| [802379] Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability
15671| [802287] Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability
15672| [802286] Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities
15673| [802260] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
15674| [802203] Microsoft Internet Explorer Cookie Hijacking Vulnerability
15675| [802202] Microsoft Internet Explorer Cookie Hijacking Vulnerability
15676| [802140] Microsoft Explorer HTTPS Sessions Multiple Vulnerabilities (Windows)
15677| [802136] Microsoft Windows Insecure Library Loading Vulnerability (2269637)
15678| [801991] Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability
15679| [801966] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)
15680| [801935] Microsoft Silverlight Multiple Memory Leak Vulnerabilities
15681| [801934] Microsoft Silverlight Version Detection
15682| [801914] Microsoft Windows IPv4 Default Configuration Security Bypass Vulnerability
15683| [801876] Microsoft Internet Explorer 'msxml.dll' Information Disclosure Vulnerability
15684| [801831] Microsoft Internet Explorer Incorrect GUI Display Vulnerability
15685| [801830] Microsoft Internet Explorer 'ReleaseInterface()' Remote Code Execution Vulnerability
15686| [801725] Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)
15687| [801721] Microsoft Active Directory Denial of Service Vulnerability (953235)
15688| [801719] Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)
15689| [801718] Microsoft Windows Vista Information Disclosure Vulnerability (931213)
15690| [801717] Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability
15691| [801716] Microsoft Outlook Express/Windows Mail MHTML URI Handler Information Disclosure Vulnerability (929123)
15692| [801715] Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
15693| [801713] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
15694| [801707] Microsoft Internet Explorer mshtml.dll Remote Memory Corruption Vulnerability (942615)
15695| [801706] Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)
15696| [801705] Microsoft Windows TCP/IP Denial of Service Vulnerability (946456)
15697| [801704] Microsoft Internet Information Services Privilege Elevation Vulnerability (942831)
15698| [801702] Microsoft Internet Explorer HTML Rendering Remote Memory Corruption Vulnerability (944533)
15699| [801701] Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)
15700| [801677] Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerabilities
15701| [801606] Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability
15702| [801598] Microsoft Windows2k3 Active Directory 'BROWSER ELECTION' Buffer Overflow Vulnerability
15703| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
15704| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
15705| [801595] Microsoft Office Excel Axis and Art Object Parsing Remote Code Execution Vulnerabilities
15706| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
15707| [801580] Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities
15708| [801527] Microsoft Windows 32-bit Platforms Unspecified vulnerabilities
15709| [801491] Microsoft 'hxvz.dll' ActiveX Control Memory Corruption Vulnerability (948881)
15710| [801489] Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)
15711| [801488] Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability (947864)
15712| [801487] Microsoft Windows Kernel Usermode Callback Local Privilege Elevation Vulnerability (941693)
15713| [801486] Microsoft Windows Speech Components Voice Recognition Command Execution Vulnerability (950760)
15714| [801485] Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)
15715| [801484] Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)
15716| [801483] Microsoft Windows Search Remote Code Execution Vulnerability (959349)
15717| [801482] Microsoft Windows ASP.NET Denial of Service Vulnerability(970957)
15718| [801481] Microsoft Wireless LAN AutoConfig Service Remote Code Execution Vulnerability (970710)
15719| [801480] Microsoft Web Services on Devices API Remote Code Execution Vulnerability (973565)
15720| [801479] Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)
15721| [801457] Microsoft Windows Address Book Insecure Library Loading Vulnerability
15722| [801456] Microsoft Windows Progman Group Converter Insecure Library Loading Vulnerability
15723| [801349] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability (June-10)
15724| [801348] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability -june 10
15725| [801345] Microsoft .NET 'ASP.NET' Cross-Site Scripting vulnerability
15726| [801344] Microsoft .NET '__VIEWSTATE' Cross-Site Scripting vulnerability
15727| [801342] Microsoft ASP.NET Cross-Site Scripting vulnerability
15728| [801333] Microsoft Windows Kernel 'win32k.sys' Multiple DOS Vulnerabilities
15729| [801330] Microsoft Internet Explorer Cross Site Data Leakage Vulnerability
15730| [801109] Microsoft IE CA SSL Certificate Security Bypass Vulnerability - Oct09
15731| [801090] Microsoft Windows Indeo Codec Multiple Vulnerabilities
15732| [800968] Microsoft SharePoint Team Services Information Disclosure Vulnerability
15733| [800910] Microsoft Internet Explorer Buffer Overflow Vulnerability - Jul09
15734| [800902] Microsoft Internet Explorer XSS Vulnerability - July09
15735| [800872] Microsoft Internet Explorer 'li' Element DoS Vulnerability - Sep09
15736| [800863] Microsoft Internet Explorer XML Document DoS Vulnerability - Aug09
15737| [800862] Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
15738| [800861] Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability
15739| [800845] Microsoft Office Web Components ActiveX Control Code Execution Vulnerability
15740| [800829] Microsoft Video ActiveX Control 'msvidctl.dll' BOF Vulnerability
15741| [800742] Microsoft Internet Explorer Unspecified vulnerability
15742| [800700] Microsoft GDIPlus PNG Infinite Loop Vulnerability
15743| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
15744| [800669] Microsoft Internet Explorer Denial Of Service Vulnerability - July09
15745| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
15746| [800505] Microsoft HTML Help Workshop buffer overflow vulnerability
15747| [800504] Microsoft Windows XP SP3 denial of service vulnerability
15748| [800481] Microsoft SharePoint Cross Site Scripting Vulnerability
15749| [800480] Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability
15750| [800466] Microsoft Windows TLS/SSL Spoofing Vulnerability (977377)
15751| [800461] Microsoft Internet Explorer Information Disclosure Vulnerability (980088)
15752| [800442] Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
15753| [800429] Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)
15754| [800382] Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)
15755| [800347] Microsoft Internet Explorer Clickjacking Vulnerability
15756| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
15757| [800337] Microsoft Internet Explorer NULL Pointer DoS Vulnerability
15758| [800332] Microsoft Windows Live Messenger Information Disclosure Vulnerability
15759| [800331] Microsoft Windows Live Messenger Client Version Detection
15760| [800328] Integer Overflow vulnerability in Microsoft Windows Media Player
15761| [800310] Microsoft Windows Media Services nskey.dll ActiveX BOF Vulnerability
15762| [800267] Microsoft GDIPlus Library File Integer Overflow Vulnerability
15763| [800218] Microsoft Money 'prtstb06.dll' Denial of Service vulnerability
15764| [800217] Microsoft Money Version Detection
15765| [800209] Microsoft Internet Explorer Version Detection (Win)
15766| [800208] Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities
15767| [800083] Microsoft Outlook Express Malformed MIME Message DoS Vulnerability
15768| [800082] Microsoft SQL Server sp_replwritetovarbin() BOF Vulnerability
15769| [800023] Microsoft Windows Image Color Management System Code Execution Vulnerability (952954)
15770| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
15771| [102059] Microsoft Windows Vector Markup Language Buffer Overflow (938127)
15772| [102055] Microsoft Windows GDI Multiple Vulnerabilities (925902)
15773| [102053] Microsoft Windows Vector Markup Language Vulnerabilities (929969)
15774| [102015] Microsoft RPC Interface Buffer Overrun (KB824146)
15775| [101100] Vulnerabilities in Microsoft ATL Could Allow Remote Code Execution (973908)
15776| [101017] Microsoft MS03-018 security check
15777| [101016] Microsoft MS03-022 security check
15778| [101015] Microsoft MS03-034 security check
15779| [101014] Microsoft MS00-078 security check
15780| [101012] Microsoft MS03-051 security check
15781| [101010] Microsoft Security Bulletin MS05-004
15782| [101009] Microsoft Security Bulletin MS06-033
15783| [101007] Microsoft dotNET version grabber
15784| [101006] Microsoft Security Bulletin MS06-056
15785| [101005] Microsoft Security Bulletin MS07-040
15786| [101004] Microsoft MS04-017 security check
15787| [101003] Microsoft MS00-058 security check
15788| [101000] Microsoft MS00-060 security check
15789| [100950] Microsoft DNS server internal hostname disclosure detection
15790| [100624] Microsoft Windows SMTP Server DNS spoofing vulnerability
15791| [100607] Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability
15792| [100596] Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
15793| [100283] Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability
15794| [100062] Microsoft Remote Desktop Protocol Detection
15795| [90024] Windows Vulnerability in Microsoft Jet Database Engine
15796| [80007] Microsoft MS00-06 security check
15797| [13752] Denial of Service (DoS) in Microsoft SMS Client
15798| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
15799| [11874] IIS Service Pack - 404
15800| [11808] Microsoft RPC Interface Buffer Overrun (823980)
15801| [11433] Microsoft ISA Server DNS - Denial Of Service (MS03-009)
15802| [11217] Microsoft's SQL Version Query
15803| [11177] Flaw in Microsoft VM Could Allow Code Execution (810030)
15804| [11146] Microsoft RDP flaws could allow sniffing and DOS(Q324380)
15805| [11142] IIS XSS via IDC error
15806| [11067] Microsoft's SQL Hello Overflow
15807| [11003] IIS Possible Compromise
15808| [10993] IIS ASP.NET Application Trace Enabled
15809| [10991] IIS Global.asa Retrieval
15810| [10936] IIS XSS via 404 error
15811| [10862] Microsoft's SQL Server Brute Force
15812| [10755] Microsoft Exchange Public Folders Information Leak
15813| [10732] IIS 5.0 WebDav Memory Leakage
15814| [10699] IIS FrontPage DoS II
15815| [10695] IIS .IDA ISAPI filter applied
15816| [10674] Microsoft's SQL UDP Info Query
15817| [10673] Microsoft's SQL Blank Password
15818| [10671] IIS Remote Command Execution
15819| [10667] IIS 5.0 PROPFIND Vulnerability
15820| [10661] IIS 5 .printer ISAPI filter applied
15821| [10657] NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability
15822| [10585] IIS FrontPage DoS
15823| [10576] Check for dangerous IIS default files
15824| [10575] Check for IIS .cnf file leakage
15825| [10573] IIS 5.0 Sample App reveals physical path of web root
15826| [10572] IIS 5.0 Sample App vulnerable to cross-site scripting attack
15827| [10537] IIS directory traversal
15828| [10492] IIS IDA/IDQ Path Disclosure
15829| [10491] ASP/ASA source using Microsoft Translate f: bug
15830| [10144] Microsoft SQL TCP/IP listener is running
15831|
15832| SecurityTracker - https://www.securitytracker.com:
15833| [1027751] Microsoft Internet Information Server (IIS) FTP Server Lets Remote Users Obtain Files and Local Users Obtain Passwords
15834| [1027223] Microsoft IIS Web Server Discloses Potentially Sensitive Information to Remote Users
15835| [1024921] Microsoft IIS FTP Server Lets Remote Users Deny Service
15836| [1024496] Microsoft Internet Information Server (IIS) Web Server Stack Overflow in Reading POST Data Lets Remote Users Deny Service
15837| [1023387] Microsoft Internet Information Services (IIS) Filename Extension Parsing Configuration Error May Let Users Bypass Security Controls
15838| [1022792] Microsoft Internet Information Server (IIS) FTP Server Buffer Overflows Let Remote Authenticated Users Execute Arbitrary Code and Deny Service
15839| [1016466] Microsoft Internet Information Server (IIS) Buffer Overflow in Processing ASP Pages Lets Remote Authenticated Users Execute Arbitrary Code
15840| [1015376] Microsoft IIS Lets Remote Users Deny Service or Execute Arbitrary Code With Malformed HTTP GET Requests
15841| [1015049] Microsoft Internet Explorer Drag-and-Drop Timing May Let Remote Users Install Arbitrary Files
15842| [1014777] Microsoft IIS ASP Error Page May Disclose System Information in Certain Cases
15843| [1011633] Microsoft IIS WebDAV XML Message Handler Error Lets Remote Users Deny Service
15844| [1010692] Microsoft IIS 4.0 Buffer Overflow in Redirect Function Lets Remote Users Execute Arbitrary Code
15845| [1010610] Microsoft IIS Web Server May Disclose Private IP Addresses in Certain Cases
15846| [1010079] Microsoft IIS ASP Script Cookie Processing Flaw May Disclose Application Information to Remote Users
15847| [1008563] Microsoft IIS Fails to Log HTTP TRACK Requests
15848| [1007262] Microsoft IIS 6.0 Vulnerabilities Permit Cross-Site Scripting and Password Changing Attacks Against Administrators
15849| [1007059] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Has Another Buffer Overflow That Lets Remote Execute Arbitrary Code
15850| [1006867] Microsoft IIS Buffer Overflow Lets Remote Users With Upload Privileges Execute Code - Remote Users Can Also Crash the Service
15851| [1006866] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Lets Remote Execute Arbitrary Code
15852| [1006704] Microsoft IIS Authentication Manager Discloses Validity of User Names to Remote Users
15853| [1006305] Microsoft IIS Web Server WebDAV Buffer Overflow Lets Remote Users Execute Arbitrary Code
15854| [1005505] Microsoft Internet Information Server (IIS) Script Access Control Bug May Let Remote Authenticated Users Upload Unauthorized Executable Files
15855| [1005504] Microsoft Internet Information Server (IIS) WebDAV Memory Allocation Flaw Lets Remote Users Crash the Server
15856| [1005503] Microsoft Internet Information Server (IIS) Administrative Pages Allow Cross-Site Scripting Attacks
15857| [1005502] Microsoft Internet Information Server (IIS) Out-of-Process Access Control Bug Lets Certain Authenticated Users Gain Full Control of the Server
15858| [1005083] Microsoft Internet Information Server (IIS) Web Server Fails to Properly Validate Client-side Certificates, Allowing Remote Users to Impersonate Other Users or Certificate Issuers
15859| [1004757] Microsoft IIS SMTP Service Encapsulation Bug Lets Remote Users Relay Mail and Send SPAM Via the Service
15860| [1004646] ColdFusion MX Buffer Overflow When Used With Microsoft Internet Information Server (IIS) Lets Remote Users Crash the IIS Web Server or Execute Arbitrary Code
15861| [1004526] Microsoft Internet Information Server (IIS) Heap Overflow in HTR ISAPI Extension While Processing Chunked Encoded Data Lets Remote Users Execute Arbitrary Code
15862| [1004044] Cisco CallManager Affected by Microsoft Internet Information Server (IIS) Bugs
15863| [1004032] Microsoft Internet Information Server (IIS) FTP STAT Command Bug Lets Remote Users Crash Both the FTP and the Web Services
15864| [1004031] Microsoft Internet Information Server (IIS) URL Length Bug Lets Remote Users Crash the Web Service
15865| [1004011] Microsoft Internet Information Server (IIS) Buffer Overflow in ASP Server-Side Include Function May Let Remote Users Execute Arbitrary Code on the Web Server
15866| [1004006] Microsoft Internet Information Server (IIS) Off-By-One Heap Overflow in .HTR Processing May Let Remote Users Execute Arbitrary Code on the Server
15867| [1003224] Microsoft Internet Information Server (IIS) Version 4 Lets Local Users Modify the Log File Undetected
15868| [1002778] Microsoft Internet Information Server (IIS) Lets Remote Users Create Bogus Web Log Entries
15869| [1002733] Microsoft IIS 4.0 Configuration Error May Allow Remote Users to Obtain Physical Directory Path Information
15870| [1002651] Microsoft Internet Information Server (IIS) May Disclose PHP Scripting Source Code
15871| [1002212] Microsoft IIS Web Server Contains Multiple Vulnerabilities That Allow Local Users to Gain System Privileges and Allow Remote Users to Cause the Web Server to Crash
15872| [1002161] Microsoft Internet Information Server (IIS) Web Server Discloses Internal IP Addresses or NetBIOS Host Names to Remote Users
15873| [1001818] Microsoft Internet Information Server (IIS) Web Server Discloses ASP Source Code When Installed on FAT-based Filesystem
15874| [1001576] eEye Digital Security's SecureIIS Application Firewall for Microsoft Web Servers Fails to Filter Certain Web URL Characters, Allowing Remote Users to Bypass the SecureIIS Firewall
15875| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
15876| [1001530] Microsoft IIS Web Server Allows Remote Users to Execute Commands on the Server Due to CGI Decoding Error
15877| [1001483] Microsoft IIS Web Server Lets Remote Users Restart the Web Server with Another Specially Crafted PROPFIND XML Command
15878| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
15879| [1001402] Microsoft IIS Web Server Can Be Effectively Shutdown By Certain Internal-Network Attacks When The Underlying OS Supports User Account Lockouts
15880| [1001116] Microsoft Personal Web Server Contains An Old Internet Information Server (IIS) Vulnerability Allowing Unauthorized Directory Listings and Possible Code Execution For Remote Users
15881| [1001050] Microsoft IIS 5.0 Web Server Can Be Restarted Remotely By Any User
15882| [1028908] Microsoft Active Directory Federation Services Discloses Account Information to Remote Users
15883| [1028905] (Microsoft Issues Fix for Exchange Server) Oracle Fusion Middleware Bugs Let Remote Users Deny Service and Access and Modify Data
15884| [1028904] (Microsoft Issues Fix for Exchange Server) Oracle PeopleSoft Products Bugs Let Remote Users Partially Access and Modify Data and Partially Deny Service
15885| [1028903] Microsoft Windows Unicode Scripts Processor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
15886| [1028902] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
15887| [1028759] (Microsoft Issues Fix for Internet Explorer) Adobe Flash Player Buffer Overflows Let Remote Users Execute Arbitrary Code
15888| [1028756] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
15889| [1028755] Microsoft Silverlight Null Pointer Dereference Lets Remote Users Execute Arbitrary Code
15890| [1028754] Microsoft Windows Defender Pathname Bug Lets Local Users Gain Elevated Privileges
15891| [1028752] Microsoft DirectShow GIF Image Processing Flaw Lets Remote Users Execute Arbitrary Code
15892| [1028751] Microsoft Office TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
15893| [1028750] Microsoft Visual Studio .NET TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
15894| [1028749] Microsoft Lync TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
15895| [1028748] Microsoft Windows GDI+ TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
15896| [1028745] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
15897| [1028651] Microsoft Internet Explorer Multiple Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
15898| [1028650] Microsoft Office Buffer Overflow in PNG Image Processing Lets Remote Users Execute Arbitrary Code
15899| [1028560] Microsoft Visio Discloses Information to Remote Users
15900| [1028558] Microsoft .NET Flaws Let Remote Users Bypass Authentication and Bypass XML File Signature Verification
15901| [1028557] Microsoft Malware Protection Engine Flaw Lets Remote Users Execute Arbitrary Code
15902| [1028553] Microsoft Word RTF Shape Data Parsing Error Lets Remote Users Execute Arbitrary Code
15903| [1028552] Microsoft Publisher Multiple Bugs Let Remote Users Execute Arbitrary Code
15904| [1028551] Microsoft Lync Object Access Flaw Lets Remote Users Execute Arbitrary Code
15905| [1028550] Microsoft Office Communicator Object Access Flaw Lets Remote Users Execute Arbitrary Code
15906| [1028545] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
15907| [1028514] Microsoft Internet Explorer Object Access Bug Lets Remote Users Execute Arbitrary Code
15908| [1028412] Microsoft SharePoint Server Discloses Files to Remote Authenticated Users
15909| [1028411] Microsoft Office Web Apps Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
15910| [1028410] Microsoft InfoPath Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
15911| [1028409] Microsoft Groove Server Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
15912| [1028408] Microsoft SharePoint Input Validation Flaw in HTML Sanitization Component Permits Cross-Site Scripting Attacks
15913| [1028405] Microsoft Active Directory LDAP Processing Flaw Lets Remote Users Deny Service
15914| [1028404] Microsoft Antimalware Client Path Name Flaw Lets Local Users Gain Elevated Privileges
15915| [1028398] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
15916| [1028281] Microsoft Office for Mac HTML Loading Bug Lets Remote Users Obtain Potentially Sensitive Information
15917| [1028279] Microsoft OneNote Buffer Validation Flaw Lets Remote Users Obtain Potentially Sensitive Information
15918| [1028278] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting and Denial of Service Attacks
15919| [1028276] Microsoft Visio Viewer Tree Object Type Confusion Error Lets Remote Users Execute Arbitrary Code
15920| [1028275] Microsoft Internet Explorer Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
15921| [1028273] Microsoft Silverlight Memory Pointer Dereference Lets Remote Users Execute Arbitrary Code
15922| [1028123] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
15923| [1028119] Microsoft DirectShow Media Decompression Flaw Lets Remote Users Execute Arbitrary Code
15924| [1028117] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Access Information Across Domains
15925| [1028116] Microsoft Internet Explorer Vector Markup Language Memory Corruption Error Lets Remote Users Execute Arbitrary Code
15926| [1027949] Microsoft .NET Open Data (OData) Protocol Bug Lets Remote Users Deny Service
15927| [1027948] Microsoft System Center Configuration Manager Input Validation Flaws Permit Cross-Site Scripting Attacks
15928| [1027945] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
15929| [1027943] Microsoft XML Core Services (MSXML) XML Parsing Flaws Let Remote Users Execute Arbitrary Code
15930| [1027934] Microsoft Windows Includes Some Invalid TURKTRUST Certificates
15931| [1027930] Microsoft Internet Explorer CDwnBindInfo Object Reuse Flaw Lets Remote Users Execute Arbitrary Code
15932| [1027870] Microsoft Internet Explorer Discloses Mouse Location to Remote Users
15933| [1027859] Microsoft DirectPlay Heap Overflow Lets Remote Users Execute Arbitrary Code
15934| [1027857] Microsoft Exchange Server RSS Feed Bug Lets Remote Users Deny Service
15935| [1027852] Microsoft Word RTF Parsing Error Lets Remote Users Execute Arbitrary Code
15936| [1027851] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
15937| [1027753] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
15938| [1027752] Microsoft Excel Buffer Overflow, Memory Corruption, and Use-After-Free Errors Let Remote Users Execute Arbitrary Code
15939| [1027749] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
15940| [1027647] EMC NetWorker Module for Microsoft Applications Lets Remote Users Execute Arbitrary Code and Local Users Obtain Passwords
15941| [1027629] Microsoft Office InfoPath HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
15942| [1027628] Microsoft Office Communicator HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
15943| [1027627] Microsoft Lync HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
15944| [1027626] Microsoft SharePoint HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
15945| [1027625] Microsoft Groove Server HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
15946| [1027623] Microsoft SQL Server Input Validation Flaw in Reporting Services Permits Cross-Site Scripting Attacks
15947| [1027621] Microsoft Works Heap Corruption Flaw Lets Remote Users Execute Arbitrary Code
15948| [1027620] Microsoft Kerberos Null Pointer Dereference Lets Remote Users Deny Service
15949| [1027618] Microsoft Word Memory Errors Let Remote Users Execute Arbitrary Code
15950| [1027555] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
15951| [1027538] Microsoft Internet Explorer execCommand Flaw Lets Remote Users Execute Arbitrary Code
15952| [1027512] Microsoft System Center Configuration Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
15953| [1027511] Microsoft Visual Studio Team Foundation Server Input Validation Flaw Permits Cross-Site Scripting Attacks
15954| [1027394] Microsoft Visio Buffer Overflow in Processing DXF Format Files Lets Remote Users Execute Arbitrary Code
15955| [1027393] Microsoft Office CGM Graphics File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
15956| [1027392] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
15957| [1027390] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
15958| [1027389] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15959| [1027385] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15960| [1027384] Microsoft Host Integration Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15961| [1027383] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15962| [1027381] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15963| [1027380] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15964| [1027295] Microsoft SharePoint Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
15965| [1027294] Microsoft Exchange Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
15966| [1027234] Microsoft Office for Mac Folder Permission Flaw Lets Local Users Gain Elevated Privileges
15967| [1027232] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting, Information Disclosure, and URL Redirection Attacks
15968| [1027229] Microsoft Office DLL Loading Error Lets Remote Users Execute Arbitrary Code
15969| [1027228] Microsoft Visual Basic for Applications DLL Loading Error Lets Remote Users Execute Arbitrary Code
15970| [1027227] Microsoft Data Access Components (MDAC) ADO Cachesize Buffer Overflow Lets Remote Users Execute Arbitrary Code
15971| [1027226] Microsoft Internet Explorer Deleted Object Access Bugs Let Remote Users Execute Arbitrary Code
15972| [1027157] Microsoft XML Core Services (MSXML) Object Access Error Lets Remote Users Execute Arbitrary Code
15973| [1027151] Microsoft Dynamics AX Input Validation Flaw Permits Cross-Site Scripting Attacks
15974| [1027150] Microsoft Lync DLL Loading Error Lets Remote Users Execute Arbitrary Code
15975| [1027149] Microsoft .NET Memory Access Bug Lets Remote Users Execute Arbitrary Code
15976| [1027147] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Conduct Cross-Site Scripting Attacks, and Obtain Potentially Sensitive Information
15977| [1027114] Microsoft Windows Includes Some Invalid Certificates
15978| [1027048] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code and Deny Service
15979| [1027043] Microsoft Windows Partition Manager Memory Allocation Error Lets Local Users Gain Elevated Privileges
15980| [1027042] Microsoft Visio Viewer Memory Corruption Error Lets Remote Users Execute Arbitrary Code
15981| [1027041] Microsoft Office Excel File Memory Corruption Errors and Heap Overflows Let Remote Users Execute Arbitrary Code
15982| [1027040] Microsoft Silverlight Double Free Memory Error Lets Remote Users Execute Arbitrary Code
15983| [1027038] Microsoft GDI+ Bugs Let Remote Users Execute Arbitrary Code
15984| [1027036] Microsoft .NET Framework Serialization Bugs Let Remote Users Execute Arbitrary Code
15985| [1027035] Microsoft Word RTF Processing Flaw Lets Remote Users Execute Arbitrary Code
15986| [1026911] Microsoft Office WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
15987| [1026910] Microsoft Works WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
15988| [1026909] Microsoft Forefront Unified Access Gateway Bugs Let Remote Users Obtain Potentially Sensitive Information and Conduct Browser Redirection Attacks
15989| [1026907] Microsoft .NET Parameter Validation Flaw Lets Remote Users Execute Arbitrary Code
15990| [1026905] Microsoft BizTalk Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15991| [1026904] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15992| [1026903] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15993| [1026902] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15994| [1026901] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
15995| [1026900] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15996| [1026899] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
15997| [1026794] Microsoft DirectWrite Unicode Character Processing Flaw Lets Remote Users Deny Service
15998| [1026792] Microsoft Visual Studio Lets Local Users Gain Elevated Privileges
15999| [1026791] Microsoft Expression Design DLL Loading Error Lets Remote Users Execute Arbitrary Code
16000| [1026789] Microsoft DNS Server Lets Remote Users Deny Service
16001| [1026686] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting Attacks
16002| [1026685] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
16003| [1026684] Microsoft Visio Viewer Multiple Bugs Let Remote Users Execute Arbitrary Code
16004| [1026681] Microsoft Silverlight Bugs Let Remote Users Execute Arbitrary Code
16005| [1026680] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
16006| [1026677] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
16007| [1026499] Microsoft Anti-Cross Site Scripting Library Flaw May Permit Cross-Site Scripting Attacks
16008| [1026497] Microsoft Windows ClickOnce Feature Lets Remote Users Execute Arbitrary Code
16009| [1026479] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Commands, Access User Accounts, and Redirect Users
16010| [1026469] Microsoft ASP.NET Hash Table Collision Bug Lets Remote Users Deny Service
16011| [1026416] Microsoft Office IME (Chinese) Lets Local Users Gain Elevated Privileges
16012| [1026414] Microsoft Publisher Multiple Errors Let Remote Users Execute Arbitrary Code
16013| [1026413] Microsoft Internet Explorer DLL Loading Error Lets Remote Users Execute Arbitrary Code and HTML Processing Bugs Let Remote Users Obtain Information
16014| [1026412] Microsoft Active Directory Memory Access Error Lets Remote Authenticated Users Execute Arbitrary Code
16015| [1026411] Microsoft PowerPoint DLL Loading and OfficeArt Object Processing Flaws Let Remote Users Execute Arbitrary Code
16016| [1026410] Microsoft Office Excel File Memory Error Lets Remote Users Execute Arbitrary Code
16017| [1026409] Microsoft Office Use-After-Free Bug Lets Remote Users Execute Arbitrary Code
16018| [1026408] Microsoft Internet Explorer Error in Microsoft Time Component Lets Remote Users Execute Arbitrary Code
16019| [1026294] Microsoft Active Directory CRL Validation Flaw Lets Remote Users Bypass Authentication
16020| [1026271] Microsoft Windows TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
16021| [1026220] Microsoft Publisher 'Pubconv.dll' Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16022| [1026169] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permits Cross-Site Scripting, HTTP Response Splitting, and Denial of Service Attacks
16023| [1026168] Microsoft Host Integration Server Bugs Let Remote Users Deny Service
16024| [1026167] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
16025| [1026164] Microsoft Active Accessibility Component DLL Loading Error Lets Remote Users Execute Arbitrary Code
16026| [1026162] Microsoft .NET Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
16027| [1026161] Microsoft Silverlight Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
16028| [1026160] Microsoft Internet Explorer Multiple Flaws Let Remote Users Execute Arbitrary Code
16029| [1026103] Microsoft Windows SSL/TLS Protocol Flaw Lets Remote Users Decryption Sessions
16030| [1026041] Microsoft Windows Components DLL Loading Error Lets Remote Users Execute Arbitrary Code
16031| [1026040] Microsoft SharePoint Multiple Flaws Permit Cross-Site Scripting and Information Disclosure Attacks
16032| [1026039] Microsoft Office DLL Loading Error and Unspecified Bug Lets Remote Users Execute Arbitrary Code
16033| [1026038] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
16034| [1026037] Microsoft Windows Internet Name Service (WINS) Input Validation Flaw in ECommEndDlg() Lets Local Users Gain Elevated Privileges
16035| [1025937] Microsoft Windows DHCPv6 Processing Flaw Lets Remote Denial of Service to RPC Services
16036| [1025905] Microsoft .NET Socket Trust Validation Error Lets Remote Users Obtain Information and Redirect Certain Network Traffic
16037| [1025903] Microsoft Visual Studio Input Validation Hole Permits Cross-Site Scripting Attacks
16038| [1025902] Microsoft ASP.NET Chart Control Remote File Disclosure
16039| [1025896] Microsoft Visio Memory Corruption Errors Let Remote Users Execute Arbitrary Code
16040| [1025895] Microsoft Data Access Components Insecure Library Loading Lets Remote Users Execute Arbitrary Code
16041| [1025894] Microsoft DNS Server Flaws Let Remote Users Execute Arbitrary Code and Deny Service
16042| [1025893] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
16043| [1025847] Microsoft Internet Explorer Flaw in Processing EUC-JP Encoded Characters Lets Remote Users Conduct Cross-Site Scripting Attacks
16044| [1025763] Microsoft Visio May Load DLLs Unsafely and Remotely Execute Arbitrary Code
16045| [1025760] Microsoft Windows Bluetooth Stack Memory Access Error Lets Remote Users Execute Arbitrary Code
16046| [1025675] Microsoft Word Unspecified Flaw Lets Remote Users Execute Arbitrary Code
16047| [1025655] Microsoft MHTML Input Validation Hole Permits Cross-Site Scripting Attacks
16048| [1025654] Microsoft Internet Explorer Vector Markup Language (VML) Object Access Error Lets Remote Users Execute Arbitrary Code
16049| [1025653] Microsoft Active Directory Input Validation Flaw in Certificate Services Web Enrollment Permits Cross-Site Scripting Attacks
16050| [1025649] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
16051| [1025648] Microsoft SQL Server XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
16052| [1025647] Microsoft Visual Studio XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
16053| [1025646] Microsoft Office InfoPath XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
16054| [1025644] Microsoft Hyper-V VMBus Packet Validation Flaw Lets Local Users Deny Service
16055| [1025643] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
16056| [1025642] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
16057| [1025641] Microsoft .NET JIT Compiler Validation Flaw Lets Remote Users Execute Arbitrary Code
16058| [1025639] Microsoft Distributed File System Bugs Let Remote Users Deny Service and Execute Arbitrary Code
16059| [1025637] Microsoft Forefront Threat Management Gateway Bounds Validation Flaw in Winsock Provider Lets Remote Users Execute Arbitrary Code
16060| [1025636] Microsoft .NET Array Offset Error Lets Remote Users Execute Code
16061| [1025635] Microsoft Silverlight Array Offset Error Lets Remote Users Execute Arbitrary Code
16062| [1025634] Microsoft Windows OLE Automation Underflow Lets Remote Users Execute Arbitrary Code
16063| [1025513] Microsoft PowerPoint Memory Corruption Errors Let Remote Users Execute Arbitrary Code
16064| [1025512] Microsoft Windows Internet Name Service Socket Send Exception Handling Bug Lets Remote Users Execute Arbitrary Code
16065| [1025360] Microsoft Reader Memory Corruption Errors Let Remote Users Execute Arbitrary Code
16066| [1025359] Microsoft MHTML Stack Overflow Lets Remote Users Execute Arbitrary Code
16067| [1025347] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16068| [1025346] Microsoft Foundation Classes May Load DLLs Unsafely and Remotely Execute Arbitrary Code
16069| [1025344] Microsoft WordPad Parsing Error Lets Remote Users Execute Arbitrary Code
16070| [1025343] Microsoft Office DLL Loading and Graphic Object Processing Flaws Let Remote Users Execute Arbitrary Code
16071| [1025340] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
16072| [1025337] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
16073| [1025335] Microsoft GDI+ EMF Image Integer Overflow Lets Remote Users Execute Arbitrary Code
16074| [1025334] Microsoft OpenType Compact Font Format (CFF) Driver Stack Overflow Lets Remote Users Execute Arbitrary Code
16075| [1025333] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
16076| [1025331] Microsoft .NET Stack Corruption Error in JIT Compiler Lets Remote Users Execute Arbitrary Code
16077| [1025330] Microsoft WMITools and Windows Messenger ActiveX Controls Let Remote Users Execute Arbitrary Code
16078| [1025327] Microsoft Internet Explorer Bugs Let Remote Users Obtain Potentially Sensitive Information, Execute Arbitrary Code, and Hijack User Clicks
16079| [1025312] Microsoft Windows Kernel Bug in AFD.sys Lets Local Users Deny Service
16080| [1025248] Microsoft Windows Includes Some Invalid Comodo Certificates
16081| [1025171] Microsoft Groove DLL Loading Error Lets Remote Users Execute Arbitrary Code
16082| [1025170] Microsoft DirectShow DLL Loading Error Lets Remote Users Execute Arbitrary Code
16083| [1025164] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar
16084| [1025117] Microsoft Malware Protection Engine Registry Processing Error Lets Local Users Gain Elevated Privileges
16085| [1025086] Microsoft Active Directory Heap Overflow in Processing BROWSER ELECTION Packets May Let Remote Users Execute Arbitrary Code
16086| [1025049] Microsoft Local Security Authority Subsystem Service (LSASS) Lets Local Users Gain Elevated Privileges
16087| [1025044] Microsoft JScript and VBScript Disclose Information to Remote Users
16088| [1025043] Microsoft Visio Memory Corruption Error in Processing Visio Files Lets Remote Users Execute Arbitrary Code
16089| [1025042] Microsoft Active Directory SPN Collosions May Let Remote Authenticated Users Deny Service
16090| [1025038] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
16091| [1025003] Microsoft MHTML Input Validation Hole May Permit Cross-Site Scripting Attacks
16092| [1024947] Microsoft Data Access Components (MDAC) Memory Corruption Errors in Processing DSN Data and ADO Records Let Remote Users Execute Arbitrary Code
16093| [1024940] Microsoft Internet Explorer Use-After-Free in 'mshtml.dll' May Let Remote Users Execute Arbitrary Code
16094| [1024925] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16095| [1024922] Microsoft Internet Explorer Recursive CSS Import Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16096| [1024888] Microsoft Exchange Server RPC Processing Flaw Lets Remote Authenticated Users Deny Service
16097| [1024887] Microsoft Office Graphics Filters Let Remote Users Execute Arbitrary Code
16098| [1024886] Microsoft SharePoint Input Validation Flaw in Processing SOAP Requests Let Remote Users Execute Arbitrary Code
16099| [1024885] Microsoft Publisher Bugs Let Remote Users Execute Arbitrary Code
16100| [1024884] Microsoft Hyper-V Input Validation Flaw Lets Local Guest Operating System Users Deny Service
16101| [1024879] Microsoft Windows Internet Connection Signup Wizard May Load DLLs Unsafely and Remotely Execute Arbitrary Code
16102| [1024877] Microsoft Windows May Load DLLs Unsafely and Remotely Execute Arbitrary Code
16103| [1024874] Microsoft Windows Task Scheduler Lets Local Users Gain Elevated Privileges
16104| [1024872] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
16105| [1024790] Microsoft Outlook Attachment Processing Flaw Lets Remote Users Deny Service
16106| [1024707] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permit Cross-Site Scripting and URL Redirection Attacks
16107| [1024706] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
16108| [1024705] Microsoft Office Flaws Let Remote Users Execute Arbitrary Code
16109| [1024676] Microsoft Internet Explorer Freed Object Invalid Flag Reference Access Lets Remote Users Execute Arbitrary Code
16110| [1024630] Microsoft Internet Explorer 'window.onerror' Callback Lets Remote Users Obtain Information From Other Domains
16111| [1024559] Microsoft SharePoint Input Validation Hole in SafeHTML Permits Cross-Site Scripting Attacks
16112| [1024558] Microsoft Cluster Service Disk Permission Flaw Lets Local Users Gain Elevated Privileges
16113| [1024557] Microsoft Foundation Classes Library Buffer Overflow in Window Title Lets Remote Users Execute Arbitrary Code
16114| [1024552] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
16115| [1024551] Microsoft Office Word Processing Flaws Let Remote Users Execute Arbitrary Code
16116| [1024546] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Obtain Information, and Conduct Cross-Site Scripting Attacks
16117| [1024543] Microsoft .NET Framework JIT Compiler Memory Access Error Lets Remote Users Execute Arbitrary Code
16118| [1024459] Microsoft ASP.NET Padding Oracle Attack Lets Remote Users Decrypt Data
16119| [1024445] Microsoft Outlook Web Access Authentication Flaw Lets Remote Users Hijack User Sessions
16120| [1024443] Microsoft Local Security Authority Subsystem Service (LSASS) Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
16121| [1024442] Microsoft WordPad Parsing Error in Text Converters Lets Remote Users Execute Arbitrary Code
16122| [1024441] Microsoft Windows RPC Memory Allocation Error Lets Remote Users Execute Arbitrary Code
16123| [1024440] Microsoft Internet Information Services Bugs Let Remote Users Bypass Authentication, Deny Service, and Execute Arbitrary Code
16124| [1024439] Microsoft Outlook Heap Overflow Lets Remote Users Execute Arbitrary Code
16125| [1024438] Microsoft Office Unicode Font Parsing in USP10.DLL Lets Remote Users Execute Arbitrary Code
16126| [1024312] Microsoft Windows Tracing Feature for Services Lets Local Users Gain Elevated Privileges
16127| [1024310] Microsoft Office Excel Flaw Lets Remote Users Execute Arbitrary Code
16128| [1024306] Microsoft Silverlight Memory Corruption Errors Let Remote Users Execute Arbitrary Code
16129| [1024305] Microsoft .NET Framework Virtual Method Delegate Processing Error Lets Remote Users Execute Arbitrary Code
16130| [1024304] Microsoft Cinepak Codec Memory Pointer Error Lets Remote Users Execute Arbitary Code
16131| [1024303] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
16132| [1024302] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
16133| [1024301] Microsoft XML Core Services (MSXML) HTTP Response Processing Flaw Lets Remote Users Execute Arbitrary Code
16134| [1024298] Microsoft Office Word RTF, Word, and HTML Processing Errors Let Remote Users Execute Arbitrary Code
16135| [1024216] Microsoft Windows Shell LNK Shortcut Processing Flaw Lets Users Execute Arbitrary Code
16136| [1024189] Microsoft Office Outlook Validation Error in Processing Attachments Lets Remote Users Execute Arbitrary Code
16137| [1024188] Microsoft Office Access ActiveX Controls Let Remote Users Execute Arbitrary Code
16138| [1024084] Microsoft Help and Support Center URL Escaping Flaw Lets Remote Users Execute Arbitrary Commands
16139| [1024080] Microsoft .NET XML Digital Signature Flaw May Let Remote Users Bypass Authentication
16140| [1024079] Microsoft Internet Information Services Memory Allocation Error Lets Remote Authenticated Users Execute Arbitrary Code
16141| [1024078] Microsoft SharePoint Input Validation Flaw in toStaticHTML API Permits Cross-Site Scripting Attacks
16142| [1024077] Microsoft SharePoint Help Page Processing Bug Lets Remote Users Deny Service
16143| [1024076] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
16144| [1024075] Microsoft Office Open XML File Format Converter for Mac Lets Local Users Gain Elevated Privileges
16145| [1024073] Microsoft Office COM Object Instantiation Error Lets Remote Users Execute Arbitrary Code
16146| [1024070] Microsoft Internet Explorer 8 Developer Tools ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16147| [1024068] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
16148| [1023975] Microsoft Office Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
16149| [1023974] Microsoft Visual Basic for Applications Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
16150| [1023972] Microsoft Outlook Express Integer Overflow in Processing POP3/IMAP Responses Lets Remote Users Execute Arbitrary Code
16151| [1023938] Microsoft Office Visio Buffer Overflow in Processing DXF Files Lets Remote Users Execute Arbitrary Code
16152| [1023932] Microsoft Office SharePoint Input Validation Flaw in 'help.aspx' Permits Cross-Site Scripting Attacks
16153| [1023856] Microsoft Visio Index Calculation and Attribute Validation Flaws Let Remote Users Execute Code
16154| [1023855] Microsoft Exchange May Disclose Message Fragments to Remote Users
16155| [1023854] Microsoft Exchange Error in Parsing MX Records Lets Remote Users Deny Service
16156| [1023853] Microsoft Office Publisher TextBox Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code
16157| [1023848] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
16158| [1023773] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
16159| [1023720] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges
16160| [1023699] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
16161| [1023698] Microsoft Office Excel Bugs Let Remote Users Execute Arbitrary Code
16162| [1023571] Microsoft Windows Protocol Flaw in SSL Renegotiation Lets Remote Users Conduct Man-in-the-Middle Attacks
16163| [1023567] Microsoft Hyper-V Instruction Validation Bug Lets Local Users Deny Service
16164| [1023566] Microsoft Windows Kerberos Ticket-Granting-Ticket Processing Flaw Lets Remote Authenticated Users Deny Service
16165| [1023565] Microsoft Office Buffer Overflow in 'MSO.DLL' Lets Remote Users Execute Arbitrary Code
16166| [1023564] Microsoft Paint Integer Overflow Lets Remote Users Execute Arbitrary Code
16167| [1023563] Microsoft PowerPoint Buffer Overflows and Memory Errors Let Remote Users Execute Arbitrary Code
16168| [1023562] Microsoft DirectShow Heap Overflow Lets Remote Users Execute Arbitrary Code
16169| [1023560] Microsoft Internet Explorer Flaw in Microsoft Data Analyzer ActiveX Control Lets Remote Users Execute Arbitrary Code
16170| [1023542] Microsoft Internet Explorer Discloses Known Files to Remote Users
16171| [1023495] Microsoft Internet Explorer and Windows OS Shell Handler URL Validation Flaw Lets Remote Users Execute Arbitrary Code
16172| [1023494] Microsoft Internet Explorer Cross-Site Scripting Filter Can Be Bypassed
16173| [1023493] Microsoft Internet Explorer Multiple Memory Access Flaws Let Remote Users Execute Arbitrary Code
16174| [1023462] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
16175| [1023432] Microsoft Embedded OpenType Font Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
16176| [1023301] Microsoft Internet Explorer Indeo Codec Bugs Let Remote Users Execute Arbitrary Code
16177| [1023297] Microsoft Local Security Authority Subsystem Service Validation Flaw Lets Remote Users Deny Service
16178| [1023296] Microsoft Active Directory Federation Services Lets Remote Authenticated Users Execute Arbitrary Code and Spoof Web Sites
16179| [1023294] Microsoft Office Word and WordPad Text Converter Memory Errors Let Remote Users Execute Arbitrary Code
16180| [1023293] Microsoft Internet Explorer Memory Access Flaws Let Remote Users Execute Arbitrary Code
16181| [1023292] Microsoft Office Publisher Memory Allocation Validation Flaw Lets Remote Users Execute Arbitrary Code
16182| [1023291] Microsoft Internet Authentication Service Bugs Let Remote Authenticated Users Execute Arbitrary Code or Gain Privileges of the Target User
16183| [1023233] Microsoft Internet Explorer Discloses Local Path Names When Printing Local HTML Files to PDF Files
16184| [1023226] Microsoft Internet Explorer Invalid Pointer Reference in getElementsByTagName() Method Lets Remote Users Execute Arbitrary Code
16185| [1023158] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16186| [1023157] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
16187| [1023156] Microsoft Active Directory Stack Memory Consumption Flaw Lets Remote Users Deny Service
16188| [1023154] Microsoft License Logging Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
16189| [1023153] Microsoft Web Services on Devices API (WSDAPI) Validation Error Lets Remote Users Execute Arbitrary Code
16190| [1023013] Microsoft Crypto API NULL Character Flaw in Common Name Field and ASN.1 Integer Overflow Lets Remote Users Spoof Certficiates
16191| [1023011] Microsoft Indexing Service ActiveX Control Lets Remote Users Execute Arbitrary Code
16192| [1023010] Microsoft Local Security Authority Subsystem Service (LSASS) Integer Underflow Lets Local Users Deny Service
16193| [1023009] Microsoft Silverlight Memory Modification Flaw Lets Remote Users Execute Arbitrary Code
16194| [1023008] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
16195| [1023006] Microsoft GDI+ Overflows Let Remote Users Execute Arbitrary Code
16196| [1023002] Microsoft Internet Explorer Flaws Let Remote Users Execute Arbitrary Code
16197| [1022846] Microsoft Wireless LAN AutoConfig Service Heap Overflow Lets Remote Wireless Users Execute Arbitrary Code
16198| [1022843] Microsoft DHTML Editing Component ActiveX Control Lets Remote Users Execute Arbitrary Code
16199| [1022842] Microsoft JScript Scripting Engine Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16200| [1022716] Microsoft Telnet NTLM Credential Reflection Flaw Lets Remote Users Gain Access
16201| [1022715] Microsoft ASP.NET Request Scheduling Flaw Lets Remote Users Deny Service
16202| [1022712] Microsoft Active Template Library (ATL) Bugs Let Remote Users Execute Arbitrary Code
16203| [1022710] Microsoft Windows Internet Name Service (WINS) Buffer Overflows Let Remote Users Execute Arbitrary Code
16204| [1022708] Microsoft Office Web Components Buffer Overflows in ActiveX Control Let Remote Users Execute Arbitrary Code
16205| [1022611] Microsoft Internet Explorer Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
16206| [1022610] Microsoft Visual Studio Active Template Library Bugs Let Remote Users Execute Arbitrary Code
16207| [1022547] Microsoft Internet Security and Acceleration Server OTP Authentication Bug Lets Remote Users Access Resources
16208| [1022546] Microsoft Office Publisher Pointer Dereference Bug Lets Remote Users Execute Arbitrary Code
16209| [1022545] Microsoft DirectX DirectShow Validation Bugs Let Remote Users Execute Arbitrary Code
16210| [1022544] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges Within a Guest Operating System
16211| [1022535] Microsoft Office Web Components Bug in Spreadsheet ActiveX Control Lets Remote Users Execute Arbitrary Code
16212| [1022514] Microsoft DirectShow Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
16213| [1022369] Microsoft PowerPoint Buffer Overflow in Freelance Translator Lets Remote Users Execute Arbitrary Code
16214| [1022358] Microsoft Internet Information Services WebDAV Bug Lets Remote Users Bypass Authentication
16215| [1022356] Microsoft Word Buffer Overflows Let Remote USers Execute Arbitrary Code
16216| [1022355] Microsoft Office Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
16217| [1022354] Microsoft Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
16218| [1022351] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
16219| [1022350] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
16220| [1022349] Microsoft Active Directory Bugs Let Remote Users Execute Arbitrary Code or Deny Service
16221| [1022330] Microsoft Windows Bug in SETDESKWALLPAPER and GETDESKWALLPAPER Calls Let Local Users Deny Service
16222| [1022299] Microsoft DirectX Bug in DirectShow QuickTime Parser Lets Remote Users Execute Arbitrary Code
16223| [1022240] Microsoft Internet Information Server WebDAV Input Validation Flaw Lets Remote Users Execute Arbitrary Code
16224| [1022205] Microsoft PowerPoint Has Multiple Buffer Overflows and Memory Corruption Bugs That Let Remote Users Execute Arbitrary Code
16225| [1022047] Microsoft Windows SearchPath Function May Let Remote Users Execute Arbitrary Code
16226| [1022046] Microsoft ISA Server Input Validation Flaw in 'cookieauth.dll' Permits Cross-Site Scripting Attacks
16227| [1022045] Microsoft ISA Server TCP State Error Lets Remote Users Deny Service
16228| [1022044] Microsoft Windows Privilege Separation and Access Control Bugs Let Local Users Gain Elevated Privileges
16229| [1022043] Microsoft WordPad and Office Text Converter Bugs Let Remote Users Execute Arbitrary Code
16230| [1022042] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
16231| [1022040] Microsoft DirectX Bug in Decompressing DirectShow MJPEG Content Lets Remote Users Execute Arbitrary Code
16232| [1022039] Microsoft Excel Malformed Object Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
16233| [1021967] Microsoft Office PowerPoint Invalid Object Access Bug Lets Remote Users Execute Arbitrary Code
16234| [1021880] Microsoft Internet Explorer Unspecified Bug Lets Remote Users Execute Arbitrary Code
16235| [1021831] Microsoft DNS Server Bugs Let Remote Users Spoof the DNS Service
16236| [1021830] Microsoft DNS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
16237| [1021829] Microsoft WINS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
16238| [1021744] Microsoft Excel Invalid Object Access Flaw Lets Remote Users Execute Arbitrary Code
16239| [1021702] Microsoft Visio Bugs Let Remote Users Execute Arbitrary Code
16240| [1021701] Microsoft Exchange MAPI Command Literal Processing Bug Lets Remote Users Deny Service
16241| [1021700] Microsoft Exchange Memory Corruption Error in Decoding TNEF Data Lets Remote Users Execute Arbitrary Code
16242| [1021699] Microsoft Internet Explorer Bugs in Handling CSS Sheets and Deleted Objects Lets Remote Users Execute Arbitrary Code
16243| [1021629] Microsoft Windows Guidelines for Disabling AutoRun are Ineffective and May Permit Code Execution
16244| [1021490] Microsoft SQL Server Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
16245| [1021381] Microsoft Internet Explorer DHTML Data Binding Invalid Pointer Reference Bug Lets Remote Users Execute Arbitrary Code
16246| [1021376] Microsoft WordPad Word 97 Text Converter Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16247| [1021371] Microsoft Internet Explorer HTML Processing Bugs Let Remote Users Execute Arbitrary Code
16248| [1021370] Microsoft Word Memory Corruption Errors Let Remote Users Execute Arbitrary Code
16249| [1021369] Microsoft Visual Basic DataGrid/FlexGrid/Heirarchival FlexGrid/Windows Common/Charts ActiveX Controls Let Remote Users Execute Arbitrary Code
16250| [1021368] Microsoft Excel Formula, Object, and Global Array Bugs Let Remote Users Execute Arbitrary Code
16251| [1021367] Microsoft Office SharePoint Server Access Control Flaw Lets Remote Users Gain Administrative Access
16252| [1021365] Microsoft GDI Buffer Overflows in Processing WMF Files Lets Remote Users Execute Arbitrary Code
16253| [1021363] Microsoft SQL Server Memory Overwrite Bug in sp_replwritetovarbin May Let Remote Users Execute Arbitrary Code
16254| [1021294] Microsoft Office Communicator VoIP Processing Bugs Let Remote Users Deny Service
16255| [1021164] Microsoft XML Core Services (MSXML) Bugs Let Remote Users Obtain Information and Execute Arbitrary Code
16256| [1021053] Microsoft Ancillary Function Driver 'afd.sys' Lets Local Users Gain Elevated Privileges
16257| [1021052] Microsoft Message Queuing (MSMQ) Heap Overflow Lets Remote Users Execute Arbitrary Code
16258| [1021047] Microsoft Internet Explorer Flaws Permit Cross-Domain Scripting Attacks and Let Remote Users Execute Arbitrary Code
16259| [1021045] Microsoft Office CDO Protocol Bug Lets Remote Users Execute Arbitrary Scripting Code
16260| [1021044] Microsoft Excel Object, Calendar, and Formula Bugs Let Remote Users Execute Arbitrary Code
16261| [1021043] Microsoft Host Integration Server RPC Buffer Overflow Lets Remote Users Execute Arbitrary Code
16262| [1021042] Microsoft Active Directory LDAP Memory Allocation Error Lets Remote Users Execute Arbitrary Code
16263| [1021020] Cisco Unity Bug in Microsoft API Lets Remote Users Deny Service
16264| [1021018] Microsoft Digital Image 'PipPPush.DLL' ActiveX Control Lets Remote Users Access Files
16265| [1020838] Microsoft GDI+ Integer Overflow in Processing BMP Files Lets Remote Users Execute Arbitrary Code
16266| [1020837] Microsoft GDI+ Buffer Overflow in Processing WMF Files Lets Remote Users Execute Arbitrary Code
16267| [1020836] Microsoft GDI+ Bug in Processing GIF Image Files Lets Remote Users Execute Arbitrary Code
16268| [1020835] Microsoft GDI+ Memory Corruption Error in Processing EMF Image Files Lets Remote Users Execute Arbitrary Code
16269| [1020834] Microsoft GDI+ Heap Overflow in Processing Gradient Sizes Lets Remote Users Execute Arbitrary Code
16270| [1020833] Microsoft Office OneNote Buffer Overflow Lets Remote Users Execute Arbitrary Code
16271| [1020679] Microsoft Outlook Express MTHML Redirect Bug Lets Remote Users Obtain Information
16272| [1020678] Microsoft Windows IPSec Policy May Not Be Enforced in Certain Cases
16273| [1020677] Microsoft Windows Event System Bugs Let Remote Authenticated Users Execute Arbitrary Code
16274| [1020676] Microsoft PowerPoint Memory Errors Let Remote Users Execute Arbitrary Code
16275| [1020675] Microsoft Color Management Module Heap Overflow Lets Remote Users Execute Arbitrary Code
16276| [1020674] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code
16277| [1020673] Microsoft Office Format Filter Bugs Let Remote Users Execute Arbitrary Code
16278| [1020672] Microsoft Excel Input Validation Bug in Parsing Records Lets Remote Users Execute Arbitrary Code
16279| [1020671] Microsoft Excel Input Validation Bug in Processing Array Index Values Lets Remote Users Execute Arbitrary Code
16280| [1020670] Microsoft Excel Input Validation Bug in Processing Index Values Lets Remote Users Execute Arbitrary Code
16281| [1020669] Microsoft Excel Credential Caching Bug Lets Local Users Gain Access to Remote Data Sources
16282| [1020607] Mac OS X Quick Look Buffer Overflow in Downloading Microsoft Office Files Lets Remote Users Execute Arbitrary Code
16283| [1020447] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16284| [1020446] Microsoft Windows AutoRun Bug May Let Users Execute Arbitrary Code
16285| [1020441] Microsoft SQL Server Bugs Let Remote Authenticated Users Obtain Information and Execute Arbitrary Code
16286| [1020439] Microsoft Outlook Web Access for Exchange Server Input Validation Bugs Permit Cross-Site Scripting Attacks
16287| [1020433] Microsoft Access Snapshot Viewer ActiveX Control Lets Remote Users Download Files to Arbitrary Locations
16288| [1020382] Microsoft Internet Explorer Lets Remote Users Conduct Cross-Domain Scripting Attacks
16289| [1020232] Microsoft Speech API Lets Remote Users Execute Arbitrary Commands
16290| [1020229] Microsoft Active Directory LDAP Validation Bug Lets Remote Users Deny Service
16291| [1020228] Microsoft WINS Data Structure Validation Bug Lets Local Users Gain Elevated Privileges
16292| [1020226] Microsoft Internet Explorer HTTP Request Header Bug May Let Remote Users Obtain Information in a Different Domain
16293| [1020225] Microsoft Internet Explorer Bug in Processing Method Calls Lets Remote Users Execute Arbitrary Code
16294| [1020223] Microsoft DirectX SAMI File Validation Bug Lets Remote Users Execute Arbitrary Code
16295| [1020222] Microsoft DirectX MJPEG Stream Error Handling Bug Lets Remote Users Execute Arbitrary Code
16296| [1020016] Microsoft Malware Protection Engine Lets Remote Users Deny Service
16297| [1020015] Microsoft Publisher Bug in Processing Object Header Data Lets Remote Users Execute Arbitrary Code
16298| [1020014] Microsoft Word Memory Error in Processing CSS Values Lets Remote Users Execute Arbitrary Code
16299| [1020013] Microsoft Word Memory Error in Processing RTF Files Lets Remote Users Execute Arbitrary Code
16300| [1020006] Microsoft Windows XP 'i2omgmt.sys' Input Validation Flaw Lets Local Users Gain Elevated Privileges
16301| [1019804] Microsoft Visio Lets Remote Users Execute Arbitrary Code
16302| [1019801] Microsoft Internet Explorer Data Stream Processing Bug Lets Remote Users Execute Arbitrary Code
16303| [1019800] Microsoft Internet Explorer 'hxvz.dll' ActiveX Control Lets Remote Users Execute Arbitrary Code
16304| [1019798] Microsoft GDI Buffer Overflow in Processing EMF and WMF Files Lets Remote Users Execute Arbitrary Code
16305| [1019797] Microsoft Project Memory Error Lets Remote Users Execute Arbitrary Code
16306| [1019738] Microsoft Office S/MIME Processing Lets Remote Users Access Arbitrary URLs
16307| [1019736] Microsoft Outlook S/MIME Processing Lets Remote Users Access Arbitrary URLs
16308| [1019686] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code via Word Documents
16309| [1019587] Microsoft Excel Input Validation Bug in Processing Conditional Formatting Values Lets Remote Users Execute Arbitrary Code
16310| [1019586] Microsoft Excel Input Validation Bug in Processing Rich Text Data Lets Remote Users Execute Arbitrary Code
16311| [1019585] Microsoft Excel Formula Parsing Error Lets Remote Users Execute Arbitrary Code
16312| [1019584] Microsoft Excel Input Validation Bug in Processing Style Record Data Lets Remote Users Execute Arbitrary Code
16313| [1019583] Microsoft Excel Flaw in Importing '.slk' Files Lets Remote Users Execute Arbitrary Code
16314| [1019582] Microsoft Excel Input Validation Bug in Processing Data Validation Records Lets Remote Users Execute Arbitrary Code
16315| [1019581] Microsoft Office Web Components DataSource Bug Lets Remote Users Execute Arbitrary Code
16316| [1019580] Microsoft Office Web Components URL Parsing Bug Lets Remote Users Execute Arbitrary Code
16317| [1019579] Microsoft Outlook 'mailto:' URL Validation Flaw Lets Remote Users Execute Arbitrary Code
16318| [1019578] Microsoft Office and Excel Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
16319| [1019388] Microsoft Works/Microsoft Office Bug in Processing '.wps' Field Length Values Lets Remote Users Execute Arbitrary Code
16320| [1019387] Microsoft Works/Microsoft Office Bug in Processing '.wps' Header Index Table Lets Remote Users Execute Arbitrary Code
16321| [1019386] Microsoft Works/Microsoft Office Bug in Processing '.wps' File Section Length Headers Lets Remote Users Execute Arbitrary Code
16322| [1019385] Microsoft Internet Information Services Error in Processing ASP Page Input Lets Remote Users Execute Arbitrary Code
16323| [1019384] Microsoft Internet Information Services File Change Notification Bug Lets Local Users Gain Elevated Privileges
16324| [1019381] Microsoft Internet Explorer Argument Validation Flaw in 'dxtmsft.dll' Lets Remote Users Execute Arbitrary Code
16325| [1019380] Microsoft Internet Explorer Property Method Processing Bug Lets Remote Users Execute Arbitrary Code
16326| [1019379] Microsoft Internet Explorer HTML Layout Rendering Bug Lets Remote Users Execute Arbitrary Code
16327| [1019378] Microsoft Internet Explorer Buffer Overflow in Fox Pro ActiveX Control Lets Remote Users Execute Arbitrary Code
16328| [1019377] Microsoft Office Publisher Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
16329| [1019376] Microsoft Office Publisher Invalid Memory Reference Bug Lets Remote Users Execute Arbitrary Code
16330| [1019375] Microsoft Office Object Processing Flaw Lets Remote Users Execute Arbitrary Code
16331| [1019374] Microsoft Word Memory Error Lets Remote Users Execute Arbitrary Code
16332| [1019258] Microsoft Visual Basic '.dsr' File Buffer Overflow Lets Remote Users Execute Arbitrary Code
16333| [1019200] Microsoft Excel File Header Bug Lets Remote Users Execute Arbitrary Code
16334| [1019165] Microsoft Windows LSASS Lets Local Users Gain Elevated Privileges
16335| [1019078] Microsoft Internet Explorer Object Access Bugs Let Remote Users Execute Arbitrary Code
16336| [1019077] Microsoft Message Queuing (MSMQ) Buffer Overflow Lets Remote Users Execute Arbitrary Code
16337| [1019073] Microsoft DirectX Bugs in Parsing SAMI, WAV, and AVI Files Let Remote Users Execute Arbitrary Code
16338| [1019033] Microsoft Web Proxy Auto-Discovery Name Server Resolution Bug Lets Remote Users Conduct Man-in-the-Middle Attacks
16339| [1018976] Microsoft Jet Engine Stack Overflow May Let Remote Users Execute Arbitrary Code
16340| [1018942] Microsoft Windows DNS Service Insufficent Entropy Lets Remote Users Spoof the DNS Service
16341| [1018903] Microsoft DebugView 'Dbgv.sys' Module Lets Local Users Gain Kernel Level Privileges
16342| [1018831] Microsoft Windows ShellExecute() URI Handler Bug Lets Remote Users Execute Arbitrary Commands
16343| [1018790] Microsoft Word Bug in Processing Office Files Lets Remote Users Execute Arbitrary Code
16344| [1018789] Microsoft SharePoint Input Validation Hole Permits Cross-Site Scripting Attacks
16345| [1018788] Microsoft Internet Explorer Bugs Let Remote Users Spoof the Address Bar and Execute Arbitrary Code
16346| [1018786] Microsoft Outlook Express Bug in Processing NNTP Responses Lets Remote Users Execute Arbitrary Code
16347| [1018727] Microsoft Internet Security and Acceleration Server SOCKS4 Proxy Discloses IP Address Information to Remote Users
16348| [1018677] Microsoft Agent ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16349| [1018676] Microsoft Visual Basic VBP File Buffer Overflow Lets Remote Users Execute Arbitrary Code
16350| [1018568] Microsoft Vector Markup Language Buffer Overflow Lets Remote Users Execute Arbitrary Code
16351| [1018567] Microsoft Virtual PC/Server Heap Overflow Lets Local Users Gain Elevated Privileges
16352| [1018563] Microsoft GDI Buffer Overflow Lets Remote Users Execute Arbitrary Code
16353| [1018562] Microsoft Internet Explorer CSS and ActiveX Control Bugs Let Remote Users Execute Arbitrary Code
16354| [1018561] Microsoft Excel Workspace Index Validation Bug Lets Remote Users Execute Arbitrary Code
16355| [1018560] Microsoft OLE Automation Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
16356| [1018559] Microsoft Core XML Services Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16357| [1018551] Microsoft DirectX Buffer Overflow in FlashPix ActiveX Control Lets Remote Users Execute Arbitrary Code
16358| [1018520] Microsoft Visual Database Tools Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
16359| [1018420] Microsoft DirectX Heap Overflow in Processing RLE-Compressed Targa Images Lets Remote Users Execute Arbitrary Code
16360| [1018353] Microsoft Office Publisher Lets Remote Users Execute Arbitrary Code
16361| [1018352] Microsoft Excel Caculation Error and Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16362| [1018351] Microsoft Internet Explorer Bug in Firefox URL Protocol Handler Lets Remote Users Execute Arbitrary Commands
16363| [1018321] Microsoft Excel Sheet Name Buffer Overflow Lets Remote Users Execute Arbitrary Code
16364| [1018251] Microsoft Office Buffer Overflow in MSODataSourceControl ActiveX Control May Let Remote Users Execute Arbitrary Code
16365| [1018235] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
16366| [1018202] Microsoft GDI+ ICO File Divide By Zero Bug Lets Remote Users Deny Service
16367| [1018193] Microsoft Internet Explorer Lets Remote Users Spoof Certain Objects
16368| [1018192] Microsoft Internet Explorer Input Validation Hole Permits Cross-Site Scripting Attacks
16369| [1018107] Microsoft Office Buffer Overflow in OUACTRL.OCX ActiveX Control Lets Remote Users Execute Arbitrary Code
16370| [1018019] Microsoft Internet Explorer Bugs Let Remote Users Modify Files or Execute Arbitrary Code
16371| [1018017] Microsoft CAPICOM 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
16372| [1018016] Microsoft BizTalk Server 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
16373| [1018015] Microsoft Exchange Base64, iCal, IMAP, and Attachment Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code
16374| [1018014] Microsoft Office Drawing Object Validation Flaw Lets Remote Users Execute Arbitrary Code
16375| [1018013] Microsoft Word Array and RTF Processing Bugs Let Remote Users Execute Arbitrary Code
16376| [1018012] Microsoft Excel Specially Crafted BIFF Records, Set Font Values, and Filter Records Permit Remote Code Execution
16377| [1017969] Microsoft Internet Explorer Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
16378| [1017910] Microsoft Windows DNS Service RPC Stack Overflow Lets Remote Users Execute Arbitrary Code
16379| [1017902] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
16380| [1017901] Microsoft Windows Help File Heap Overflow Lets Remote Users Execute Arbitrary Code
16381| [1017896] Microsoft Agent URL Parsing Bug Lets Remote Users Execute Arbitrary Code
16382| [1017894] Microsoft Content Management Server Permits Cross-Site Scripting Attacks and Lets Remote Users Execute Arbitrary Code
16383| [1017827] Microsoft Windows Animated Cursor Bug Lets Remote Users Execute Arbitrary Code
16384| [1017752] Adobe JRun IIS Connector Bug Lets Remote Users Deny Service
16385| [1017736] Microsoft Windows Explorer OLE Parsing Bug Lets Users Deny Service
16386| [1017694] VeriSign Secure Messaging for Microsoft Exchange Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code
16387| [1017653] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
16388| [1017643] Microsoft Internet Explorer Multiple COM Objects Let Remote Users Execute Arbitrary Code
16389| [1017642] Microsoft Internet Explorer FTP Server Response Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16390| [1017641] Microsoft Windows RichEdit OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16391| [1017640] Microsoft Office OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16392| [1017639] Microsoft Word Macro Security Warning Bug and Drawing Object Memory Corrupution Error Lets Remote Users Execute Arbitrary Code
16393| [1017638] Microsoft MFC Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16394| [1017637] Microsoft OLE Dialog RTF File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16395| [1017636] Microsoft Windows Defender Integer Overflow in Parsing PDF Files Lets Remote Users Execute Arbitrary Code
16396| [1017635] Microsoft HTML Help ActiveX Control Lets Remote Users Execute Arbitrary Code
16397| [1017632] Microsoft Step-by-Step Interactive Training Buffer Overflow in Processing Bookmark Links Lets Remote Users Execute Arbitrary Code
16398| [1017584] Microsoft Office Excel Buffer Overflow Lets Remote Users Execute Arbitrary Code
16399| [1017579] [Duplicate Entry] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
16400| [1017564] Microsoft Word Function Processing Bug Lets Remote Users Execute Arbitrary Code
16401| [1017530] Microsoft Help Workshop Buffer Overflow in Processing '.CNT' Files Lets Remote Users Execute Arbitrary Code
16402| [1017488] Microsoft Outlook '.iCal', '.oss', and SMTP Header Bugs Let Remote Users Execute Arbitrary Code or Deny Service
16403| [1017487] Microsoft Excel Buffer Overflows in Processing Various Records and Strings Lets Remote Users Execute Arbitrary Code
16404| [1017486] Microsoft Office Brazilian Portuguese Grammar Checker Lets Remote Users Execute Arbitrary Code
16405| [1017485] Microsoft Excel Memory Access Error Lets Remote Users Execute Arbitrary Code
16406| [1017441] Microsoft Windows Workstation Service Memory Allocation Error in NetrWkstaUserEnum() Lets Remote Users Deny Service
16407| [1017397] Microsoft Outlook Recipient ActiveX Control Lets Remote Users Deny Service
16408| [1017390] Microsoft Word Unchecked Count Vulnerability Lets Remote Users Execute Arbitrary Code
16409| [1017388] Microsoft Project Discloses Database Password to Remote Authenticated Users
16410| [1017374] Microsoft Internet Explorer May Disclose Contents of the Temporary Internet Files Folder to Remote Users
16411| [1017373] Microsoft Internet Explorer DHTML and Script Error Handling Bugs Let Remote Users Execute Arbitrary Code
16412| [1017369] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Book Files Let Remote Users Execute Arbitrary Code
16413| [1017358] Microsoft Word Data Structure Processing Bug Lets Remote Users Cause Arbitrary Code to Be Executed
16414| [1017339] Microsoft Word String Processing Bug Lets Remote Users Execute Arbitrary Code
16415| [1017224] Microsoft Client Service for Netware Buffer Overflows Let Remote Users Execute Arbitrary Code and Crash the System
16416| [1017223] Microsoft Internet Explorer Bug in Rending HTML Layout Combinations May Let Remote Users Execute Arbitrary Code
16417| [1017222] Microsoft Agent '.ACF' File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
16418| [1017168] Microsoft Windows Kernel GDI Data Structure Processing Bug Lets Local Users Gain Elevated Privileges
16419| [1017165] Microsoft Internet Explorer 'ieframe.dll' Lets Remote Users Spoof Invalid Certificates
16420| [1017157] Microsoft XML Core Services ActiveX Control Lets Remote Users Execute Arbitrary Code
16421| [1017142] Microsoft Visual Studio WMI Object Broker ActiveX Control Lets Remote Users Execute Arbitrary Code
16422| [1017133] Microsoft NAT Helper 'ipnathlp.dll' Lets Remote Users Deny Service
16423| [1017127] Microsoft Data Access Components 'ADODB.Connection' Execute Function Lets Remote Users Execute Arbitrary Code
16424| [1017122] Microsoft Internet Explorer Lets Remote Users Partially Spoof Address Bar URLs
16425| [1017059] Microsoft PowerPoint Bug Causes PowerPoint to Crash
16426| [1017034] Microsoft Office String, Chart Record, and SmartTag Validation Errors Let Remote Users Execute Arbitrary Code
16427| [1017033] Microsoft XML Core Services Lets Remote Users Execute Arbitrary Code or Obtain Information
16428| [1017032] Microsoft Word String and Mail Merge Record Validation Flaws Let Remote Users Execute Arbitrary Code
16429| [1017031] Microsoft Excel DATETIME/COLINFO Record Errors and Lotus 1-2-3 Errors Let Remote Users Execute Arbitrary Code
16430| [1017030] Microsoft PowerPoint Errors in Parsing Object Pointers and Data Records Lets Remote Users Execute Arbitrary Code
16431| [1016941] Microsoft Windows Shell Integer Overflow Lets Remote Users Execute Arbitrary Code
16432| [1016937] Microsoft PowerPoint Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
16433| [1016886] [Duplicate] Microsoft PowerPoint Bug Lets Remote Users Execute Arbitrary Code
16434| [1016879] Microsoft Internet Explorer VML Buffer Overflow Lets Remote Users Execute Arbitrary Code
16435| [1016854] Microsoft Internet Explorer Buffer Overflow in 'daxctle.ocx' ActiveX in KeyFrame Method Control Lets Remote Users Execute Arbitrary Code
16436| [1016839] Microsoft Internet Explorer URLMON.DLL Buffer Overflow Lets Remote Users Execute Arbitrary Code
16437| [1016827] Microsoft PGM Implementation Buffer Overflow in MSMQ Service Lets Remote Users Execute Arbitrary Code
16438| [1016825] Microsoft Publisher Buffer Overflow in Parsing '.pub' Files Lets Remote Users Execute Arbitrary Code
16439| [1016787] Microsoft Word Record Validation Vulnerability Lets Remote Users Execute Arbitrary Code
16440| [1016764] Microsoft Internet Explorer (IE) Buffer Overflow in 'daxctle.ocx' ActiveX Control Lets Remote Users Execute Arbitrary Code
16441| [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
16442| [1016720] [Duplicate Entry] Microsoft PowerPoint Unknown Bug May Let Remote Users Execute Arbitrary Code
16443| [1016663] Microsoft Internet Explorer Bugs Let Remote Users Obtain Information or Execute Arbitrary Code
16444| [1016657] Microsoft Office Buffer Overflow in Processing PowerPoint Records Lets Remote Users Execute Arbitrary Code
16445| [1016656] Microsoft Visual Basic for Applications Buffer Overflow Lets Remote Users Execute Arbitrary Code
16446| [1016655] Microsoft Management Console Input Validation Hole Permits Remote Code Execution
16447| [1016654] Microsoft Outlook Express MHTML Parsing Error Lets Remote Users Execute Arbitrary Code
16448| [1016506] Microsoft Internet Security and Acceleration Server HTTP File Exentsion Filter Can Be Bypassed By Remote Users
16449| [1016504] Microsoft Works Buffer Overflow in Processing Spreadsheet Files May Let Remote Users Execute Arbitrary Code
16450| [1016496] Microsoft PowerPoint 'mso.dll' Buffer Overflow May Let Remote Users Execute Arbitrary Code
16451| [1016472] Microsoft Excel Errors in Processing Various Malformed Records Let Remote Users Execute Arbitrary Code
16452| [1016470] Microsoft Office PNG and GIF File Buffer Error Lets Remote Users Execute Arbitrary Code
16453| [1016469] Microsoft Office String Parsing and Property Bugs Let Remote Users Execute Arbitrary Code
16454| [1016468] Microsoft DHCP Client Buffer Overflow Lets Remote Users Execute Arbitrary Code
16455| [1016453] Microsoft Office LsCreateLine() Function May Let Remote Users Execute Arbitrary Code
16456| [1016434] Microsoft HTML Help Heap Overflow in HHCtrl ActiveX Control May Let Remote Users Execute Arbitrary Code
16457| [1016430] Microsoft Excel STYLE Record Bug May Let Remote Users Execute Arbitrary Code
16458| [1016388] Microsoft Windows Explorer Lets Remote Users Access Information in Other Domains and Execute HTA Applications
16459| [1016344] Microsoft Excel 'Shockwave Flash Object' Lets Remote Users Execute Code Automatically
16460| [1016339] Microsoft Windows 'hlink.dll' Buffer Overflow in Processing Hyperlinks Lets Remote Users Execute Arbitrary Code
16461| [1016316] Microsoft Excel Memory Validation Flaw May Let Remote Users Cause Arbitrary Code to Be Executed
16462| [1016292] Microsoft Windows Buffer Overflow in AOL ART Image Rendering Library Lets Remote Users Execute Arbitrary Code
16463| [1016291] Microsoft Internet Explorer Multiple Memory and Access Control Errors Let Remote Users Execute Arbitrary Code
16464| [1016290] Microsoft Windows Buffer Overflow in TCP/IP Stack Lets Remote Users Execute Arbitrary Code
16465| [1016289] Microsoft RPC Mutual Authentication Bug Lets Remote Users Spoof Other Systems
16466| [1016287] Microsoft PowerPoint Buffer Overflow in Processing Malformed Records Lets Remote Users Execute Arbitrary Code
16467| [1016286] Microsoft Windows 98 Graphics Rendering Engine Buffer Overflow in Processing WMF Images Lets Remote Users Execute Arbitrary Code
16468| [1016283] Microsoft JScript Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
16469| [1016280] Microsoft Outlook Web Access Input Validation Hole Permits Cross-Site Scripting Attacks
16470| [1016196] F-Secure Anti-Virus for Microsoft Exchange Buffer Overflow in Web Console May Let Remote Users Execute Arbitrary Code
16471| [1016130] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
16472| [1016048] Microsoft Exchange Error in Processing iCAL/vCAL Properties Lets Remote Users Execute Arbitrary Code
16473| [1016047] Microsoft Distributed Transaction Coordinator Bugs Let Remote Users Deny Service
16474| [1016005] Microsoft Outlook Express 'mhtml:' Redirect URL Processing Lets Remote Users Bypass Security Domains
16475| [1016001] Microsoft Internet Explorer Bug in Processing Nested OBJECT Tags Lets Remote Users Execute Arbitrary Code
16476| [1015900] Microsoft Internet Explorer Parsing and State Errors Let Remote Users Execute Arbitrary Code
16477| [1015899] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar URL
16478| [1015898] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Books Lets Remote Users Execute Arbitrary Code
16479| [1015897] Microsoft Windows Explorer COM Object Bug Lets Remote Users Execute Arbitrary Code
16480| [1015896] Microsoft FrontPage Server Extensions Input Validation Holes Permit Cross-Site Scripting Attacks
16481| [1015895] Microsoft SharePoint Team Services Input Validation Holes Permit Cross-Site Scripting Attacks
16482| [1015894] Microsoft Data Access Components RDS.Dataspace Access Control Bug Lets Remote Users Execute Arbitrary Code
16483| [1015892] Microsoft Internet Explorer Popup Window Object Bugs Let Remote Users Execute Scripting Code in Arbitrary Domains
16484| [1015855] Microsoft Office Array Index Boundary Error Lets Remote Users Execute Arbitrary Code
16485| [1015825] Microsoft ASP.NET Incorrect COM Component Reference Lets Remote Users Deny Service
16486| [1015812] Microsoft Internet Explorer createTextRange() Memory Error Lets Remote Users Execute Arbitrary Code
16487| [1015800] (Vendor Issues Fix) Microsoft Internet Explorer (IE) Lets Remote Users Cause HTA Files to Be Executed
16488| [1015794] (Vendor Issues Fix) Microsoft Internet Explorer 'mshtml.dll' Bug in Processing Multiple Action Handlers Lets Remote Users Deny Service
16489| [1015766] Microsoft Office and Excel Buffer Overflows Let Remote Users Execute Arbitrary Code
16490| [1015765] Microsoft Windows Services Have Unsafe Default ACLs That Let Remote Authenticated Users Gain Elevated Privileges
16491| [1015720] Microsoft Internet Explorer Modal Security Dialog Race Condition May Let Remote Users Install Code or Obtain Information
16492| [1015632] Microsoft PowerPoint May Let Users Access Contents of the Temporary Internet Files Folder
16493| [1015631] Microsoft Office Korean Input Method Editor Lets Local Users Gain Elevated Privileges
16494| [1015630] Microsoft Windows Web Client Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
16495| [1015629] Microsoft Windows IGMP Processing Bug Lets Remote Users Deny Service
16496| [1015595] Microsoft Windows UPnP/NetBT/SCardSvr/SSDP Services May Be Incorrectly Configured By 3rd Party Applications, Allowing Local Users to Gain Elevated Privileges
16497| [1015585] Microsoft HTML Help Workshop Buffer Overflow in Processing .hhp Files Lets Remote User Execute Arbitrary Code
16498| [1015559] Microsoft Internet Explorer Shockwave Flash Scripting Bug Lets Remote Users Deny Service
16499| [1015489] Microsoft Wireless Network Connection Software May Broadcast Ad-Hoc SSID Information in Certain Cases
16500| [1015461] Microsoft Outlook Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
16501| [1015460] Microsoft Exchange Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
16502| [1015459] Microsoft Windows Embedded Web Fonts Buffer Overflow Lets Remote Users Execute Arbitrary Code
16503| [1015453] Microsoft Windows Graphics Rendering Engine WMF File Memory Access Error Lets Remote Users Execute Arbitrary Code
16504| [1015416] Microsoft Windows Unspecified WMF Rendering Bug Lets Remote Users Execute Arbitrary Code
16505| [1015350] Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users
16506| [1015349] Microsoft Windows Internet Explorer May Let Remote Users Obfuscate the Download Dialog Box
16507| [1015348] Microsoft Internet Explorer Bug in Instantiating COM Objects May Let Remote Users Execute Arbitrary Code
16508| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
16509| [1015333] Microsoft Excel Unspecified Stack Overflow May Let Remote Users Cause Arbitrary Code to Be Executed
16510| [1015251] Microsoft Internet Explorer Bug in Processing Mismatched Document Object Model Objects May Let Remote Users Execute Arbitrary Code
16511| [1015233] Microsoft Windows RPC Service May Let Remote Users Deny Service
16512| [1015226] Microsoft AntiSpyware Improper CreateProcess() Call Lets Local Users Execute Arbitrary Code
16513| [1015168] Microsoft Windows Buffer Overflows in Graphics Rendering Engine Lets Remote Users Execute Arbitrary Code
16514| [1015143] F-Secure Anti-Virus for Microsoft Exchange Web Console May Disclose Files to Remote Users
16515| [1015101] Microsoft Internet Explorer J2SE Runtime Environment Bug Lets Remote Users Crash the Target User's Browser
16516| [1015044] Microsoft Windows Multiple COM Objects Let Remote Users Execute Arbitrary Code
16517| [1015043] Microsoft Network Connection Manager Lets Remote Users Deny Service
16518| [1015042] Microsoft Windows Plug and Play Buffer Overflow Lets Remote Users Execute Arbitrary Code
16519| [1015041] Microsoft Client Service for NetWare Buffer Overflow Lets Remote Users Execute Arbitrary Code
16520| [1015040] Microsoft Windows Shell Bugs in Processing '.lnk' Files and in Web View Preview Mode Lets Remote Users Execute Arbitrary Code
16521| [1015039] Microsoft Windows Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
16522| [1015038] Microsoft Exchange Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
16523| [1015037] Microsoft Windows Buffer Overflows in MSDTC and COM+ Let Remote Users Execute Arbitrary Code and Local User Gain Elevated Privileges
16524| [1015036] Microsoft Windows FTP Client Input Validation Hole Lets Remote Servers Create/Overwrite Files on the Target User's System
16525| [1015034] Microsoft DirectX DirectShow Buffer Overflow Lets Remote Users Execute Arbitrary Code
16526| [1014829] Microsoft Windows Firewall User Interface May Not Properly Display Exception Rules
16527| [1014809] Microsoft Internet Explorer Unspecified Bug May Permit Remote Code Execution
16528| [1014727] Microsoft 'msdds.dll' COM Object Lets Remote Users Execute Arbitrary Code
16529| [1014643] Microsoft Internet Explorer COM Object Instantiation Bug May Let Remote Users Execute Arbitrary Code
16530| [1014642] Microsoft Windows Kerberos and PKINIT Vulnerabilities Allow Denial of Service, Information Disclosure, and Spoofing
16531| [1014641] Microsoft Internet Explorer Web Folder URL Validation Bug Lets Remote Users Execute Scripting Code in an Arbitrary Security Domain
16532| [1014640] Microsoft Windows Plug and Play Stack Overflow Lets Remote Users Execute Arbitrary Code
16533| [1014639] Microsoft Windows Telephony Service Remote Code Execution or Local Privilege Escalation
16534| [1014638] Microsoft Windows Print Spooler Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
16535| [1014501] Hosting Controller 'IISActions.asp' Script Lets Remote Authenticated Users Add Domains/Subdomains
16536| [1014500] Microsoft Internet Explorer (IE) JPEG Rendering Bugs Let Remote Users Deny Service or Execute Arbitrary Code
16537| [1014498] Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
16538| [1014458] Microsoft Office Buffer Overflow in Parsing Fonts Lets Remote Users Cause Arbitrary Code to Be Executed
16539| [1014457] Microsoft Microsoft Color Management Module Lets Remote Users Execute Arbitrary Code
16540| [1014417] Microsoft Windows Named Pipe NULL Session Bugs in svcctl and eventlog RPC Interfaces Disclose Information to Remote Users
16541| [1014364] Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
16542| [1014356] Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required
16543| [1014352] Microsoft Front Page May Crash When Editing a Specially Crafted Web Page
16544| [1014329] Microsoft Internet Explorer 'javaprxy.dll' COM Object Exception Handling Lets Remote Users Execute Arbitrary Code
16545| [1014261] Microsoft Internet Explorer Lets Remote Users Spoof Javascript Dialog Boxes
16546| [1014201] Microsoft Internet Explorer Buffer Overflow in Rendering PNG Images Lets Remote Users Execute Arbitrary Code
16547| [1014200] Microsoft Outlook Express Buffer Overflow in NNTP Response Parser Lets Remote Users Execute Arbitrary Code
16548| [1014199] Microsoft Outlook Web Access Input Validation Hole in IMG Tags Permits Cross-Site Scripting Attacks
16549| [1014198] Microsoft Windows Buffer Overflow in Processing Server Message Block Packets Lets Remote Users Execute Arbitrary Code
16550| [1014197] Microsoft Agent Lets Remote Users Spoof Security Dialog Box Contents
16551| [1014196] Microsoft Windows Buffer Overflow in Web Client Service Lets Remote Authenticated Users Execute Arbitrary Code
16552| [1014195] Microsoft HTML Help Input Validation Flaw Lets Remote Users Execute Arbitrary Code
16553| [1014194] Microsoft Step-by-Step Interactive Training Bookmark Link File Validation Flaw Lets Remote Users Execute Arbitrary Code
16554| [1014193] Microsoft Internet Security and Acceleration Server Bugs Let Remote Users Poison the Cache and Establish NetBIOS Connections
16555| [1014174] Microsoft Internet Explorer Lets Remote Users Obfuscate Scripting Code
16556| [1014113] Microsoft ISA Server in SecureNAT Configuration Can Be Crashed By Remote Users
16557| [1014050] Computer Associates eTrust Antivirus Integer Overflow in Processing Microsoft OLE Data Lets Remote Users Execute Arbitrary Code
16558| [1013996] Microsoft ASP.NET May Disclose System Information to Remote Users in Certain Cases
16559| [1013761] Microsoft Windows Explorer 'webvw.dll' Input Validation Error Lets Remote Users Execute Arbitrary Scripting Code
16560| [1013724] RSA Authentication Agent for Web for IIS Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks
16561| [1013692] Microsoft Internet Explorer Buffer Overflows in DHTML, URL Parsing, and Content Advisor Let Remote Users Execute Arbitrary Code
16562| [1013691] Microsoft Message Queuing Buffer Overflow Lets Remote Users Execute Arbitrary Code
16563| [1013689] Microsoft Windows Shell MSHTA Lets Remote Users Code Execute Arbitrary Scripting Code
16564| [1013688] Microsoft Windows Kernel and Font Buffer Overflows Let Local Users Deny Service or Obtain System Privileges
16565| [1013687] Microsoft Exchange Heap Overlow in Processing Extended SMTP Verb Lets Remote Users Execute Arbitrary Code
16566| [1013686] Microsoft Windows TCP, IP, and ICMP Processing Errors Let Remote Users Deny Service and Execute Arbitrary Code
16567| [1013684] Microsoft Word Unspecified Buffer Overflow in Processing Documents Lets Remote Users Execute Arbitrary Code
16568| [1013669] Microsoft Outlook Web Access 'From' Address Display Lets Remote Users Spoof Origination Addresses
16569| [1013668] Microsoft Outlook 'From' Address Display Lets Remote Users Spoof Origination Addresses
16570| [1013618] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code
16571| [1013583] Microsoft Outlook Connector for IBM Lotus Domino Lets Users Bypass Password Storage Policy
16572| [1013552] Microsoft Windows Remote Desktop 'TSShutdn.exe' Lets Remote Authenticated Users Shutdown the System
16573| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
16574| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
16575| [1013205] Microsoft Internet Explorer Can Be Crashed With URL Containing Special URL Characters
16576| [1013126] Microsoft Internet Explorer CDF Scripting Error Lets Remote Users Execute Scripting Code in Arbitrary Domains
16577| [1013125] Microsoft Internet Explorer DHTML Method Heap Overflow Lets Remote Users Execute Arbitrary Code
16578| [1013124] Microsoft Internet Explorer URL Encoding Error Lets Remote Users Spoof Arbitrary URLs and Execute Scripting Code in Arbitrary Security Zone
16579| [1013120] Microsoft Windows OLE Buffer Overflow Lets Remote Users Execute Arbitrary Code and COM Access Flaw Lets Remote Authenticated Users Gain Elevated Privileges
16580| [1013119] Microsoft Windows Hyperlink Object Library Lets Remote Users Execute Arbitrary Code
16581| [1013117] Microsoft Windows License Logging Service Lets Remote Users Execute Arbitrary Code
16582| [1013115] Microsoft Windows Media Player Buffer Overflow in Processing PNG Files Lets Remote Users Execute Arbitrary Code
16583| [1013114] Microsoft Windows SMB Lets Remote Users Execute Arbitrary Code
16584| [1013112] Microsoft Windows XP Named Pipe Validation Error Lets Remote Users Obtain Information
16585| [1013111] Microsoft SharePoint Services Redirection Query Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks
16586| [1013110] Microsoft Office XP Buffer Overflow in Processing URLs Lets Remote Users Execute Arbitrary Code
16587| [1013086] Microsoft Outlook Web Access 'owalogon.asp' Lets Remote Users Redirect Login Requests
16588| [1012891] Microsoft IE Windows XP SP2 File Download Security Can Be Bypassed With Dynamic IFRAME Tag
16589| [1012836] Microsoft HTML Help Active Control Cross-Domain Error Lets Remote Users Execute Arbitrary Commands
16590| [1012835] Microsoft Cursor and Icon Validation Error Lets Remote Users Execute Arbitrary Code
16591| [1012684] Microsoft Windows LoadImage API Buffer Overflow Lets Remote Users Execute Arbitrary Code
16592| [1012683] Microsoft Windows ANI File Parsing Errors Let Remote Users Deny Service
16593| [1012682] Microsoft Windows Help System Buffer Overflows in Processing Phrase Compressed Help Files Lets Remote Users Execute Arbitrary Code
16594| [1012626] Microsoft Windows Media Player setItemInfo Lets Remote Users Execute Arbitrary Code
16595| [1012584] Microsoft IE dhtmled.ocx Lets Remote Users Execute Cross-Domain Scripting Attacks
16596| [1012518] Microsoft HyperTerminal Buffer Overflow Lets Remote Users Execute Arbitrary Code
16597| [1012517] Microsoft WINS Buffer Overflow in Name Value Lets Remote Users Execute Arbitrary Code
16598| [1012515] Microsoft Windows NT 4.0 Buffer Overflows in the Logging and Processing of DHCP Packets May Let Remote Users Execute Arbitrary Code
16599| [1012514] Microsoft WordPad Error in Converting Tables/Fonts Lets Remote Users Execute Arbitrary Code
16600| [1012513] Microsoft Windows Kernel Buffer Overflow in Processing Local Procedure Call Messages Lets Local Users Gain System Privileges
16601| [1012512] Microsoft LSASS Bug in Validating Identity Tokens Lets Local Users Gain Elevated Privileges
16602| [1012458] Microsoft Internet Explorer Lets Remote Users Inject Content into Open Windows
16603| [1012444] Microsoft Internet Explorer Input Validation Error in Processing FTP URLs May Let Remote Users Inject Arbitrary FTP Commands
16604| [1012435] Microsoft Windows Resource Kit Buffer Overflow and Input Validation Holes in 'w3who.dll' May Permit Remote Code Execution and Cross-Site Scripting Attacks
16605| [1012341] Microsoft WINS Memory Overwrite Lets Remote Users Execute Arbitary Code
16606| [1012288] Microsoft IE Custom 404 Error Message and execCommand SaveAs Lets Remote Users Bypass XP SP2 Download Warning Mechanisms
16607| [1012234] Microsoft Internet Explorer on XP SP2 Has Unspecified Flaws That Let Remote Users Bypass File Download Restrictions
16608| [1012155] Microsoft Internet Security and Acceleration Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
16609| [1012154] Microsoft Proxy Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
16610| [1012138] Microsoft IE Discloses Whether Specified Files Exist to Remote Users
16611| [1012057] F-Secure Anti-Virus for Microsoft Exchange Lets Remote Users Bypass Anti-Virus Detection With a ZIP Archive
16612| [1012049] (Exploit Code Has Been Released) Microsoft Internet Explorer Buffer Overflow in IFRAME/EMBED Tag Processing Lets Remote Users Execute Arbitrary Code
16613| [1011987] Microsoft Internet Explorer Lets Remote Users Spoof the Status Bar Address with a Table Within a Link
16614| [1011940] Microsoft Remote Desktop on Windows XP Lets Remote Authenticated Users Restart the System
16615| [1011895] Microsoft IE for Mac Multi-Window Browsing Errors Let Remote Users Spoof Sites
16616| [1011890] Microsoft Outlook May Display Images in Plaintext Only Mode
16617| [1011880] Microsoft Windows XP Error in Explorer in Processing WAV Files Lets Remote Users Deny Service
16618| [1011859] Microsoft Internet Explorer on Windows XP Fails to Restrict Drag and Drop Operations When Configured to Disable These Operations
16619| [1011851] Microsoft IE AnchorClick Behavior and HTML Help Let Remote Users Execute Arbitrary Code
16620| [1011735] Microsoft Internet Explorer May Display the Incorrect URL When Loading a Javascript Homepage
16621| [1011706] Microsoft Operating System 'asycpict.dll' Lets Remote Users Crash the System
16622| [1011678] Microsoft IE MSN 'heartbeat.ocx' Component Has Unspecified Flaw
16623| [1011647] Microsoft Windows Shell Buffer Overflows Let Remote Users Execute Arbitrary Code
16624| [1011646] Microsoft Program Group Converter Buffer Overflow Lets Remote Users Execute Arbitrary Code
16625| [1011645] Microsoft Various Operating System Flaws Lets Remote Users Execute Code and Local Users Gain Elevated Privileges or Deny Service
16626| [1011644] Microsoft IE Plug-in Navigation Flaw Lets Remote Users Spoof URLs in the Addresses Bar
16627| [1011643] Microsoft IE Double Byte Parsing Flaw Lets Remote Users Spoof URLs in the Addresses Bar
16628| [1011642] Microsoft IE SSL Caching Flaw Lets Remote Users Run Scripting Code in the Context of Arbitrary Secure Sites
16629| [1011640] Microsoft IE Buffer Overflow in Install Engine Lets Remote Users Execute Arbitrary Code
16630| [1011639] Microsoft IE Buffer Overflow in Processing Cascading Style Sheets Lets Remote Users Execute Arbitrary Code
16631| [1011637] Microsoft Windows Buffer Overflow in Processing Compressed Folders Lets Remote Users Execute Arbitrary Code
16632| [1011636] Microsoft SMTP Service Buffer Overflow in Processing DNS Responses May Let Remote Users Execute Arbitrary Code
16633| [1011635] Microsoft Excel Unspecified Flaw Lets Remote Users Execute Arbitrary Code
16634| [1011634] Microsoft NetDDE Buffer Overflow Lets Remote Users Execute Arbitrary Code With System Privileges
16635| [1011632] Microsoft NT RPC Runtime Library Buffer Overflow Lets Remote Users Deny Service
16636| [1011631] Microsoft NNTP Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
16637| [1011626] Microsoft Cabarc Directory Traversal Flaw Lets Remote Users Create/Overwrite Files on the Target System
16638| [1011565] Microsoft Word Parsing Flaw May Let Remote Users Execute Arbitrary Code
16639| [1011563] Microsoft Internet Explorer Lets Remote Users Access XML Documents
16640| [1011559] Microsoft .NET Forms Authentication Can Be Bypassed By Remote Users
16641| [1011434] Microsoft SQL Server Can Be Crashed By Remote Users Sending a Specially Crafted Large Buffer
16642| [1011332] Microsoft Internet Explorer Bug in Setting Cookies in Certain Domains May Let Remote Users Conduct Session Fixation Attacks
16643| [1011253] Microsoft GDI+ Buffer Overflow in Processing JPEG Images Lets Remote Users Execute Arbitrary Code
16644| [1011252] Microsoft Works Suite Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
16645| [1011251] Microsoft Publisher Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
16646| [1011250] Microsoft FrontPage Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
16647| [1011249] Microsoft Office Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
16648| [1011200] F-Secure Anti-Virus for Microsoft Exchange Input Validation Bug in Content Scanner Server Lets Remote Users Deny Service
16649| [1011141] HP Systems Insight Manager May Not Let Users Login After Applying a Microsoft Security Patch
16650| [1011067] Microsoft Outlook Express May Disclose 'bcc:' Recipient Addresses
16651| [1011043] Microsoft Internet Explorer Local File IFRAME Error Response Lets Remote Users Determine if Files or Directories Exist
16652| [1010996] Microsoft Windows XP SP2 Local Computer Scripting Restrictions Can Be Bypassed With a Specially Crafted MHT File
16653| [1010992] Microsoft Internet Security and Acceleration Server Does Not Block FTP Bounce Attacks
16654| [1010959] Microsoft Windows Explorer (in XP SP2) May Fail to Warn Users When Executing Untrusted Files
16655| [1010957] Microsoft Internet Explorer Unregistered Protocol State Error Lets Remote Users Spoof Location Bar
16656| [1010916] Microsoft Outlook Web Access Input Validation Hole in Redirection Query Permits Cross-Site Scripting Attacks
16657| [1010827] Microsoft Internet Explorer Error in 'mshtml.dll' in Processing GIF Files Lets Remote Users Crash the Browser
16658| [1010713] Microsoft Systems Management Server (SMS) Client Can Be Crashed By Remote Users
16659| [1010694] Microsoft IE Lets Remote Users Spoof Filenames Using CLSIDs
16660| [1010693] Microsoft Internet Explorer 'shell:' Protocol Lets Remote Users Execute Arbitrary Scripting Code in the Local Zone
16661| [1010690] Microsoft HTML Help Input Validation Error Lets Remote Users Execute Arbitrary Code
16662| [1010688] Microsoft Windows Task Scheduler Buffer Overflow Lets Remote Users Execute Arbitrary Code
16663| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
16664| [1010686] Microsoft Utility Manager Permits Local Applications to Run With Elevated Privileges
16665| [1010683] Microsoft Internet Explorer Same Name Javascript Bug Lets Remote Users Execute Arbitrary Javascript in the Domain of an Arbitrary Site
16666| [1010679] Microsoft Internet Explorer Access Control Flaw in popup.show() Lets Remote Users Execute Mouse-Click Actions
16667| [1010673] Microsoft Internet Explorer Can Be Crashed By Remote Users With Large Text Files
16668| [1010550] Microsoft MN-500 Wireless Base Station Lets Remote Users Deny Administrative Access
16669| [1010491] Microsoft Internet Explorer Crashes When Saving Files With Special Character Strings
16670| [1010482] Microsoft Internet Explorer '%2F' URL Parsing Error Lets Remote Users Spoof Sites in the Trusted Zone
16671| [1010479] (US-CERT Issues Advisory) Microsoft Internet Explorer Cross-Domain Redirect Hole Lets Remote Users Execute Arbitrary Code
16672| [1010427] Microsoft DirectX DirectPlay Input Validation Error Lets Remote Users Crash the Application
16673| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
16674| [1010314] Microsoft Windows IPSec Filtering Can Be Bypassed By Remote Users
16675| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
16676| [1010175] Microsoft Visual Basic Buffer Overflow May Let Local Users Gain Elevated Privileges
16677| [1010166] Microsoft Outlook Express Mail Troubleshooting Function May Disclose SMTP Password to Local Users
16678| [1010165] Microsoft Internet Explorer Image Map URL Display Error Lets Remote Users Spoof URLs
16679| [1010157] Microsoft Internet Explorer showHelp Path Search Lets Remote Users Load Existing Local CHM Files
16680| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
16681| [1010119] Microsoft Help and Support Center HCP URL Validation Error May Let Remote Users Execute Arbitrary Code If User Interactions Occur
16682| [1010092] Microsoft Internet Explorer 'file://' URL Processing Flaw Lets Remote Users Damage the Registry
16683| [1010009] Microsoft Internet Explorer SSL Icon Error May Let Remote Users Impersonate Secure Web Sites
16684| [1009940] Microsoft Windows Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
16685| [1009939] Microsoft Internet Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
16686| [1009778] Microsoft H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
16687| [1009777] Microsoft SSL Library Input Validation Error Lets Remote Users Crash the Service
16688| [1009776] Microsoft Windows Kernel Local Descriptor Table Flaw Lets Local Users Gain Elevated Privileges
16689| [1009771] Microsoft Windows Negotiate Security Software Provider (SSP) Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code
16690| [1009770] Microsoft Windows Management Interface Provider Lets Local Users Gain Elevated Privileges
16691| [1009769] Microsoft Utility Manager Lets Local Users Run Applications With Elevated Privileges
16692| [1009768] Microsoft Winlogon Buffer Overflow Lets Certain Remote Users Execute Arbitrary Code
16693| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
16694| [1009762] Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users
16695| [1009761] Microsoft Windows COM Object Identifier Creation Flaw May Let Remote Users Cause Applications to Open Network Ports
16696| [1009760] Microsoft Virtual DOS Machine (VDM) Lets Local Users Gain Elevated Privileges
16697| [1009758] Microsoft Windows RCP Memory Leak Lets Remote Users Deny Service
16698| [1009757] Microsoft Jet Database Engine 'msjet40.dll' Buffer Overflow Lets Remote Users Execute Arbitrary Code
16699| [1009754] Microsoft ASN.1 Library (msasn1.dll) Double-Free Memory Allocation Error May Let Remote Users Execute Arbitrary Code
16700| [1009753] Microsoft SSL Library PCT Buffer Overflow Lets Remote Users Execute Arbitrary Code
16701| [1009752] Microsoft Help and Support Center Input Validation Flaw Lets Remote Users Execute Arbitrary Code in the My Computer Zone
16702| [1009751] Microsoft LSASS Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
16703| [1009746] Microsoft Internet Explorer Bitmap Memory Allocation Error Lets Remote Users Cause All Available Memory to Be Consumed
16704| [1009743] Microsoft Outlook Express Can Be Crashed By Remote Users With Specially Crafted EML File
16705| [1009739] Microsoft Internet Explorer Javascript OLE Object Lets Remote Users Automatically Print Without Authorization
16706| [1009690] Microsoft Internet Explorer Security Domain Flaw in Accessing CHM Files Lets Remote Users Execute Arbitrary Code
16707| [1009673] Microsoft Windows XP 'mswebdvd.dll' Buffer Overflow Lets Remote Users Deny Service
16708| [1009666] Microsoft SharePoint Portal Server Input Validation Holes Permit Cross-Site Scripting Attacks
16709| [1009604] Microsoft Internet Explorer Does Not Correctly Display Links With Embedded FORM Data
16710| [1009603] Microsoft Outlook Express Does Not Correctly Display Links With Embedded FORM Data
16711| [1009546] Microsoft Operating Systems Have Unspecified Flaw That Yields Kernel Level Access to Local Users
16712| [1009361] Microsoft Internet Explorer Cookie Path Restrictions Can Be Bypassed By Remote Servers
16713| [1009360] Microsoft MSN Messenger May Disclose Known Files to Remote Users
16714| [1009359] Microsoft Windows Media Services Can Be Crashed By Remote Users
16715| [1009358] Microsoft Office XP 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
16716| [1009357] Microsoft Outlook 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
16717| [1009243] Microsoft Internet Explorer (IE) May Leak Keystrokes Across Frames
16718| [1009181] Microsoft Windows Explorer Heap Overflow in Processing '.emf' Files Permits Code Execution
16719| [1009067] Microsoft Internet Explorer Integer Overflow in Processing Bitmap Files Lets Remote Users Execute Arbitrary Code
16720| [1009009] Microsoft Virtual PC for Mac Temporary File Flaw Lets Local Users Gain Root Privileges
16721| [1009008] Microsoft Windows Internet Naming Service (WINS) Length Validation Flaw Lets Remote Users Deny Service
16722| [1009007] Microsoft ASN.1 Library Heap Overflows Let Remote Users Execute Arbitrary Code With SYSTEM Privileges
16723| [1008901] Microsoft Internet Explorer Travel Log Input Validation Flaw Lets Remote Users Run Arbitrary Scripting Code in the Local Computer Domain
16724| [1008699] Microsoft Windows Buffer Overflow in MDAC Lets Remote Users Execute Arbitrary Code
16725| [1008698] Microsoft Internet Security and Acceleration Server H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
16726| [1008586] Microsoft Office Security Features Can Be Bypassed
16727| [1008583] Microsoft Internet Explorer Flaw in Processing '.lnk' Shortcuts Lets Remote Users Execute Arbitrary Code
16728| [1008578] Microsoft Internet Explorer showHelp() '\..\' Directory Traversal Flaw Lets Remote Users Execute Files on the Target System
16729| [1008558] Microsoft Internet Explorer Trusted Domain Default Settings Facilitate Silent Installation of Executables
16730| [1008554] Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field
16731| [1008510] Openwares.org 'Microsoft IE Security Patch' URL Buffer Overflow Lets Remote Users Execute Arbitrary Code
16732| [1008428] Microsoft ASP.NET Web Services XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests
16733| [1008425] Microsoft IE Does Not Properly Display Some URLs
16734| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
16735| [1008293] Microsoft Internet Explorer Invalid ContentType May Disclose Cache Directory Location to Remote Users
16736| [1008292] Microsoft Internet Explorer MHT Redirect Flaws Let Remote Users Execute Arbitrary Code
16737| [1008245] Microsoft SharePoint May Let Remote Users Access Protected Pages Without Authenticating
16738| [1008151] Microsoft Works Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
16739| [1008150] Microsoft Word Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
16740| [1008149] Microsoft Excel Macro Security Flaw Lets Remote Users Execute Arbitrary Macro Codes
16741| [1008148] Microsoft SharePoint Team Services Buffer Overflow May Let Remote Users Execute Arbitrary Code
16742| [1008147] Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
16743| [1008146] Microsoft Windows Workstation Service (wkssvc.dll) Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Privileges
16744| [1008053] Microsoft Internet Explorer IFRAME Refresh Lets Remote HTML Access Local Files
16745| [1008000] Microsoft Internet Explorer Lets Remote Users Execute Arbitrary Files in the Local Zone Using a Specially Crafted IFRAME/Location Header
16746| [1007937] Microsoft Exchange Server Buffer Overflow in Processing Extended Verb Requests May Let Remote Users Execute Arbitrary Code
16747| [1007936] Microsoft Outlook Web Access Input Validation Flaw in 'Compose New Message' Permits Remote Cross-Site Scripting Attacks
16748| [1007935] Microsoft ListBox and ComboBox 'user32.dll' Buffer Overflow May Allow Local Users to Gain Elevated Privileges
16749| [1007934] Microsoft Help and Support Center HCP Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code With Local Computer Privileges
16750| [1007933] Microsoft Windows Messenger Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With Local System Privileges
16751| [1007932] Microsoft Windows Troubleshooter ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
16752| [1007931] Microsoft Authenticode Low Memory Flaw May Let Remote Users Execute Arbitrary Code
16753| [1007922] Microsoft Windows RPC Multi-threaded Race Condition Lets Remote Users Crash the Service or Execute Arbitrary Code
16754| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
16755| [1007874] Microsoft Windows OS PostThreadMessage() API Permits Local Users to Terminate Processes That Have Message Queues
16756| [1007750] Microsoft BizTalk Server Default Directory Permissions May Let Remote Users Deny Service
16757| [1007689] Microsoft Internet Explorer Media Sidebar Flaw Lets Remote Users Execute Arbitrary Code on the System
16758| [1007687] Microsoft Internet Explorer Various Cross-Domain Flaws Permit Remote Scripting in Arbitrary Domains
16759| [1007670] Microsoft Windows Remote Procedure Call (RPC) DCOM Activation Buffer Overflows Let Remote Users Execute Arbitrary Code
16760| [1007651] RealSecure Server Sensor Unicode Flaw Lets Remote Users Crash the IIS Web Service
16761| [1007618] Microsoft Visual Basic for Applications (VBA) in Multiple Microsoft Products Permits Remote Code Execution
16762| [1007617] Microsoft Converter for WordPerfect Has Buffer Overflow That Lets Remote Users Execute Arbitrary Code
16763| [1007616] Microsoft Word Document Validation Error Lets Macros Run Without Warning
16764| [1007615] Microsoft Windows NetBIOS Name Service May Disclose Memory Contents to Remote Users
16765| [1007614] Microsoft Access Snapshot Viewer ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
16766| [1007599] Microsoft Outlook May Fail to Delete Outlook Data From the PST File
16767| [1007538] Microsoft Internet Explorer Buffer Overflow in CR549.DLL ActiveX Control Permits Remote Code Execution
16768| [1007537] Microsoft Internet Explorer Object Tag Flaw Lets Remote Users Execute Arbitrary Code
16769| [1007536] Microsoft Internet Explorer Cache Script Flaw Lets Remote Users Execute Code in the My Computer Zone
16770| [1007535] Microsoft MDAC Database Component Lets Remote Users Execute Arbitrary Code
16771| [1007507] RSA SecurID Interaction With Microsoft URLScan May Disclose URLScan Configuration to Remote Users
16772| [1007493] Microsoft Visual Studio Buffer Overflow in 'mciwndx.ocx' May Let Remote Users Execute Arbitrary Code
16773| [1007388] Microsoft WebServer Beta for Pocket PC Yields Administrative Access to Remote Users
16774| [1007364] IISShield May Fail to Drop a Specific Malformed HTTP Request
16775| [1007306] Microsoft Outlook Express Again Executes Scripting Code in Plain Text E-mail Messages
16776| [1007281] Microsoft Windows NT File Management Flaw May Let Remote Users Crash Certain Applications
16777| [1007280] Microsoft Data/Desktop Engine Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
16778| [1007279] Microsoft SQL Server Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
16779| [1007278] Microsoft DirectX Heap Overflow in Loading MIDI Files Lets Remote Users Execute Arbitrary Code
16780| [1007265] Microsoft MDAC ODBC Component May Store Database Passwords in Plaintext in the Registry
16781| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
16782| [1007214] Microsoft Windows XP Shell Buffer Overflow in Processing Folder Display Attributes Permits Remote Code Execution
16783| [1007212] Microsoft Windows Remote Procedure Call (RPC) Service Buffer Overflow in Processing DCOM Requests Allows Remote Code Execution
16784| [1007206] Microsoft SMTP Service Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
16785| [1007205] Microsoft Exchange Server Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
16786| [1007190] Microsoft Internet Explorer 'Chromeless' Window May Let Remote Users Spoof Various User Interface Characteristics
16787| [1007172] Microsoft Jet Database Engine Buffer Overflow May Let Remote Users Execute Arbitrary Code
16788| [1007154] Microsoft SMB Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
16789| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
16790| [1007133] Microsoft Outlook Web Access (OWA) May Disclose The User's OWA Password to Remote Users
16791| [1007126] Microsoft Internet Explorer Can By Crashed By Loading 'C:\aux' URL
16792| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
16793| [1007098] Microsoft Commerce Server Discloses SQL Server Password to Local Users
16794| [1007094] Microsoft NetMeeting Directory Traversal Flaw Lets Remote Users Execute Arbitrary Code
16795| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
16796| [1007072] Microsoft Internet Explorer Buffer Overflow in Processing Scripted 'HR' Tags Lets Remote Users Execute Arbitrary Code
16797| [1007057] Microsoft Windows Media Player Access Control Flaw Lets Remote Users View, Modify, and Delete Media Library Metadata
16798| [1007022] SurfControl for Microsoft ISA Server Discloses Files to Remote Users
16799| [1007008] Microsoft Internet Explorer XML Parsing Error Lets Remote Users Conduct Cross-Site Scripting Attacks
16800| [1007007] Microsoft Internet Explorer Custom HTTP Error Pages May Let Remote Users Execute Scripts in the Local Computer Zone
16801| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
16802| [1006924] Microsoft Internet Explorer Input Validation Flaw in Displaying FTP Site Names Lets Remote Users Execute Arbitrary Scripting Code in Arbitrary Domains
16803| [1006918] Microsoft Internet Explorer (IE) Object Tag Buffer Overflow Lets Remote Users Execute Arbitrary Code
16804| [1006901] Microsoft UrlScan Default Configuration Displays Identifying Characteristics to Remote Users
16805| [1006894] iisCART2000 Upload Authentication Error Lets Remote Users Upload and Execute Arbitrary Scripts
16806| [1006844] Microsoft Internet Connection Firewall Fails to Block IP Version 6 Protocol
16807| [1006829] iisPROTECT Input Validation Hole Lets Remote Users Execute SQL Stored Procedures
16808| [1006815] iisPROTECT Lets Remote Users Access Protected Files Using URL Encoding
16809| [1006809] Microsoft Outlook Express Lets Remote Users Silently Install Arbitrary Code Using Audio and Media Files
16810| [1006808] Microsoft Outlook Express May Be Affected by W32/Palyh@MM Mass-Mailing Worm
16811| [1006807] Microsoft Outlook May Be Affected by W32/Palyh@MM Mass-Mailing Worm
16812| [1006803] Microsoft Windows Can Be Crashed By Remote Users via Malformed NetMeeting URLs
16813| [1006789] Microsoft ISA Server Input Validation Flaw Lets Remote Users Execute Scripting Code in Arbitrary Security Domains
16814| [1006774] Microsoft Internet Explorer May Execute Arbitrary Code in the Wrong Security Domain When Processing Large Numbers of Download Requests
16815| [1006771] Microsoft Outlook Express Integer Overflow Lets Remote IMAP Servers Cause the Client to Crash
16816| [1006748] Microsoft Outlook Express May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
16817| [1006747] Microsoft Outlook May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
16818| [1006728] Microsoft .NET Passport Passwords, Including Hotmail Passwords, Can Be Changed By Remote Users
16819| [1006696] Microsoft Internet Explorer Web Folder Access Flaw Lets Remote Users Execute Arbitrary Scripting Code in the My Computer Zone
16820| [1006691] Microsoft MN-500 Wireless Base Station Backup Configuration File Discloses Administrator Password
16821| [1006686] Microsoft BizTalk Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
16822| [1006634] Microsoft Internet Explorer Bugs (URLMON.DLL Buffer Overflow, File Upload Control Bypass, Plug-in URL Input Validation Flaw, CSS Modal Dialog Input Validation Flaw) Let Remote Users Execute Arbitrary Code or Access Local Files
16823| [1006608] Microsoft NTLM Authentication Protocol Flaw Lets Malicious SMB Servers Gain Access to Systems
16824| [1006599] Microsoft REGEDIT.EXE May Let Local Users Gain Elevated Privileges
16825| [1006588] Microsoft Windows OS Kernel Messaging Buffer Overflow Lets Local Users Gain Full Control of the System
16826| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
16827| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
16828| [1006533] Microsoft Firewall Service in ISA Server Has Unspecified Flaw That Lets Remote Users Stop Traffic
16829| [1006532] Microsoft Windows VM Input Validation Flaw in ByteCode Verifier Lets Malicious Java Applets Execute Arbitrary Code
16830| [1006447] Microsoft Windows Terminal Services RDP Implementation Does Not Validate Server Identity, Allowing Man-in-the-Middle Attacks
16831| [1006361] Microsoft ActiveSync Application Can Be Crashed By Remote Users
16832| [1006323] Microsoft Windows Buffer Overflow in Windows Script Engine JScript.DLL Lets Remote Users Execute Arbitrary Code
16833| [1006322] Microsoft ISA Server DNS Intrusion Detection Flaw Lets Remote Users Block DNS Inbound Requests
16834| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
16835| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
16836| [1006257] Microsoft Internet Explorer Buffer Overflow in Processing '.MHT' Web Archives Lets Remote Users Execute Arbitrary Code
16837| [1006179] Microsoft Windows Me Help and Support Center URL Handler Overflow Lets Remote Users Execute Arbitrary Code
16838| [1006169] Microsoft Internet Explorer Vulnerable Codebase Object Lets Remote Users Execute Arbitrary Code
16839| [1006148] Microsoft Outlook Express Security Domain Flaw Lets Remote Users Silently Install and Execute Arbitrary Code
16840| [1006121] Microsoft Windows 'riched20.DLL' Buffer Overflow May Let Remote Users Crash Applications
16841| [1006046] Microsoft Internet Explorer showHelp() Domain Security Flaw Lets Remote Users Execute Commands
16842| [1006045] Microsoft Windows XP Redirector Buffer Overflow May Let Local Users Gain System Level Privileges
16843| [1006036] Microsoft Internet Explorer May Let Remote Users Read or Write Files Via the dragDrop() Method
16844| [1006023] ColdFusion MX Configuration Error When Used With IIS and NT Authentication May Grant Unauthorized Access to Remote Authenticated Users
16845| [1005986] Microsoft Windows Terminal Server MSGINA.DLL Flaw Lets Remote Authenticated Users Reboot the Server
16846| [1005966] Microsoft Outlook May Fail to Encrypt User E-mail, Disclosing the Contents to Remote Users
16847| [1005964] Microsoft Locator Service Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Level Privileges
16848| [1005859] Microsoft Windows File Protection Mechanism Weakness in Trusting Code-Signing Certificate Chains Lets Arbitrary Remote Users Sign Code That Will Be Trusted By Windows
16849| [1005858] Microsoft Windows File Protection Weakness May Let Local Users Replace Code With Previous Vulnerable Versions Without Detection
16850| [1005857] Microsoft Internet Explorer Bug in Loading Multimedia Files May Let Remote Users Execute Arbitrary Scripting Code in Other Domains
16851| [1005833] Microsoft Windows XP Shell Buffer Overflow in Processing Audio Files Allows Remote Users to Execute Arbitrary Code
16852| [1005799] Microsoft Windows OS Bug in Processing WM_TIMER Messages May Let Local Users Gain Elevated Privileges
16853| [1005796] Microsoft SMB Signing Flaw May Let Remote Users With Access to an SMB Session Gain Control of a Network Client
16854| [1005761] Microsoft Windows XP Wireless LAN Support May Disclose Access Point Information to Remote Users
16855| [1005757] Microsoft Outlook Bug in Processing Malformed E-mail Headers Lets Remote Users Crash the Client
16856| [1005747] Microsoft Internet Explorer showModalDialog() Input Validation Flaw Lets Remote Users Execute Arbitary Scripting Code in Any Security Zone
16857| [1005699] Microsoft Internet Explorer (IE) Java Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
16858| [1005698] Microsoft Java Virtual Machine (VM) Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
16859| [1005674] Microsoft Internet Explorer Buffer Overflow in Processing PNG Images Allows Denial of Service Attacks
16860| [1005672] Microsoft Internet Explorer MDAC Component Buffer Overflow Allows Remote Users to Execute Arbitrary Code
16861| [1005671] Microsoft Data Access Components (MDAC) Buffer Overflow Allows Remote Users to Execute Arbitrary Code
16862| [1005627] IISPop EMail Server Can Be Crashed By Remote Users
16863| [1005489] Microsoft Outlook Express May Fail to Delete E-mail Messages from Local Storage
16864| [1005466] Microsoft Internet Explorer Cached Object Flaw Lets Remote Users Execute Arbitrary Programs on the Target User's Computer
16865| [1005455] Microsoft Windows Remote Procedure Call (RPC) Service Null Pointer Dereference Allows Remote Users to Crash the Service
16866| [1005454] Microsoft Windows Media Player for Solaris Uses Unsafe Default Permissions
16867| [1005436] Microsoft Data Engine/Desktop Engine (MSDE) Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
16868| [1005435] Microsoft SQL Server Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
16869| [1005416] Microsoft Internet Explorer Flaw in WebBrowser Control Document Property Lets Remote Users Run Code in the My Computer Security Zone
16870| [1005405] Microsoft Outlook Express Buffer Overflow in Parsing S/MIME Messages Lets Remote Users Execute Arbitrary Code
16871| [1005395] Microsoft Content Management Server Input Validation Bug in 'ManualLogin.asp' Allows Cross-Site Scripting Attacks
16872| [1005377] Microsoft MSN Hotmail/Passport Login Page May Permit Cookie Stealing Via Cross-Site Scripting Attacks
16873| [1005343] Microsoft Windows Help System Bug in Processing Compiled HTML Help Files Lets Remote Users Execute Arbitrary Commands in the Local Computer Security Zone
16874| [1005339] Microsoft Services for Unix Interix SDK Bugs May Allow Denial of Service Conditions or May Execute Arbitrary Code
16875| [1005338] Microsoft Data/Desktop Engine (MSDE) Buffer Overflow Lets Remote Users Execute Arbitrary Code
16876| [1005337] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
16877| [1005336] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Files to Be Created
16878| [1005335] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Code to Be Executed
16879| [1005332] Microsoft Windows Help System Buffer Overflow in 'hhctrl.ocx' Lets Remote Users Execute Arbitrary Code
16880| [1005296] Microsoft PPTP Service Buffer Overflow May Let Remote Users Execute Arbitrary Code
16881| [1005287] Microsoft FrontPage Server Extensions SmartHTML Interpreter Bugs May Let Remote Users Execute Arbitrary Code with System Privileges
16882| [1005256] (Vendor Issues Fix) Microsoft Windows XP Remote Desktop Implementation Bug Lets Remote Users Crash the Operating System
16883| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
16884| [1005246] Microsoft Remote Desktop Protocol (RDP) Design Flaw May Disclose Information About the Unencrypted Data to Remote Users and May Let Data Be Modified During Transmission
16885| [1005243] Microsoft NetMeeting Remote Desktop Sharing Screen Saver Access Control Flaw Lets Physically Local Users Hijack Remote Sessions
16886| [1005242] Microsoft Windows XP Remote Desktop Can Be Crashed By Remote Users Sending a Modified RDP Packet
16887| [1005223] (Microsoft Responds) Microsoft Word Document Processing File Include Bug May Let Remote Users Obtain Files From a Target User's System
16888| [1005207] Microsoft Outlook Express Can Be Crashed By Remote Users Sending HTML Mail With Long Links Embedded
16889| [1005203] Microsoft Internet Explorer Frame Domain Security Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Zone Via Frame URLs
16890| [1005200] Microsoft Internet Explorer Implementation Bugs in Java Native Methods May Let Remote Users Execute Arbitrary Code Via Malicious Applets
16891| [1005182] Microsoft Internet Explorer URL Decoding Inconsistency May Result in a Web Page Loading in the Incorrect Security Domain
16892| [1005177] Microsoft Visual FoxPro Filename Processing Bug Lets Remote Users Create HTML That Will Cause Arbitrary Code to Be Executed When the HTML is Loaded
16893| [1005150] Microsoft Windows Operating System Certificate Enrollment ActiveX Control Allows Remote Users to Delete Certificates on a Target User's System
16894| [1005128] Microsoft Internet Explorer XML Script Element Redirect Bug Lets Remote Users View XML Files on the Target User's Computer
16895| [1005127] Microsoft Visual Studio .NET Web Projects May Disclose the Web Directory Structure to Remote Users
16896| [1005123] Microsoft Internet Explorer Buffer Overflow in Unspecified Text Formatting ActiveX Control Lets Remote Users Execute Arbitrary Code
16897| [1005120] Microsoft Terminal Services Advanced Client (TSAC) ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
16898| [1005119] Microsoft Operating System SMB Protocol Implementation in the Network
16899| [1005112] Microsoft File Transfer Manager ActiveX Control Buffer Overflow May Let Remote Users Execute Arbitrary Code
16900| [1005108] Microsoft Windows Media Player Allows Malicious Windows Media Download (.wmd) Files to Silently Create Files in a Known Location and Execute Them
16901| [1005075] Microsoft Internet Explorer XMLDSO Java Class Lets Remote HTML Code Access Local Files
16902| [1005071] Microsoft DirectX Files Viewer ActiveX Control Has Buffer Overflow That Allows Remote Users to Execute Arbitrary Code
16903| [1005070] Microsoft Internet Explorer (IE) Browser Error Message Processing Allows Remote Users to Execute Arbitrary Code on Certain Windows 98 Platforms
16904| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
16905| [1005067] Microsoft Desktop Engine (MSDE) Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
16906| [1005066] Microsoft SQL Server Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
16907| [1005065] Microsoft Network Connection Manager Could Give a Local User System Level Privileges
16908| [1005063] Microsoft Windows XP Help and Support Center Hole Lets Remote Users Create URLs That, When Loaded, Will Delete Arbitrary Files on Your System
16909| [1004986] Microsoft Content Management Server Buffer Overflow in Authentication Function May Allow Remote Users to Execute Arbitrary Code With System Level Privileges
16910| [1004983] Microsoft Visual C++ Flaw in calloc() and Similar Functions May Result in Buffer Overflows in Applications That Use the Compiler or Runtime Library
16911| [1004965] Microsoft Internet Explorer SSL Implementation Flaw in Following Certificate Chains Allows Remote Users to Conduct Man-in-the-Middle Attacks to Obtain Unencrypted Data from the Browser
16912| [1004927] Microsoft Terminal Services Can Be Crashed By Remote Users Conducting a TCP SYN Scan in Certain Situations
16913| [1004917] Microsoft SQL Server MDAC Function Buffer Overflow May Let Remote Users Execute Arbitrary Code to Gain Full Control Over the Database
16914| [1004877] Microsoft Internet Explorer (IE) Web Browser JavaScript 'Same Origin Policy' Flaw Allows Remote Users to Create Malicious JavaScript to Retrieve Web Data from a Victim's Internal Network
16915| [1004862] Microsoft Outlook Express Flaw in Parsing XML Using Internet Explorer Allows a Remote User to Silently Deliver and Install an Executable on a Target User's Computer
16916| [1004831] Microsoft Data Engine (MSDE) Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
16917| [1004830] Microsoft SQL Server Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
16918| [1004829] Microsoft SQL Server Resolution Service Buffer Overflows Let Remote Users Execute Arbitrary Code with the Privileges of the SQL Service
16919| [1004828] Microsoft Exchange Server Buffer Overflow in Processing SMTP EHLO Command Lets Remote Users Execute Arbitrary Code on the Server with System Level Privileges
16920| [1004827] Microsoft Metadirectory Services Authentication Flaw May Let Remote Users Modify Data and Obtain Elevated Privileges on the System
16921| [1004805] Microsoft Outlook Express (and Possibly Outlook) Has File Attachment Name Bugs That Let Remote Users Send Malicious Mail to Bypass Attachment Type Filters and Modify the Apparent File Name and File Size
16922| [1004761] Microsoft Foundation Classes (MFC) Information Server Application Programming Interface (ISAPI) 'mfc42.dll' Contains Buffer Overflows That Can Crash the System or Possibly Allow for the Remote Execution of Arbitrary Code
16923| [1004746] Microsoft Internet Explorer Flaw in OBJECT Domain Security Enforcement Lets Remote Users Execute Code in Arbitrary Domains
16924| [1004744] Microsoft SQL Server Install Process May Disclose Sensitive Passwords to Local Users
16925| [1004739] Microsoft SQL Server Desktop Engine (MSDE) Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
16926| [1004738] Microsoft SQL Server Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
16927| [1004637] Microsoft Commerce Server Buffer Overflows and Other Flaws Let Remote Users Execute Arbitrary Code with LocalSystem Privileges
16928| [1004618] Microsoft Internet Explorer Can Be Crashed By Malicious AVI Object in HTML
16929| [1004595] Microsoft Word Documents May Execute Remotely Supplied Macro Code Under Certain Conditions
16930| [1004594] Microsoft Excel Spreadsheet May Execute Remotely Supplied Macro Code Within Malicious Documents
16931| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
16932| [1004569] Microsoft Visual Studio .NET Korean Language Version Contains Nimda Virus
16933| [1004544] Microsoft SQL Server Buffer Overflow in 'pwdencrypt()' Function May Let Remote Authorized Users Execute Arbitrary Code
16934| [1004542] Lumigent Log Explorer Buffer Overflow May Let Remote Users Crash the Microsoft SQL Server Service or Execute Arbitrary Code on the System
16935| [1004541] Compaq Insight Manager May Include a Vulnerable Default Configuration of Microsoft MSDE/SQL Server That Allows Remote Users to Execute Commands on the System
16936| [1004529] Microsoft Remote Access Service (RAS) Phonebook Buffer Overflow May Let Local Users Execute Arbitrary Code with Local System Privileges
16937| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
16938| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
16939| [1004518] Microsoft Proxy Server Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
16940| [1004517] Microsoft Internet Security and Acceleration Server (ISA) Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
16941| [1004486] Microsoft ASP.NET Buffer Overflow in Processing Cookies in StateServer Mode May Let Remote Users Crash the Service or Execute Arbitrary Code on the Server
16942| [1004479] Microsoft Internet Explorer May Execute Remotely Supplied Scripting in the My Computer Zone if FTP Folder Viewing is Enabled
16943| [1004464] Microsoft Internet Explorer Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Victim's Computer
16944| [1004441] Microsoft Windows Help System Buffer Overflows in 'htctrl.ocx' ActiveX Control May Let Remote Users Execute Arbitrary Code on a Target User's Computer By Sending Malicious HTML
16945| [1004436] Microsoft Internet Explorer Allows HTML-Delivered Compiled Help Files to Be Automatically Executed on the Target User's Computer
16946| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
16947| [1004372] Microsoft Excel Spreadsheet XML Stylesheet ActiveX Object Flaw Lets Remote Users Create Malicious Excel Spreadsheets That May Execute Arbitrary Code When Opened With the XML Stylesheet Option
16948| [1004369] Microsoft Active Directory May Have Bug That Allows Remote Users to Crash the Directory
16949| [1004361] Microsoft Date Engine (MSDE) Default Configuration Leaves Blank Password for System Administrator Account
16950| [1004360] Opty-Way Enterprise Glassworks Management Application Installs Microsoft Data Engine Insecurely, Allowing Remote Users to Execute Commands on the System
16951| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
16952| [1004304] Microsoft Internet Explorer (IE) New Content-Disposition Bugs May Let Remote Users Execute Arbitrary Code on the Victim's Computer
16953| [1004300] Microsoft Internet Explorer (IE) Zone Spoofing Hole Lets Remote Users Create HTML That, When Loaded, May Run in a Less-Secure IE Security Zone
16954| [1004290] Microsoft Internet Explorer Bugs in 'BGSOUND' and 'IFRAME' Tags Let Remote Users Create HTML That Will Cause Denial of Service Conditions or Will Access Special DOS Devices
16955| [1004251] Microsoft Exchange Instant Messenger ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
16956| [1004250] Microsoft MSN Messenger Includes an ActiveX Control That Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
16957| [1004249] Microsoft MSN Chat Control ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
16958| [1004236] L.Y.S.I.A.S. Lidik Web Server for Microsoft Windows Systems Lets Remote Users View Files Located Anywhere on the Partition
16959| [1004229] Microsoft Office 'Word Mail Merge' Feature Allows Remote Users to Cause Arbitrary Programs to Be Executed on the Target User's Computer
16960| [1004226] Microsoft MSN Messenger Instant Messaging Client Malformed Header Processing Flaw Lets Remote Users Crash the Client
16961| [1004197] Microsoft Internet Explorer Can Be Crashed By Incorrectly Sized XBM Graphics Files
16962| [1004157] Microsoft Outlook Weak Security Enforcement When Editing Messages with Microsoft Word Lets Remote Users Send Malicious Code to Outlook Recipients That Will Be Executed When Forwarded or Replied To
16963| [1004146] Microsoft Internet Explorer Browser Can Be Crashed By Remote HTML Containing Malicious Image Tags That Cause Infinite Processing Loops
16964| [1004130] Microsoft MSN Messenger Instant Messaging Client Discloses Buddy List to Local Users
16965| [1004121] Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users With OLE OBJECT Element Dependency Loops
16966| [1004109] Microsoft Distributed Transaction Coordinator Can Be Crashed By Remote Users Sending Malformed Packets
16967| [1004090] Microsoft Back Office Web Administration Authentication Mechanism Can Be Bypassed By Remote Users
16968| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
16969| [1004079] Microsoft Internet Explorer (IE) 'dialogArguments' Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against IE Users
16970| [1004051] Microsoft Outlook Express for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
16971| [1004050] Microsoft Office for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
16972| [1004049] Microsoft Internet Explorer for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
16973| [1004048] Microsoft Word Object Creation Flaw Lets Remote Users Create ActiveX That Will Consume Memory on the Victim's Computer
16974| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
16975| [1004014] Microsoft Internet Information Server ASP HTTP Header Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
16976| [1004008] Microsoft Internet Information Server Comes With Code That Allows Remote Users to Conduct Cross-Site Scripting Attacks
16977| [1004005] Microsoft Internet Information Server Buffer Overflow in Chunked Encoding Mechanism Lets Remote Users Run Arbitrary Code on the Server
16978| [1004002] Microsoft Office Web Components Let Remote Users Determine if Specified Files Exist on Another User's Host
16979| [1004001] Microsoft Office Web Components Let Remote Users Gain Full Read and Write Control Over Another User's Clipboard, Even if Clipboard Access Via Scripts is Disabled
16980| [1004000] Microsoft Office Web Components Let Remote Users Write Code to Run in the Victim's Local Security Domain and Access Local or Remote Files
16981| [1003999] Microsoft Office Web Components in Office XP Lets Remote Users Cause Malicious Scripting to Be Executed By Another User's Browser Even If Scripting is Disabled
16982| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
16983| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
16984| [1003948] Microsoft Internet Explorer Cascading Style Sheets (CSS) Invalid Attribute Bug Lets Remote Users Read Portions of Files on the Victim's Computer
16985| [1003932] Microsoft Office XP Active Content Bug Lets Remote Users Cause Code to Be Executed on an Office User's Computer
16986| [1003922] Microsoft Outlook Web Access With SecurID Authentication May Allow Remote Users to Avoid the SecurID Authentication in Certain Cases
16987| [1003915] Microsoft Internet Explorer Browser Security Zone Flaw Lets Remote Users Cause Cookie-based Scripts to Be Executed on Another User's Browser in the Incorrect Security Domain
16988| [1003907] Microsoft Internet Explorer Discloses The Existence of and Details of Local Files to Remote Users
16989| [1003871] Microsoft .NET Unspecified Vulnerabilities May Allow a Remote User to Cause Arbitrary Code to Be Executed on Another User's Systems
16990| [1003856] Microsoft Internet Explorer Can Be Crashed By Malicious 'location.replace' Javascript
16991| [1003839] Microsoft Internet Explorer (IE) 6 Lets Remote Users Cause Files to Be Downloaded and Executed Without the Knowledge or Consent of the Victim
16992| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
16993| [1003800] A Multitude of Microsoft SQL Server Extended Stored Procedures Have Buffer Overflows That Allow Remote Users to Crash the Database Server or Execute Arbitrary Code on the Server to Gain Full Control of the System
16994| [1003764] Microsoft Windows Operating System Shell URL Handler Bug Lets Remote Users Create HTML That Could Cause Arbitrary Code to Be Executed on Another User's System in Certain Situations
16995| [1003756] Microsoft Internet Information Server 4.0 .HTR Web Application Lets Users Change Their Passwords When the NT Security Policy is Configured to Prohibit Password Changing
16996| [1003744] Microsoft SQL Server 'xp_dirtree' Buffer Overflow Lets Users Crash the Database Service
16997| [1003730] Microsoft Java Virtual Machine in Internet Explorer Lets Remote Malicious Applets Redirect Web Proxy Connections
16998| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
16999| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
17000| [1003686] Microsoft Windows SMTP Service Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
17001| [1003685] Microsoft Exchange Server Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
17002| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
17003| [1003633] Microsoft XML Core Services in Microsoft Windows XP Operating System Lets Remote Scripts Access and Send Local Files
17004| [1003630] Microsoft Internet Explorer Has Another Frame Domain Security Bug That Lets Remote Users View Files or Other Personal Information from a Victim's Computer By Using Malicious VBScripts
17005| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
17006| [1003611] Gator Plugin for Microsoft Internet Explorer Lets Remote Users Install Arbitrary Software on the User's Host
17007| [1003605] Microsoft SQL Server Buffer Overflow Lets Remote Users Crash the Server and May Allow Remote Code to Be Executed on the Database Server
17008| [1003597] Microsoft Outlook Web Access Discloses 'Include' Archive Files in the 'lib' Directory to Remote Users
17009| [1003591] Microsoft Windows Terminal Services May Cause the System's Screen Saver Lockout Mechanism to Fail in Certain Situations
17010| [1003582] Microsoft Internet Security Acceleration Server Can Be Affected By Remote Users Conducting a LAND Flood Attack
17011| [1003556] Microsoft Visual C++ Compiler Buffer Security Mode Does Not Eliminate Buffer Overflows in Compiled Applications
17012| [1003546] Microsoft Outlook E-mail Client May Display Potentially Malicious File Attachments Illegally Embedded Within Mail Headers
17013| [1003540] Microsoft Internet Explorer Browser MIME Flaw Causes 'text/plain' Pages to Be Displayed as HTML and Any Embedded Scripting to Be Executed By the Browser
17014| [1003538] NetWin CWMail Web-Mail Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the System With the Privileges of the IIS Web Server
17015| [1003519] Microsoft Internet Explorer (IE) HTML Directive Buffer Overflow Lets Remote Users Cause Arbitrary Code to Be Executed on Another User's Computer
17016| [1003517] Microsoft Internet Explorer (IE) 'Content-Type' Processing Hole Lets Remote Users Open Applications on Another User's Computer
17017| [1003516] Microsoft Internet Explorer (IE) Web Browser Has New Frame Domain Verification Bug That Lets Remote Users Obtain Files from Another User's Local File System
17018| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
17019| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
17020| [1003462] Microsoft Internet Explorer Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
17021| [1003458] Microsoft Office v. X for Mac OS X Can Be Crashed By Remote Users Sending Malformed Product Identification Packets
17022| [1003446] Microsoft Internet Information Server Can Be Stopped By Local Users Removing Virtual Directories in a Shared Hosting Environment
17023| [1003434] Microsoft ASP.NET Web Application Framework Allows Cross Site Scritping Attacks and Discloses Path Information to Remote Users
17024| [1003420] Microsoft Site Server Commerce Edition Discloses Potentially Sensitive Administration Information and Source Code to Remote Users With Valid Accounts and Discloses User Passwords from the LDAP Directory to Anonymous Remote Users
17025| [1003419] Microsoft Site Server Commerce Edition Lets Remote Users With Valid NT Accounts Upload and Then Execute ASP Scripts on the Server or Consume Disk Space on the Server
17026| [1003415] Microsoft Distributed Transaction Coordinator (MSDTC) Service Can Be Crashed By Remote Users
17027| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
17028| [1003369] PGPfire Personal Firewall for Microsoft Windows Discloses Identifying Information to Remote Users
17029| [1003326] Microsoft Internet Explorer for Macintosh OS Executes Remotely Supplied Commands in AppleScripts
17030| [1003310] Microsoft Windows NT/2000 Authentication Lockout Bug May Record Successful Logins as Failed Login Attempts in Certain Situations
17031| [1003308] Microsoft Windows XP Manifest Processing Bug Lets Local Users Corrupt the System and Cause the Boot Process to Fail
17032| [1003257] Microsoft Windows XP Upgrade Effectively Removes Patches from Internet Explorer (IE) During Upgrade, Leaving Users Exposed to IE Vulnerabilities
17033| [1003239] Python Language Implementation on Microsoft Windows Allows a Remote Server to Access Files on a Web Surfing User's PC
17034| [1003228] Microsoft Windows Media Player Discloses Unique ID to Remote Users in the Default Configuration, Allowing Web Sites to Track Users
17035| [1003221] Microsoft Internet Explorer (IE) Default Configuration Allows HTML-based Scripts to Access Your Windows Clipboard Contents
17036| [1003215] Microsoft Internet Explorer Popup Object Tag Flaw Lets Remote Users Execute Programs on the Browser's Host
17037| [1003201] Microsoft Windows 95 Backup Utility Has Buffer Overflow That Could Cause Denial of Service Conditions
17038| [1003135] Microsoft Internet Explorer Can Be Crashed By Remote Users With Javascript That Calls an Endless Loop of Modeless Dialogs
17039| [1003121] Microsoft Windows XP Task Manager Will Not Kill Certain Processes
17040| [1003109] Microsoft Internet Explorer (IE) May Allow Malicious Javascript to Poll a User's System for Known Files
17041| [1003084] Microsoft Internet Explorer GetObject() Active Scripting Bug Lets Remote Code Access Files on the PC
17042| [1003050] Microsoft Internet Explorer Web Browser Can Be Crashed By Malicious Image Source Tag Javascript Supplied By Remote Users
17043| [1003049] Microsoft Internet Explorer (IE) Text Form Processing Flaw May Cause IE to Crash
17044| [1003043] PGP Plug-in For Microsoft Outlook May Fail to Encrypt E-mail in Certain Situations
17045| [1003042] Microsoft Internet Explorer Web Browser SSL Security Flaw Lets Remote Users Conduct Man-in-the-Middle Attacks to Access Sensitive Information
17046| [1003041] Microsoft Windows XP Remote Desktop Client May Disclose Recently Used Account Names to Remote Users
17047| [1003040] Microsoft Excel Password Protection Flaw Lets Local Users Obtain Contents of Password-Protect Cells
17048| [1003033] Microsoft C Runtime Format String Flaw Lets Remote Users Crash the Microsoft SQL Server Service
17049| [1003032] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code in the Security Context of the SQL Server
17050| [1003028] Microsoft Windows Universal Plug and Play Component Buffer Overflow Gives Remote Users System Level Access to Windows XP and 98/ME Hosts
17051| [1003024] Microsoft Internet Explorer (IE) Web Browser 'document.open()' Scripting Flaw Lets Remote Users Steal Cookies, Read Local Files, and Spoof Web Sites
17052| [1003003] Microsoft Windows XP Hot Key Function Lets Physically Local Users Execute Administrator Hot Key Functions in Certain Situations
17053| [1002986] Microsoft Internet Explorer Version 6 Lets Remote Scripts Access and Send Local Files
17054| [1002979] Microsoft Windows Explorer Discloses Stored FTP Passwords to Local Users
17055| [1002973] Microsoft Internet Explorer (IE 6) Browser May Automatically and Silently Execute Arbitrary Code from a Remote Web Site When the User Views a Web Page or HTML-based E-mail
17056| [1002957] Microsoft Internet Information Server Can Be Crashed By Remote Users With HTTP Requests Containing Invalid Content-Length Values
17057| [1002942] Microsoft Internet Explorer May Execute Javascript Contained Within an 'About:' URL in an Unauthorized Security Domain When the URL Contains an Extraneous '%' Character
17058| [1002926] Microsoft Windows Operating System File Locking Design May Allow Local Users to Block Group Policy Scripts
17059| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
17060| [1002919] Microsoft Internet Explorer Browser Can Be Crashed By Certain Image Tags
17061| [1002915] Microsoft Outlook Web Access for Exchange May Execute Remotely Supplied Scripts When a Recipient Views a Malicious E-mail Message
17062| [1002885] Microsoft Internet Explorer Can Be Crashed By Malicious Javascript Causing a Stack Overflow in setTimeout() Function
17063| [1002823] Microsoft Internet Explorer Fails to Enforce Cookie Prompting Preferences for Local Security Zone
17064| [1002820] Microsoft Internet Explorer Allows Malicious Web Pages to Spoof Downloadable File Types And Execute Code on the User's Computer When Opened Directly from the Browser
17065| [1002819] Microsoft Internet Explorer ActiveX Flaw Permits Remote Malicious HTML Code Containing an 'htmlfile' or 'htmlfile_FullWindowEmbed' Object to Access Local Files and Potentially Execute Commands
17066| [1002802] Microsoft Help and Support Center Software (helpctr.exe) Has Buffer Overflow That May Allow a Remote User to Cause Arbitrary Code to Be Executed on a User's PC
17067| [1002773] Titan Application Firewall for IIS Web Server Fails to Decode URLs, Letting Remote Users Bypass URL-based Firewall Restrictions
17068| [1002772] Microsoft Internet Explorer Cookie Disclosure Fix Discloses Patch Information to Remote Users
17069| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
17070| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
17071| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
17072| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
17073| [1002728] Microsoft SQL Server May Disclose Database Passwords When Creating Data Transformation Service (DTS) Packages
17074| [1002702] Microsoft Passport May Disclose Wallet Contents, Including Credit Card and Contact Information, to Remote Users
17075| [1002693] Microsoft Internet Security and Acceleration Server UDP Fragmentation Processing Can Cause 100% of CPU Resources to Be Consumed
17076| [1002601] Microsoft Windows Me Universal Plug and Play (UPnP) Ssdpsrv.exe Server Component Can Be Crashed by Remote Users
17077| [1002595] Microsoft Internet Explorer Has Fixed Security Zone for about: URLs and Has Shared Cookie Flaw That Diminishes Cross-Site Scripting Protections
17078| [1002594] Microsoft Internet Explorer for Mac OS X is Configured to Automatically Execute Downloaded Files
17079| [1002581] Microsoft Terminal Servers Can Be Crashed By Remote Users Sending Certain Remote Desktop Protocol (RDP) Packets
17080| [1002560] Internet Explorer Sends Potentially Sensitive Web Browser Contents to Microsoft via the Network When an Error Occurs
17081| [1002559] Microsoft Office XP Sends Potentially Sensitive Information to Microsoft Via the Network When an Error Occurs
17082| [1002526] Microsoft Internet Explorer (IE) Web Browser Has Multiple URL-related Flaws That May Allow for Remote Code Execution, Remote HTTP Request Generation, and Application of Incorrect Security Restrictions
17083| [1002519] TYPSoft FTP Server for Microsoft Windows Can Be Crashed by Remote Users
17084| [1002487] Microsoft PowerPoint Macro Security Features Can Be Bypassed by Malformed PowerPoint Documents
17085| [1002486] Microsoft Excel Macro Security Features Can Be Bypassed by Malformed Excel Documents
17086| [1002456] Microsoft Outlook Web Access Directory Validation Flaw Lets Remote Users Consume CPU Resources by Requesting Mail from Nested Folders
17087| [1002421] Microsoft Index Server Sample File Discloses File Information to Remote Users
17088| [1002418] Counterpane's Password Safe Password Encryption Utility for Microsoft Windows May Disclose Passwords to Local Users in Certain Situations
17089| [1002413] Microsoft Outlook Express Will Execute Active Scripting in Plain Text E-mail Messages, Circumventing Some Scripting Controls
17090| [1002394] Microsoft Windows NT Remote Procedure Call (RPC) Services Can Be Crashed With Malformed Packets
17091| [1002385] Norton Anti-Virus For Microsoft Exchange Discloses User Path Information to Remote Users
17092| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
17093| [1002331] Internet Security Systems RealSecure Intrusion Detection Misses '%u' Encoded Attacks Against Microsoft Web Servers
17094| [1002330] Cisco Catalyst 6000 Intrusion Detection System Module Fails to Detect '%u' Encoding Obfuscation Attacks Against Microsoft Web Servers
17095| [1002329] Dragon Sensor Intrusion Detection System Does Not Detect Certain Attacks Against Microsoft Web Servers
17096| [1002327] Snort Network Intrusion Detection System Will Not Detect '%u' URL Encoding Attacks Against Microsoft Web Servers
17097| [1002326] Cisco Secure Intrusion Detection System (NetRanger) Fails to Detect Certain Attacks Against Microsoft Web Servers
17098| [1002317] Microsoft DNS Server Software Susceptible to DNS Cache Poisoning in Default Configuration, Allowing Remote Users to Inject False DNS Records in Certain Situations
17099| [1002269] Microsoft Outlook Web Access with SSL Can Be Crashed by Remote Users
17100| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
17101| [1002201] Microsoft Windows TCP/IP Stack Vulnerable to a Certain Man-in-the-Middle Denial of Service Attack
17102| [1002197] Microsoft Windows NNTP Network News Service Has a Memory Leak That Allows Remote Users to Cause the Server to Crash
17103| [1002124] Microsoft Windows 98 Operating System Can Be Crashed When Running a Web Server or Other Servers And the AUX Device is Accessed By the Program
17104| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
17105| [1002105] Microsoft SQL Database Server RPC Input Validation Failure Lets Remote Users Crash the Database Service
17106| [1002104] Microsoft Exchange Server RPC Input Validation Failure Lets Remote Users Crash the Exchange Service
17107| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
17108| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
17109| [1002075] Microsoft Services for Unix Memory Leak in Telnet and NFS Services Allows Remote Users to Crash the Operating System
17110| [1002028] Microsoft Exchange LDAP Service Can Be Crashed By Remote Users
17111| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
17112| [1001992] Microsoft Windows NT Lets Remote Users Cause Increased Packet Overhead and Increased CPU Resource Consumption
17113| [1001984] Microsoft Outlook Allows Rogue HTML to Execute Arbitrary Commands on the User's Host
17114| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
17115| [1001923] Microsoft's Internet Information Server's ASP Processor Can Be Crashed by Remote Users in Certain Situations
17116| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
17117| [1001819] Microsoft NetMeeting Can Be Crashed By Remote Users
17118| [1001816] Microsoft Visual Studio RAD Support Component of FrontPage Lets Remote Users Execute Arbitrary Code on the FrontPage Server
17119| [1001815] Microsoft Word May Execute Macros in Malformed Word Documents Without Warning Even if Macros are Disabled
17120| [1001775] Microsoft Index Server Lets Remote Users Execute Arbitrary Code With System Level Privileges, Giving Remote Users Full Control of the Operating System
17121| [1001734] Microsoft SQL Server May Let Remote Authenticated Users Take Full Control of the Database Server and the Underlying Operating System
17122| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
17123| [1001699] Microsoft Internet Explorer Web Browser May Allow Remote Users to Read Some Text Files on the Browser's Hard Drive
17124| [1001696] Microsoft Exchange Server's Outlook Web Access (OWA) Lets Remote Users Execute Arbitrary Code on the OWA User's Web Browser
17125| [1001687] Microsoft Outlook Express May Allow A Remote User to Obtain E-mail Destined for a Different User
17126| [1001661] Microsoft Hotmail May Allow a Worm to Send Mail to Other Destinations Listed in a Remote User's Inbox
17127| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
17128| [1001603] Microsoft Windows Media Player May Allow Remote Users to Execute Code Contained in Internet Shortcuts and View Files on the Media Player's Host
17129| [1001587] Microsoft Word for Windows and for Mac May Run Macros Linked By RTF Documents Without Warning
17130| [1001572] Apache Web Server on Microsoft Windows Platforms Allows Remote Users to Crash the Web Server
17131| [1001562] Microsoft Internet Explorer Allows Remote Web Sites to Cause a Different Web URL Address to Be Displayed in the Browser's Address Bar, Allowing Rogue Web Sites to Spoof the Browser and Masquerade as Different Web Sites
17132| [1001561] Microsoft Internet Explorer Web Browser Fails To Validate Digital Certificates in Some Configurations, Allowing Rogue Secure Web Sites to Spoof the Browser and Masquerade as a Different Secure Web Site
17133| [1001538] Older Version of Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users
17134| [1001537] Microsoft's Internet Information Server's FTP Services May Give Remote Users Information About User Account Names on the Server's Domain and Trusted Domains
17135| [1001535] Microsoft's Internet Information Server's FTP Services Can Be Crashed By Remote Users
17136| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
17137| [1001512] Microsoft Index Server for NT Can Be Crashed By Local Users, Allows Local Users to Execute Arbitrary Code With System Level Privileges, and Lets Remote Users View Certain Include Files
17138| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
17139| [1001467] Microsoft Windows Media Player ASX Processing Vulnerability Lets Remote Users Execute Arbitrary Code on the Player's Host System
17140| [1001445] Microsoft Internet Security and Acceleration Server May Allow Remote Users to Execute Arbitrary Code on the Firewall
17141| [1001424] Microsoft Internet Explorer Can Consume All Memory Due to Malicious HTML Code
17142| [1001380] Microsoft Internet Explorer and Outlook Express May Execute Arbitrary Code Without User Authorization or Intervention
17143| [1001360] Microsoft Windows Operating System DLL May Allow Malicious Remote Scripts to Run Code on the User's Host Without the User's Intervention
17144| [1001344] Microsoft Internet Explorer May Not Display File Extensions in Certain Cases
17145| [1001330] Microsoft ActiveSync Software for Portable Computing Devices Allows Portable Devices to Access Files on a Locked Server
17146| [1001319] Microsoft Internet Security and Acceleration Server Can Be Crashed By Remote Users
17147| [1001311] Netscape's SmartDownload Can Automatically Execute Arbitrary Code Without User Intervention or Knowledge for Both Netscape and Microsoft Browsers
17148| [1001255] Microsoft's Ping.exe Allows Local Users to Cause Certain Applications to Crash
17149| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
17150| [1001221] E-Mail Clients that use Microsoft Internet Explorer to Process HTML May Disguise Executable Attachments as Data Files
17151| [1001219] Microsoft's Internet Security and Acceleration Server Performance Can Be Significantly Affected By Remote Users Under Certain Configurations
17152| [1001216] Microsoft Internet Explorer Can Be Made to Execute Arbitrary Files on the User's Computer
17153| [1001211] TrendMicro's ScanMail E-Mail Virus Scanner for Microsoft Exchange Discloses Administrative System Usernames and Passwords
17154| [1001210] Microsoft Internet Explorer Allows Malicious Web Pages to Retrieve Files from the User's Computer
17155| [1001209] Microsoft Telnet Can Be Crashed Locally, Causing Other Applications Including Outlook Express To Crash
17156| [1001197] Microsoft Internet Explorer May Automatically Execute Certain E-mail Attachments
17157| [1001187] Microsoft Internet Explorer Is Vulnerable to Malicious Web Pages That May Obtain the User's Exchange E-mail Messages and May Access Restricted Web Server Directory Listings
17158| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
17159| [1001172] Microsoft Visual Studio Could Allow Users to Crash the Debugger or to Execute Code on the Server
17160| [1001163] Microsoft's Dr. Watson Diagnostic Utility May Reveal Passwords and Other Sensitive Information
17161| [1001147] Microsoft Outlook Express Crashes When Reading Certain E-mail Messages
17162| [1001142] Microsoft Internet Explorer Does Not Check for Revoked Digital Certificates (Two Fraudlent Certificates Are Known to Exist)
17163| [1001139] SurfControl for Microsoft Proxy Server May Fail to Block Sites
17164| [1001123] Microsoft's FTP Server May Allow Remote Users to Deny Service on the Server
17165| [1001110] A Microsoft German-Language Hotfix for Windows NT 4 Incorrectly Displays Some Security Events as Other Security Events
17166| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
17167|
17168| OSVDB - http://www.osvdb.org:
17169| [91195] Microsoft Windows 7 Unspecified ASLR Protection Mechanism Bypass
17170| [91194] Microsoft Windows 7 Kernel Unspecified Local Privilege Escalation (pwn2own)
17171| [91193] Microsoft Windows 7 Unspecified ASLR / DEP Protection Mechanism Bypass (pwn2own)
17172| [85619] Microsoft Windows Phone 7 X.509 Certificate Subject's Common Name (CN) Field Domain Name Validation Multiple Protocol SSL Server MitM Spoofing Weakness
17173| [67783] Microsoft Windows SDK for Windows 7 / .NET Framework 4 GraphEdit Path Subversion Arbitrary DLL Injection Code Execution
17174| [87555] Adobe ColdFusion for Microsoft IIS Unspecified DoS
17175| [87262] Microsoft IIS FTP Command Injection Information Disclosure
17176| [87261] Microsoft IIS Log File Permission Weakness Local Password Disclosure
17177| [86899] Microsoft IIS 302 Redirect Message Internal IP Address Remote Disclosure
17178| [83771] Microsoft IIS Tilde Character Request Parsing File / Folder Name Information Disclosure
17179| [83454] Microsoft IIS ODBC Tool ctguestb.idc Unauthenticated Remote DSN Initialization
17180| [83386] Microsoft IIS Non-existent IDC File Request Web Root Path Disclosure
17181| [82848] Microsoft IIS $INDEX_ALLOCATION Data Stream Request Authentication Bypass
17182| [76237] Microsoft Forefront Unified Access Gateway IIS NULL Session Cookie Parsing Remote DoS
17183| [71856] Microsoft IIS Status Header Handling Remote Overflow
17184| [70167] Microsoft IIS FTP Server Telnet IAC Character Handling Overflow
17185| [67980] Microsoft IIS Unspecified Remote Directory Authentication Bypass
17186| [67979] Microsoft IIS FastCGI Request Header Handling Remote Overflow
17187| [67978] Microsoft IIS Repeated Parameter Request Unspecified Remote DoS
17188| [66160] Microsoft IIS Basic Authentication NTFS Stream Name Permissions Bypass
17189| [65216] Microsoft IIS Extended Protection for Authentication Memory Corruption
17190| [62229] Microsoft IIS Crafted DNS Response Inverse Lookup Log Corruption XSS
17191| [61432] Microsoft IIS Colon Safe Extension NTFS ADS Filename Syntax Arbitrary Remote File Creation
17192| [61294] Microsoft IIS ASP Crafted semicolon Extension Security Bypass
17193| [61249] Microsoft IIS ctss.idc table Parameter SQL Injection
17194| [59892] Microsoft IIS Malformed Host Header Remote DoS
17195| [59621] Microsoft IIS CodeBrws.asp Off-By-One File Check Bypass Source Disclosure
17196| [59561] Microsoft IIS CodeBrws.asp Encoded Traversal Arbitrary File Source Disclosure
17197| [59360] Microsoft IIS ASP Page Visual Basic Script Malformed Regex Parsing DoS
17198| [57753] Microsoft IIS FTP Server Crafted Recursive Listing Remote DoS
17199| [57589] Microsoft IIS FTP Server NLST Command Remote Overflow
17200| [56474] Microsoft IIS WebDAV Extension URL Decode Crafted HTTP Request Authentication Bypass
17201| [55269] Microsoft IIS Traversal GET Request Remote DoS
17202| [54555] Microsoft IIS WebDAV Unicode URI Request Authentication Bypass
17203| [52924] Microsoft IIS WebDAV PROPFIND Method Forced Directory Listing
17204| [52680] Microsoft IIS httpext.dll WebDav LOCK Method Nonexistent File Request Parsing Memory Exhaustion Remote DoS
17205| [52238] Microsoft IIS IDC Extension XSS
17206| [49899] Microsoft IIS iissext.dll Unspecified ActiveX SetPassword Method Remote Password Manipulation
17207| [49730] Microsoft IIS ActiveX (adsiis.dll) GetObject Method Remote DoS
17208| [49059] Microsoft IIS IPP Service Unspecified Remote Overflow
17209| [45583] Microsoft IIS w/ Visual Interdev Unspecified Authentication Bypass
17210| [43451] Microsoft IIS HTTP Request Smuggling
17211| [41456] Microsoft IIS File Change Handling Local Privilege Escalation
17212| [41445] Microsoft IIS ASP Web Page Input Unspecified Arbitrary Code Execution
17213| [41091] Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass
17214| [41063] Microsoft IIS ODBC Tool newdsn.exe Remote DSN Creation
17215| [41057] Microsoft IIS w/ .NET MS-DOS Device Request Blacklist Bypass
17216| [35950] Microsoft IIS IUSR_Machine Account Arbitrary Non-EXE Command Execution
17217| [33457] Microsoft IIS Crafted TCP Connection Range Header DoS
17218| [28260] Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
17219| [27152] Microsoft Windows IIS ASP Page Processing Overflow
17220| [27087] Microsoft IIS SMTP Encapsulated SMTP Address Open Relay
17221| [23590] Microsoft IIS Traversal Arbitrary FPSE File Access
17222| [21805] Microsoft IIS Crafted URL Remote DoS
17223| [21537] Microsoft IIS Log File Permission Weakness Remote Modification
17224| [18926] Microsoft IIS SERVER_NAME Variable Spoofing Filter Bypass
17225| [17124] Microsoft IIS Malformed WebDAV Request DoS
17226| [17123] Microsoft IIS Multiple Unspecified Admin Pages XSS
17227| [17122] Microsoft IIS Permission Weakness .COM File Upload
17228| [15749] Microsoft IIS / Site Server code.asp Arbitrary File Access
17229| [15342] Microsoft IIS Persistent FTP Banner Information Disclosure
17230| [14229] Microsoft IIS asp.dll Scripting.FileSystemObject Malformed Program DoS
17231| [13985] Microsoft IIS Malformed HTTP Request Log Entry Spoofing
17232| [13760] Microsoft IIS Malformed URL Request DoS
17233| [13759] Microsoft IIS ISAPI .ASP Parser Script Tag LANGUAGE Argument Overflow
17234| [13634] Microsoft IIS Inetinfo.exe Malformed Long Mail File Name DoS
17235| [13558] Microsoft IIS SSL Request Resource Exhaustion DoS
17236| [13507] Microsoft IIS showfile.asp FileSystemObject Arbitrary File Access
17237| [13479] Microsoft IIS for Far East Parsed Page Source Disclosure
17238| [13473] Microsoft IIS on FAT Partition Local ASP Source Disclosure
17239| [13439] Microsoft IIS HTTP Request Malformed Content-Length Parsing Remote DoS
17240| [13433] Microsoft IIS WebDAV MKCOL Method Location Server Header Internal IP Disclosure
17241| [13432] Microsoft IIS WebDAV WRITE Location Server Header Internal IP Disclosure
17242| [13431] Microsoft IIS WebDAV Malformed PROPFIND Request Internal IP Disclosure
17243| [13430] Microsoft IIS aexp4.htr Password Policy Bypass
17244| [13429] Microsoft IIS aexp3.htr Password Policy Bypass
17245| [13428] Microsoft IIS aexp2b.htr Password Policy Bypass
17246| [13427] Microsoft IIS aexp2.htr Password Policy Bypass
17247| [13426] Microsoft IIS NTLM Authentication Request Parsing Remote Information Disclosure
17248| [13385] Microsoft IIS WebDAV Long PROPFIND/SEARCH Request DoS
17249| [11455] Microsoft IIS / PWS DOS Filename Request Access Bypass
17250| [11452] Microsoft IIS Double Byte Code Arbitrary Source Disclosure
17251| [11277] Microsoft IIS SSL ISAPI Filter Cleartext Information Disclosure
17252| [11257] Microsoft IIS Malformed GET Request DoS
17253| [11157] Microsoft IIS FTP Service PASV Connection Saturation DoS
17254| [11101] Microsoft IIS Multiple Slash ASP Page Request DoS
17255| [9315] Microsoft IIS getdrvs.exe ODBC Sample Information Disclosure
17256| [9314] Microsoft IIS mkilog.exe ODBC Sample Arbitrary Command Execution
17257| [9200] Microsoft IIS Unspecified XSS Variant
17258| [9199] Microsoft IIS shtml.dll XSS
17259| [8098] Microsoft IIS Virtual Directory ASP Source Disclosure
17260| [7807] Microsoft IIS ISAPI Virtual Directory UNC Mapping ASP Source Disclosure
17261| [7737] Microsoft IIS ASP Redirection Function XSS
17262| [7265] Microsoft IIS .ASP Session ID Disclosure and Hijacking
17263| [5851] Microsoft IIS Single Dot Source Code Disclosure
17264| [5736] Microsoft IIS Relative Path System Privilege Escalation
17265| [5693] Microsoft MS00-060 Patch IIS Malformed Request DoS
17266| [5633] Microsoft IIS Invalid WebDAV Request DoS
17267| [5606] Microsoft IIS WebDAV PROPFIND Request DoS
17268| [5584] Microsoft IIS URL Redirection Malformed Length DoS
17269| [5566] Microsoft IIS Form_VBScript.asp XSS
17270| [5316] Microsoft IIS ISAPI HTR Chunked Encoding Overflow
17271| [4864] Microsoft IIS TRACK Logging Failure
17272| [4863] Microsoft IIS Active Server Page Header DoS
17273| [4791] Microsoft IIS Response Object DoS
17274| [4655] Microsoft IIS ssinc.dll Long Filename Overflow
17275| [4535] Microsoft Media Services ISAPI nsiislog.dll POST Overflow
17276| [3512] Microsoft IIS ODBC Tool getdrvrs.exe Remote DSN Creation
17277| [3500] Microsoft IIS fpcount.exe Remote Overflow
17278| [3341] Microsoft IIS Redirect Response XSS
17279| [3339] Microsoft IIS HTTP Error Page XSS
17280| [3338] Microsoft IIS Help File XSS
17281| [3328] Microsoft IIS FTP Status Request DoS
17282| [3326] Microsoft IIS w3svc.dll ISAPI Filter URL Handling Remote DoS
17283| [3325] Microsoft IIS HTR ISAPI Overflow
17284| [3323] Microsoft IIS ISAPI .printer Extension Host Header Overflow
17285| [3320] Microsoft IIS ASP Server-Side Include Buffer Overflow
17286| [3316] Microsoft IIS HTTP Header Field Delimiter Overflow
17287| [3301] Microsoft IIS ASP Chunked Encoding Variant Heap Overflow
17288| [3284] Microsoft IIS Winmsdp.exe Arbitrary File Retrieval
17289| [3231] Microsoft IIS Log Bypass
17290| [2106] Microsoft Media Services ISAPI nsiislog.dll Overflow
17291| [1931] Microsoft IIS MIME Content-Type Header DoS
17292| [1930] Microsoft IIS SSI ssinc.dll Filename Handling Overflow
17293| [1826] Microsoft IIS Domain Guest Account Disclosure
17294| [1824] Microsoft IIS FTP DoS
17295| [1804] Microsoft IIS Long Request Parsing Remote DoS
17296| [1770] Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS
17297| [1750] Microsoft IIS File Fragment Disclosure
17298| [1543] Microsoft NT/IIS Invalid URL Request DoS
17299| [1504] Microsoft IIS File Permission Canonicalization Bypass
17300| [1465] Microsoft IIS .htr Missing Variable DoS
17301| [1325] Microsoft IIS Malformed Filename Request File Fragment Disclosure
17302| [1322] Microsoft IIS Malformed .htr Request DoS
17303| [1281] Microsoft IIS Escaped Character Saturation Remote DoS
17304| [1261] Microsoft IIS Chunked Transfer Encoding Remote Overflow DoS
17305| [1210] Microsoft IIS WebHits.dll ISAPI Filter Traversal Arbitrary File Access
17306| [1170] Microsoft IIS Escape Character URL Access Bypass
17307| [1083] Microsoft IIS FTP NO ACCESS Read/Delete File
17308| [1082] Microsoft IIS Domain Resolution Access Bypass
17309| [1041] Microsoft IIS Malformed HTTP Request Header DoS
17310| [1020] Microsoft IIS ISAPI GetExtensionVersion() Privilege Escalation
17311| [930] Microsoft IIS Shared ASP Cache Information Disclosure
17312| [929] Microsoft IIS FTP Server NLST Command Overflow
17313| [928] Microsoft IIS Long Request Log Evasion
17314| [815] Microsoft IIS ASP.NET trace.axd Application Tracing Information Disclosure
17315| [814] Microsoft IIS global.asa Remote Information Disclosure
17316| [782] Microsoft IIS / Site Server codebrws.asp Arbitrary File Access
17317| [771] Microsoft IIS Hosting Process (dllhost.exe) Out of Process Application Unspecified Privilege Escalation
17318| [768] Microsoft IIS ASP Chunked Encoding Heap Overflow
17319| [636] Microsoft IIS sqlqhit.asp Sample Script CiScope Parameter Information Disclosure
17320| [630] Microsoft IIS Multiple Malformed Header Field Internal IP Address Disclosure
17321| [568] Microsoft IIS idq.dll IDA/IDQ ISAPI Remote Overflow
17322| [564] Microsoft IIS ISM.dll Fragmented Source Disclosure
17323| [556] Microsoft IIS/PWS Encoded Filename Arbitrary Command Execution
17324| [525] Microsoft IIS Webserver Invalid Filename Request Arbitrary Command Execution
17325| [482] Microsoft IIS FrontPage Server Extensions (FPSE) Malformed Form DoS
17326| [475] Microsoft IIS bdir.htr Arbitrary Directory Listing
17327| [474] Microsoft IIS / Site Server viewcode.asp Arbitrary File Access
17328| [473] Microsoft IIS Multiple .cnf File Information Disclosure
17329| [471] Microsoft IIS ServerVariables_Jscript.asp Path Disclosure
17330| [470] Microsoft IIS Form_JScript.asp XSS
17331| [463] Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow
17332| [436] Microsoft IIS Unicode Remote Command Execution
17333| [425] Microsoft IIS WebDAV SEARCH Method Arbitrary Directory Forced Listing
17334| [391] Microsoft IIS IDA/IDQ Document Root Path Disclosure
17335| [390] Microsoft IIS Translate f: Request ASP Source Disclosure
17336| [308] Microsoft IIS Malformed File Extension URL DoS
17337| [285] Microsoft IIS repost.asp File Upload
17338| [284] Microsoft IIS IISADMPWD Virtual Directory Information Enumeration
17339| [283] Microsoft IIS /iissamples Multiple Sample Scripts Installed
17340| [277] Microsoft IIS / PWS %2e Request ASP Source Disclosure
17341| [276] Microsoft IIS ASP::$DATA Stream Request ASP Source Disclosure
17342| [275] Microsoft IIS newdsn.exe Remote Arbitrary File Creation
17343| [274] Microsoft IIS ctss.idc ODBC Sample Arbitrary Command Execution
17344| [273] Microsoft IIS Upgrade ism.dll Local Privilege Escalation
17345| [272] Microsoft IIS MDAC RDS Arbitrary Remote Command Execution
17346| [271] Microsoft IIS WebHits null.htw .asp Source Disclosure
17347| [98] Microsoft IIS perl.exe HTTP Path Disclosure
17348| [97] Microsoft IIS ISM.DLL HTR Request Overflow
17349| [96] Microsoft IIS idq.dll Traversal Arbitrary File Access
17350| [7] Microsoft IIS / Site Server showcode.asp source Parameter Traversal Arbitrary File Access
17351| [4] Microsoft IIS ExAir advsearch.asp Direct Request Remote DoS
17352| [3] Microsoft IIS ExAir query.asp Direct Request Remote DoS
17353| [2] Microsoft IIS ExAir search.asp Direct Request DoS
17354|_
17355Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
17356Device type: general purpose|specialized|phone
17357Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
17358OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1
17359Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows Embedded Standard 7 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%)
17360No exact OS matches for host (test conditions non-ideal).
17361Network Distance: 13 hops
17362Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
17363
17364TRACEROUTE (using port 443/tcp)
17365HOP RTT ADDRESS
173661 186.71 ms 10.247.200.1
173672 187.98 ms 213.184.122.97
173683 192.33 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
173694 192.38 ms bzq-219-189-185.dsl.bezeqint.net (62.219.189.185)
173705 192.79 ms bzq-114-65-2.cust.bezeqint.net (192.114.65.2)
173716 246.83 ms bzq-219-189-2.dsl.bezeqint.net (62.219.189.2)
173727 248.18 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
173738 241.39 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
173749 240.61 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
1737510 269.27 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
1737611 248.74 ms s13-49.stratogen.net (109.233.49.13)
1737712 242.12 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
1737813 241.71 ms s10-140-54-212.cust.stratogen.net (212.54.140.10)
17379#######################################################################################################################################
17380https://212.54.140.10 [302 Found] ASP_NET, Country[UNITED KINGDOM][GB], HTTPServer[, ], IP[212.54.140.10], RedirectLocation[https://jobtrain.co.uk], Title[Object moved], UncommonHeaders[alternatehostname,x-content-type-options], X-Frame-Options[ALLOW-FROM https://www.jobtrain.co.uk/], X-Powered-By[Jobtrain], X-XSS-Protection[1; mode=block]
17381https://jobtrain.co.uk [200 OK] Apache, Country[UNITED KINGDOM][GB], Email[enquiries@jobtrain.co.uk], Google-Analytics[UA-12529237-3], HTML5, HTTPServer[Apache], IP[87.247.244.117], JQuery, Open-Graph-Protocol[website], Script[application/ld+json,text/javascript], Title[Applicant Tracking System UK | Online Candidate Management | Jobtrain], UncommonHeaders[link,upgrade], WordPress, X-UA-Compatible[IE=9]
17382#######################################################################################################################################
17383Version: 1.11.13-static
17384OpenSSL 1.0.2-chacha (1.0.2g-dev)
17385
17386Connected to 212.54.140.10
17387
17388Testing SSL server 212.54.140.10 on port 443 using SNI name 212.54.140.10
17389
17390 TLS Fallback SCSV:
17391Server does not support TLS Fallback SCSV
17392
17393 TLS renegotiation:
17394Secure session renegotiation supported
17395
17396 TLS Compression:
17397Compression disabled
17398
17399 Heartbleed:
17400TLS 1.2 not vulnerable to heartbleed
17401TLS 1.1 not vulnerable to heartbleed
17402TLS 1.0 not vulnerable to heartbleed
17403
17404 Supported Server Cipher(s):
17405Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-521 DHE 521
17406Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
17407Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-521 DHE 521
17408Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
17409Accepted TLSv1.2 256 bits AES256-SHA256
17410Accepted TLSv1.2 256 bits AES256-SHA
17411Accepted TLSv1.2 128 bits AES128-SHA256
17412Accepted TLSv1.2 128 bits AES128-SHA
17413Accepted TLSv1.2 112 bits DES-CBC3-SHA
17414Preferred TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
17415Accepted TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
17416Accepted TLSv1.1 256 bits AES256-SHA
17417Accepted TLSv1.1 128 bits AES128-SHA
17418Accepted TLSv1.1 112 bits DES-CBC3-SHA
17419Preferred TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-521 DHE 521
17420Accepted TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-521 DHE 521
17421Accepted TLSv1.0 256 bits AES256-SHA
17422Accepted TLSv1.0 128 bits AES128-SHA
17423Accepted TLSv1.0 112 bits DES-CBC3-SHA
17424
17425 SSL Certificate:
17426Signature Algorithm: sha256WithRSAEncryption
17427RSA Key Strength: 2048
17428
17429Subject: www.jobtrain.co.uk
17430Altnames: DNS:www.jobtrain.co.uk, DNS:jobtrain.co.uk
17431Issuer: DigiCert SHA2 Extended Validation Server CA
17432
17433Not valid before: Aug 13 00:00:00 2018 GMT
17434Not valid after: Nov 11 12:00:00 2019 GMT
17435#######################################################################################################################################
17436Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:40 EDT
17437NSE: Loaded 45 scripts for scanning.
17438NSE: Script Pre-scanning.
17439NSE: Starting runlevel 1 (of 2) scan.
17440Initiating NSE at 06:40
17441Completed NSE at 06:40, 0.00s elapsed
17442NSE: Starting runlevel 2 (of 2) scan.
17443Initiating NSE at 06:40
17444Completed NSE at 06:40, 0.00s elapsed
17445Initiating Ping Scan at 06:40
17446Scanning 212.54.140.10 [4 ports]
17447Completed Ping Scan at 06:40, 0.29s elapsed (1 total hosts)
17448Initiating Parallel DNS resolution of 1 host. at 06:40
17449Completed Parallel DNS resolution of 1 host. at 06:40, 0.03s elapsed
17450Initiating Connect Scan at 06:40
17451Scanning s10-140-54-212.cust.stratogen.net (212.54.140.10) [65535 ports]
17452Discovered open port 8080/tcp on 212.54.140.10
17453Discovered open port 80/tcp on 212.54.140.10
17454Discovered open port 443/tcp on 212.54.140.10
17455Connect Scan Timing: About 7.54% done; ETC: 06:47 (0:06:20 remaining)
17456Connect Scan Timing: About 25.07% done; ETC: 06:44 (0:03:02 remaining)
17457Connect Scan Timing: About 47.71% done; ETC: 06:43 (0:01:40 remaining)
17458Connect Scan Timing: About 73.91% done; ETC: 06:43 (0:00:43 remaining)
17459Completed Connect Scan at 06:42, 147.49s elapsed (65535 total ports)
17460Initiating Service scan at 06:42
17461Scanning 3 services on s10-140-54-212.cust.stratogen.net (212.54.140.10)
17462Completed Service scan at 06:43, 22.05s elapsed (3 services on 1 host)
17463Initiating OS detection (try #1) against s10-140-54-212.cust.stratogen.net (212.54.140.10)
17464Retrying OS detection (try #2) against s10-140-54-212.cust.stratogen.net (212.54.140.10)
17465Initiating Traceroute at 06:43
17466Completed Traceroute at 06:43, 6.28s elapsed
17467Initiating Parallel DNS resolution of 11 hosts. at 06:43
17468Completed Parallel DNS resolution of 11 hosts. at 06:43, 0.32s elapsed
17469NSE: Script scanning 212.54.140.10.
17470NSE: Starting runlevel 1 (of 2) scan.
17471Initiating NSE at 06:43
17472Completed NSE at 06:43, 14.13s elapsed
17473NSE: Starting runlevel 2 (of 2) scan.
17474Initiating NSE at 06:43
17475Completed NSE at 06:43, 0.00s elapsed
17476Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
17477Host is up, received syn-ack ttl 112 (0.18s latency).
17478Scanned at 2019-08-07 06:40:20 EDT for 195s
17479Not shown: 65529 filtered ports
17480Reason: 65529 no-responses
17481PORT STATE SERVICE REASON VERSION
1748225/tcp closed smtp conn-refused
1748380/tcp open http syn-ack Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
17484|_http-server-header: <empty>
17485| vulscan: VulDB - https://vuldb.com:
17486| [131683] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Win32k memory corruption
17487| [131642] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Active Directory privilege escalation
17488| [127822] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 Kernel information disclosure
17489| [125103] Microsoft Windows Server 2008 SP2 Graphics Component information disclosure
17490| [123853] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel Memory information disclosure
17491| [122858] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 LNK memory corruption
17492| [122833] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI+ memory corruption
17493| [121109] Microsoft Wireless Display Adapter V2 2.0.8350/2.0.8365/2.0.8372 privilege escalation
17494| [120449] Microsoft Forefront Unified Access Gateway 2000 InitParams.aspx Parameter Server-Side Request Forgery
17495| [119469] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel privilege escalation
17496| [116015] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
17497| [114563] Microsoft Office 2007 SP3/2010 SP2/2013/2013 RT SP1 memory corruption
17498| [114528] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI privilege escalation
17499| [114524] Microsoft ASP.NET Core 2.0 denial of service
17500| [114523] Microsoft ASP.NET Core 2.0 Kestrel Web Application privilege escalation
17501| [113257] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
17502| [113256] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
17503| [113255] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
17504| [113247] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
17505| [113246] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
17506| [113245] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 EOT Font Engine information disclosure
17507| [113244] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
17508| [113235] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2016 privilege escalation
17509| [113234] Microsoft Office 2007 SP2/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17510| [113216] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17511| [112285] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17512| [112284] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17513| [112283] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17514| [112282] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17515| [111578] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17516| [111577] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17517| [111576] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17518| [111575] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17519| [111574] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
17520| [111573] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
17521| [111572] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
17522| [111570] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
17523| [111568] Microsoft Excel 2007/2010/2013/2016 memory corruption
17524| [111566] Microsoft Word 2007/2010/2013/2016 memory corruption
17525| [111565] Microsoft Word 2007/2010/2013 Email Message memory corruption
17526| [111563] Microsoft Outlook 2007/2010/2013/2016 Email Message privilege escalation
17527| [111347] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Color Management Icm32.dll information disclosure
17528| [109388] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 memory corruption
17529| [109387] Microsoft ASP.NET Core 2.0 privilege escalation
17530| [109386] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17531| [109385] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature Macro privilege escalation
17532| [109381] Microsoft Office/Word 2007 SP3/2010 SP2 memory corruption
17533| [107703] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17534| [106530] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17535| [106528] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17536| [106515] Microsoft Publisher 2007 SP3/2010 SP2 memory corruption
17537| [106497] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Uniscribe memory corruption
17538| [106476] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17539| [106475] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17540| [105051] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Font Library privilege escalation
17541| [105032] Microsoft Internet Explorer 9/10 on Server 2008/Server 2012 memory corruption
17542| [102513] Microsoft Windows XP SP3/Server 2003 SP2 OLE olecnv32.dll privilege escalation
17543| [102512] Microsoft Windows XP SP3/Server 2003 SP2 rpc privilege escalation
17544| [102511] Microsoft Windows XP SP3/Server 2003 SP2 RDP EsteemAudit privilege escalation
17545| [102447] Microsoft PowerPoint/SharePoint Server 2007 SP3 privilege escalation
17546| [102444] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
17547| [102442] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
17548| [102441] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17549| [102401] Microsoft Windows 7 SP1/Server 2008 R2 SP1 GDI USP10!NextCharInLiga Uniscribe Font information disclosure
17550| [101491] Microsoft Windows up to XP SP3/Server 2003 SP2 Remote Desktop Protocol gpkcsp.dll memory corruption
17551| [101017] Microsoft Office 2007 SP3/2010 SP2/2016 memory corruption
17552| [101012] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2016 memory corruption
17553| [101011] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 ActiveX Object Memory memory corruption
17554| [100854] Microsoft Windows Server 2003 SP2 RRAS ERRATICGOPHER memory corruption
17555| [99904] Microsoft Windows XP SP3/Server 2003 SP2 SmartCard Authentication RDP Packet EsteemAudit privilege escalation
17556| [99698] Microsoft OneNote 2007 SP3/2010 SP2 DLL Loader privilege escalation
17557| [99684] Microsoft Excel 2007 SP3/2010 SP2 Memory information disclosure
17558| [99654] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
17559| [99653] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
17560| [99533] Microsoft Office 2007/2010/2013/2016 RTF Document Necurs Dridex memory corruption
17561| [98561] Microsoft IIS 6.0 on Windows Server 2003 WebDAV ScStoragePathFromUrl Long Header memory corruption
17562| [98092] Microsoft SharePoint Server 2007 SP3 memory corruption
17563| [98088] Microsoft SharePoint Server 2007 SP3 memory corruption
17564| [98087] Microsoft Office 2007 SP3/2010 SP2 memory corruption
17565| [98086] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17566| [98085] Microsoft Excel 2007 SP3 memory corruption
17567| [98084] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
17568| [98083] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
17569| [98078] Microsoft Word/Excel 2007 SP3 memory corruption
17570| [98072] Microsoft Office 2007 SP3/2010 SP2/Word Viewer Graphics Component privilege escalation
17571| [98071] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
17572| [98070] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
17573| [94450] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
17574| [94449] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
17575| [94448] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
17576| [94445] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 information disclosure
17577| [94441] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
17578| [94440] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17579| [94439] Microsoft Office 2007 SP3/2011 privilege escalation
17580| [94438] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
17581| [93542] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
17582| [93541] Microsoft Office 2007 SP3 denial of service
17583| [93539] Microsoft Office 2007/2010 SP2/2011 memory corruption
17584| [93538] Microsoft Office 2007/2010 SP2/2011/2013 SP1 memory corruption
17585| [93537] Microsoft Office 2007/2010 SP2/2011 memory corruption
17586| [93396] Microsoft Office 2007/2010/2011 memory corruption
17587| [93395] Microsoft Office 2007/2010/2011 memory corruption
17588| [93394] Microsoft Office 2007/2010 memory corruption
17589| [92596] Microsoft Windows Vista SP2/7 SP1/Server 2008 SP2/Server 2008 R2 Internet Messaging API File information disclosure
17590| [91554] Microsoft Exchange 2007/2010/2013/2016 Email information disclosure
17591| [91553] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17592| [91552] Microsoft Office 2007/2010/2013/2013 RT/2016 spoofing
17593| [91551] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17594| [91549] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17595| [91548] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17596| [91546] Microsoft Office 2007/2010/2013/2013 RT memory corruption
17597| [91545] Microsoft Office 2007/2010 memory corruption
17598| [91544] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17599| [91542] Microsoft Office 2007/2010/2013/2013 RT/2016 information disclosure
17600| [90707] Microsoft OneNote 2007/2010/2013/2013 RT/2016 information disclosure
17601| [90706] Microsoft Office 2007/2010/2013/2013 RT Graphics memory corruption
17602| [90705] Microsoft Office 2007/2010/2011 memory corruption
17603| [90703] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
17604| [89039] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
17605| [89034] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
17606| [87960] Microsoft Windows Server 2008 R2/Server 2012/Server 2012 R2 Active Directory denial of service
17607| [87955] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
17608| [87954] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
17609| [87953] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
17610| [87939] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL memory corruption
17611| [87938] Microsoft Office 2007 SP3/2010 SP2/2011 information disclosure
17612| [87937] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
17613| [87935] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
17614| [87934] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
17615| [87933] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
17616| [87147] Microsoft Office 2007/2010 memory corruption
17617| [87145] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
17618| [87144] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
17619| [82228] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
17620| [82225] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
17621| [82224] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
17622| [81273] Microsoft Office 2007/2010/2013/2016 memory corruption
17623| [81272] Microsoft Office 2007/2010/2013 memory corruption
17624| [81265] Microsoft Windows Vista SP2/Server 2008 Library Loader memory corruption
17625| [80872] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17626| [80871] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17627| [80869] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
17628| [79506] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Library Loader memory corruption
17629| [79505] Microsoft Office 2007 memory corruption
17630| [79504] Microsoft Office 2007/2010/2013/2016 memory corruption
17631| [79503] Microsoft Office 2007/2010/2013 memory corruption
17632| [79502] Microsoft Office 2007/2010/2011 memory corruption
17633| [79501] Microsoft Office 2007/2010 memory corruption
17634| [79499] Microsoft Windows 7/Server 2008 R2 Uniscribe memory corruption
17635| [79493] Microsoft Windows Vista/Server 2008 Graphics memory corruption
17636| [79190] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
17637| [79189] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
17638| [79187] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 Sandbox privilege escalation
17639| [79167] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Journal memory corruption
17640| [78372] Microsoft Visio 2007 SP3/2010 SP2 UML Data memory corruption
17641| [78371] Microsoft SharePoint Server 2007 SP3/2010 SP2 InfoPath Forms Services XXE information disclosure
17642| [77646] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 EPS Image memory corruption
17643| [77629] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
17644| [77627] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
17645| [77626] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
17646| [77617] Microsoft Office 2007 SP3/2010 SP2 OpenType Font memory corruption
17647| [77252] Microsoft Office 2007 SP3/2010 SP2 Office Graphics Library Font memory corruption
17648| [77038] Microsoft Windows Server 2008 SP2 UDDI Services cross site scripting
17649| [76497] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1 Office Document memory corruption
17650| [76491] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
17651| [76467] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
17652| [76466] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
17653| [76464] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
17654| [76463] Microsoft Excel 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
17655| [76449] Microsoft Windows 8/8.1/Server 2008/Server 2012/Server 2012 R2 Hyper-V memory corruption
17656| [76440] Microsoft SQL Server 2008/2008 R2/2012/2014 Virtual Function Uninitialized Memory memory corruption
17657| [76439] Microsoft SQL Server 2008/2008 R2/2012/2014 Uninitialized Memory memory corruption
17658| [76438] Microsoft SQL Server 2008/2008 R2/2012/2014 Pointer Casting privilege escalation
17659| [75783] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services cross site scripting
17660| [75338] Microsoft SharePoint 2007/2010/2013 Content privilege escalation
17661| [75337] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
17662| [75336] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
17663| [74845] Microsoft Office 2007/2010/2013 Document Use-After-Free memory corruption
17664| [74844] Microsoft Office 2007/2010 Document Use-After-Free memory corruption
17665| [74837] Microsoft Office 2007/2010/2011/2013 RTF Document Use-After-Free privilege escalation
17666| [73979] Microsoft Exchange Server 2003 SP1/2003 CU7 Meeting privilege escalation
17667| [73978] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
17668| [73977] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
17669| [73976] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
17670| [73975] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
17671| [73964] Microsoft SharePoint 2007/2010/2013 cross site scripting
17672| [69158] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
17673| [69157] Microsoft Office 2007/2010/2013 OneTableDocumentStream memory corruption
17674| [69155] Microsoft Excel 2007/2010/2013/- Object memory corruption
17675| [68416] Microsoft Exchange 2007/2010/2013 Outlook Web Access Token spoofing
17676| [68409] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
17677| [68408] Microsoft Excel 2007/2010/2013 memory corruption
17678| [68407] Microsoft Excel 2007/2010 memory corruption
17679| [68405] Microsoft Word 2007/2010 Index Use-After-Free memory corruption
17680| [68195] Microsoft Windows Vista/7/Server 2003/Server 2008 Input Method Editor Sandbox privilege escalation
17681| [68189] Microsoft Windows Server 2003 SP2 TCP/IP Stack Stack-Based memory corruption
17682| [68188] Microsoft Word 2007 File memory corruption
17683| [68187] Microsoft Word 2007 File memory corruption
17684| [68186] Microsoft Word 2007 File memory corruption
17685| [67829] Microsoft Office 2007/2010/2011 Object memory corruption
17686| [67825] Microsoft .NET Framework 2.0/3.5/3.5.1 ASLR privilege escalation
17687| [71337] Microsoft Office 2000/2004/XP memory corruption
17688| [67355] Microsoft OneNote 2007 File Processing privilege escalation
17689| [67354] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 SQL Master Data Services cross site scripting
17690| [67353] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 T-SQL Query Stack-Based memory corruption
17691| [67018] Microsoft Windows Server 2008/Server 2012/Server 2012 R2 Service Bus AMQP Message denial of service
17692| [13545] Microsoft Word 2007 Embedded Font memory corruption
17693| [13397] Microsoft Windows XP/2000/Server 2003 DHCP Response DHCP ACK spoofing
17694| [13462] Microsoft Visual Studio 2002/2003/2005/2010 Debug Interface msdia.dll PDB File memory corruption
17695| [13229] Microsoft Office 2007/2010/2013 Common Control Library MSCOMCTL.OCX privilege escalation
17696| [13227] Microsoft Office 2007/2010/2013 Chinese Grammar Checker Library privilege escalation
17697| [13226] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
17698| [13225] Microsoft SharePoint Server 2007/2010/2013 cross site scripting
17699| [13224] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
17700| [12859] Microsoft Word 2003 Office Document Stack-Based memory corruption
17701| [12852] Microsoft Publisher 2003/2007 Publisher File pubconv.dll memory corruption
17702| [12845] Microsoft Word 2003 Office File Stack-Based memory corruption
17703| [12844] Microsoft Word 2007/2010 Office File memory corruption
17704| [12843] Microsoft Office 2007/2010/2011/2013 XML Parser Nested Entities Memory Consumption denial of service
17705| [12687] Microsoft Word/Office/Outlook 2003/2007/2010/2013 RTF Document memory corruption
17706| [12530] Microsoft Windows XP/Vista/Server 2003/Server 2008/Server 2012 Security Account Manager Lockout privilege escalation
17707| [12266] Microsoft .NET Framework 2.0 SP2/3.5.1 ASLR Bypass privilege escalation
17708| [12070] Apple Pages 2.0/2.0.1/2.0.2/5.0/5.0.1 on Mac Microsoft Word Document memory corruption
17709| [11950] Microsoft Office Compability Pack/Word 2007 SP3 File memory corruption
17710| [11949] Microsoft Word Viewer/Office Compatibility Pack/Word 2003 SP3/2007 SP3 File memory corruption
17711| [11448] Microsoft Office 2007/2010 Address Space Layout Randomization privilege escalation
17712| [11151] Microsoft Outlook 2007/2010/2013/- S/MIME Certificate Metadata Expansion memory corruption
17713| [11149] Microsoft Office 2003/2007/2010/2013/- WordPerfect Document epsimp32.flt memory corruption
17714| [11148] Microsoft Office 2003/2007 WordPerfect Document epsimp32.flt memory corruption
17715| [11146] Microsoft Office 2003/2007 epsimp32.flt memory corruption
17716| [11230] Microsoft Word 2003 DOC Document Embedded Image denial of service
17717| [11081] Microsoft Windows Vista/Server 2008 TIFF Image memory corruption
17718| [10648] Microsoft Word 2007 Word File memory corruption
17719| [10647] Microsoft Word 2003 Word File memory corruption
17720| [10643] Microsoft SharePoint Server 2007/2010/2013 Input Sanitizer memory corruption
17721| [10642] Microsoft SharePoint Server 2007/2010 Content Display in Frames privilege escalation
17722| [10247] Microsoft SharePoint Server 2007/2010/2013 Online Cloud cross site scripting
17723| [10245] Microsoft Office 2003/2007/2010 Word File memory corruption
17724| [10244] Microsoft Office 2003 SP3 Word File memory corruption
17725| [10243] Microsoft Office 2003/2007 Word File memory corruption
17726| [10242] Microsoft Office 2007 Word File memory corruption
17727| [10241] Microsoft Office 2007 Word File memory corruption
17728| [10240] Microsoft Office 2003/2007/2010 Word File memory corruption
17729| [10239] Microsoft Office 2003/2007 Word File memory corruption
17730| [10238] Microsoft Excel 2003/2007 XML External Entity Data information disclosure
17731| [10237] Microsoft Excel 2003/2007/2010 XML External Entity Data information disclosure
17732| [10236] Microsoft Word/Office 2003/2007 XML External Entity Data information disclosure
17733| [10234] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
17734| [10232] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
17735| [10231] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
17736| [10230] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
17737| [10229] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
17738| [10228] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
17739| [10227] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
17740| [10192] Microsoft Windows XP SP3/Vista/7/2000/Server 2003 SP2 Windows Theme File privilege escalation
17741| [10191] Microsoft Windows XP/Server 2003 OLE Object privilege escalation
17742| [10190] Microsoft Windows Vista/7/8/Server 2008 Active Directory denial of service
17743| [10189] Microsoft Outlook 2007/2010 S/MIME privilege escalation
17744| [9941] Microsoft Windows XP/Server 2003 Unicode Scripts Processor USP10.DLL Uniscribe Font memory corruption
17745| [9929] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services Unspecified Account information disclosure
17746| [9715] Microsoft PowerPoint 2007 DirectShow Runtime quartz.dll GetMaxSampleSize denial of service
17747| [9397] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Array privilege escalation
17748| [9394] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 on 64-bit Array memory corruption
17749| [9393] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Permission privilege escalation
17750| [8738] Microsoft Visio 2003 SP3/2007 SP3/2010 SP1 XML Parser File information disclosure
17751| [8737] Microsoft Word 2003 SP3 Shape Data Parser File memory corruption
17752| [8736] Microsoft Publisher 2003 SP3 PUB File memory corruption
17753| [8735] Microsoft Publisher 2003 SP3/2007 SP3/2010 SP1 PUB File memory corruption
17754| [8734] Microsoft Publisher 2003 SP3 PUB File memory corruption
17755| [8733] Microsoft Publisher 2003 SP3 PUB File memory corruption
17756| [8732] Microsoft Publisher 2003 SP3 PUB File memory corruption
17757| [8731] Microsoft Publisher 2003 SP3 PUB File memory corruption
17758| [8730] Microsoft Publisher 2003 SP3 PUB File memory corruption
17759| [8729] Microsoft Publisher 2003 SP3 PUB File memory corruption
17760| [8728] Microsoft Publisher 2003 SP3 PUB File memory corruption
17761| [8727] Microsoft Publisher 2003 SP3 PUB File memory corruption
17762| [8726] Microsoft Publisher 2003 PUB File Eingabe memory corruption
17763| [8723] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 XML File spoofing
17764| [7643] Microsoft Windows Server 2008 R2/Server 2012 NFS Server NULL Pointer Dereference denial of service
17765| [7642] Microsoft Exchange 2007/2010 Outlook Web Access vspdx.dll) privilege escalation
17766| [7641] Microsoft Windows XP/Vista/Server 2003/Server 2008 DirectShow Quartz.dll memory corruption
17767| [8589] Microsoft System Center Operations Manager 2007 SP1/2007 R2 ViewTypeManager.aspx cross site scripting
17768| [7252] Microsoft System Center Operations Manager 2007 ExecuteTask.aspx cross site scripting
17769| [7251] Microsoft System Center Operations Manager 2007 cross site scripting
17770| [7248] Microsoft Windows 7/Server 2008 R2 Print Spooler privilege escalation
17771| [7121] Microsoft Exchange 2007/2010 RSS Feed denial of service
17772| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
17773| [62914] Microsoft Office 2003 SP3/2007 SP3/2008/2010 SP1/2011 Spreadsheet Use-After-Free memory corruption
17774| [7058] Microsoft Windows 7/Server 2008 R2 DHCPv6 Message denial of service
17775| [6935] Microsoft Office Excel 2003/2007/2010 Input Sanitizer File Stack-based memory corruption
17776| [6934] Microsoft Office Excel 2003/2007/2010 Input Sanitizer memory corruption
17777| [6933] Microsoft Office Excel 2003/2007/2010 SerAuxErrBar File memory corruption
17778| [6929] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Web Proxy Setting Auto-Discovery memory corruption
17779| [6927] Microsoft .NET Framework 2.0 SP2/3.5.1 Trusted Code Function information disclosure
17780| [6918] Microsoft Excel 2007 SP2 Input Sanitizer File memory corruption
17781| [6830] Microsoft Word 2007/2010 File memory corruption
17782| [6819] Microsoft Excel 2007 File memory corruption
17783| [6627] Microsoft Windows 7/Server 2008 R2 Kerberos denial of service
17784| [6626] Microsoft SharePoint/Lync/Infopath 2007/2010 HTML Sanitization cross site scripting
17785| [6622] Microsoft Word 2003/2007/2010/- RTF Document memory corruption
17786| [6621] Microsoft Word 2007 PAPX memory corruption
17787| [62239] Microsoft Systems Management Server 2003 Configuration Manager Reflected cross site scripting
17788| [5945] Microsoft Office 2007/2010 Computer Graphics Metafile memory corruption
17789| [5939] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Print Spooler Service memory corruption
17790| [5938] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Remote Administration Protocol netapi32.dll RAP Request denial of service
17791| [5933] Microsoft SQL Server 2000/2005/2008/2008 R2 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
17792| [5932] Microsoft Office 2003/2007/2010 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
17793| [5654] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 information disclosure
17794| [5653] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
17795| [5652] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
17796| [5650] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
17797| [5649] Microsoft Office 2003/2007/2010 libraries memory corruption
17798| [5645] Microsoft SharePoint 2007/2010/3.0 Reflected cross site scripting
17799| [5643] Microsoft SharePoint 2007/2010 information disclosure
17800| [5642] Microsoft SharePoint 2007 cross site request forgery
17801| [5553] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Font atmfd.dll denial of service
17802| [5524] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
17803| [5518] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 memory corruption
17804| [5362] Microsoft Office 2003/2007 GDI+ memory corruption
17805| [5291] Microsoft Visual Studio 2008 Incremental Linker link.exe ConvertRgImgSymToRgImgSymEx memory corruption
17806| [5268] Microsoft Office 2008 on Mac RTF Pfragment File memory corruption
17807| [5080] Microsoft SQL Server 2005/2008/2008R2 CREATE DATABASE sql injection
17808| [5050] Microsoft Office 2007 WPS Converter Heap-based memory corruption
17809| [5049] Microsoft SQL Server 2000/2005/2008 MSCOMCTL.OCX privilege escalation
17810| [5048] Microsoft Office 2003/2007/2010 MSCOMCTL.OCX privilege escalation
17811| [5046] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Windows Authenticode Signature Verification WinVerifyTrust Signature privilege escalation
17812| [4803] Microsoft Windows Server 2003/Server 2008 DNS Server Domain Resource Record Query Parser denial of service
17813| [4802] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Protocol denial of service
17814| [4798] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Service memory corruption
17815| [60205] Microsoft .NET Framework 2.0 SP2/3.5.1 Heap-based memory corruption
17816| [4642] Microsoft .NET Framework 2.0 SP2/3.5.1/4 XAML Browser Application memory corruption
17817| [60065] Microsoft Windows 2000 mod_sql unknown vulnerability
17818| [4535] Microsoft Windows XP/Server 2003 Object Packager packager.exe privilege escalation
17819| [4534] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Line21 DirectShow Filter Quartz.dll/Qdvd.dll Media File memory corruption
17820| [4533] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Multimedia Library winmm.dll MIDI File memory corruption
17821| [4507] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 Forms Authentication Redirect
17822| [59666] Microsoft Publisher 2003/2007 "Publisher memory corruption
17823| [4482] Microsoft Word 2007/2010/2011 Document Parser memory corruption
17824| [4480] Microsoft Excel 2003 memory corruption
17825| [4478] Microsoft Windows XP/Server 2003 OLE Objects Memory Management memory corruption
17826| [4477] Microsoft PowerPoint 2007 OfficeArt Use-After-Free memory corruption
17827| [4474] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Active Directory Query memory corruption
17828| [4473] Microsoft Powerpoint 2007/2010 DLL-Loader memory corruption
17829| [4471] Microsoft Office 2003/2007 Publisher Out-of-Bounds memory corruption
17830| [4470] Microsoft Office 2003 SP3 memory corruption
17831| [4453] Microsoft Excel 2003 Record Parser memory corruption
17832| [4446] Microsoft Office 2008/2007 OfficeArt Record Parser memory corruption
17833| [4445] Microsoft Office 2007/2010/2011 Word Document Parser memory corruption
17834| [4438] Microsoft Windows Vista/7/Server 2008 TCP/IP Reference Counter denial of service
17835| [5358] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 TrueType Font Handling memory corruption
17836| [59005] Microsoft Host Integration Server 2004 denial of service
17837| [58492] Microsoft SharePoint Server 2007 Spreadsheet memory corruption
17838| [58491] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
17839| [58490] Microsoft Office Compatibility Pack 2007 Spreadsheet memory corruption
17840| [58489] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
17841| [58488] Microsoft Office 2007/2010 memory corruption
17842| [4412] Microsoft Office 2003/2007 Library Loader Designfehler
17843| [4411] Microsoft Excel 2003 memory corruption
17844| [4409] Microsoft Windows Server 2003/Server 2008 WINS unknown vulnerability
17845| [58240] Microsoft Visio 2003/2007 memory corruption
17846| [58237] Microsoft Visio 2003/2007/2010 memory corruption
17847| [4396] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
17848| [4393] Microsoft Windows Server 2008 DNS Service memory corruption
17849| [4391] Microsoft .NET Framework 2.0 SP2/3.5.1/4 Socket Restriction privilege escalation
17850| [4390] Microsoft Windows Server 2008 Remote Desktop Web Access cross site scripting
17851| [4388] Microsoft Windows Vista/7/Server 2008 File Metadata Parser denial of service
17852| [57691] Microsoft SQL Server 2008 Web Service information disclosure
17853| [57690] Microsoft Excel 2002/2003 Spreadsheet memory corruption
17854| [57689] Microsoft Excel 2002 Spreadsheet memory corruption
17855| [57688] Microsoft Excel 2002 Spreadsheet memory corruption
17856| [57687] Microsoft Excel 2002/2003/2007 Spreadsheet memory corruption
17857| [57686] Microsoft Excel 2002 Spreadsheet memory corruption
17858| [57685] Microsoft Excel 2002/2003/2007 Array Access memory corruption
17859| [57684] Microsoft Excel 2002/2003/2007/2010 Spreadsheet memory corruption
17860| [4369] Microsoft Excel 2002/2003/2007 memory corruption
17861| [4367] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
17862| [4362] Microsoft Windows Vista/7/Server 2008 denial of service
17863| [57420] Microsoft PowerPoint 2002/2003 memory corruption
17864| [4349] Microsoft Office 2004/2008/2007 Presentation File Parser memory corruption
17865| [4348] Microsoft Powerpoint 2002/2003/2007 memory corruption
17866| [57077] Microsoft Excel 2002 Uninitialized Memory memory corruption
17867| [57078] Microsoft Office 2003/2007/Xp docx unknown vulnerability
17868| [57079] Microsoft PowerPoint 2002/2003/2007/2010 memory corruption
17869| [57076] Microsoft Excel 2002/2003 memory corruption
17870| [57075] Microsoft Excel 2002/2003 memory corruption
17871| [57074] Microsoft Excel 2002 memory corruption
17872| [57073] Microsoft Excel 2002/2003/2007/2010 memory corruption
17873| [4334] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 JIT Compiler memory corruption
17874| [4301] Microsoft Windows Server 2003 SMB Browser Heap-based denial of service
17875| [56475] Microsoft Office 2004/2008 memory corruption
17876| [56414] Microsoft Visio 2002/2003/2007 ELEMENTS.DLL memory corruption
17877| [56413] Microsoft Visio 2002/2003/2007 Exception ORMELEMS.DLL memory corruption
17878| [4298] Microsoft Windows 7/Server 2008 JScript/VBScript Engine information disclosure
17879| [4297] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Compact Font Format Driver privilege escalation
17880| [4296] Microsoft Windows XP/Server 2003 LSASS Authentication Request unknown vulnerability
17881| [4295] Microsoft Windows 7/Server 2008 Kerberos weak authentication
17882| [4294] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys unknown vulnerability
17883| [4293] Microsoft Windows XP/Server 2003 Kerberos CRC32 Checksum privilege escalation
17884| [4292] Microsoft Windows XP/Server 2003 CSRSS Logoff privilege escalation
17885| [4289] Microsoft Excel 2007 Shape Data Parser memory corruption
17886| [4286] Microsoft Powerpoint 2007 OfficeArt Container Parser memory corruption
17887| [4279] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 MHTML cross site scripting
17888| [56176] Microsoft Windows XP/7/Server 2003 fxscover.exe CDrawPoly::Serialize memory corruption
17889| [55772] Microsoft Publisher 2002 pubconv.dll memory corruption
17890| [55771] Microsoft Publisher 2002/2003/2010 memory corruption
17891| [55765] Microsoft Office 2003/Xp Integer memory corruption
17892| [55764] Microsoft Office 2003/Xp memory corruption
17893| [55750] Microsoft Publisher 2002/2003 pubconv.dll memory corruption
17894| [55749] Microsoft Publisher 2002/2003/2007/2010 pubconv.dll memory corruption
17895| [55748] Microsoft Publisher 2002/2003/2007 pubconv.dll memory corruption
17896| [4230] Microsoft Exchange 2007 on 64-bit RPC store.exe MAPI Request denial of service
17897| [4229] Microsoft SharePoint 2007 Document Conversion Launcher Service Eingabeung\xC3\xBCltigkeit
17898| [4228] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
17899| [4224] Microsoft Windows Vista/7/Server 2008 Consent User Interface privilege escalation
17900| [4231] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys GreEnableEUDC denial of service
17901| [55420] Microsoft Office 2007/2010 memory corruption
17902| [55419] Microsoft Office 2004/2008/2011/Xp memory corruption
17903| [55412] Microsoft PowerPoint Viewer 2007 memory corruption
17904| [55411] Microsoft PowerPoint 2002/2003 memory corruption
17905| [4204] Microsoft Windows Server 2008 Color Control Panel Eingabeung\xC3\xBCltigkeit
17906| [54995] Microsoft Office 2004/2008 memory corruption
17907| [54994] Microsoft Office 2004/2008 Out-of-Bounds memory corruption
17908| [54993] Microsoft Office Compatibility Pack 2007 memory corruption
17909| [54992] Microsoft Excel 2002 memory corruption
17910| [54991] Microsoft Office 2004 Future memory corruption
17911| [54990] Microsoft Office 2004 memory corruption
17912| [54989] Microsoft Office 2004/2008 memory corruption
17913| [54988] Microsoft Excel 2002 memory corruption
17914| [54987] Microsoft Excel 2002 memory corruption
17915| [54986] Microsoft Excel 2002/2003 memory corruption
17916| [54985] Microsoft Office Compatibility Pack 2003/2004/2007/2008 memory corruption
17917| [54984] Microsoft Office 2004/2008 memory corruption
17918| [54983] Microsoft Excel 2002 Integer memory corruption
17919| [54980] Microsoft Word 2002/2003 memory corruption
17920| [54979] Microsoft Word 2002 memory corruption
17921| [54978] Microsoft Word 2002 memory corruption
17922| [54977] Microsoft Word 2002 Heap-based memory corruption
17923| [54976] Microsoft Word 2002 memory corruption
17924| [54975] Microsoft Word 2002 memory corruption
17925| [54974] Microsoft Word 2002 memory corruption
17926| [54973] Microsoft Word 2002 memory corruption
17927| [54972] Microsoft Word 2002 memory corruption
17928| [54971] Microsoft Word 2002 memory corruption
17929| [4197] Microsoft SharePoint 2007/3.0 cross site scripting
17930| [4196] Microsoft Word 2002/2003/2007/2010 Stack-based memory corruption
17931| [4194] Microsoft Windows Vista/7/Server 2008 SChannel Client Certificate Request denial of service
17932| [54774] Microsoft Word 2003 word_crash_11.8326.8324_poc.doc denial of service
17933| [54757] Microsoft SharePoint Server 2007 HTML Sanitization SafeHTML cross site scripting
17934| [4186] Microsoft Outlook 2002/2003/2007 Content Parser Heap-based memory corruption
17935| [54584] Microsoft Visual C++ 2005 AtlTraceTool8.exe unknown vulnerability
17936| [54554] Microsoft Groove 2007 mso.dll memory corruption
17937| [4187] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack Ipv4SetEchoRequestCreate() denial of service
17938| [54322] Microsoft Word 2002/2003 memory corruption
17939| [54321] Microsoft Office Compatibility Pack 2007 memory corruption
17940| [54320] Microsoft Office Compatibility Pack 2007 memory corruption
17941| [54319] Microsoft Office Compatibility Pack 2007 memory corruption
17942| [54318] Microsoft .NET Framework 2.0 SP1/2.0 SP2/3.5/3.5 SP1/3.5.1 Interfaces memory corruption
17943| [4165] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
17944| [4162] Microsoft Windows Vista/7/Server 2008 Kernel memory corruption
17945| [4159] Microsoft Excel 2002/2003 SXDB PivotTable Cache Data Record memory corruption
17946| [4149] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Shell Shortcut Parser memory corruption
17947| [54083] Microsoft Access 2003 ActiveX Control ACCWIZ.dll memory corruption
17948| [4146] Microsoft Outlook 2002/2003/2007 SMB Attachment PR_ATTACH_METHOD memory corruption
17949| [4145] Microsoft Access 2003/2007 ActiveX ACCWIZ.dll memory corruption
17950| [54617] Microsoft Outlook Web Access up to 2007 cross site request forgery
17951| [4151] Microsoft Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel memory corruption
17952| [53591] Microsoft Windows Server 2003 GetServerName cross site scripting
17953| [53505] Microsoft Excel 2002/2007 memory corruption
17954| [53501] Microsoft Excel 2002 memory corruption
17955| [53500] Microsoft Excel 2002 memory corruption
17956| [53499] Microsoft Excel 2002 memory corruption
17957| [53495] Microsoft Excel 2002/2003/2007 memory corruption
17958| [53494] Microsoft Excel 2002 Stack-based memory corruption
17959| [53504] Microsoft Excel 2002 memory corruption
17960| [53503] Microsoft Excel 2002 Stack-Based memory corruption
17961| [53502] Microsoft Excel 2002 Heap-based memory corruption
17962| [53498] Microsoft Excel 2002 Stack-based memory corruption
17963| [53497] Microsoft Excel 2002 memory corruption
17964| [53496] Microsoft Excel 2002 memory corruption
17965| [53493] Microsoft Excel 2002/2003/2007 memory corruption
17966| [4133] Microsoft Office 2003/2007/Xp COM Object Instantiator memory corruption
17967| [53366] Microsoft ASP.NET 2.0 cross site scripting
17968| [53385] Microsoft Exchange Server 2007 Outlook Web Access cross site scripting
17969| [53164] Microsoft Office 2003/2007/Xp ActiveX Control VBE6.DLL memory corruption
17970| [53054] Microsoft VISIO 2002/2003/2007 VISIODWG.DLL memory corruption
17971| [4125] Microsoft SharePoint 2007/3.0 help.aspx cross site scripting
17972| [52777] Microsoft Publisher 2002/2003/2007 memory corruption
17973| [52773] Microsoft Visio 2002/2003/2007 memory corruption
17974| [52772] Microsoft Visio 2002/2003/2007 memory corruption
17975| [4107] Microsoft Windows 7/Server 2008 Kernel denial of service
17976| [4103] Microsoft Windows Server 2003 Media Services Stack-based memory corruption
17977| [52543] Microsoft Virtual PC 2007 unknown vulnerability
17978| [52148] Microsoft Office 2004/2008/2007 Uninitialized Memory memory corruption
17979| [52147] Microsoft Office 2004/2008/2007 Spreadsheet Uninitialized Memory memory corruption
17980| [52146] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
17981| [52145] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
17982| [52144] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
17983| [52143] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
17984| [4090] Microsoft Excel 2002/2003/2007 memory corruption
17985| [52036] Microsoft Windows 2000 MsgBox memory corruption
17986| [51995] Microsoft SharePoint Server up to 2006 cross site scripting
17987| [51810] Microsoft Office 2004/Xp MSO.DLL memory corruption
17988| [51802] Microsoft PowerPoint 2003 Stack-based memory corruption
17989| [51801] Microsoft PowerPoint 2003 Stack-based memory corruption
17990| [51800] Microsoft PowerPoint 2002/2003 Use-After-Free memory corruption
17991| [51799] Microsoft PowerPoint 2002/2003 memory corruption
17992| [51798] Microsoft PowerPoint 2002/2003 Heap-based memory corruption
17993| [4082] Microsoft Powerpoint 2002 memory corruption
17994| [54550] Microsoft PowerPoint 2007 rpawinet.dll memory corruption
17995| [54556] Microsoft Visio 2003 mfc71enu.dll unknown vulnerability
17996| [51497] Microsoft Windows Live Messenger 2009 ActiveX Control msnmsgr.exe denial of service
17997| [51133] Microsoft Windows 2000 SP4/XP SP2/SP3/Server 2003 SP2 memory corruption
17998| [51074] Microsoft Office 2002/2003 Integer memory corruption
17999| [4069] Microsoft Project 2007/2003 Project Memory Validator memory corruption
18000| [50794] Microsoft Office 2004/2008 Spreadsheet memory corruption
18001| [50793] Microsoft Office 2004/2008 Spreadsheet memory corruption
18002| [50792] Microsoft Office 2004/2008 Spreadsheet memory corruption
18003| [50791] Microsoft Office 2004/2008 Spreadsheet memory corruption
18004| [50790] Microsoft Office 2004/2008 Spreadsheet Heap-based memory corruption
18005| [50788] Microsoft Office 2004/2008 Spreadsheet memory corruption
18006| [50787] Microsoft Office 2004/2008 Spreadsheet memory corruption
18007| [50786] Microsoft Windows 2000 llssrv.exe memory corruption
18008| [50789] Microsoft Office 2004/2008 Spreadsheet memory corruption
18009| [4056] Microsoft Word 2002/2003 File Information Block Parser Stack-based memory corruption
18010| [50660] Microsoft SharePoint Server 2007 unknown vulnerability
18011| [50443] Microsoft Office Powerpoint 2007 Integer memory corruption
18012| [50432] Microsoft .NET Framework 2.0/2.0 SP1/2.0 SP2/3.5/3.5 SP1 memory corruption
18013| [49866] Microsoft Windows Server 2003 memory corruption
18014| [4031] Microsoft Windows Vista/Server 2008 SMB Processor EducatedScholar memory corruption
18015| [4030] Microsoft Windows Vista/Server 2008 Wireless LAN AutoConfig Service Heap-based memory corruption
18016| [4029] Microsoft Windows 2000/XP TCP/IP Window Size denial of service
18017| [49745] Microsoft Windows Server 2003 denial of service
18018| [49394] Microsoft Windows Server 2003 memory corruption
18019| [49198] Microsoft Visual Studio 2005 information disclosure
18020| [49047] Microsoft Virtual Server 2005 privilege escalation
18021| [49046] Microsoft Windows Server 2003 quartz.dll memory corruption
18022| [49045] Microsoft Windows Server 2003 quartz.dll memory corruption
18023| [49044] Microsoft ISA Server 2006 privilege escalation
18024| [3999] Microsoft Office 2007 Pointer memory corruption
18025| [4000] Microsoft Office 2003/Xp/Sp3 Web Components memory corruption
18026| [48894] Microsoft Windows Server 2003 msvidctl.dll memory corruption
18027| [48572] Microsoft Office Powerpoint 2002 FL21WIN.DLL memory corruption
18028| [48517] Microsoft Windows 2000 Memory Leak memory corruption
18029| [48516] Microsoft Windows Server 2008 unknown vulnerability
18030| [48512] Microsoft Windows Server 2008 unknown vulnerability
18031| [48515] Microsoft Office Word Viewer 2003 memory corruption
18032| [48514] Microsoft Office Word Viewer 2003 Stack-based memory corruption
18033| [48554] Microsoft Excel 2000/2003/2007 memory corruption
18034| [48157] Microsoft Office PowerPoint 2002 Sound memory corruption
18035| [48156] Microsoft Office PowerPoint 2000 Stack-based memory corruption
18036| [48154] Microsoft Office PowerPoint 2002 Sound PP7X32.DLL memory corruption
18037| [48152] Microsoft Office PowerPoint 2002 PP4X32.DLL memory corruption
18038| [48150] Microsoft Office PowerPoint 2002 Sound memory corruption
18039| [48147] Microsoft Office PowerPoint 2002 Sound memory corruption
18040| [48146] Microsoft Office PowerPoint 2002 Integer memory corruption
18041| [48155] Microsoft Office PowerPoint 2002 Notes Container Heap-based memory corruption
18042| [48153] Microsoft Office PowerPoint 2002 Sound memory corruption
18043| [48151] Microsoft Office PowerPoint 2002 Stack-based memory corruption
18044| [48149] Microsoft Office PowerPoint 2002 memory corruption
18045| [48148] Microsoft Office PowerPoint 2002 Sound memory corruption
18046| [3974] Microsoft Powerpoint 2000/2002/2003 Sound Data Stack-based memory corruption
18047| [3973] Microsoft Powerpoint 2000/2002/2003 Notes Container Stack-based memory corruption
18048| [3972] Microsoft Powerpoint 2000/2002/2003 BuildList memory corruption
18049| [3971] Microsoft Powerpoint 2000/2002/2003 Object Stack-based memory corruption
18050| [3970] Microsoft Powerpoint 2000/2002/2003 Paragraph Stack-based memory corruption
18051| [3969] Microsoft Powerpoint 2000/2002/2003 Atom Stack-based memory corruption
18052| [47719] Microsoft Windows 2000 Stack-based memory corruption
18053| [47720] Microsoft Internet Security And Acceleration Server 2006 Forms Authentication cookieauth.dll cross site scripting
18054| [47716] Microsoft Office Converter Pack 2003 WPFT632.CNV memory corruption
18055| [47715] Microsoft Windows 2000 Wordpad memory corruption
18056| [47718] Microsoft Excel 2000/2002/2003/2007 Spreadsheet memory corruption
18057| [3960] Microsoft Windows XP/2000/Server 2003 DirectShow MJPEG memory corruption
18058| [3952] Microsoft ISA Server 2004/2006 denial of service
18059| [3946] Microsoft PowerPoint 2004/2000/2002/2003 memory corruption
18060| [47091] Microsoft Windows Server 2008 unknown vulnerability
18061| [47090] Microsoft Windows Server 2008 unknown vulnerability
18062| [3939] Microsoft Windows 2000 DNS Designfehler
18063| [3938] Microsoft Windows 2000 SSL weak authentication
18064| [3937] Microsoft Windows 2000 memory corruption
18065| [3932] Microsoft Excel 2004/2000/2002/2003/2007 Object Reference Designfehler
18066| [46620] Microsoft Windows Live Messenger 2009 msnmsgr.exe denial of service
18067| [46455] Microsoft Exchange Server 2007 denial of service
18068| [46454] Microsoft Exchange Server 2007 memory corruption
18069| [46453] Microsoft Visio 2002/2003/2007 memory corruption
18070| [46452] Microsoft Visio 2002/2003/2007 memory corruption
18071| [46451] Microsoft Visio 2002/2003/2007 memory corruption
18072| [46327] Microsoft Word 2007 information disclosure
18073| [45758] Microsoft Money 2006 ActiveX Control prtstb06.dll denial of service
18074| [45381] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
18075| [45380] Microsoft Windows Vista SP1/Server 2008 Search memory corruption
18076| [45379] Microsoft Office SharePoint Server 2007 denial of service
18077| [3896] Microsoft SQL Server up to 2005 sp_replwritetovarbin memory corruption
18078| [3892] Microsoft Excel 2000/2002/2003 Formula memory corruption
18079| [3891] Microsoft Excel 2000/2002/2003 memory corruption
18080| [3890] Microsoft Excel 2000/2002/2003 NAME Index memory corruption
18081| [3889] Microsoft Word 2000/2002/2003/2007 Table Property Stack-based memory corruption
18082| [3888] Microsoft Word 2000/2002/2003/2007 RTF Stylesheet memory corruption
18083| [3887] Microsoft Word 2000/2002/2003/2007 memory corruption
18084| [3886] Microsoft Word 2000/2002/2003/2007 ControlWord Heap-based memory corruption
18085| [3885] Microsoft Word 2000/2002/2003/2007 memory corruption
18086| [3884] Microsoft Word 2000/2002/2003/2007 memory corruption
18087| [3883] Microsoft Word 2000/2002/2003/2007 RTF Heap-based memory corruption
18088| [3882] Microsoft Word 2000/2002/2003/2007 LFO memory corruption
18089| [3880] Microsoft Visual Basic up to 2003 ActiveX Control Mschrt20.ocx memory corruption
18090| [3879] Microsoft Visual Basic up to 2003 ActiveX Control mscomct2.ocx memory corruption
18091| [3878] Microsoft Visual Basic up to 2003 ActiveX Control mshflxgd.ocx memory corruption
18092| [3877] Microsoft Visual Basic up to 2003 ActiveX Control msflxgrd.ocx memory corruption
18093| [3876] Microsoft Visual Basic up to 2003 ActiveX Control msdatgrd.ocx memory corruption
18094| [45197] Microsoft Windows 2000 nskey.dll memory corruption
18095| [45063] Microsoft Windows Server 2003 Active Directory unknown vulnerability
18096| [45040] Microsoft .NET Framework 2.0.50727 Code Access Security unknown vulnerability
18097| [44855] DjVu Activex Control For Microsoft Office 2000 3.0 ActiveX Control DjVu_ActiveX_MSOffice.dll memory corruption
18098| [44665] Microsoft Peachtree Accounting 2004 ActiveX Control PAWWeb11.ocx unknown vulnerability
18099| [44589] Microsoft Exchange Server 2003 Outlook Web Access unknown vulnerability
18100| [3845] Microsoft Windows 2000 SP4 Active Directory memory corruption
18101| [44533] Microsoft Windows 2000 mqsvc.exe memory corruption
18102| [3844] Microsoft Excel 2003 REPT memory corruption
18103| [3843] Microsoft Excel up to 2007 BIFF File Heap-based memory corruption
18104| [3842] Microsoft Excel 2003 VBA Performance Cache Stack-based Eingabeung\xC3\xBCltigkeit
18105| [44405] Microsoft Digital Image 2006 ActiveX Control PipPPush.DLL unknown vulnerability
18106| [44047] Microsoft SQL Server 2000 ActiveX Control SQLVDIRLib.SQLVDirControl memory corruption
18107| [43981] Microsoft Organization Chart 2.00 orgchart.exe memory corruption
18108| [43957] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
18109| [43956] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
18110| [43955] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
18111| [43952] Microsoft Office 2003/2007/Xp URI memory corruption
18112| [43676] Microsoft Windows XP/Vista/2000/Server 2003 memory corruption
18113| [43675] Microsoft Windows XP/Vista/2000/Server 2003 of memory corruption
18114| [43662] Microsoft Office Powerpoint Viewer up to 2003 memory corruption
18115| [43661] Microsoft Office Powerpoint Viewer 2003 memory corruption
18116| [43660] Microsoft Office Powerpoint Viewer 2003 Integer memory corruption
18117| [43657] Microsoft Office 2000/2003/Xp memory corruption
18118| [43654] Microsoft SharePoint Server 2007 memory corruption
18119| [43653] Microsoft Office 2000/2002/2004/2008 memory corruption
18120| [43652] Microsoft Office 2000/2002/2003/2004/2008 memory corruption
18121| [3797] Microsoft Windows Vista/Server 2008 IPsec Policy Designfehler
18122| [3796] Microsoft Office 2000 WPG memory corruption
18123| [3795] Microsoft Office 2000/2003/Xp BMP Image BMPIMP32.FLT memory corruption
18124| [3794] Microsoft Office 2000/2003/Xp PICT bits_per_pixel memory corruption
18125| [3793] Microsoft Office 2000/2003/Xp PICT memory corruption
18126| [3792] Microsoft Office 2000 EPS File memory corruption
18127| [3783] Microsoft Word 2002 memory corruption
18128| [43103] Microsoft Exchange Srv 2007 Sp1 Outlook Web Access cross site scripting
18129| [43102] Microsoft Windows 2000 SP4/Server 2003 SP2/Server 2008 DNS Cache privilege escalation
18130| [3778] Microsoft Exchange 2003/2007 Outlook Web Access cross site scripting
18131| [3777] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
18132| [43087] Microsoft Office Snapshot Viewer ActiveX up to Office 2003 Snapshot Viewer ActiveX Control snapview.ocx memory corruption
18133| [43096] Microsoft Publisher 2003/2007 Crypto API unknown vulnerability
18134| [42816] Microsoft Word 2000/2003 memory corruption
18135| [42732] Microsoft Windows XP/Vista/Server 2003 denial of service
18136| [42731] Microsoft Windows Server 2003 denial of service
18137| [3732] Microsoft Windows 2000/Server 2003 WINS memory corruption
18138| [3701] Microsoft Word 2003 CSS Heap-based memory corruption
18139| [3700] Microsoft Word 2003 RTF Document Heap-based memory corruption
18140| [42065] Microsoft SharePoint Server 2.0 Rich Text Editor cross site scripting
18141| [41881] Microsoft Office 2003/2007/2007 Sp1/Xp memory corruption
18142| [41880] Microsoft Project 2000/2002/2003 memory corruption
18143| [41879] Microsoft Windows 2000/Server 2003/Vista Stack-based memory corruption
18144| [41878] Microsoft Windows 2000/Server 2003/Vista spoofing
18145| [41877] Microsoft Windows Server 2003 vbscript.dll memory corruption
18146| [3671] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 memory corruption
18147| [3670] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 Object memory corruption
18148| [41455] Microsoft Office 2000/2003/2004/Xp memory corruption
18149| [41454] Microsoft Excel 2000/2002/2003/2007 memory corruption
18150| [41453] Microsoft Excel 2000/2002/2003 memory corruption
18151| [41452] Microsoft Excel 2000/2002/2003/2007 memory corruption
18152| [41451] Microsoft Excel 2000/2002/2003 memory corruption
18153| [41450] Microsoft Excel 2000 memory corruption
18154| [41449] Microsoft Excel 2000/2002/2003 memory corruption
18155| [41448] Microsoft Office 2000/Xp Office Web Components memory corruption
18156| [3648] Microsoft Excel 2003 memory corruption
18157| [3647] Microsoft Outlook up to 2007 mailto URI memory corruption
18158| [41003] Microsoft Office 2000/2003/2004/Xp memory corruption
18159| [41002] Microsoft Office 2000/2003/Xp memory corruption
18160| [41001] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
18161| [41000] Microsoft Works 2005/8.0 memory corruption
18162| [40998] Microsoft Publisher 2000/2002/2003 memory corruption
18163| [40994] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
18164| [40987] Microsoft Windows 2000 denial of service
18165| [40736] Microsoft ActiveX 2.0 ActiveX Control privilege escalation
18166| [3552] Microsoft Excel 2000/2002/2003 File memory corruption
18167| [40242] Microsoft Publisher 2000/2002/2003/2007 Crash denial of service
18168| [40020] Microsoft Office 2007 ZIP Container unknown vulnerability
18169| [39769] Microsoft Windows 2000 cryptgenrandom weak encryption
18170| [39749] Microsoft Windows 2000 msjet40.dll memory corruption
18171| [39655] Microsoft Windows Server 2003 spoofing
18172| [39324] Microsoft Windows Mobile 2005 SMS unknown vulnerability
18173| [3373] Microsoft Word 2000/2002 memory corruption
18174| [38999] Microsoft Windows Server 2003 explorer.exe denial of service
18175| [38899] Microsoft ISA Server 2004 information disclosure
18176| [38728] Microsoft SQL Server 2005 Enterprise Manager sqldmo.dll memory corruption
18177| [38326] Microsoft Windows 2000 attemptwrite memory corruption
18178| [3241] Microsoft Excel 2000/2003/2004/XP SP3 rtWnDesk memory corruption
18179| [3223] Microsoft Windows XP/Server 2003 URI Eingabeung\xC3\xBCltigkeit
18180| [3212] Microsoft DirectX February 2006 RLE Compression Targa Files Heap-based memory corruption
18181| [37739] Microsoft Excel 2000/2002/2003/2004/2007 memory corruption
18182| [37738] Microsoft Office 2002/2003 memory corruption
18183| [3176] Microsoft Excel 2000/2002/2003/2007 File Attribute memory corruption
18184| [3175] Microsoft Excel 2000/2002/2003/2007 Active Worksheet memory corruption
18185| [3174] Microsoft Excel 2000/2002/2003/2007 Version Information memory corruption
18186| [3172] Microsoft Office Publisher 2007 Pointer memory corruption
18187| [37566] Microsoft Excel 2003 unknown vulnerability
18188| [37526] Microsoft Windows 2000/Server 2003 denial of service
18189| [37248] Microsoft Visio 2002 Packaging memory corruption
18190| [37251] Microsoft Windows 2000 memory corruption
18191| [3119] Microsoft Visio 2002 Object memory corruption
18192| [3118] Microsoft Visio 2002 Data memory corruption
18193| [37093] Microsoft Windows Server 2003 Error Message unknown vulnerability
18194| [37010] Microsoft Office 2000 ActiveX Control ouactrl.ocx memory corruption
18195| [36628] Microsoft Word 2000/2002/2003/2004 winword.exe memory corruption
18196| [36616] Microsoft Works 2004/2005/2006 memory corruption
18197| [36621] Microsoft Exchange Server 2000 Integer denial of service
18198| [36620] Microsoft Exchange Server 2000 Outlook Web Access cross site scripting
18199| [36619] Microsoft Exchange Server 2000/2003/2007 memory corruption
18200| [36618] Microsoft Exchange Server 2000 NULL Pointer Dereference denial of service
18201| [36617] Microsoft Excel 2000/2002/2003/2004 memory corruption
18202| [36623] Microsoft BizTalk Server 2004 ActiveX Control capicom.dll memory corruption
18203| [3067] Microsoft Office 2000/2003/2004/2007/Xp Drawing Object memory corruption
18204| [3065] Microsoft Excel 2000/2002/2003/2007 Filter Stack-based memory corruption
18205| [3064] Microsoft Excel 2000/2002/2003/2004/2007 set Font memory corruption
18206| [3063] Microsoft Excel 2000/2002/2003/2007 BIFF Record Stack-based memory corruption
18207| [3012] Microsoft Windows 2000/Server 2003 DNS Service Stack-based memory corruption
18208| [36039] Microsoft Content Management Server 2001 memory corruption
18209| [36052] Microsoft Windows 2000 Heap-based memory corruption
18210| [36051] Microsoft Word 2007 file798-1.doc memory corruption
18211| [36050] Microsoft Word 2007 file789-1.doc memory corruption
18212| [36040] Microsoft Content Management Server 2001 cross site scripting
18213| [3004] Microsoft Windows up to 2003/XP URL Parser memory corruption
18214| [36041] Microsoft .NET Framework 2.0.50727.42 cross site scripting
18215| [2990] Microsoft Windows 2000/XP/Vista Animated Cursor Stack-based memory corruption
18216| [36515] Microsoft Windows 2000/XP/Server 2003 memory corruption
18217| [35846] Microsoft Windows 2000/Server 2003 Default Configuration information disclosure
18218| [35373] Microsoft Excel 2003 denial of service
18219| [35372] Microsoft Office 2003 denial of service
18220| [35206] Microsoft Windows XP/Server 2003 Crash denial of service
18221| [35161] Microsoft ISA Server 2004 unknown vulnerability
18222| [35236] Microsoft Publisher 2007 memory corruption
18223| [2939] Microsoft Word 2000 memory corruption
18224| [34994] Microsoft Windows 2000 OLE Dialog memory corruption
18225| [34993] Microsoft Office 2000/2003/Xp memory corruption
18226| [35001] Microsoft Office 2000/2003/2004/Xp memory corruption
18227| [35000] Microsoft Word 2000/2002/2003 memory corruption
18228| [2933] Microsoft Windows XP SP2/2000 SP4/Server 2003 SP1 OLE Dialog Stack-based memory corruption
18229| [2894] Microsoft Office 2000/2003/2004/Xp Undefined String Format String
18230| [2884] Microsoft Word 2000/2002/2003 memory corruption
18231| [34321] Microsoft Office 2000/2003/2004/Xp Spreadsheet Heap-based memory corruption
18232| [34320] Microsoft Office 2000/2003/2004/Xp memory corruption
18233| [34319] Microsoft Office 2000/2003/2004/Xp memory corruption
18234| [34318] Microsoft Office 2000/2003/2004/Xp memory corruption
18235| [34322] Microsoft Office 2000/2003/Xp memory corruption
18236| [2811] Microsoft Windows 2000/XP/Server 2003 VML Vector Markup Language Integer memory corruption
18237| [2810] Microsoft Outlook 2000/2002/2003 Office Saved Search OSS File memory corruption
18238| [2809] Microsoft Outlook 2000/2002/2003 Header denial of service
18239| [2808] Microsoft Outlook 2000/2002/2003 Meeting VEVENT memory corruption
18240| [2807] Microsoft Excel 2000/2002/2003 XLS File memory corruption
18241| [34126] Microsoft Office 2003 memory corruption
18242| [34122] Microsoft Office Web Components 2000 memory corruption
18243| [2789] Microsoft Windows 2000/XP RPC Request NetrWkstaUserEnum() denial of service
18244| [2765] Microsoft Project Server 2003 pdsrequest.asp weak authentication
18245| [33851] Microsoft Word 2000/2002/2003 12122006-djtest.doc memory corruption
18246| [2739] Microsoft Windows 2000 Remote Installation Service Fehlende Authentifizierung
18247| [2738] Microsoft Windows 2000/XP/Server 2003 SNMP memory corruption
18248| [2737] Microsoft Windows XP/Server 2003 Manifest denial of service
18249| [33766] Microsoft Word 2000/2002/2003 memory corruption
18250| [2718] Microsoft Word 2000/2002/2003 DOC Document memory corruption
18251| [2717] Microsoft Windows 2000 Print Spooler Memory Consumption denial of service
18252| [2689] Microsoft Windows up to 2000 SP4 Active Directory denial of service
18253| [2688] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware denial of service
18254| [2687] Microsoft Windows 2000/XP/Server 2003 Agent ActiveX ACF File Heap-based memory corruption
18255| [2686] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware memory corruption
18256| [2684] Microsoft Windows 2000/XP Workstation Service Stack-based memory corruption
18257| [2659] Microsoft Windows 2000/XP GDI Crash Designfehler
18258| [2655] Microsoft Windows 2000/XP/Server 2003 XML Core Services Designfehler
18259| [33067] Microsoft Visual Studio .net 2005 ActiveX Control wmiscriptutils.dll memory corruption
18260| [2610] Microsoft PowerPoint 2003 PPT Document NULL Pointer Dereference denial of service
18261| [32693] Microsoft Word 2004 memory corruption
18262| [32686] Microsoft Office 2000/2001/2003/2004 Integer memory corruption
18263| [32690] Microsoft Office 2000/2003/2004/Xp memory corruption
18264| [32676] Microsoft Office 2000/2001/2003/2004 memory corruption
18265| [32675] Microsoft Office 2000/2003/2004/Xp memory corruption
18266| [32694] Microsoft Windows 2000 memory corruption
18267| [32689] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18268| [32688] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18269| [32687] Microsoft Word 2000/2002 memory corruption
18270| [32685] Microsoft Office 2000/2001/2003/2004 memory corruption
18271| [2601] Microsoft Windows XP/Server 2003 IPv6 Stack denial of service
18272| [2600] Microsoft Windows XP/Server 2003 IPv6 Stack TCP denial of service
18273| [2599] Microsoft Windows XP/Server 2003 IPv6 Stack ICMP denial of service
18274| [2598] Microsoft Windows XP/Server 2003 Object Packager Designfehler
18275| [2597] Microsoft Office 2003/Xp Smart-Tag Parser memory corruption
18276| [2596] Microsoft Office 2000/2003/2004/Xp Value Read memory corruption
18277| [2595] Microsoft Office 2000/2001/2003/2004 Diagram Value memory corruption
18278| [2594] Microsoft Office 2000/2001/2003/2004 Document memory corruption
18279| [2593] Microsoft ASP.NET 2.0 cross site scripting
18280| [2571] Microsoft PowerPoint up to 2003 Document memory corruption
18281| [2554] Microsoft PowerPoint 2000 memory corruption
18282| [2522] Microsoft Windows 2000/XP/Server 2003 Indexing Service cross site scripting
18283| [2521] Microsoft Publisher 2000/2002/2003 PUB File Stack-based memory corruption
18284| [2508] Microsoft Word 2000 memory corruption
18285| [2478] Microsoft Internet Explorer up to 6 on Win 2000 HTTP 1.1 Compression Heap-based memory corruption
18286| [31692] Microsoft PowerPoint 2000/2001/2002/2003 memory corruption
18287| [2436] Microsoft Windows 2000/XP/Server 2003 Kernel memory corruption
18288| [2435] Microsoft Windows 2000/XP/Server 2003 Exception memory corruption
18289| [2434] Microsoft Windows 2000/XP/Server 2003 Winlogon race condition
18290| [2433] Microsoft Windows 2000 Management Console cross site scripting
18291| [2432] Microsoft Windows 2000/XP/Server 2003 DNS Resolver Heap-based memory corruption
18292| [2431] Microsoft Windows 2000/XP/Server 2003 Winsock API memory corruption
18293| [2430] Microsoft Windows 2000/XP/Server 2003 RPC ELV memory corruption
18294| [2426] Microsoft Windows 2000/XP/Server 2003 WMF File gdi32.dll denial of service
18295| [2415] Microsoft Windows 2000/XP/Server 2003 SMB File srv.sys denial of service
18296| [31527] Microsoft Internet Explorer 6.0 on Win 2000 ActiveX Object Stack-Based denial of service
18297| [31358] Microsoft PowerPoint 2003 powerpnt.exe denial of service
18298| [31354] Microsoft PowerPoint 2003 memory corruption
18299| [31351] Microsoft ISA Server 2004 Filters unknown vulnerability
18300| [2382] Microsoft PowerPoint up to 2003 Presentation Open/Close memory corruption
18301| [2378] Microsoft PowerPoint 2000/2002/2003 Document Parser memory corruption
18302| [31318] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18303| [31317] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18304| [31316] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18305| [31313] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18306| [31312] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18307| [31311] Microsoft Excel 2000/2002/2003/XP memory corruption
18308| [31310] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
18309| [31237] Microsoft Office 2000/2003/Xp memory corruption
18310| [31235] Microsoft Office 2000/2003/Xp memory corruption
18311| [2371] Microsoft NET Framework up to 2.0 URL Validator unknown vulnerability
18312| [2370] Microsoft Windows 2000/XP/Server 2003 Server Protocol Driver Server Message Block Heap-based memory corruption
18313| [2369] Microsoft Windows 2000/XP/Server 2003 Server Service Mailslot Heap-based memory corruption
18314| [2367] Microsoft Office 2000/2003/XP Document String memory corruption
18315| [2366] Microsoft Windows 2000/XP/Server 2003 DHCP Client memory corruption
18316| [2365] Microsoft Office 2000/2003/XP PNG Image memory corruption
18317| [2364] Microsoft Office 2000/2003/XP GIF Image memory corruption
18318| [31233] Microsoft Office 2000/2003/Xp mso.dll lscreateline memory corruption
18319| [31238] Microsoft Internet Explorer 6.0 on Win 2000 Crash denial of service
18320| [2357] Microsoft Excel up to 2003 on Asian System Document Repair Style memory corruption
18321| [31133] Microsoft Windows XP/Server 2003 explorer.exe memory corruption
18322| [2325] Microsoft Excel up to 2003 Hyperlink hlink.dll Long Hyperlink memory corruption
18323| [2324] Microsoft Excel 2000/2002/2003/2004 XLS File memory corruption
18324| [30801] Microsoft Windows up to 2000 Connection Manager Stack-based memory corruption
18325| [2312] Microsoft Exchange 2000 Outlook Web Access cross site scripting
18326| [2311] Microsoft Windows 2000/XP/Server 2003 MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk memory corruption
18327| [2310] Microsoft Windows 2000 RPC spoofing
18328| [2309] Microsoft Windows 2000/XP/Server 2003 Routing and Remote Access Service RPC Request memory corruption
18329| [2308] Microsoft PowerPoint 2000/2002/2003/2004 PPT Document memory corruption
18330| [2307] Microsoft Windows 2000/XP/Server 2003 JScript Object memory corruption
18331| [2306] Microsoft Windows 2000/XP/Server 2003 IP Source Routing memory corruption
18332| [2305] Microsoft Windows XP/Server 2003 ART Image Heap-based memory corruption
18333| [2294] Microsoft Word up to 2003 DOC Document Backdoor Designfehler
18334| [2275] Microsoft Windows XP/Server 2003 mhtml URI inetcomm.dll memory corruption
18335| [2253] Microsoft Word up to 2003 Backdoor memory corruption
18336| [2221] Microsoft Windows 2000/XP CHM Archive itss.dll memory corruption
18337| [30131] Microsoft Windows NT 4.0/XP/2000/Server 2003 Distributed Transaction Coordinator Crash denial of service
18338| [2218] Microsoft Windows 2000/XP/Server 2003 MSDTC Heap-based denial of service
18339| [2217] Microsoft Exchange 2000/2003 Calender Collaboration Data Object memory corruption
18340| [2190] Microsoft Office 2003 mailto URI unknown vulnerability
18341| [2147] Microsoft Windows 2000/XP/Server 2003 COM Object memory corruption
18342| [2135] Microsoft FrontPage Server Extensions 2002 cross site scripting
18343| [29524] Microsoft ISA Server 2004 unknown vulnerability
18344| [134750] Microsoft ASP.NET Core 2.1/2.2 denial of service
18345| [134745] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
18346| [134744] Microsoft Windows up to Server 2019 GDI information disclosure
18347| [134743] Microsoft SharePoint Server 2013 SP1/2016 cross site scripting
18348| [134742] Microsoft SharePoint Enterprise Server 2016/2019 cross site scripting
18349| [134741] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18350| [134740] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
18351| [134739] Microsoft SharePoint Foundation 2010 SP2/2013 SP2 cross site scripting
18352| [134738] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18353| [134737] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18354| [134736] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
18355| [134735] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18356| [134734] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18357| [134733] Microsoft Windows up to Server 2019 Unified Write Filter privilege escalation
18358| [134731] Microsoft Windows up to Server 2019 Symlink privilege escalation
18359| [134729] Microsoft Windows up to Server 2019 Storage Service privilege escalation
18360| [134725] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18361| [134724] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18362| [134723] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18363| [134722] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18364| [134721] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18365| [134720] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18366| [134719] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18367| [134718] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18368| [134717] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18369| [134716] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18370| [134715] Microsoft Windows up to Server 2019 Win32k memory corruption
18371| [134714] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18372| [134713] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18373| [134712] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18374| [134710] Microsoft Windows up to Server 2019 GDI information disclosure
18375| [134709] Microsoft Windows up to Server 2019 Kernel privilege escalation
18376| [134706] Microsoft Windows up to Server 2019 Error Reporting privilege escalation
18377| [134704] Microsoft SQL Server 2017 Analysis Services information disclosure
18378| [134701] Microsoft Windows up to Server 2019 Windows Defender Application Control privilege escalation
18379| [134700] Microsoft Windows up to Server 2019 Diagnostic Hub privilege escalation
18380| [134699] Microsoft Windows up to Server 2019 NDIS ndis.sys memory corruption
18381| [134698] Microsoft Windows up to Server 2019 OLE memory corruption
18382| [134697] Microsoft Office/Word 2016/2019/365 ProPlus memory corruption
18383| [134684] Microsoft Windows up to Server 2019 DHCP Server memory corruption
18384| [134678] Microsoft Windows up to Server 2019 GDI+ memory corruption
18385| [133236] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18386| [133235] Microsoft Azure DevOps Server 2019 privilege escalation
18387| [133234] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18388| [133232] Microsoft Azure DevOps Server 2019 cross site scripting
18389| [133229] Microsoft Azure DevOps Server 2019 cross site scripting
18390| [133224] Microsoft Exchange Server 2013 CU22/2016 CU11/2016 CU12/2019/2019 CU1 Outlook Web Access privilege escalation
18391| [133223] Microsoft Azure DevOps Server 2019 Content Security Policy privilege escalation
18392| [133222] Microsoft Windows up to Server 2019 Remote Registry Service memory corruption
18393| [133221] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18394| [133220] Microsoft Windows up to Server 2019 GDI Memory information disclosure
18395| [133219] Microsoft Windows up to Server 2019 Win32k Memory information disclosure
18396| [133218] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18397| [133217] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18398| [133216] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
18399| [133215] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
18400| [133214] Microsoft Windows up to Server 2019 AppX Deployment Service privilege escalation
18401| [133213] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
18402| [133212] Microsoft Windows up to Server 2019 Terminal Services Memory information disclosure
18403| [133211] Microsoft Windows up to Server 2019 Task Scheduler information disclosure
18404| [133209] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
18405| [133206] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016/2019 cross site scripting
18406| [133205] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
18407| [133204] Microsoft Office/Excel up to 2019 memory corruption
18408| [133203] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18409| [133202] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18410| [133201] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18411| [133200] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
18412| [133199] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
18413| [133198] Microsoft Exchange Server up to 2019 CU1 Outlook Web Access cross site scripting
18414| [133197] Microsoft ASP.NET Core 2.2 Request denial of service
18415| [133196] Microsoft Windows up to Server 2019 Win32k information disclosure
18416| [133195] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
18417| [133194] Microsoft Windows up to Server 2019 GDI Memory information disclosure
18418| [133193] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
18419| [133192] Microsoft Windows up to Server 2019 OLE Automation privilege escalation
18420| [133189] Microsoft Windows up to Server 2019 CSRSS memory corruption
18421| [133188] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
18422| [133187] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
18423| [133186] Microsoft Windows up to Server 2019 TCP/IP Stack Fragmented IP Packet information disclosure
18424| [133185] Microsoft Windows up to Server 2019 Win32k memory corruption
18425| [133184] Microsoft Office 2016 for Mac/2019/365 ProPlus Graphics Component memory corruption
18426| [133183] Microsoft Windows up to Server 2019 Win32k memory corruption
18427| [133182] Microsoft Windows up to Server 2019 Win32k memory corruption
18428| [133181] Microsoft Office/Excel/PowerPoint up to 2019 URL Document Code Execution
18429| [133180] Microsoft Windows up to Server 2019 MS XML Code Execution
18430| [133179] Microsoft Windows up to Server 2019 MS XML Code Execution
18431| [133177] Microsoft Windows up to Server 2019 Device Guard luafv.sys privilege escalation
18432| [133174] Microsoft Windows up to Server 2019 GDI+ privilege escalation
18433| [133173] Microsoft Windows up to Server 2019 IOleCvt Interface privilege escalation
18434| [133166] Microsoft Windows up to Server 2019 MS XML Code Execution
18435| [133165] Microsoft Windows up to Server 2019 MS XML Code Execution
18436| [133164] Microsoft Windows up to Server 2019 MS XML Code Execution
18437| [133163] Microsoft Windows up to Server 2019 MS XML Code Execution
18438| [133162] Microsoft Windows up to Server 2019 MS XML Code Execution
18439| [131687] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 3.2/2018 Updated 1.2 cross site scripting
18440| [131685] Microsoft Windows up to Server 2019 SMB information disclosure
18441| [131684] Microsoft Visual Studio 2017 Version 15.9 C++ Redistributable Installer privilege escalation
18442| [131681] Microsoft Windows up to Server 2019 Win32k memory corruption
18443| [131679] Microsoft Windows up to Server 2019 Kernel information disclosure
18444| [131675] Microsoft SharePoint 2013 SP1/2016 cross site scripting
18445| [131674] Microsoft Windows up to Server 2019 Win32k information disclosure
18446| [131673] Microsoft Windows up to Server 2019 Kernel information disclosure
18447| [131672] Microsoft Windows up to Server 2019 GDI information disclosure
18448| [131671] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
18449| [131668] Microsoft Windows up to Server 2019 AppX Deployment Server privilege escalation
18450| [131667] Microsoft Windows up to Server 2019 Comctl32.dll memory corruption
18451| [131663] Microsoft Windows up to Server 2019 Print Spooler information disclosure
18452| [131658] Microsoft Windows up to Server 2019 information disclosure
18453| [131657] Microsoft Windows up to Server 2019 denial of service
18454| [131656] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
18455| [131653] Microsoft Windows up to Server 2019 SMB information disclosure
18456| [131652] Microsoft Windows up to Server 2019 SMB information disclosure
18457| [131651] Microsoft Windows up to Server 2019 Kernel information disclosure
18458| [131650] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V denial of service
18459| [131649] Microsoft Windows up to Server 2019 Kernel memory corruption
18460| [131648] Microsoft Windows up to Server 2019 Hyper-V denial of service
18461| [131644] Microsoft Windows up to Server 2019 Hyper-V denial of service
18462| [131638] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18463| [131632] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
18464| [131631] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
18465| [131630] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
18466| [131629] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
18467| [131628] Microsoft Windows up to Server 2019 ActiveX memory corruption
18468| [131619] Microsoft Windows up to Server 2019 MS XML privilege escalation
18469| [131334] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
18470| [131333] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
18471| [131330] Microsoft Exchange Server 2010 SP3 UR26/2013 CU22/2016 CU12/2019 CU1 privilege escalation
18472| [131329] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 information disclosure
18473| [131328] Microsoft Windows up to Server 2016 Kernel information disclosure
18474| [130832] Microsoft 2013 SP1 spoofing
18475| [130828] Microsoft Exchange Server 2010 SP3/2013 CU22/2016 CU12/2019 CU1 EWS privilege escalation
18476| [130826] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
18477| [130825] Microsoft Office up to 2019 Connectivity Engine memory corruption
18478| [130824] Microsoft Office up to 2019 Connectivity Engine memory corruption
18479| [130823] Microsoft Office up to 2019 Connectivity Engine privilege escalation
18480| [130822] Microsoft Office up to 2019 Connectivity Engine privilege escalation
18481| [130821] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18482| [130820] Microsoft Windows up to Server 2012 R2 GDI information disclosure
18483| [130818] Microsoft Windows up to Server 2019 GDI information disclosure
18484| [130817] Microsoft Windows up to Server 2019 Storage Service privilege escalation
18485| [130814] Microsoft Windows up to Server 2019 privilege escalation
18486| [130809] Microsoft Windows up to Server 2019 Defender Firewall Security privilege escalation
18487| [130808] Microsoft Windows up to Server 2019 information disclosure
18488| [130807] Microsoft Windows up to Server 2019 Hyper-V information disclosure
18489| [130806] Microsoft Windows up to Server 2019 SMB privilege escalation
18490| [130805] Microsoft Windows up to Server 2019 Device Guard privilege escalation
18491| [130804] Microsoft Windows up to Server 2019 Device Guard privilege escalation
18492| [130803] Microsoft Windows up to Server 2019 SMB privilege escalation
18493| [130802] Microsoft Windows up to Server 2019 Win32k information disclosure
18494| [130801] Microsoft Windows up to Server 2019 Device Guard privilege escalation
18495| [130800] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18496| [130799] Microsoft Windows up to Server 2016 Win32k memory corruption
18497| [130798] Microsoft Windows up to Server 2019 GDI information disclosure
18498| [130797] Microsoft Windows up to Server 2019 GDI information disclosure
18499| [130796] Microsoft Windows up to Server 2019 GDI information disclosure
18500| [130793] Microsoft Windows up to Server 2019 GDI information disclosure
18501| [130792] Microsoft Windows up to Server 2019 HID information disclosure
18502| [130791] Microsoft Windows up to Server 2019 HID information disclosure
18503| [130790] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18504| [130789] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18505| [130788] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18506| [130787] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18507| [130786] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18508| [130785] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus Security Feature Phishing spoofing
18509| [130784] Microsoft Windows up to Server 2019 GDI+ memory corruption
18510| [130782] Microsoft Windows up to Server 2019 DHCP Server memory corruption
18511| [130781] Microsoft Windows up to Server 2019 GDI+ memory corruption
18512| [129847] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 1.2/2018 Update 3.2 information disclosure
18513| [129846] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
18514| [129845] Microsoft Skype for Business 2015 CU 8 Request cross site scripting
18515| [128765] Microsoft Visual Studio 2017 Version 15.9 C++ Construct privilege escalation
18516| [128764] Microsoft Exchange Server 2010 SP3/2013 CU21/2016 CU10/2016 CU11/2019 PowerShell API information disclosure
18517| [128762] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus Word memory corruption
18518| [128761] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18519| [128760] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18520| [128759] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18521| [128758] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18522| [128757] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18523| [128756] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18524| [128755] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18525| [128754] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18526| [128753] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18527| [128752] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18528| [128751] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
18529| [128750] Microsoft Windows up to Server 2019 Runtime privilege escalation
18530| [128749] Microsoft Windows up to Server 2019 Kernel information disclosure
18531| [128747] Microsoft ASP.NET Core 2.1 Web Request denial of service
18532| [128746] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
18533| [128745] Microsoft Office up to 2019 Word Macro information disclosure
18534| [128744] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
18535| [128743] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
18536| [128742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
18537| [128741] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18538| [128740] Microsoft SharePoint Enterprise Server 2013 SP1 cross site scripting
18539| [128739] Microsoft Windows up to Server 2019 Kernel information disclosure
18540| [128738] Microsoft Windows up to Server 2019 Subsystem for Linux information disclosure
18541| [128737] Microsoft Windows up to Server 2019 COM Desktop Broker privilege escalation
18542| [128736] Microsoft Windows up to Server 2019 Kernel information disclosure
18543| [128735] Microsoft ASP.NET Core 2.1/2.2 Web Request denial of service
18544| [128733] Microsoft Windows up to Server 2019 Authentication Request privilege escalation
18545| [128732] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus MSHTML Engine privilege escalation
18546| [128729] Microsoft Visual Studio 2010 SP1/2012 Update 5 vscontent File information disclosure
18547| [128728] Microsoft Windows up to Server 2019 Kernel information disclosure
18548| [128727] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
18549| [128726] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
18550| [128725] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
18551| [128718] Microsoft Windows up to Server 2019 Hyper-V memory corruption
18552| [128717] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V memory corruption
18553| [127925] Microsoft SharePoint Enterprise Server 2016 Web Request cross site scripting
18554| [127882] Microsoft Dynamics NAV 2016/2017 Web Request cross site scripting
18555| [127881] Microsoft Windows 10 1809/Server 2019 Object denial of service
18556| [127880] Microsoft Windows up to Server 2019 Win32k Object memory corruption
18557| [127828] Microsoft Windows up to Server 2019 Win32k memory corruption
18558| [127827] Microsoft Windows 10 1809/Server 2019 DirectX information disclosure
18559| [127826] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Win32k ASLR privilege escalation
18560| [127825] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 privilege escalation
18561| [127824] Microsoft Excel up to 2019 Out-of-Bounds memory corruption
18562| [127823] Microsoft Windows up to Server 2012 R2 Kernel information disclosure
18563| [127821] Microsoft Windows up to Server 2019 Connected User Experiences and Telemetry Service denial of service
18564| [127820] Microsoft Windows up to Server 2019 Kernel memory corruption
18565| [127819] Microsoft Exchange Server 2016 CU10/2016 CU11 Profile Data privilege escalation
18566| [127817] Microsoft Excel up to 2019 information disclosure
18567| [127816] Microsoft Windows up to Server 2019 GDI information disclosure
18568| [127815] Microsoft Windows up to Server 2019 GDI information disclosure
18569| [127814] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 Search cross site request forgery
18570| [127812] Microsoft Windows up to Server 2019 Remote Procedure Call information disclosure
18571| [127809] Microsoft PowerPoint 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus memory corruption
18572| [127806] Microsoft Outlook up to 2019 memory corruption
18573| [127805] Microsoft Excel up to 2019 memory corruption
18574| [127804] Microsoft Excel up to 2019 memory corruption
18575| [127803] Microsoft Windows up to Server 2019 Text-To-Speech memory corruption
18576| [127801] Microsoft Windows up to Server 2019 DNS Server privilege escalation
18577| [126938] Microsoft Team Foundation Server 2018 Update 1.1/2018 Update 3 Code Execution
18578| [126755] Microsoft .NET Core 2.1 privilege escalation
18579| [126754] Microsoft Skype for Business/Lync Server 2013 SP1/2016 Emoji denial of service
18580| [126750] Microsoft Windows up to Server 2019 ALPC privilege escalation
18581| [126749] Microsoft Exchange Server 2010/2013/2016/2019 privilege escalation
18582| [126748] Microsoft Office 2019/365 ProPlus Outlook Message information disclosure
18583| [126747] Microsoft SharePoint Enterprise Server 2013 SP1 Folder information disclosure
18584| [126746] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
18585| [126745] Microsoft Project 2010 SP2/2013 SP1/2016 memory corruption
18586| [126744] Microsoft Office up to 2019 Word memory corruption
18587| [126743] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
18588| [126742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
18589| [126739] Microsoft Windows up to Server 2012 R2 Win32k information disclosure
18590| [126737] Microsoft Windows up to Server 2012 R2 DirectX information disclosure
18591| [126736] Microsoft Windows up to Server 2019 Win32k memory corruption
18592| [126735] Microsoft Windows up to Server 2019 DirectX privilege escalation
18593| [126734] Microsoft Office 2019/365 ProPlus information disclosure
18594| [126733] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DirectX memory corruption
18595| [126730] Microsoft Windows up to Server 2019 Active Directory Federation Services cross site scripting
18596| [126728] Microsoft Office/SharePoint 2010 SP2 Word memory corruption
18597| [126727] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
18598| [126726] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
18599| [126725] Microsoft Windows up to Server 2019 DirectX memory corruption
18600| [126722] Microsoft Windows up to Server 2019 PowerShell privilege escalation
18601| [126718] Microsoft Windows up to Server 2016 Search memory corruption
18602| [126717] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2019 memory corruption
18603| [126716] Microsoft Office up to 2019 Excel memory corruption
18604| [126715] Microsoft Office 2016/2019/365 ProPlus Excel memory corruption
18605| [126714] Microsoft Windows up to Server 2019 PowerShell unknown vulnerability
18606| [126713] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
18607| [126712] Microsoft Windows up to Server 2016 Graphics Component memory corruption
18608| [126711] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
18609| [125123] Microsoft Windows up to Server 2019 Codecs Library information disclosure
18610| [125122] Microsoft Windows up to Server 2016 TCP/IP information disclosure
18611| [125121] Microsoft Windows up to Server 2019 DirectX memory corruption
18612| [125120] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
18613| [125119] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
18614| [125116] Microsoft Exchange Server 2013 CU21/2016 CU10 privilege escalation
18615| [125115] Microsoft Windows up to Server 2019 Theme API privilege escalation
18616| [125114] Microsoft Windows up to Server 2019 Windows Shell privilege escalation
18617| [125113] Microsoft Windows up to Server 2019 Kernel memory corruption
18618| [125111] Microsoft Windows up to Server 2019 Device Guard Code Integrity Policy privilege escalation
18619| [125110] Microsoft Windows up to Server 2019 DNS Global Blocklist privilege escalation
18620| [125109] Microsoft Windows up to Server 2019 NTFS privilege escalation
18621| [125108] Microsoft Windows up to Server 2019 Filter Manager memory corruption
18622| [125107] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18623| [125106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18624| [125105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18625| [125104] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18626| [125102] Microsoft Office/Word 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
18627| [125100] Microsoft Office/Powerpoint 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
18628| [125099] Microsoft Office/Excel up to 2019 Protected View memory corruption
18629| [125098] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
18630| [125097] Microsoft Windows up to Server 2019 DirectX Graphics memory corruption
18631| [125096] Microsoft Windows up to Server 2019 Win32k memory corruption
18632| [125095] Microsoft Exchange Server 2013 CU21/2016 CU10 Outlook Web Access cross site scripting
18633| [125093] Microsoft Windows up to Server 2019 Hyper-V memory corruption
18634| [125092] Microsoft Windows up to Server 2019 Hyper-V memory corruption
18635| [125091] Microsoft Windows up to Server 2019 MS XML privilege escalation
18636| [124371] Microsoft Exchange Server up to 2010 SP3 Outlook Web Access /owa/auth/logon.aspx Parameter Server-Side Request Forgery
18637| [124217] Microsoft Windows Server 2012/Server 2016 Active Directory Federation Services /adfs/ls Server-Side Request Forgery
18638| [123995] Microsoft Lync 2011 on Mac Security Feature Messages Download privilege escalation
18639| [123881] Microsoft Windows up to Server 2016 Sandbox privilege escalation
18640| [123874] Microsoft Windows up to Server 2016 Kernel information disclosure
18641| [123872] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 SMB information disclosure
18642| [123868] Microsoft Windows up to Server 2016 Hyper-V denial of service
18643| [123864] Microsoft Windows up to Server 2016 Hyper-V information disclosure
18644| [123862] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2013 RT SP1/2016 cross site scripting
18645| [123861] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
18646| [123860] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18647| [123859] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
18648| [123851] Microsoft Windows up to Server 2016 ALPC privilege escalation
18649| [123849] Microsoft Windows up to Server 2016 SMB denial of service
18650| [123846] Microsoft Office 2016 on Win/Mac memory corruption
18651| [123844] Microsoft Word 2013 SP1/2013 RT SP1/2016 PDF File memory corruption
18652| [123843] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18653| [123842] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18654| [123830] Microsoft Windows up to Server 2016 Hyper-V memory corruption
18655| [123828] Microsoft Windows up to Server 2016 Win32k Graphics privilege escalation
18656| [123827] Microsoft Windows up to Server 2016 Image memory corruption
18657| [123825] Microsoft Windows up to Server 2016 MSXML Parser privilege escalation
18658| [123823] Microsoft Windows up to Server 2016 Hyper-V privilege escalation
18659| [122887] Microsoft Office 2016 on Mac AutoUpdate memory corruption
18660| [122886] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
18661| [122885] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
18662| [122884] Microsoft Windows up to Server 2016 Win32k memory corruption
18663| [122883] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
18664| [122875] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
18665| [122874] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18666| [122873] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R information disclosure
18667| [122872] Microsoft SharePoint Enterprise Server 2013 SP1/2016 information disclosure
18668| [122871] Microsoft PowerPoint 2010 SP2 memory corruption
18669| [122870] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R memory corruption
18670| [122861] Microsoft Windows up to Server 2016 Microsoft COM for Windows privilege escalation
18671| [122850] Microsoft Visual Studio 2015 Update 3/2017/2017 Version 15.8 Diagnostic Hub privilege escalation
18672| [122849] Microsoft Windows up to Server 2016 Diagnostic Hub privilege escalation
18673| [122848] Microsoft Windows Security Feature 2FA weak authentication
18674| [122834] Microsoft Windows up to Server 2016 LNK memory corruption
18675| [122825] Microsoft Windows up to Server 2016 Graphics memory corruption
18676| [122823] Microsoft SQL Server 2016 SP1/2016 SP2/2017 memory corruption
18677| [121208] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R Attachment privilege escalation
18678| [121118] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18679| [121116] Microsoft Windows up to Server 2016 Sandbox privilege escalation
18680| [121114] Microsoft Access 2013 SP1/2016/2016 C2R memory corruption
18681| [121111] Microsoft Windows up to Server 2016 Kernel memory corruption
18682| [121110] Microsoft Windows up to Server 2016 Wordpad privilege escalation
18683| [121107] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll denial of service
18684| [121106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
18685| [121105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18686| [121098] Microsoft Office 2016/2016 C2R memory corruption
18687| [121092] Microsoft Windows up to Server 2016 FTP Server denial of service
18688| [121090] Microsoft Visual Studio up to 2017 Version 15.8 Preview privilege escalation
18689| [119479] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016 memory corruption
18690| [119477] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016 information disclosure
18691| [119476] Microsoft Publisher 2010 SP2 OLE Object PUB File privilege escalation
18692| [119475] Microsoft Outlook 2010 SP2/2013 RT SP1/2013 SP1/2016 Attachment privilege escalation
18693| [119474] Microsoft Windows up to Server 2016 GDI information disclosure
18694| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
18695| [119468] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18696| [119467] Microsoft Windows up to Server 2016 Hypervisor privilege escalation
18697| [119465] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18698| [119464] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18699| [119463] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18700| [119461] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18701| [119460] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18702| [119459] Microsoft Windows up to Server 2016 memory corruption
18703| [119457] Microsoft Windows up to Server 2016 Desktop Bridge privilege escalation
18704| [119456] Microsoft Windows up to Server 2016 Kernel information disclosure
18705| [119455] Microsoft Windows up to Server 2016 denial of service
18706| [119454] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
18707| [119452] Microsoft Windows up to Server 2016 HIDParser memory corruption
18708| [119448] Microsoft Windows up to Server 2016 Code Integrity Module denial of service
18709| [119447] Microsoft Windows up to Server 2016 NTFS privilege escalation
18710| [119441] Microsoft Windows up to Server 2016 Media Foundation memory corruption
18711| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
18712| [119436] Microsoft Windows up to Server 2016 memory corruption
18713| [119431] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
18714| [118120] Microsoft Office 2016 on Mac XML Data Code Execution
18715| [117561] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1 Web Request cross site scripting
18716| [117560] Microsoft Exchange Server up to 2016 CU9 Code Execution memory corruption
18717| [117559] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access Web Request cross site scripting
18718| [117558] Microsoft Windows up to Server 2016 Code Execution memory corruption
18719| [117507] Microsoft Infopath 2013 SP1 memory corruption
18720| [117505] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
18721| [117504] Microsoft Office 2010 SP2 information disclosure
18722| [117503] Microsoft Exchange Server 2013 CU19/2013 CU20/2016 CU8/2016 CU9 Outlook Web Access cross site scripting
18723| [117502] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
18724| [117501] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18725| [117500] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access cross site scripting
18726| [117499] Microsoft Exchange Server up to 2016 CU9 information disclosure
18727| [117498] Microsoft Office 2016 C2R Security Feature privilege escalation
18728| [117497] Microsoft SharePoint Enterprise Server 2010/2013 SP1/2016 cross site scripting
18729| [117480] Microsoft Windows up to Server 2016 COM Serialized privilege escalation
18730| [117473] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18731| [117472] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18732| [117471] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18733| [117470] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18734| [117469] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18735| [117468] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18736| [117444] Microsoft Windows up to Server 2016 Hyper-V vSMB memory corruption
18737| [117443] Microsoft Windows up to Server 2016 Hyper-V memory corruption
18738| [117442] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
18739| [116132] Microsoft Office 2016 Memory information disclosure
18740| [116051] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18741| [116050] Microsoft SharePoint Enterprise Server 2010 SP2/2013/2016 cross site scripting
18742| [116049] Microsoft SharePoint Enterprise Server 2013/2016 privilege escalation
18743| [116048] Microsoft Windows up to Server 2016 DirectX Graphics Kernel Subsystem memory corruption
18744| [116047] Microsoft Windows up to Server 2016 OpenType Font Driver atmfd.dll memory corruption
18745| [116046] Microsoft SharePoint Enterprise Server 2013/2016 Share cross site scripting
18746| [116045] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18747| [116039] Microsoft Windows up to Server 2016 Remote Desktop Protocol denial of service
18748| [116031] Microsoft Windows up to Server 2016 Kernel ASLR information disclosure
18749| [116030] Microsoft Windows up to Server 2016 SNMP Service denial of service
18750| [116026] Microsoft Windows up to Server 2016 Kernel information disclosure
18751| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
18752| [116023] Microsoft Office up to 2016 C2R information disclosure
18753| [116022] Microsoft Excel 2010 SP2 memory corruption
18754| [116020] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Active Directory privilege escalation
18755| [116019] Microsoft Windows up to Server 2016 Kernel information disclosure
18756| [116018] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18757| [116017] Microsoft Excel up to 2016 C2R memory corruption
18758| [116016] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Graphics memory corruption
18759| [116014] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
18760| [116013] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1 memory corruption
18761| [116008] Microsoft Windows up to Server 2016 Graphics memory corruption
18762| [116007] Microsoft Windows up to Server 2016 Graphics memory corruption
18763| [116006] Microsoft Windows up to Server 2016 Graphics memory corruption
18764| [116005] Microsoft Windows up to Server 2016 Graphics memory corruption
18765| [116004] Microsoft Windows up to Server 2016 Graphics memory corruption
18766| [116003] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
18767| [115994] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
18768| [115804] Microsoft Windows up to Server 2016 Malware Protection Engine privilege escalation
18769| [114579] Microsoft Exchange Server up to 2017 CU8 Outlook Web Access information disclosure
18770| [114574] Microsoft SharePoint Enterprise Server 2016 privilege escalation
18771| [114573] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18772| [114571] Microsoft Exchange Server 2016 CU7/2016 CU8 Outlook Web Access information disclosure
18773| [114570] Microsoft Exchange Server 2010 SP3/2013 CU18/2013 CU19/2016 CU7/2016 CU8 Outlook Web Access Fake privilege escalation
18774| [114565] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Kernel information disclosure
18775| [114564] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18776| [114562] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18777| [114560] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18778| [114559] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18779| [114558] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18780| [114557] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18781| [114556] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18782| [114555] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18783| [114554] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18784| [114553] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18785| [114552] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18786| [114551] Microsoft Excel up to 2016 C2R Security Feature privilege escalation
18787| [114549] Microsoft Access 2010 SP2/2013 SP1/2016 memory corruption
18788| [114548] Microsoft Windows up to Server 2016 CNG Security Feature cng.sys privilege escalation
18789| [114547] Microsoft Windows up to Server 2016 Kernel information disclosure
18790| [114546] Microsoft Windows up to Server 2016 Kernel information disclosure
18791| [114545] Microsoft Windows up to Server 2016 Kernel information disclosure
18792| [114544] Microsoft Windows up to Server 2016 Kernel information disclosure
18793| [114543] Microsoft Windows up to Server 2016 Kernel information disclosure
18794| [114542] Microsoft Windows up to Server 2016 Kernel information disclosure
18795| [114541] Microsoft Windows up to Server 2016 Kernel information disclosure
18796| [114540] Microsoft Windows up to Server 2016 Kernel information disclosure
18797| [114536] Microsoft Windows up to Server 2016 CredSSP privilege escalation
18798| [114535] Microsoft Windows up to Server 2016 Hyper-V denial of service
18799| [114531] Microsoft Windows up to Server 2016 Windows Installer privilege escalation
18800| [114530] Microsoft Windows up to Server 2016 GDI privilege escalation
18801| [114529] Microsoft Windows up to Server 2016 GDI privilege escalation
18802| [114527] Microsoft Windows up to Server 2016 Kernel information disclosure
18803| [114526] Microsoft Windows up to Server 2016 Kernel information disclosure
18804| [114525] Microsoft Windows up to Server 2016 Kernel information disclosure
18805| [114522] Microsoft Windows 10 1607/10 1703/Server 2016 Desktop Bridge privilege escalation
18806| [114521] Microsoft Windows up to Server 2016 Video Control privilege escalation
18807| [114520] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge privilege escalation
18808| [114518] Microsoft Windows up to Server 2016 Remote Assistance information disclosure
18809| [114517] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge VFS privilege escalation
18810| [114516] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
18811| [113835] Microsoft Identity Manager 2016 SP1 cross site scripting
18812| [113264] Microsoft Windows 8.1/RT 8.1/Server 2012 R2 SMBv2/SMBv3 denial of service
18813| [113260] Microsoft Windows up to Server 2016 Kernel memory corruption
18814| [113259] Microsoft Windows 10/Server 2016/Server 1709 NTFS privilege escalation
18815| [113254] Microsoft Windows up to Server 2016 Kernel information disclosure
18816| [113253] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
18817| [113252] Microsoft Windows up to Server 2016 Kernel memory corruption
18818| [113250] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
18819| [113249] Microsoft Windows up to Server 2016 Kernel memory corruption
18820| [113248] Microsoft Windows up to Server 2016 Kernel information disclosure
18821| [113243] Microsoft Windows 10/Server 2016 MultiPoint Management privilege escalation
18822| [113242] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
18823| [113241] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
18824| [113240] Microsoft Windows 10/Server 2016/Server 1709 AppContainer privilege escalation
18825| [113237] Microsoft SharePoint Enterprise Server 2016 cross site scripting
18826| [113236] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18827| [113233] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Uninitialized Memory information disclosure
18828| [113232] Microsoft Excel 2016 memory corruption
18829| [113230] Microsoft Windows up to Server 2016 Scripting Engine information disclosure
18830| [113229] Microsoft Windows up to Server 2016 StructuredQuery memory corruption
18831| [111580] Microsoft Office 2016 on Mac Email Attachment spoofing
18832| [111571] Microsoft SharePoint Enterprise Server 2013/2016 Access cross site scripting
18833| [111567] Microsoft Office 2010/2013/2016 memory corruption
18834| [111564] Microsoft Word 2016 memory corruption
18835| [111562] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
18836| [111561] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
18837| [128730] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
18838| [111358] Microsoft Windows up to Server 2016 IPsec denial of service
18839| [110553] Microsoft Office 2016 C2R information disclosure
18840| [110552] Microsoft SharePoint Enterprise Server 2016 Web Request privilege escalation
18841| [110551] Microsoft Excel 2016 C2R memory corruption
18842| [110550] Microsoft PowerPoint 2013 SP1/2013 RT SP1/2016 information disclosure
18843| [110549] Microsoft Exchange Server 2016 CU6/2016 CU7 Outlook Web Access privilege escalation
18844| [110547] Microsoft Windows up to Server 2016 its:// Protocol information disclosure
18845| [110531] Microsoft Windows 10/Server 2016 Device Guard privilege escalation
18846| [110522] Microsoft Windows up to Server 2016 RRAS privilege escalation
18847| [110350] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
18848| [110318] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
18849| [109391] Microsoft SharePoint Enterprise Server 2016 Project Server cross site request forgery
18850| [109389] Microsoft Excel 2016 Click-to-Run memory corruption
18851| [109360] Microsoft Windows up to Server 2016 Windows Search denial of service
18852| [107759] Microsoft Windows up to Server 2016 SMB denial of service
18853| [107757] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18854| [107756] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18855| [107753] Microsoft Windows 10/Server 2016 SMB privilege escalation
18856| [107744] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
18857| [107741] Microsoft Outlook 2016 Secure Connection Mail information disclosure
18858| [107740] Microsoft Windows up to Server 2016 Graphics memory corruption
18859| [107739] Microsoft Windows up to Server 2016 Graphics memory corruption
18860| [107738] Microsoft Windows up to Server 2016 Search information disclosure
18861| [107734] Microsoft Windows 10/Server 2016 SMB privilege escalation
18862| [107732] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
18863| [107730] Microsoft Windows up to Server 2016 Search Remote memory corruption
18864| [107729] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18865| [107728] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18866| [107727] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
18867| [107724] Microsoft Windows up to Server 2016 Text Services Framework memory corruption
18868| [107723] Microsoft Windows up to Server 2016 SMB information disclosure
18869| [107698] Microsoft Office 2016 memory corruption
18870| [107593] InFocus Mondopad 2.2.08 Excel Spreadsheet Microsoft Office Document Credentials information disclosure
18871| [106544] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
18872| [106531] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
18873| [106529] Microsoft PowerPoint 2016 memory corruption
18874| [106523] Microsoft Windows up to Server 2016 PDF Library memory corruption
18875| [106518] Microsoft Edge on Win10/Server 2016 memory corruption
18876| [106516] Microsoft Windows up to Server 2016 PDF Library memory corruption
18877| [106498] Microsoft Windows up to Server 2016 Shell privilege escalation
18878| [106496] Microsoft Windows up to Server 2016 Uniscribe information disclosure
18879| [106495] Microsoft Windows up to Server 2012 R2 Uniscribe memory corruption
18880| [106492] Microsoft Windows Server 2012/Server 2012 R2/Server 2016 DHCP Service memory corruption
18881| [106489] Microsoft Windows up to Server 2016 Graphics Win32k win32k!fsc_CalcGrayRow memory corruption
18882| [106474] Microsoft Office 2016 memory corruption
18883| [106473] Microsoft SharePoint Server 2013 SP1 cross site scripting
18884| [106472] Microsoft Windows up to Server 2016 Bluetooth Driver Object BlueBorne spoofing
18885| [106470] Microsoft Excel 2011 on Mac memory corruption
18886| [106455] Microsoft Exchange Server 2013/2016 information disclosure
18887| [106454] Microsoft Windows up to Server 2016 Windows NetBT Session Services race condition memory corruption
18888| [105048] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
18889| [105047] Microsoft Edge on Win10/Server 2016 Scripting Engine EntryCall memory corruption
18890| [105046] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
18891| [105040] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
18892| [105038] Microsoft Edge on Win10/Server 2016 Javascript Engine Out-of-Bounds memory corruption
18893| [105037] Microsoft Edge on Win10/Server 2016 Javascript Engine PreVisitCatch memory corruption
18894| [105035] Microsoft SharePoint Server 2010 SP2 cross site scripting
18895| [105033] Microsoft Edge 38.14393.1066.0 on Win10/Server 2016 Use-After-Free information disclosure
18896| [105029] Microsoft Edge on Win10/Server 2016 Javascript Engine ProcessLinkFailedAsmJsModule memory corruption
18897| [105027] Microsoft Edge on Win10/Server 2016 _SelectValueInternal information disclosure
18898| [105024] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
18899| [105023] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
18900| [105017] Microsoft Windows up to Server 2016 Error Reporting information disclosure
18901| [105013] Microsoft Windows 10 1607/10 1703/Server 2016 Hyper-V denial of service
18902| [105011] Microsoft Windows up to Server 2016 Windows Search memory corruption
18903| [105010] Microsoft Windows up to Server 2016 Win32k memory corruption
18904| [105009] Microsoft Windows up to Server 2016 Input Method Editor memory corruption
18905| [105008] Microsoft SQL Server 2012/2014/2016 Analysis Services information disclosure
18906| [104990] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
18907| [104989] Microsoft Windows up to Server 2016 NetBIOS denial of service
18908| [104584] Microsoft Outlook up to 2016 C2R Document File privilege escalation
18909| [104583] Microsoft Outlook up to 2016 C2R Email memory corruption
18910| [104582] Microsoft Outlook up to 2016 C2R Object memory corruption
18911| [103468] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 Open Redirect
18912| [103446] Microsoft Windows up to Server 2016 Search Object privilege escalation
18913| [103445] Microsoft Windows up to Server 2016 Wordpad privilege escalation
18914| [103444] Microsoft Windows up to Server 2016 Explorer denial of service
18915| [103442] Microsoft Windows 10/Server 2016 HoloLens WiFi Packet privilege escalation
18916| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
18917| [103431] Microsoft Windows up to Server 2016 PowerShell PSObject Object privilege escalation
18918| [103429] Microsoft Windows up to Server 2016 Kerberos weak authentication
18919| [103426] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
18920| [103425] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
18921| [103420] Microsoft Windows up to Server 2016 Kerberos Bypass privilege escalation
18922| [103417] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
18923| [102544] Microsoft Edge on Win10/Server 2016 Fetch API information disclosure
18924| [102543] Microsoft Edge on Win10/Server 2016 Javascript XML DOM Object information disclosure
18925| [102463] Microsoft Project Server 2013 SP1 cross site scripting
18926| [102460] Microsoft Outlook 2016 on Mac HTML spoofing
18927| [102448] Microsoft SharePoint Enterprise Server 2016 Reflected cross site scripting
18928| [102446] Microsoft Office up to 2016 privilege escalation
18929| [102445] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 privilege escalation
18930| [102443] Microsoft Office up to 2016 privilege escalation
18931| [102412] Microsoft Windows up to Server 2016 PDF information disclosure
18932| [102397] Microsoft Outlook 2010 SP1/2013 SP1/2016 DLL Loader privilege escalation
18933| [102396] Microsoft Office 2013 SP1/2016 DLL Loader privilege escalation
18934| [102386] Microsoft Windows up to Server 2012 R2 Uniscribe privilege escalation
18935| [102385] Microsoft Windows up to Server 2016 Font Library privilege escalation
18936| [102376] Microsoft Windows up to Server 2016 CAB File privilege escalation
18937| [102375] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
18938| [102374] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
18939| [102373] Microsoft Windows up to Server 2016 Uniscribe Font USP10!MergeLigRecords memory corruption
18940| [101817] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
18941| [101816] Microsoft Windows up to Server 2016 Malware Protection Engine setCaller memory corruption
18942| [101815] Microsoft Windows up to Server 2016 Malware Protection Engine Use-After-Free memory corruption
18943| [101814] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
18944| [101813] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
18945| [101812] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
18946| [101811] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
18947| [101810] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
18948| [101028] Microsoft Windows 10/Server 2016 Hyper-V vSMB privilege escalation
18949| [101020] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
18950| [101019] Microsoft Skype for Business 2016 memory corruption
18951| [101018] Microsoft SharePoint 2010 SP2/2013 SP1/2016 memory corruption
18952| [101016] Microsoft PowerPoint 2011 on Mac memory corruption
18953| [101015] Microsoft PowerPoint 2011 on Mac memory corruption
18954| [101014] Microsoft Office 2010 SP2/2016 memory corruption
18955| [101013] Microsoft Office 2010 SP2/2016 memory corruption
18956| [101002] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
18957| [101001] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
18958| [101000] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
18959| [100999] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
18960| [100918] Microsoft Windows 8/8.1/10/Server 2012/Server 2016 Malware Protection Service Type Confusion privilege escalation
18961| [99697] Microsoft SharePoint Server 2010 SP1/2010 SP2 Excel Services cross site scripting
18962| [99683] Microsoft Windows 10 1607/10 1703/Server 2012 R2/Server 2016 Active Directory Lockout privilege escalation
18963| [99682] Microsoft Outlook 2011 on Mac HTML Tag Validator spoofing
18964| [99681] Microsoft Windows up to Server 2016 OLE Integrity-Level Check privilege escalation
18965| [99667] Microsoft Windows 10/Server 2016 Active Directory Service Unresponsive denial of service
18966| [98272] Microsoft Windows up to 10/Server 2016 Local Session privilege escalation
18967| [98096] Microsoft Exchange 2013 SP1 privilege escalation
18968| [98095] Microsoft Lync for Mac 2011 Certificate Validation weak authentication
18969| [98094] Microsoft SharePoint Server 2013 SP1 cross site scripting
18970| [98093] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
18971| [98091] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
18972| [98090] Microsoft SharePoint Server 2010 SP2/2013 SP1 information disclosure
18973| [98089] Microsoft Office Web Apps 2013 SP1 memory corruption
18974| [98082] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 denial of service
18975| [98081] Microsoft Excel up to 2016 information disclosure
18976| [98080] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
18977| [98079] Microsoft Word 2016 memory corruption
18978| [98076] Microsoft Lync/Skype for Business 2010/2013/2016 Graphics Component privilege escalation
18979| [98075] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
18980| [98074] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
18981| [98073] Microsoft Office 2010 SP2/Word Viewer Graphics Component information disclosure
18982| [98069] Microsoft Windows up to Server 2012 R2 Color Management memory corruption
18983| [98056] Microsoft Windows up to Server 2016 DNS Query information disclosure
18984| [98054] Microsoft Windows up to Server 2016 SMBv2/SMBv3 NULL Pointer Dereference memory corruption
18985| [98017] Microsoft Windows up to Server 2016 PDF memory corruption
18986| [98015] Microsoft Windows 10/Server 2016 Hyper-V denial of service
18987| [98013] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
18988| [98007] Microsoft Windows 10/Server 2016 Hyper-V Network Switch denial of service
18989| [98006] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
18990| [96521] Microsoft Windows 8.1/10/Server 2012/Server 2016 SMB Response mrxsmb20.sys denial of service
18991| [95781] Microsoft PowerPoint 2016 Java Embedded Object privilege escalation
18992| [95125] Microsoft Word/SharePoint Enterprise Server 2016 Document privilege escalation
18993| [94451] Microsoft Office 2011 memory corruption
18994| [94447] Microsoft Office 2010 SP2 memory corruption
18995| [94446] Microsoft Office 2016 memory corruption
18996| [94444] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL Loader memory corruption
18997| [94443] Microsoft Office up to 2016 information disclosure
18998| [94442] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
18999| [93964] Microsoft Windows 7 Excel Starter 2010 XXE information disclosure
19000| [93543] Microsoft SQL Server 2016 FILESTREAM Path privilege escalation
19001| [93540] Microsoft Excel 2010 SP2/2011/2016 memory corruption
19002| [93416] Microsoft SQL Server up to 2012 SP3/2014 SP2/2016 Server Agent atxcore.dll privilege escalation
19003| [93415] Microsoft SQL Server 2016 MDS API cross site scripting
19004| [93414] Microsoft SQL Server up to 2012 SP3 RDBMS Engine privilege escalation
19005| [93413] Microsoft SQL Server up to 2014 SP2/2016 RDBMS Engine privilege escalation
19006| [93412] Microsoft SQL Server 2016 RDBMS Engine privilege escalation
19007| [93393] Microsoft Office up to 2016 memory corruption
19008| [93392] Microsoft Office up to 2016 memory corruption
19009| [93391] Microsoft Office up to 2016 memory corruption
19010| [93389] Microsoft Windows up to Server 2016 Media Foundation memory corruption
19011| [93388] Microsoft Windows up to Server 2016 Animation Manager Stylesheets memory corruption
19012| [92587] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 Transaction Manager privilege escalation
19013| [92584] Microsoft Office up to 2016 memory corruption
19014| [91571] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
19015| [91570] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
19016| [91556] Microsoft Exchange 2016 Meeting Invation cross site scripting
19017| [91555] Microsoft Exchange 2013/2016 Link spoofing
19018| [91550] Microsoft Office 2016 memory corruption
19019| [91547] Microsoft Office 2010 memory corruption
19020| [91543] Microsoft Office up to 2016 memory corruption
19021| [91541] Microsoft Office 2013/2016 APP-V ASLR privilege escalation
19022| [90711] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF privilege escalation
19023| [90710] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 Netlogon privilege escalation
19024| [90704] Microsoft Office 2013/2013 RT/2016 memory corruption
19025| [89043] Microsoft Office up to 2016 memory corruption
19026| [89041] Microsoft Office up to 2016 memory corruption
19027| [89040] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 memory corruption
19028| [89038] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature privilege escalation
19029| [89037] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
19030| [87961] Microsoft Windows up to Server 2012 R2 Search denial of service
19031| [87959] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
19032| [87958] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF memory corruption
19033| [87957] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
19034| [87956] Microsoft Exchange 2013/2016 Oracle Outside In Libraries information disclosure
19035| [87944] Microsoft Windows Server 2012/Server 2012 R2 Virtual PCI Memory information disclosure
19036| [87940] Microsoft Windows Server 2012/Server 2012 R2 DNS Server Use-After-Free memory corruption
19037| [87936] Microsoft Office up to 2016 memory corruption
19038| [87166] Microsoft Windows up to Server 2012 R2 DirectX Graphics Kernel Subsystem privilege escalation
19039| [87156] Microsoft Windows 8.1/RT 8.1/10/Server 2012 R2 Shell memory corruption
19040| [87149] Microsoft Office up to 2016 memory corruption
19041| [87148] Microsoft Office 2010 Graphics memory corruption
19042| [87146] Microsoft Office 2011/2013/2013 RT/2016 memory corruption
19043| [82229] Microsoft Excel 2010 SP2 Office Document memory corruption
19044| [82223] Microsoft Windows 8.1/10/Server 2012 R2 Hyper-V Memory information disclosure
19045| [82222] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Memory information disclosure
19046| [82221] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Hyper-V privilege escalation
19047| [81274] Microsoft Office up to 2016 memory corruption
19048| [81270] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
19049| [81269] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
19050| [81268] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
19051| [80886] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
19052| [80885] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP memory corruption
19053| [80878] Microsoft Windows Server 2012 R2 Active Directory Federation Service denial of service
19054| [80874] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP privilege escalation
19055| [80870] Microsoft Office up to 2016 memory corruption
19056| [80868] Microsoft Office up to 2016 memory corruption
19057| [80867] Microsoft Office up to 2016 memory corruption
19058| [80865] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 DLL Loader memory corruption
19059| [80860] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Reader memory corruption
19060| [80859] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
19061| [80231] Microsoft Excel up to 2016 Office Document memory corruption
19062| [80229] Microsoft Exchange Server 2013 SP1/2013 CU 10/2013 CU 11/2016 Outlook Web Access cross site scripting
19063| [80228] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
19064| [80227] Microsoft Exchange Server 2013 SP1/2013 CU 10/2016 Outlook Web Access cross site scripting
19065| [80226] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
19066| [80218] Microsoft Office up to 2016 ASLR privilege escalation
19067| [80217] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
19068| [80216] Microsoft Office up to 2016 Office Document memory corruption
19069| [80206] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
19070| [128763] Microsoft Exchange Server 2016 CU10/2016 CU11/2019 memory corruption
19071| [79508] Microsoft Windows up to Server 2012 R2 Library Loader memory corruption
19072| [79500] Microsoft Office 2010/2011/2016 memory corruption
19073| [79183] Microsoft Windows up to Server 2012 R2 IPsec denial of service
19074| [79173] Microsoft Windows up to Server 2012 R2 Graphics information disclosure
19075| [79117] Microsoft Outlook 2011/2016 on Mac HTML spoofing
19076| [78375] Microsoft SharePoint Server/SharePoint Foundation 2013 SP1 cross site scripting
19077| [77645] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
19078| [77644] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
19079| [77638] Microsoft Lync Server 2013 cross site scripting
19080| [77628] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
19081| [77612] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access Stack-Based information disclosure
19082| [77050] Microsoft Office up to 2016 memory corruption
19083| [77037] Microsoft Windows Server 2012/Server 2012 R2 System Center Operations Manager cross site scripting
19084| [76461] Microsoft Windows up to Server 2012 R2 Domain-Controller Communication Credentials information disclosure
19085| [76460] Microsoft Windows 7 SP1/8/Server 2012 RDP Server Service memory corruption
19086| [76448] Microsoft Windows 8.1/Server 2012 R2 Hyper-V memory corruption
19087| [75793] Microsoft Exchange Server 2013 CU8 cross site scripting
19088| [75792] Microsoft Exchange Server 2013 SP1 CU8 cross site request forgery
19089| [75791] Microsoft Office 2013 SP1 Office Document Uninitialized Memory memory corruption
19090| [75787] Microsoft Exchange Server 2013 SP1 CU8 Same Origin Policy privilege escalation
19091| [75786] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
19092| [66976] Microsoft Access 2010 VBA Datatype denial of service
19093| [74848] Microsoft SharePoint Foundation/SharePoint Server 2013 SP1 cross site scripting
19094| [74842] Microsoft Windows 8.1/Server 2012 R2 Hyper-V denial of service
19095| [74836] Microsoft Project Server 2010 SP2/2013 SP1 cross site scripting
19096| [74835] Microsoft Office 2011 on Mac Use-After-Free cross site scripting
19097| [74834] Microsoft Windows Server 2012 R2 Active Directory Federation Services 3.0 privilege escalation
19098| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
19099| [74393] Microsoft SharePoint Server 2013 Foundation cross site scripting
19100| [73967] Microsoft Office up to 2013 SP1 Office File memory corruption
19101| [73966] Microsoft Office up to 2013 SP1 RTF File memory corruption
19102| [73965] Microsoft Office up to 2013 SP1 Use-After-Free memory corruption
19103| [73961] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 Remote Desktop Protocol Object Management denial of service
19104| [69162] Microsoft System Center Virtual Machine Manager 2012 privilege escalation
19105| [69160] Microsoft Windows up to Server 2012 Process privilege escalation
19106| [69156] Microsoft Office 2010 Object memory corruption
19107| [68593] Microsoft Windows up to Server 2012 Network Location Awareness Service privilege escalation
19108| [68417] Microsoft Exchange 2013 Outlook Web Access Token spoofing
19109| [68191] Microsoft SharePoint 2010 cross site scripting
19110| [67828] Microsoft ASP.NET MVC 2/3/4/5/5.1 System.Web.Mvc.dll cross site scripting
19111| [67518] Microsoft Lync 2013 denial of service
19112| [67517] Microsoft Lync 2013 Script Reflected cross site scripting
19113| [67516] Microsoft Lync 2010/2013 denial of service
19114| [67362] Microsoft Windows up to Server 2012 R2 Remote Procedure Call privilege escalation
19115| [67360] Microsoft SharePoint 2013 App Permission Management cross site scripting
19116| [13549] Microsoft Windows 7/8/8.1/Server 2012 Remote Desktop Protocol weak encryption
19117| [13547] Microsoft Lync 2010/2013 Meeting cross site scripting
19118| [13228] Microsoft Office 2013 Document privilege escalation
19119| [68577] Microsoft ASP.NET 2014.3.1209 Telerik UI RadAsyncUpload directory traversal
19120| [12267] Microsoft Forefront Security for Exchange Server 2010 Mail memory corruption
19121| [12263] Microsoft Windows up to Server 2012 Direct2D 2D Geometric Figure memory corruption
19122| [12238] Microsoft Windows 8/Server 2012/RT IPv6 denial of service
19123| [12185] Microsoft .NET Framework 2/4 HMAC weak authentication
19124| [12183] Microsoft .NET Framework 2/4 DTD denial of service
19125| [11673] Microsoft Windows Live Movie Maker 2011 WAV File denial of service
19126| [11468] Microsoft Exchange 2010/2013 cross site scripting
19127| [11466] Microsoft Office 2013 File Response information disclosure
19128| [11457] Microsoft SharePoint Server/Office Web Apps 2010 SP1/2010 SP2/2013 W3WP Service Account privilege escalation
19129| [11150] Microsoft Windows 8/Server 2012 Hyper-V Data Structure Value Crash privilege escalation
19130| [11004] Microsoft Windows Server 2012 R2 RDP Restricted Admin Mode weak authentication
19131| [10250] Microsoft SharePoint Server up to 2013 W3WP Process denial of service
19132| [10249] Microsoft SharePoint 2010/2003/2007/2.0/3.0 Workflow memory corruption
19133| [10248] Microsoft SharePoint Server up to 2013 cross site scripting
19134| [9943] Microsoft Windows Server 2012 NAT Driver ICMP Packet denial of service
19135| [8739] Microsoft Windows Essentials up to 2012 Windows Writer Eingabe information disclosure
19136| [8725] Microsoft Lync 2010/2013 Use-After-Free memory corruption
19137| [8722] Microsoft Windows 8/Server 2012/RT HTTP.sys denial of service
19138| [8206] Microsoft SharePoint Server 2010 SP1 HTML Sanitization Component cross site scripting
19139| [8203] Microsoft Windows up to 2012 AD LDAP Query denial of service
19140| [8200] Microsoft SharePoint Server 2013 ACL information disclosure
19141| [7971] Microsoft Office for Mac 2011 up to 14.3.1 on Mac HTML5 Mail Message Parser File information disclosure
19142| [7969] Microsoft OneNote 2010 SP1 ONE File information disclosure
19143| [7968] Microsoft SharePoint Server 2010 SP1 Input Validator Eingabe Crash denial of service
19144| [7967] Microsoft SharePoint Server 2010 SP1 User Account Eingabe Crash information disclosure
19145| [7966] Microsoft SharePoint Server 2010 SP1 Eingabe Crash cross site scripting
19146| [7965] Microsoft SharePoint Server 2010 SP1 User Account Callback URL privilege escalation
19147| [7964] Microsoft Visio 2010 Tree Object Type File memory corruption
19148| [7343] Microsoft Lync 2012 HTTP Format String
19149| [7258] Microsoft Windows up to 8/Server 2012 SSL/TLS race condition
19150| [7230] Microsoft Excel 2010 SP1 on 32-bit XLS File Formatting Information Crash denial of service
19151| [6831] Microsoft Office Picture Manager 2010 File memory corruption
19152| [62720] EMC NetWorker Module for Microsoft Applications up to 2.2.0 memory corruption
19153| [6624] Microsoft SQL Server up to 2012 Report Manager cross site scripting
19154| [62238] Microsoft Visual Studio Team Foundation Server 2010 cross site scripting
19155| [5946] Microsoft Visio/Visio Viewer up to 2010 SP1 File memory corruption
19156| [5644] Microsoft SharePoint 2010 scriptesx.ashx cross site scripting
19157| [5641] Microsoft SharePoint 2010 cross site scripting
19158| [60943] Microsoft Dynamics AX 2012 Enterprise Portal cross site scripting
19159| [12311] Microsoft Lync 2010 Search race condition
19160| [60570] Microsoft Forefront Unified Access Gateway 2010 information disclosure
19161| [60569] Microsoft Forefront Unified Access Gateway 2010 spoofing
19162| [60208] Microsoft Visio Viewer 2010 memory corruption
19163| [60207] Microsoft Visio Viewer 2010 memory corruption
19164| [60206] Microsoft Visio Viewer 2010 memory corruption
19165| [4640] Microsoft SharePoint 2010 inplview.aspx cross site scripting
19166| [4636] Microsoft SharePoint 2010 wizardlist.aspx cross site scripting
19167| [4635] Microsoft SharePoint 2010 themeweb.aspx cross site scripting
19168| [59008] Microsoft Forefront Unified Access Gateway 2010 Crash denial of service
19169| [58995] Microsoft Forefront Unified Access Gateway 2010 memory corruption
19170| [58994] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
19171| [58993] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
19172| [4424] Microsoft Host Integration Server up to 2010 denial of service
19173| [4420] Microsoft Forefront Unified Access Gateway 2010 memory corruption
19174| [58487] Microsoft SharePoint Foundation 2010 cross site scripting
19175| [58486] Microsoft SharePoint Foundation 2010 Reflected cross site scripting
19176| [58485] Microsoft SharePoint Foundation 2010 EditForm.aspx cross site scripting
19177| [4414] Microsoft SharePoint 2010 cross site scripting
19178| [4413] Microsoft SharePoint 2010/2007/3.0 XML/XLS Designfehler
19179| [91971] Microsoft Skype 2.2.x/5.2.x/5.3.x denial of service
19180| [57693] Microsoft Forefront Threat Management Gateway 2010 NSPLookupServiceNext memory corruption
19181| [4332] Microsoft PowerPoint 2010/2007 memory corruption
19182| [56028] Microsoft Data Access Components 2.8 memory corruption
19183| [55777] Microsoft Windows Movie Maker 2.6 memory corruption
19184| [55424] Microsoft Forefront Unified Access Gateway 2010 Signurl.asp cross site scripting
19185| [55415] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
19186| [55414] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
19187| [55413] Microsoft Forefront Unified Access Gateway 2010 spoofing
19188| [54341] Microsoft Windows Movie Maker 2.1 memory corruption
19189| [54549] Microsoft PowerPoint 2010 pptimpconv.dll memory corruption
19190| [4009] Microsoft NET Framework 2.x/3.x denial of service
19191| [45681] Microsoft Internet Explorer 8 Beta 2 privilege escalation
19192| [45449] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
19193| [45448] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
19194| [45446] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
19195| [2927] Microsoft Data Access Components 2.x ADODB.Connection ActiveX Control memory corruption
19196| [32692] Microsoft XML Core Services up to 2.6 memory corruption
19197| [32691] Microsoft XML Core Services up to 2.6 memory corruption
19198| [29608] Microsoft Data Access Components 2.7 memory corruption
19199|
19200| MITRE CVE - https://cve.mitre.org:
19201| [CVE-2013-3661] The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
19202| [CVE-2013-3660] The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
19203| [CVE-2013-3174] DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."
19204| [CVE-2013-3173] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overwrite Vulnerability."
19205| [CVE-2013-3172] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to cause a denial of service (system hang) via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."
19206| [CVE-2013-3171] The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."
19207| [CVE-2013-3167] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."
19208| [CVE-2013-3154] The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."
19209| [CVE-2013-3138] Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
19210| [CVE-2013-3136] The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
19211| [CVE-2013-3134] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."
19212| [CVE-2013-3133] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
19213| [CVE-2013-3132] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Delegate Reflection Bypass Vulnerability."
19214| [CVE-2013-3131] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
19215| [CVE-2013-1345] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Vulnerability."
19216| [CVE-2013-1340] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."
19217| [CVE-2013-1339] The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
19218| [CVE-2013-1336] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."
19219| [CVE-2013-1335] Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
19220| [CVE-2013-1334] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."
19221| [CVE-2013-1332] dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."
19222| [CVE-2013-1331] Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
19223| [CVE-2013-1329] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
19224| [CVE-2013-1328] Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
19225| [CVE-2013-1327] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
19226| [CVE-2013-1323] Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
19227| [CVE-2013-1322] Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
19228| [CVE-2013-1321] Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
19229| [CVE-2013-1320] Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
19230| [CVE-2013-1319] Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
19231| [CVE-2013-1318] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
19232| [CVE-2013-1317] Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."
19233| [CVE-2013-1316] Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."
19234| [CVE-2013-1302] Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
19235| [CVE-2013-1301] Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
19236| [CVE-2013-1300] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."
19237| [CVE-2013-1295] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "CSRSS Memory Corruption Vulnerability."
19238| [CVE-2013-1294] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
19239| [CVE-2013-1293] The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application that leverages improper handling of objects in memory, aka "NTFS NULL Pointer Dereference Vulnerability."
19240| [CVE-2013-1292] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
19241| [CVE-2013-1291] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 Gold and SP1, and Windows 8 allows local users to cause a denial of service (reboot) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability" or "Win32k Font Parsing Vulnerability."
19242| [CVE-2013-1287] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1286.
19243| [CVE-2013-1286] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.
19244| [CVE-2013-1285] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1286 and CVE-2013-1287.
19245| [CVE-2013-1283] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
19246| [CVE-2013-1281] The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
19247| [CVE-2013-1280] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Reference Count Vulnerability."
19248| [CVE-2013-1279] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1278.
19249| [CVE-2013-1278] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1279.
19250| [CVE-2013-1277] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19251| [CVE-2013-1276] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19252| [CVE-2013-1275] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19253| [CVE-2013-1274] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19254| [CVE-2013-1273] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19255| [CVE-2013-1272] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19256| [CVE-2013-1271] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19257| [CVE-2013-1270] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19258| [CVE-2013-1269] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19259| [CVE-2013-1268] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19260| [CVE-2013-1267] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19261| [CVE-2013-1266] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19262| [CVE-2013-1265] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19263| [CVE-2013-1264] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19264| [CVE-2013-1263] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19265| [CVE-2013-1262] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19266| [CVE-2013-1261] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19267| [CVE-2013-1260] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19268| [CVE-2013-1259] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19269| [CVE-2013-1258] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19270| [CVE-2013-1257] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19271| [CVE-2013-1256] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19272| [CVE-2013-1255] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19273| [CVE-2013-1254] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19274| [CVE-2013-1253] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19275| [CVE-2013-1252] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19276| [CVE-2013-1251] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19277| [CVE-2013-1250] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19278| [CVE-2013-1249] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19279| [CVE-2013-1248] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
19280| [CVE-2013-0095] Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability."
19281| [CVE-2013-0077] Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
19282| [CVE-2013-0076] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."
19283| [CVE-2013-0075] The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
19284| [CVE-2013-0073] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."
19285| [CVE-2013-0013] The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability."
19286| [CVE-2013-0011] The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulnerability."
19287| [CVE-2013-0010] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
19288| [CVE-2013-0009] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.
19289| [CVE-2013-0008] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."
19290| [CVE-2013-0004] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability."
19291| [CVE-2013-0003] Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."
19292| [CVE-2013-0002] Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."
19293| [CVE-2013-0001] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka "System Drawing Information Disclosure Vulnerability."
19294| [CVE-2012-5672] Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
19295| [CVE-2012-4791] Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
19296| [CVE-2012-4786] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
19297| [CVE-2012-4776] The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."
19298| [CVE-2012-4774] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted (1) file name or (2) subfolder name that triggers use of unallocated memory as the destination of a copy operation, aka "Windows Filename Parsing Vulnerability."
19299| [CVE-2012-2897] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."
19300| [CVE-2012-2556] The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."
19301| [CVE-2012-2553] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
19302| [CVE-2012-2552] Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
19303| [CVE-2012-2551] The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."
19304| [CVE-2012-2543] Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1
19305| [CVE-2012-2539] Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
19306| [CVE-2012-2536] Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
19307| [CVE-2012-2530] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
19308| [CVE-2012-2529] Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Windows Kernel Integer Overflow Vulnerability."
19309| [CVE-2012-2528] Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
19310| [CVE-2012-2527] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
19311| [CVE-2012-2524] Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
19312| [CVE-2012-2520] Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
19313| [CVE-2012-2519] Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
19314| [CVE-2012-1896] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
19315| [CVE-2012-1895] The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
19316| [CVE-2012-1893] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability."
19317| [CVE-2012-1890] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability."
19318| [CVE-2012-1887] Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
19319| [CVE-2012-1886] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
19320| [CVE-2012-1885] Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
19321| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
19322| [CVE-2012-1867] Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."
19323| [CVE-2012-1866] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability."
19324| [CVE-2012-1865] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864.
19325| [CVE-2012-1864] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865.
19326| [CVE-2012-1863] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
19327| [CVE-2012-1862] Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."
19328| [CVE-2012-1860] Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."
19329| [CVE-2012-1858] The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
19330| [CVE-2012-1856] The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
19331| [CVE-2012-1855] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."
19332| [CVE-2012-1854] Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19333| [CVE-2012-1851] Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
19334| [CVE-2012-1850] The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability."
19335| [CVE-2012-1848] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."
19336| [CVE-2012-1847] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19337| [CVE-2012-1537] Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
19338| [CVE-2012-1528] Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability."
19339| [CVE-2012-1527] Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability."
19340| [CVE-2012-1459] The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
19341| [CVE-2012-1457] The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
19342| [CVE-2012-1453] The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
19343| [CVE-2012-1443] The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
19344| [CVE-2012-1420] The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
19345| [CVE-2012-1194] The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
19346| [CVE-2012-0185] Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
19347| [CVE-2012-0184] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19348| [CVE-2012-0183] Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
19349| [CVE-2012-0182] Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
19350| [CVE-2012-0181] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."
19351| [CVE-2012-0180] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."
19352| [CVE-2012-0179] Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."
19353| [CVE-2012-0178] Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."
19354| [CVE-2012-0177] Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."
19355| [CVE-2012-0175] The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."
19356| [CVE-2012-0174] Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."
19357| [CVE-2012-0173] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.
19358| [CVE-2012-0167] Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
19359| [CVE-2012-0165] GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."
19360| [CVE-2012-0163] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
19361| [CVE-2012-0161] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
19362| [CVE-2012-0160] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
19363| [CVE-2012-0159] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview
19364| [CVE-2012-0158] The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19365| [CVE-2012-0157] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."
19366| [CVE-2012-0156] DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability."
19367| [CVE-2012-0154] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."
19368| [CVE-2012-0152] The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
19369| [CVE-2012-0151] The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
19370| [CVE-2012-0150] Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."
19371| [CVE-2012-0149] afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
19372| [CVE-2012-0148] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
19373| [CVE-2012-0143] Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
19374| [CVE-2012-0142] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19375| [CVE-2012-0141] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
19376| [CVE-2012-0015] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
19377| [CVE-2012-0014] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."
19378| [CVE-2012-0013] Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."
19379| [CVE-2012-0009] Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
19380| [CVE-2012-0008] Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
19381| [CVE-2012-0006] The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability."
19382| [CVE-2012-0005] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."
19383| [CVE-2012-0004] Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
19384| [CVE-2012-0003] Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."
19385| [CVE-2012-0002] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."
19386| [CVE-2012-0001] The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
19387| [CVE-2011-5046] The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."
19388| [CVE-2011-4434] Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
19389| [CVE-2011-3417] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
19390| [CVE-2011-3416] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
19391| [CVE-2011-3415] Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
19392| [CVE-2011-3414] The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
19393| [CVE-2011-3413] Microsoft PowerPoint 2007 SP2
19394| [CVE-2011-3412] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."
19395| [CVE-2011-3411] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."
19396| [CVE-2011-3410] Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."
19397| [CVE-2011-3408] Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability."
19398| [CVE-2011-3406] Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability."
19399| [CVE-2011-3403] Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."
19400| [CVE-2011-3402] Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."
19401| [CVE-2011-3400] Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
19402| [CVE-2011-3397] The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."
19403| [CVE-2011-3396] Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."
19404| [CVE-2011-2019] Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
19405| [CVE-2011-2018] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
19406| [CVE-2011-2016] Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
19407| [CVE-2011-2014] The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability."
19408| [CVE-2011-2013] Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."
19409| [CVE-2011-2011] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
19410| [CVE-2011-2008] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
19411| [CVE-2011-2007] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
19412| [CVE-2011-2005] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
19413| [CVE-2011-2004] Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.
19414| [CVE-2011-2003] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."
19415| [CVE-2011-2002] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka "Win32k TrueType Font Type Translation Vulnerability."
19416| [CVE-2011-1991] Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability."
19417| [CVE-2011-1990] Microsoft Excel 2007 SP2
19418| [CVE-2011-1989] Microsoft Excel 2003 SP3 and 2007 SP2
19419| [CVE-2011-1988] Microsoft Excel 2003 SP3 and 2007 SP2
19420| [CVE-2011-1987] Array index error in Microsoft Excel 2003 SP3 and 2007 SP2
19421| [CVE-2011-1986] Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
19422| [CVE-2011-1985] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability."
19423| [CVE-2011-1984] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
19424| [CVE-2011-1983] Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."
19425| [CVE-2011-1982] Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
19426| [CVE-2011-1980] Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability."
19427| [CVE-2011-1979] Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
19428| [CVE-2011-1978] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."
19429| [CVE-2011-1976] Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
19430| [CVE-2011-1975] Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
19431| [CVE-2011-1974] NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
19432| [CVE-2011-1972] Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
19433| [CVE-2011-1971] The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."
19434| [CVE-2011-1970] The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
19435| [CVE-2011-1968] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability."
19436| [CVE-2011-1967] Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."
19437| [CVE-2011-1966] The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
19438| [CVE-2011-1965] Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."
19439| [CVE-2011-1894] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
19440| [CVE-2011-1893] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
19441| [CVE-2011-1892] Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
19442| [CVE-2011-1888] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
19443| [CVE-2011-1887] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
19444| [CVE-2011-1885] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
19445| [CVE-2011-1884] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19446| [CVE-2011-1883] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19447| [CVE-2011-1882] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19448| [CVE-2011-1881] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
19449| [CVE-2011-1880] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
19450| [CVE-2011-1879] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19451| [CVE-2011-1878] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19452| [CVE-2011-1877] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
19453| [CVE-2011-1876] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19454| [CVE-2011-1875] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19455| [CVE-2011-1874] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
19456| [CVE-2011-1873] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."
19457| [CVE-2011-1872] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
19458| [CVE-2011-1871] Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."
19459| [CVE-2011-1870] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability."
19460| [CVE-2011-1869] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
19461| [CVE-2011-1868] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
19462| [CVE-2011-1508] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."
19463| [CVE-2011-1284] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability."
19464| [CVE-2011-1283] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability."
19465| [CVE-2011-1282] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability."
19466| [CVE-2011-1281] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability."
19467| [CVE-2011-1280] The XML Editor in Microsoft InfoPath 2007 SP2 and 2010
19468| [CVE-2011-1279] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."
19469| [CVE-2011-1278] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."
19470| [CVE-2011-1277] Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
19471| [CVE-2011-1276] Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
19472| [CVE-2011-1275] Microsoft Excel 2002 SP3
19473| [CVE-2011-1274] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
19474| [CVE-2011-1273] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19475| [CVE-2011-1272] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
19476| [CVE-2011-1270] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
19477| [CVE-2011-1269] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
19478| [CVE-2011-1268] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
19479| [CVE-2011-1267] The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
19480| [CVE-2011-1264] Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
19481| [CVE-2011-1263] Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
19482| [CVE-2011-1253] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Class Inheritance Vulnerability."
19483| [CVE-2011-1252] Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
19484| [CVE-2011-1249] The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
19485| [CVE-2011-1248] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."
19486| [CVE-2011-1247] Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Active Accessibility Insecure Library Loading Vulnerability."
19487| [CVE-2011-1242] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19488| [CVE-2011-1241] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19489| [CVE-2011-1240] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19490| [CVE-2011-1239] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19491| [CVE-2011-1238] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19492| [CVE-2011-1237] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19493| [CVE-2011-1236] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19494| [CVE-2011-1235] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19495| [CVE-2011-1234] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19496| [CVE-2011-1233] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19497| [CVE-2011-1232] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19498| [CVE-2011-1231] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19499| [CVE-2011-1230] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19500| [CVE-2011-1229] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19501| [CVE-2011-1228] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19502| [CVE-2011-1227] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19503| [CVE-2011-1226] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19504| [CVE-2011-1225] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19505| [CVE-2011-0980] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."
19506| [CVE-2011-0979] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19507| [CVE-2011-0978] Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
19508| [CVE-2011-0977] Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
19509| [CVE-2011-0976] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
19510| [CVE-2011-0677] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19511| [CVE-2011-0676] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
19512| [CVE-2011-0675] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19513| [CVE-2011-0674] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19514| [CVE-2011-0672] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19515| [CVE-2011-0671] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19516| [CVE-2011-0670] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19517| [CVE-2011-0667] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19518| [CVE-2011-0666] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19519| [CVE-2011-0665] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19520| [CVE-2011-0664] Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
19521| [CVE-2011-0662] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
19522| [CVE-2011-0661] The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
19523| [CVE-2011-0660] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
19524| [CVE-2011-0658] Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."
19525| [CVE-2011-0657] DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
19526| [CVE-2011-0656] Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19527| [CVE-2011-0655] Microsoft PowerPoint 2007 SP2 and 2010
19528| [CVE-2011-0654] Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.
19529| [CVE-2011-0107] Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
19530| [CVE-2011-0105] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
19531| [CVE-2011-0104] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
19532| [CVE-2011-0103] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."
19533| [CVE-2011-0101] Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, doubly-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
19534| [CVE-2011-0098] Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19535| [CVE-2011-0097] Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19536| [CVE-2011-0096] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
19537| [CVE-2011-0093] ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
19538| [CVE-2011-0092] The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
19539| [CVE-2011-0091] Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
19540| [CVE-2011-0090] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
19541| [CVE-2011-0089] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
19542| [CVE-2011-0088] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability."
19543| [CVE-2011-0087] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."
19544| [CVE-2011-0086] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability."
19545| [CVE-2011-0043] Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
19546| [CVE-2011-0042] SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
19547| [CVE-2011-0041] Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
19548| [CVE-2011-0040] The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
19549| [CVE-2011-0039] The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
19550| [CVE-2011-0034] Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted parameter values in an OpenType font, aka "OpenType Font Stack Overflow Vulnerability."
19551| [CVE-2011-0033] The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
19552| [CVE-2011-0032] Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
19553| [CVE-2011-0031] The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
19554| [CVE-2011-0030] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
19555| [CVE-2011-0028] WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."
19556| [CVE-2010-5082] Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."
19557| [CVE-2010-4701] Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
19558| [CVE-2010-4669] The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
19559| [CVE-2010-4562] Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
19560| [CVE-2010-4398] Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
19561| [CVE-2010-4182] Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown
19562| [CVE-2010-3974] fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."
19563| [CVE-2010-3970] Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."
19564| [CVE-2010-3966] Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."
19565| [CVE-2010-3965] Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
19566| [CVE-2010-3964] Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
19567| [CVE-2010-3963] Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability."
19568| [CVE-2010-3961] The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."
19569| [CVE-2010-3960] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."
19570| [CVE-2010-3959] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."
19571| [CVE-2010-3958] The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."
19572| [CVE-2010-3957] Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."
19573| [CVE-2010-3956] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."
19574| [CVE-2010-3955] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."
19575| [CVE-2010-3954] Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."
19576| [CVE-2010-3946] Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."
19577| [CVE-2010-3945] Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
19578| [CVE-2010-3944] win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
19579| [CVE-2010-3943] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."
19580| [CVE-2010-3942] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."
19581| [CVE-2010-3941] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."
19582| [CVE-2010-3940] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."
19583| [CVE-2010-3939] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."
19584| [CVE-2010-3937] Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."
19585| [CVE-2010-3338] The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
19586| [CVE-2010-3337] Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.
19587| [CVE-2010-3336] Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."
19588| [CVE-2010-3335] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."
19589| [CVE-2010-3334] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
19590| [CVE-2010-3333] Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
19591| [CVE-2010-3332] Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."
19592| [CVE-2010-3324] The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
19593| [CVE-2010-3243] Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."
19594| [CVE-2010-3242] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
19595| [CVE-2010-3241] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
19596| [CVE-2010-3240] Microsoft Excel 2002 SP3 and 2007 SP2
19597| [CVE-2010-3239] Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
19598| [CVE-2010-3238] Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
19599| [CVE-2010-3237] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
19600| [CVE-2010-3236] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
19601| [CVE-2010-3235] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
19602| [CVE-2010-3234] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
19603| [CVE-2010-3233] Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
19604| [CVE-2010-3232] Microsoft Excel 2003 SP3 and 2007 SP2
19605| [CVE-2010-3231] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
19606| [CVE-2010-3230] Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
19607| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
19608| [CVE-2010-3227] Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."
19609| [CVE-2010-3223] The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
19610| [CVE-2010-3222] Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability."
19611| [CVE-2010-3221] Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
19612| [CVE-2010-3220] Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
19613| [CVE-2010-3219] Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
19614| [CVE-2010-3218] Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."
19615| [CVE-2010-3217] Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
19616| [CVE-2010-3216] Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."
19617| [CVE-2010-3215] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."
19618| [CVE-2010-3214] Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010
19619| [CVE-2010-3213] Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
19620| [CVE-2010-3200] MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc.
19621| [CVE-2010-3190] Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1
19622| [CVE-2010-3148] Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
19623| [CVE-2010-3147] Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
19624| [CVE-2010-3146] Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability."
19625| [CVE-2010-3144] Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or INS file, aka "Internet Connection Signup Wizard Insecure Library Loading Vulnerability."
19626| [CVE-2010-3142] Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
19627| [CVE-2010-2750] Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."
19628| [CVE-2010-2748] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."
19629| [CVE-2010-2747] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
19630| [CVE-2010-2746] Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
19631| [CVE-2010-2744] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."
19632| [CVE-2010-2742] The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."
19633| [CVE-2010-2741] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
19634| [CVE-2010-2740] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."
19635| [CVE-2010-2739] Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.
19636| [CVE-2010-2738] The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
19637| [CVE-2010-2729] The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability."
19638| [CVE-2010-2728] Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."
19639| [CVE-2010-2573] Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."
19640| [CVE-2010-2572] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
19641| [CVE-2010-2571] Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."
19642| [CVE-2010-2570] Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."
19643| [CVE-2010-2569] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."
19644| [CVE-2010-2568] Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
19645| [CVE-2010-2567] The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the-middle attackers to execute arbitrary code via a malformed response, aka "RPC Memory Corruption Vulnerability."
19646| [CVE-2010-2566] The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."
19647| [CVE-2010-2563] The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter, aka "WordPad Word 97 Text Converter Memory Corruption Vulnerability."
19648| [CVE-2010-2562] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."
19649| [CVE-2010-2555] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."
19650| [CVE-2010-2554] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
19651| [CVE-2010-2552] Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (system hang) via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."
19652| [CVE-2010-2551] The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 packet, aka "SMB Variable Validation Vulnerability."
19653| [CVE-2010-2550] The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."
19654| [CVE-2010-2549] Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
19655| [CVE-2010-2265] Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.
19656| [CVE-2010-2091] Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
19657| [CVE-2010-2084] Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.
19658| [CVE-2010-1903] Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability."
19659| [CVE-2010-1902] Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
19660| [CVE-2010-1901] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
19661| [CVE-2010-1900] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
19662| [CVE-2010-1898] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
19663| [CVE-2010-1897] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
19664| [CVE-2010-1896] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability."
19665| [CVE-2010-1895] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."
19666| [CVE-2010-1894] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
19667| [CVE-2010-1893] Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."
19668| [CVE-2010-1892] The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability."
19669| [CVE-2010-1891] The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability."
19670| [CVE-2010-1890] The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability."
19671| [CVE-2010-1889] Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."
19672| [CVE-2010-1887] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability."
19673| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
19674| [CVE-2010-1885] The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."
19675| [CVE-2010-1883] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."
19676| [CVE-2010-1882] Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
19677| [CVE-2010-1881] The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
19678| [CVE-2010-1880] Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
19679| [CVE-2010-1735] The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
19680| [CVE-2010-1734] The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
19681| [CVE-2010-1690] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
19682| [CVE-2010-1689] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
19683| [CVE-2010-1263] Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
19684| [CVE-2010-1257] Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2
19685| [CVE-2010-1255] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."
19686| [CVE-2010-1253] Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2
19687| [CVE-2010-1252] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
19688| [CVE-2010-1251] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
19689| [CVE-2010-1250] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
19690| [CVE-2010-1249] Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.
19691| [CVE-2010-1248] Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
19692| [CVE-2010-1247] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.
19693| [CVE-2010-1246] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."
19694| [CVE-2010-1245] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
19695| [CVE-2010-1225] The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."
19696| [CVE-2010-1175] Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."
19697| [CVE-2010-0917] Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution when the F1 key is pressed, a different vulnerability than CVE-2010-0483.
19698| [CVE-2010-0824] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and CVE-2010-1245.
19699| [CVE-2010-0823] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
19700| [CVE-2010-0822] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."
19701| [CVE-2010-0821] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
19702| [CVE-2010-0820] Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2
19703| [CVE-2010-0819] Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability."
19704| [CVE-2010-0818] The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability."
19705| [CVE-2010-0817] Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.
19706| [CVE-2010-0815] VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."
19707| [CVE-2010-0814] The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."
19708| [CVE-2010-0812] Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
19709| [CVE-2010-0811] Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability."
19710| [CVE-2010-0810] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
19711| [CVE-2010-0719] An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
19712| [CVE-2010-0487] The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."
19713| [CVE-2010-0486] The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."
19714| [CVE-2010-0485] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."
19715| [CVE-2010-0484] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."
19716| [CVE-2010-0483] vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
19717| [CVE-2010-0482] The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."
19718| [CVE-2010-0481] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
19719| [CVE-2010-0480] Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."
19720| [CVE-2010-0479] Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."
19721| [CVE-2010-0478] Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
19722| [CVE-2010-0477] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
19723| [CVE-2010-0476] The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."
19724| [CVE-2010-0278] A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
19725| [CVE-2010-0270] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
19726| [CVE-2010-0269] The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."
19727| [CVE-2010-0268] Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
19728| [CVE-2010-0266] Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
19729| [CVE-2010-0265] Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
19730| [CVE-2010-0264] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."
19731| [CVE-2010-0263] Microsoft Office Excel 2007 SP1 and SP2
19732| [CVE-2010-0262] Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
19733| [CVE-2010-0261] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
19734| [CVE-2010-0260] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2
19735| [CVE-2010-0258] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19736| [CVE-2010-0257] Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."
19737| [CVE-2010-0256] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
19738| [CVE-2010-0254] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
19739| [CVE-2010-0252] The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
19740| [CVE-2010-0250] Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."
19741| [CVE-2010-0249] Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4
19742| [CVE-2010-0243] Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
19743| [CVE-2010-0242] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
19744| [CVE-2010-0241] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."
19745| [CVE-2010-0240] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."
19746| [CVE-2010-0239] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
19747| [CVE-2010-0238] Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."
19748| [CVE-2010-0237] The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
19749| [CVE-2010-0236] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."
19750| [CVE-2010-0235] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."
19751| [CVE-2010-0234] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."
19752| [CVE-2010-0233] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."
19753| [CVE-2010-0232] The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
19754| [CVE-2010-0231] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
19755| [CVE-2010-0035] The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."
19756| [CVE-2010-0034] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
19757| [CVE-2010-0033] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
19758| [CVE-2010-0032] Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
19759| [CVE-2010-0031] Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
19760| [CVE-2010-0030] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
19761| [CVE-2010-0029] Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
19762| [CVE-2010-0028] Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
19763| [CVE-2010-0027] The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
19764| [CVE-2010-0026] The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."
19765| [CVE-2010-0025] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
19766| [CVE-2010-0024] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."
19767| [CVE-2010-0023] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
19768| [CVE-2010-0022] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
19769| [CVE-2010-0021] Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
19770| [CVE-2010-0020] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
19771| [CVE-2010-0018] Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4
19772| [CVE-2010-0017] Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
19773| [CVE-2010-0016] The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
19774| [CVE-2009-4313] ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.
19775| [CVE-2009-4312] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe.
19776| [CVE-2009-4311] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.
19777| [CVE-2009-4310] Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file.
19778| [CVE-2009-4309] Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.
19779| [CVE-2009-4210] The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.
19780| [CVE-2009-3830] The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
19781| [CVE-2009-3678] Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."
19782| [CVE-2009-3677] The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka "MS-CHAP Authentication Bypass Vulnerability."
19783| [CVE-2009-3676] The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
19784| [CVE-2009-3675] LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."
19785| [CVE-2009-3450] Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.
19786| [CVE-2009-3135] Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."
19787| [CVE-2009-3134] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19788| [CVE-2009-3133] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability."
19789| [CVE-2009-3132] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19790| [CVE-2009-3131] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19791| [CVE-2009-3130] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability."
19792| [CVE-2009-3129] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19793| [CVE-2009-3128] Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."
19794| [CVE-2009-3127] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability."
19795| [CVE-2009-3126] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability."
19796| [CVE-2009-3103] Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
19797| [CVE-2009-3020] win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232. NOTE: some of these details are obtained from third party information.
19798| [CVE-2009-2653] ** DISPUTED ** The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend.'
19799| [CVE-2009-2532] Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."
19800| [CVE-2009-2526] Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."
19801| [CVE-2009-2524] Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability."
19802| [CVE-2009-2523] The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."
19803| [CVE-2009-2519] The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."
19804| [CVE-2009-2517] The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
19805| [CVE-2009-2516] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."
19806| [CVE-2009-2515] Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka "Windows Kernel Integer Underflow Vulnerability."
19807| [CVE-2009-2514] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability."
19808| [CVE-2009-2513] The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability."
19809| [CVE-2009-2511] Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability."
19810| [CVE-2009-2510] The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncation in X.509 Common Name Vulnerability," a related issue to CVE-2009-2408.
19811| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
19812| [CVE-2009-2508] The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability."
19813| [CVE-2009-2507] A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory Corruption in Indexing Service Vulnerability."
19814| [CVE-2009-2506] Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3
19815| [CVE-2009-2505] The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."
19816| [CVE-2009-2504] Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "GDI+ .NET API Vulnerability."
19817| [CVE-2009-2503] GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability."
19818| [CVE-2009-2502] Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
19819| [CVE-2009-2501] Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."
19820| [CVE-2009-2500] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability."
19821| [CVE-2009-2498] Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
19822| [CVE-2009-2497] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."
19823| [CVE-2009-2496] Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
19824| [CVE-2009-2495] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
19825| [CVE-2009-2494] The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability."
19826| [CVE-2009-2493] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1
19827| [CVE-2009-1930] The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.
19828| [CVE-2009-1929] Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2
19829| [CVE-2009-1928] Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2
19830| [CVE-2009-1926] Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."
19831| [CVE-2009-1925] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."
19832| [CVE-2009-1924] Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."
19833| [CVE-2009-1923] Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
19834| [CVE-2009-1922] The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."
19835| [CVE-2009-1546] Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability."
19836| [CVE-2009-1545] Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka "Malformed AVI Header Vulnerability."
19837| [CVE-2009-1544] Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability."
19838| [CVE-2009-1542] The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."
19839| [CVE-2009-1539] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability."
19840| [CVE-2009-1538] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
19841| [CVE-2009-1537] Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
19842| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
19843| [CVE-2009-1534] Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
19844| [CVE-2009-1533] Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
19845| [CVE-2009-1491] McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
19846| [CVE-2009-1216] Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA)
19847| [CVE-2009-1141] Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
19848| [CVE-2009-1139] Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
19849| [CVE-2009-1138] The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.
19850| [CVE-2009-1137] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.
19851| [CVE-2009-1136] The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."
19852| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
19853| [CVE-2009-1134] Excel in 2007 Microsoft Office System SP1 and SP2
19854| [CVE-2009-1133] Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
19855| [CVE-2009-1132] Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
19856| [CVE-2009-1131] Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability."
19857| [CVE-2009-1130] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
19858| [CVE-2009-1129] Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
19859| [CVE-2009-1128] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
19860| [CVE-2009-1127] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability."
19861| [CVE-2009-1126] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
19862| [CVE-2009-1125] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability."
19863| [CVE-2009-1124] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."
19864| [CVE-2009-1123] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
19865| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
19866| [CVE-2009-1043] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
19867| [CVE-2009-1011] Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow.
19868| [CVE-2009-0901] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1
19869| [CVE-2009-0568] The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."
19870| [CVE-2009-0566] Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
19871| [CVE-2009-0565] Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2
19872| [CVE-2009-0563] Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19873| [CVE-2009-0562] The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."
19874| [CVE-2009-0561] Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
19875| [CVE-2009-0560] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
19876| [CVE-2009-0559] Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."
19877| [CVE-2009-0558] Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."
19878| [CVE-2009-0557] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
19879| [CVE-2009-0556] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
19880| [CVE-2009-0554] Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
19881| [CVE-2009-0553] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
19882| [CVE-2009-0552] Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
19883| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
19884| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
19885| [CVE-2009-0549] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
19886| [CVE-2009-0320] Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack."
19887| [CVE-2009-0239] Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."
19888| [CVE-2009-0238] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
19889| [CVE-2009-0235] Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."
19890| [CVE-2009-0234] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger "unnecessary lookups," aka "DNS Server Response Validation Vulnerability."
19891| [CVE-2009-0233] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka "DNS Server Query Validation Vulnerability."
19892| [CVE-2009-0232] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow Vulnerability."
19893| [CVE-2009-0231] The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."
19894| [CVE-2009-0230] The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
19895| [CVE-2009-0229] The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
19896| [CVE-2009-0228] Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a a crafted ShareName in a response to an RPC request, related to "printing data structures," aka "Buffer Overflow in Print Spooler Vulnerability."
19897| [CVE-2009-0227] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137.
19898| [CVE-2009-0226] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.
19899| [CVE-2009-0225] Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
19900| [CVE-2009-0224] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
19901| [CVE-2009-0223] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
19902| [CVE-2009-0222] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
19903| [CVE-2009-0221] Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."
19904| [CVE-2009-0220] Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
19905| [CVE-2009-0202] Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
19906| [CVE-2009-0102] Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
19907| [CVE-2009-0100] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
19908| [CVE-2009-0099] The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."
19909| [CVE-2009-0098] Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."
19910| [CVE-2009-0097] Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
19911| [CVE-2009-0096] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
19912| [CVE-2009-0095] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
19913| [CVE-2009-0094] The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.
19914| [CVE-2009-0093] Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.
19915| [CVE-2009-0091] Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
19916| [CVE-2009-0090] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."
19917| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
19918| [CVE-2009-0088] The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."
19919| [CVE-2009-0087] Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2
19920| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
19921| [CVE-2009-0085] The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."
19922| [CVE-2009-0083] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."
19923| [CVE-2009-0082] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability."
19924| [CVE-2009-0081] The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."
19925| [CVE-2009-0079] The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
19926| [CVE-2009-0078] The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability."
19927| [CVE-2008-7217] Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
19928| [CVE-2008-6819] win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.
19929| [CVE-2008-6219] nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.
19930| [CVE-2008-6063] Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.
19931| [CVE-2008-5912] An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
19932| [CVE-2008-5823] An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.
19933| [CVE-2008-5416] Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier
19934| [CVE-2008-5232] Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown
19935| [CVE-2008-5112] The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.
19936| [CVE-2008-5100] The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.
19937| [CVE-2008-5044] Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
19938| [CVE-2008-4844] Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
19939| [CVE-2008-4841] The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.
19940| [CVE-2008-4837] Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19941| [CVE-2008-4835] SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."
19942| [CVE-2008-4834] Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."
19943| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
19944| [CVE-2008-4295] Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
19945| [CVE-2008-4269] The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."
19946| [CVE-2008-4268] The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
19947| [CVE-2008-4266] Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3
19948| [CVE-2008-4265] Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."
19949| [CVE-2008-4264] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19950| [CVE-2008-4261] Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
19951| [CVE-2008-4256] The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability."
19952| [CVE-2008-4255] Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability."
19953| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
19954| [CVE-2008-4250] The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
19955| [CVE-2008-4114] srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
19956| [CVE-2008-4110] Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
19957| [CVE-2008-4038] Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."
19958| [CVE-2008-4037] Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
19959| [CVE-2008-4036] Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."
19960| [CVE-2008-4032] Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
19961| [CVE-2008-4031] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19962| [CVE-2008-4030] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19963| [CVE-2008-4028] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19964| [CVE-2008-4027] Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19965| [CVE-2008-4026] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19966| [CVE-2008-4025] Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
19967| [CVE-2008-4024] Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
19968| [CVE-2008-4023] Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."
19969| [CVE-2008-4019] Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
19970| [CVE-2008-3956] orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
19971| [CVE-2008-3704] Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."
19972| [CVE-2008-3648] nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
19973| [CVE-2008-3636] Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.
19974| [CVE-2008-3479] Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
19975| [CVE-2008-3477] Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability."
19976| [CVE-2008-3471] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
19977| [CVE-2008-3466] Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
19978| [CVE-2008-3465] Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
19979| [CVE-2008-3464] afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."
19980| [CVE-2008-3460] WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
19981| [CVE-2008-3068] Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
19982| [CVE-2008-3021] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
19983| [CVE-2008-3020] Microsoft Office 2000 SP3 and XP SP3
19984| [CVE-2008-3019] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
19985| [CVE-2008-3018] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
19986| [CVE-2008-3015] Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."
19987| [CVE-2008-3014] Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability."
19988| [CVE-2008-3013] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
19989| [CVE-2008-3012] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability."
19990| [CVE-2008-3009] Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
19991| [CVE-2008-3007] Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
19992| [CVE-2008-3006] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
19993| [CVE-2008-3005] Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
19994| [CVE-2008-3004] Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3
19995| [CVE-2008-3003] Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
19996| [CVE-2008-2752] Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.
19997| [CVE-2008-2540] Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
19998| [CVE-2008-2463] The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
19999| [CVE-2008-2252] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."
20000| [CVE-2008-2251] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled Exception Vulnerability." NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510.
20001| [CVE-2008-2250] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
20002| [CVE-2008-2249] Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow Vulnerability."
20003| [CVE-2008-2246] Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
20004| [CVE-2008-2245] Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file.
20005| [CVE-2008-2244] Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
20006| [CVE-2008-1898] A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
20007| [CVE-2008-1888] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
20008| [CVE-2008-1547] Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.
20009| [CVE-2008-1457] The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
20010| [CVE-2008-1456] Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.
20011| [CVE-2008-1455] A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1
20012| [CVE-2008-1454] Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
20013| [CVE-2008-1451] The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
20014| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
20015| [CVE-2008-1445] Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.
20016| [CVE-2008-1444] Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
20017| [CVE-2008-1441] Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
20018| [CVE-2008-1440] Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."
20019| [CVE-2008-1436] Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
20020| [CVE-2008-1435] Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."
20021| [CVE-2008-1434] Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
20022| [CVE-2008-1092] Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
20023| [CVE-2008-1091] Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."
20024| [CVE-2008-1090] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."
20025| [CVE-2008-1089] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."
20026| [CVE-2008-1088] Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."
20027| [CVE-2008-1087] Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
20028| [CVE-2008-1086] The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.
20029| [CVE-2008-1084] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
20030| [CVE-2008-1083] Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
20031| [CVE-2008-0121] A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."
20032| [CVE-2008-0120] Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
20033| [CVE-2008-0119] Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."
20034| [CVE-2008-0118] Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
20035| [CVE-2008-0117] Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
20036| [CVE-2008-0116] Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
20037| [CVE-2008-0115] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
20038| [CVE-2008-0114] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
20039| [CVE-2008-0113] Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
20040| [CVE-2008-0112] Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
20041| [CVE-2008-0111] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
20042| [CVE-2008-0110] Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
20043| [CVE-2008-0109] Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
20044| [CVE-2008-0108] Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."
20045| [CVE-2008-0106] Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
20046| [CVE-2008-0105] Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."
20047| [CVE-2008-0104] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."
20048| [CVE-2008-0103] Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."
20049| [CVE-2008-0102] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."
20050| [CVE-2008-0088] Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
20051| [CVE-2008-0087] The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.
20052| [CVE-2008-0086] Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
20053| [CVE-2008-0083] The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
20054| [CVE-2008-0081] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
20055| [CVE-2008-0080] Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.
20056| [CVE-2008-0020] Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015.
20057| [CVE-2008-0015] Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
20058| [CVE-2008-0011] Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."
20059| [CVE-2007-6753] Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
20060| [CVE-2007-6357] Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
20061| [CVE-2007-6329] Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
20062| [CVE-2007-6043] The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
20063| [CVE-2007-6026] Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
20064| [CVE-2007-5587] Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
20065| [CVE-2007-5352] Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
20066| [CVE-2007-5348] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."
20067| [CVE-2007-4991] The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
20068| [CVE-2007-4916] Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
20069| [CVE-2007-4814] Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
20070| [CVE-2007-3930] Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.
20071| [CVE-2007-3924] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape
20072| [CVE-2007-3899] Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."
20073| [CVE-2007-3898] The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
20074| [CVE-2007-3896] The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
20075| [CVE-2007-3890] Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
20076| [CVE-2007-3670] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
20077| [CVE-2007-3490] Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
20078| [CVE-2007-3300] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.
20079| [CVE-2007-3040] Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
20080| [CVE-2007-3039] Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
20081| [CVE-2007-3036] Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
20082| [CVE-2007-3034] Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
20083| [CVE-2007-3030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
20084| [CVE-2007-3029] Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
20085| [CVE-2007-3028] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.
20086| [CVE-2007-2999] Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
20087| [CVE-2007-2967] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.
20088| [CVE-2007-2966] Buffer overflow in the LHA decompresion component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
20089| [CVE-2007-2903] Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
20090| [CVE-2007-2593] The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
20091| [CVE-2007-2581] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
20092| [CVE-2007-2374] Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
20093| [CVE-2007-2228] rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
20094| [CVE-2007-2224] Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
20095| [CVE-2007-2221] Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
20096| [CVE-2007-2219] Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.
20097| [CVE-2007-2218] Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
20098| [CVE-2007-2217] Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.
20099| [CVE-2007-1911] Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow.
20100| [CVE-2007-1910] Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.
20101| [CVE-2007-1765] Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038
20102| [CVE-2007-1756] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".
20103| [CVE-2007-1754] PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
20104| [CVE-2007-1748] Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
20105| [CVE-2007-1747] Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.
20106| [CVE-2007-1645] Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812.
20107| [CVE-2007-1537] \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
20108| [CVE-2007-1512] Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
20109| [CVE-2007-1347] Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
20110| [CVE-2007-1239] Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
20111| [CVE-2007-1238] Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file.
20112| [CVE-2007-1215] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
20113| [CVE-2007-1214] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
20114| [CVE-2007-1213] The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
20115| [CVE-2007-1212] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
20116| [CVE-2007-1211] Unspecified kernel GDI functions in Microsoft Windows 2000 SP4
20117| [CVE-2007-1205] Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
20118| [CVE-2007-1203] Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.
20119| [CVE-2007-1202] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
20120| [CVE-2007-1201] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
20121| [CVE-2007-1117] Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
20122| [CVE-2007-1090] Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.
20123| [CVE-2007-1083] Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
20124| [CVE-2007-0948] Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
20125| [CVE-2007-0947] Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
20126| [CVE-2007-0946] Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.
20127| [CVE-2007-0945] Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4
20128| [CVE-2007-0944] Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
20129| [CVE-2007-0942] Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
20130| [CVE-2007-0940] Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
20131| [CVE-2007-0939] Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."
20132| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
20133| [CVE-2007-0936] Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."
20134| [CVE-2007-0934] Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption.
20135| [CVE-2007-0913] Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues.
20136| [CVE-2007-0870] Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.
20137| [CVE-2007-0843] The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
20138| [CVE-2007-0811] Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.
20139| [CVE-2007-0671] Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
20140| [CVE-2007-0612] Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll
20141| [CVE-2007-0515] Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.
20142| [CVE-2007-0351] Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
20143| [CVE-2007-0221] Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
20144| [CVE-2007-0220] Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
20145| [CVE-2007-0216] wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."
20146| [CVE-2007-0215] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.
20147| [CVE-2007-0214] The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
20148| [CVE-2007-0213] Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
20149| [CVE-2007-0211] The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
20150| [CVE-2007-0209] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.
20151| [CVE-2007-0208] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
20152| [CVE-2007-0069] Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."
20153| [CVE-2007-0066] The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
20154| [CVE-2007-0065] Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.
20155| [CVE-2007-0064] Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
20156| [CVE-2007-0043] The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
20157| [CVE-2007-0042] Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
20158| [CVE-2007-0041] The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
20159| [CVE-2007-0040] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
20160| [CVE-2007-0039] The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.
20161| [CVE-2007-0038] Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765
20162| [CVE-2007-0035] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."
20163| [CVE-2007-0034] Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
20164| [CVE-2007-0033] Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
20165| [CVE-2007-0031] Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.
20166| [CVE-2007-0030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
20167| [CVE-2007-0029] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability."
20168| [CVE-2007-0028] Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.
20169| [CVE-2007-0027] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
20170| [CVE-2007-0026] The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
20171| [CVE-2007-0025] The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
20172| [CVE-2007-0024] Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."
20173| [CVE-2006-7210] Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
20174| [CVE-2006-7192] Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.
20175| [CVE-2006-7027] Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.
20176| [CVE-2006-6723] The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.
20177| [CVE-2006-6696] Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
20178| [CVE-2006-6617] projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
20179| [CVE-2006-6561] Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.
20180| [CVE-2006-6456] Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
20181| [CVE-2006-6296] The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.
20182| [CVE-2006-6134] Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
20183| [CVE-2006-6133] Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
20184| [CVE-2006-5994] Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
20185| [CVE-2006-5758] The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
20186| [CVE-2006-5586] The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."
20187| [CVE-2006-5585] The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."
20188| [CVE-2006-5584] The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
20189| [CVE-2006-5583] Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."
20190| [CVE-2006-5574] Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.
20191| [CVE-2006-5296] PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.
20192| [CVE-2006-4854] ** REJECT ** Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E. NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009.
20193| [CVE-2006-4704] Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
20194| [CVE-2006-4702] Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
20195| [CVE-2006-4696] Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
20196| [CVE-2006-4695] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."
20197| [CVE-2006-4694] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow.
20198| [CVE-2006-4693] Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651.
20199| [CVE-2006-4692] Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
20200| [CVE-2006-4691] Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
20201| [CVE-2006-4689] Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
20202| [CVE-2006-4688] Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
20203| [CVE-2006-4534] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
20204| [CVE-2006-4495] Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
20205| [CVE-2006-4274] ** REJECT ** Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJ_MDROPPER.BH. NOTE: on 20060822, it was determined that TROJ_MDROPPER.BH was exploiting CVE-2006-0009, so this is not a new vulnerability.
20206| [CVE-2006-4219] The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.
20207| [CVE-2006-4183] Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
20208| [CVE-2006-4071] Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
20209| [CVE-2006-3992] Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
20210| [CVE-2006-3942] The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research
20211| [CVE-2006-3897] Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
20212| [CVE-2006-3880] ** DISPUTED ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
20213| [CVE-2006-3877] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
20214| [CVE-2006-3876] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.
20215| [CVE-2006-3875] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.
20216| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
20217| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
20218| [CVE-2006-3868] Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.
20219| [CVE-2006-3867] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875.
20220| [CVE-2006-3864] Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.
20221| [CVE-2006-3841] Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
20222| [CVE-2006-3660] Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
20223| [CVE-2006-3656] Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
20224| [CVE-2006-3655] Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
20225| [CVE-2006-3652] Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. NOTE: as of 20060715, this could not be reproduced by third parties.
20226| [CVE-2006-3651] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
20227| [CVE-2006-3650] Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
20228| [CVE-2006-3649] Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
20229| [CVE-2006-3648] Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
20230| [CVE-2006-3647] Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
20231| [CVE-2006-3643] Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability."
20232| [CVE-2006-3590] mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
20233| [CVE-2006-3510] The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
20234| [CVE-2006-3493] Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.
20235| [CVE-2006-3449] Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."
20236| [CVE-2006-3448] Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
20237| [CVE-2006-3445] Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
20238| [CVE-2006-3444] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
20239| [CVE-2006-3443] Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."
20240| [CVE-2006-3441] Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
20241| [CVE-2006-3440] Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
20242| [CVE-2006-3439] Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
20243| [CVE-2006-3436] Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
20244| [CVE-2006-3435] PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
20245| [CVE-2006-3434] Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
20246| [CVE-2006-3431] Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.
20247| [CVE-2006-3059] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
20248| [CVE-2006-2492] Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
20249| [CVE-2006-2389] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
20250| [CVE-2006-2388] Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
20251| [CVE-2006-2387] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
20252| [CVE-2006-2380] Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
20253| [CVE-2006-2379] Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
20254| [CVE-2006-2378] Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
20255| [CVE-2006-2374] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
20256| [CVE-2006-2373] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
20257| [CVE-2006-2372] Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.
20258| [CVE-2006-2371] Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
20259| [CVE-2006-2370] Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
20260| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
20261| [CVE-2006-2094] Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.
20262| [CVE-2006-2055] Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
20263| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
20264| [CVE-2006-1651] ** DISPUTED ** Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."
20265| [CVE-2006-1540] MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll
20266| [CVE-2006-1316] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.
20267| [CVE-2006-1315] The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability."
20268| [CVE-2006-1314] Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
20269| [CVE-2006-1313] Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
20270| [CVE-2006-1311] The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1
20271| [CVE-2006-1309] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
20272| [CVE-2006-1308] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.
20273| [CVE-2006-1306] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
20274| [CVE-2006-1305] Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
20275| [CVE-2006-1304] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
20276| [CVE-2006-1302] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."
20277| [CVE-2006-1301] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.
20278| [CVE-2006-1300] Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
20279| [CVE-2006-1257] The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
20280| [CVE-2006-1193] Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
20281| [CVE-2006-1184] Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
20282| [CVE-2006-0988] The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
20283| [CVE-2006-0935] Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
20284| [CVE-2006-0187] By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.
20285| [CVE-2006-0034] Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
20286| [CVE-2006-0033] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
20287| [CVE-2006-0032] Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
20288| [CVE-2006-0031] Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
20289| [CVE-2006-0030] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
20290| [CVE-2006-0029] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
20291| [CVE-2006-0028] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
20292| [CVE-2006-0023] Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
20293| [CVE-2006-0022] Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
20294| [CVE-2006-0021] Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
20295| [CVE-2006-0020] An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
20296| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
20297| [CVE-2006-0013] Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
20298| [CVE-2006-0012] Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
20299| [CVE-2006-0010] Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
20300| [CVE-2006-0009] Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
20301| [CVE-2006-0008] The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
20302| [CVE-2006-0007] Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
20303| [CVE-2006-0006] Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
20304| [CVE-2006-0004] Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
20305| [CVE-2006-0002] Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
20306| [CVE-2006-0001] Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
20307| [CVE-2005-4717] Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
20308| [CVE-2005-4269] mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.
20309| [CVE-2005-4131] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
20310| [CVE-2005-3981] ** DISPUTED ** NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE.
20311| [CVE-2005-3945] The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
20312| [CVE-2005-3644] PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
20313| [CVE-2005-3177] CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
20314| [CVE-2005-3176] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
20315| [CVE-2005-3175] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
20316| [CVE-2005-3174] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
20317| [CVE-2005-3173] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
20318| [CVE-2005-3172] The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
20319| [CVE-2005-3171] Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
20320| [CVE-2005-3170] The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
20321| [CVE-2005-3169] Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
20322| [CVE-2005-3168] The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
20323| [CVE-2005-2122] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
20324| [CVE-2005-2120] Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
20325| [CVE-2005-2118] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
20326| [CVE-2005-2117] Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
20327| [CVE-2005-1985] The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
20328| [CVE-2005-1984] Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
20329| [CVE-2005-1983] Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
20330| [CVE-2005-1982] Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
20331| [CVE-2005-1981] Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
20332| [CVE-2005-1907] The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
20333| [CVE-2005-1683] Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
20334| [CVE-2005-1218] The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
20335| [CVE-2005-1216] Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
20336| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
20337| [CVE-2005-1208] Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
20338| [CVE-2005-1207] Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
20339| [CVE-2005-1206] Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
20340| [CVE-2005-1205] The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
20341| [CVE-2005-1052] Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
20342| [CVE-2005-0921] Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
20343| [CVE-2005-0820] Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
20344| [CVE-2005-0738] Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
20345| [CVE-2005-0564] Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
20346| [CVE-2005-0558] Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.
20347| [CVE-2005-0551] Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
20348| [CVE-2005-0550] Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
20349| [CVE-2005-0545] Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.
20350| [CVE-2005-0063] The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
20351| [CVE-2005-0061] The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
20352| [CVE-2005-0060] Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
20353| [CVE-2005-0059] Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
20354| [CVE-2005-0058] Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.
20355| [CVE-2005-0048] Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
20356| [CVE-2004-2527] The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
20357| [CVE-2004-2482] Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
20358| [CVE-2004-2365] Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
20359| [CVE-2004-2339] ** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
20360| [CVE-2004-1080] The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
20361| [CVE-2004-0963] Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
20362| [CVE-2004-0897] The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
20363| [CVE-2004-0892] Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
20364| [CVE-2004-0846] Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
20365| [CVE-2004-0840] The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
20366| [CVE-2004-0728] The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
20367| [CVE-2004-0726] The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.
20368| [CVE-2004-0575] Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
20369| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
20370| [CVE-2004-0573] Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
20371| [CVE-2004-0540] Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
20372| [CVE-2004-0503] Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
20373| [CVE-2004-0379] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
20374| [CVE-2004-0284] Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
20375| [CVE-2004-0214] Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
20376| [CVE-2004-0211] The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
20377| [CVE-2004-0210] The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
20378| [CVE-2004-0209] Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
20379| [CVE-2004-0208] The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
20380| [CVE-2004-0207] "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
20381| [CVE-2004-0206] Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
20382| [CVE-2004-0204] Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
20383| [CVE-2004-0202] IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
20384| [CVE-2004-0201] Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
20385| [CVE-2004-0199] Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
20386| [CVE-2004-0124] The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
20387| [CVE-2004-0121] Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
20388| [CVE-2004-0120] The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
20389| [CVE-2004-0116] An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
20390| [CVE-2003-1378] Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
20391| [CVE-2003-1106] The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
20392| [CVE-2003-0908] The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
20393| [CVE-2003-0906] Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
20394| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
20395| [CVE-2003-0839] Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
20396| [CVE-2003-0825] The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
20397| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
20398| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
20399| [CVE-2003-0821] Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
20400| [CVE-2003-0820] Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
20401| [CVE-2003-0819] Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
20402| [CVE-2003-0818] Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
20403| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
20404| [CVE-2003-0806] Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
20405| [CVE-2003-0719] Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
20406| [CVE-2003-0665] Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
20407| [CVE-2003-0664] Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
20408| [CVE-2003-0662] Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
20409| [CVE-2003-0660] The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval.
20410| [CVE-2003-0533] Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
20411| [CVE-2003-0526] Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
20412| [CVE-2003-0506] Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
20413| [CVE-2003-0505] Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
20414| [CVE-2003-0496] Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
20415| [CVE-2003-0352] Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
20416| [CVE-2003-0345] Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
20417| [CVE-2003-0232] Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
20418| [CVE-2003-0231] Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
20419| [CVE-2003-0230] Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
20420| [CVE-2003-0227] The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
20421| [CVE-2003-0118] SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
20422| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
20423| [CVE-2003-0110] The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
20424| [CVE-2003-0109] Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
20425| [CVE-2003-0011] Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
20426| [CVE-2003-0007] Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
20427| [CVE-2003-0003] Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
20428| [CVE-2003-0002] Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
20429| [CVE-2002-2101] Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
20430| [CVE-2002-2100] Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
20431| [CVE-2002-1984] Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
20432| [CVE-2002-1981] Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.
20433| [CVE-2002-1933] The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
20434| [CVE-2002-1932] Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
20435| [CVE-2002-1876] Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
20436| [CVE-2002-1873] Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
20437| [CVE-2002-1872] Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
20438| [CVE-2002-1776] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
20439| [CVE-2002-1712] Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
20440| [CVE-2002-1256] The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
20441| [CVE-2002-1255] Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
20442| [CVE-2002-1214] Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
20443| [CVE-2002-1184] The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
20444| [CVE-2002-1145] The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
20445| [CVE-2002-1141] An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."
20446| [CVE-2002-1140] The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
20447| [CVE-2002-1138] Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
20448| [CVE-2002-1137] Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
20449| [CVE-2002-1123] Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
20450| [CVE-2002-1117] Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
20451| [CVE-2002-1056] Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
20452| [CVE-2002-0982] Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
20453| [CVE-2002-0975] Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.
20454| [CVE-2002-0863] Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
20455| [CVE-2002-0861] Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
20456| [CVE-2002-0860] The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
20457| [CVE-2002-0859] Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
20458| [CVE-2002-0729] Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
20459| [CVE-2002-0727] The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
20460| [CVE-2002-0724] Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".
20461| [CVE-2002-0721] Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
20462| [CVE-2002-0719] SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
20463| [CVE-2002-0718] Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
20464| [CVE-2002-0700] Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
20465| [CVE-2002-0699] Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
20466| [CVE-2002-0695] Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
20467| [CVE-2002-0694] The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
20468| [CVE-2002-0693] Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
20469| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
20470| [CVE-2002-0650] The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
20471| [CVE-2002-0649] Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
20472| [CVE-2002-0645] SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
20473| [CVE-2002-0644] Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
20474| [CVE-2002-0643] The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
20475| [CVE-2002-0642] The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
20476| [CVE-2002-0641] Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
20477| [CVE-2002-0624] Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
20478| [CVE-2002-0623] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
20479| [CVE-2002-0622] The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
20480| [CVE-2002-0621] Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
20481| [CVE-2002-0620] Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
20482| [CVE-2002-0619] The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
20483| [CVE-2002-0618] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
20484| [CVE-2002-0617] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
20485| [CVE-2002-0616] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."
20486| [CVE-2002-0597] LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
20487| [CVE-2002-0444] Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
20488| [CVE-2002-0443] Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
20489| [CVE-2002-0373] The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
20490| [CVE-2002-0371] Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
20491| [CVE-2002-0368] The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
20492| [CVE-2002-0224] The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
20493| [CVE-2002-0187] Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
20494| [CVE-2002-0186] Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
20495| [CVE-2002-0154] Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
20496| [CVE-2002-0152] Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
20497| [CVE-2002-0055] SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
20498| [CVE-2002-0054] SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
20499| [CVE-2002-0050] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
20500| [CVE-2002-0049] Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
20501| [CVE-2002-0034] The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
20502| [CVE-2002-0018] In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
20503| [CVE-2001-1533] ** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE.
20504| [CVE-2001-1451] Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
20505| [CVE-2001-1319] Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
20506| [CVE-2001-1099] The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
20507| [CVE-2001-0986] SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
20508| [CVE-2001-0718] Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
20509| [CVE-2001-0666] Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
20510| [CVE-2001-0658] Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
20511| [CVE-2001-0628] Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
20512| [CVE-2001-0547] Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
20513| [CVE-2001-0546] Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
20514| [CVE-2001-0542] Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
20515| [CVE-2001-0538] Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
20516| [CVE-2001-0509] Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
20517| [CVE-2001-0505] Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
20518| [CVE-2001-0504] Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activites such as mail relaying.
20519| [CVE-2001-0501] Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
20520| [CVE-2001-0351] Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.
20521| [CVE-2001-0350] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
20522| [CVE-2001-0349] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
20523| [CVE-2001-0348] Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.
20524| [CVE-2001-0347] Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
20525| [CVE-2001-0346] Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.
20526| [CVE-2001-0345] Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
20527| [CVE-2001-0344] An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
20528| [CVE-2001-0340] An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
20529| [CVE-2001-0261] Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
20530| [CVE-2001-0245] Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
20531| [CVE-2001-0244] Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
20532| [CVE-2001-0240] Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
20533| [CVE-2001-0239] Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
20534| [CVE-2001-0237] Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
20535| [CVE-2001-0146] IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
20536| [CVE-2001-0048] The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.
20537| [CVE-2001-0005] Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
20538| [CVE-2001-0003] Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
20539| [CVE-2000-1218] The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
20540| [CVE-2000-1217] Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
20541| [CVE-2000-1209] The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
20542| [CVE-2000-1139] The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
20543| [CVE-2000-1088] The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
20544| [CVE-2000-1087] The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
20545| [CVE-2000-1086] The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
20546| [CVE-2000-1085] The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
20547| [CVE-2000-1079] Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
20548| [CVE-2000-0942] The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
20549| [CVE-2000-0854] When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
20550| [CVE-2000-0771] Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
20551| [CVE-2000-0765] Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
20552| [CVE-2000-0756] Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
20553| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
20554| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
20555| [CVE-2000-0637] Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
20556| [CVE-2000-0621] Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
20557| [CVE-2000-0597] Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
20558| [CVE-2000-0331] Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
20559| [CVE-2000-0277] Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
20560| [CVE-2013-2557] The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
20561| [CVE-2013-2556] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
20562| [CVE-2013-2554] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787.
20563| [CVE-2013-2553] Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0912.
20564| [CVE-2013-2552] Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
20565| [CVE-2013-2551] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
20566| [CVE-2013-1347] Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
20567| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
20568| [CVE-2013-1290] Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."
20569| [CVE-2013-1289] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
20570| [CVE-2013-1284] Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
20571| [CVE-2013-0096] Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
20572| [CVE-2013-0086] Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."
20573| [CVE-2013-0085] Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."
20574| [CVE-2013-0084] Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."
20575| [CVE-2013-0083] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
20576| [CVE-2013-0080] Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."
20577| [CVE-2013-0079] Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
20578| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
20579| [CVE-2012-4969] Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
20580| [CVE-2012-4792] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
20581| [CVE-2012-3456] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
20582| [CVE-2012-3455] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
20583| [CVE-2012-2290] The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel.
20584| [CVE-2012-2284] The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
20585| [CVE-2012-1945] Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
20586| [CVE-2012-1894] Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability."
20587| [CVE-2012-1892] Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
20588| [CVE-2012-1891] Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
20589| [CVE-2012-1888] Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
20590| [CVE-2012-1876] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
20591| [CVE-2012-1861] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
20592| [CVE-2012-1859] Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."
20593| [CVE-2012-1857] Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."
20594| [CVE-2012-1849] Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."
20595| [CVE-2012-1545] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
20596| [CVE-2012-1436] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
20597| [CVE-2012-1435] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \50\4B\4C\49\54\45 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
20598| [CVE-2012-1434] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
20599| [CVE-2012-1433] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
20600| [CVE-2012-0447] Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
20601| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
20602| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
20603| [CVE-2012-0145] Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
20604| [CVE-2012-0144] Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
20605| [CVE-2012-0138] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
20606| [CVE-2012-0137] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
20607| [CVE-2012-0136] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
20608| [CVE-2012-0020] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
20609| [CVE-2012-0019] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
20610| [CVE-2012-0018] Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."
20611| [CVE-2012-0017] Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."
20612| [CVE-2011-4695] Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
20613| [CVE-2011-2012] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
20614| [CVE-2011-2010] The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
20615| [CVE-2011-1969] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
20616| [CVE-2011-1897] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
20617| [CVE-2011-1896] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
20618| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
20619| [CVE-2011-1891] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
20620| [CVE-2011-1890] Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."
20621| [CVE-2011-1889] The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
20622| [CVE-2011-1417] Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
20623| [CVE-2011-1347] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
20624| [CVE-2011-1346] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
20625| [CVE-2011-1345] Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
20626| [CVE-2011-1265] The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."
20627| [CVE-2011-0653] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
20628| [CVE-2011-0647] The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
20629| [CVE-2011-0627] Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
20630| [CVE-2011-0037] Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
20631| [CVE-2011-0027] Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
20632| [CVE-2011-0026] Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."
20633| [CVE-2010-4643] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
20634| [CVE-2010-4253] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
20635| [CVE-2010-4121] ** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only."
20636| [CVE-2010-3967] Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."
20637| [CVE-2010-3962] Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.
20638| [CVE-2010-3936] Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."
20639| [CVE-2010-3889] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
20640| [CVE-2010-3888] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
20641| [CVE-2010-3497] Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)."
20642| [CVE-2010-3454] Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
20643| [CVE-2010-3453] The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.
20644| [CVE-2010-3141] Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
20645| [CVE-2010-2743] The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.
20646| [CVE-2010-2734] Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."
20647| [CVE-2010-2733] Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."
20648| [CVE-2010-2732] Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
20649| [CVE-2010-2564] Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."
20650| [CVE-2010-1184] The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.
20651| [CVE-2010-1118] Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
20652| [CVE-2010-1117] Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
20653| [CVE-2010-0806] Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
20654| [CVE-2010-0716] _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.
20655| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
20656| [CVE-2008-5750] Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
20657| [CVE-2008-5556] ** DISPUTED ** The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design."
20658| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
20659| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
20660| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
20661| [CVE-2008-5552] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
20662| [CVE-2008-5551] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
20663| [CVE-2008-5180] Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
20664| [CVE-2008-4211] Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."
20665| [CVE-2007-5351] Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."
20666| [CVE-2007-2729] Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
20667| [CVE-2007-1534] DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.
20668| [CVE-2007-0341] Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
20669| [CVE-2006-5559] The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.
20670| [CVE-2006-4686] Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
20671| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
20672| [CVE-2006-1359] Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
20673| [CVE-2006-0761] Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.
20674| [CVE-2006-0753] Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
20675| [CVE-2006-0544] urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.
20676| [CVE-2006-0003] Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
20677| [CVE-2005-1929] Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product.
20678| [CVE-2005-0852] Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.
20679| [CVE-2004-1322] Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
20680| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
20681| [CVE-2003-0903] Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
20682| [CVE-2003-0353] Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
20683| [CVE-2002-1918] Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
20684| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
20685| [CVE-2002-1015] RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
20686| [CVE-2002-0697] Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
20687| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
20688| [CVE-2001-1218] Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
20689| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
20690| [CVE-1999-1097] Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
20691|
20692| SecurityFocus - https://www.securityfocus.com/bid/:
20693| [83154] Microsoft Windows 2000 Server CVE-2004-0540 Remote Security Vulnerability
20694| [45297] Microsoft Exchange Server 2007 Infinite Loop Remote Denial of Service Vulnerability
20695| [43419] Microsoft Excel 2002 Memory Corruption Vulnerability
20696| [43189] Microsoft Visual C++ 2008 Redistributable Package DLL Loading Arbitrary Code Execution Vulnerability
20697| [42742] Microsoft PowerPoint 2007 Multiple DLL Loading Arbitrary Code Execution Vulnerability
20698| [42695] Microsoft Groove 2007 'mso.dll' DLL Loading Arbitrary Code Execution Vulnerability
20699| [42681] Microsoft Visio 2003 'mfc71enu.dll' DLL Loading Arbitrary Code Execution Vulnerability
20700| [41843] Microsoft Outlook Web Access for Exchange Server 2003 Cross Site Request Forgery Vulnerability
20701| [39776] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
20702| [37196] RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities
20703| [36940] RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
20704| [36633] RETIRED: Microsoft October 2009 Advance Notification Multiple Vulnerabilities
20705| [36239] RETIRED: Microsoft September 2009 Advance Notification Multiple Vulnerabilities
20706| [35974] RETIRED: Microsoft August 2009 Advance Notification Multiple Vulnerabilities
20707| [35617] RETIRED: Microsoft July 2009 Advance Notification Multiple Vulnerabilities
20708| [35213] RETIRED: Microsoft June 2009 Advance Notification Multiple Vulnerabilities
20709| [34867] RETIRED: Microsoft May 2009 Advance Notification Multiple Vulnerabilities
20710| [34532] Microsoft IAG 2007 ActiveX Control Multiple Stack Based Buffer Overflow Vulnerabilities
20711| [34469] Microsoft Word 2000 WordPerfect Converter Remote Code Execution Vulnerability
20712| [34450] RETIRED: Microsoft April 2009 Advance Notification Multiple Vulnerabilities
20713| [34005] RETIRED: Microsoft March 2009 Advance Notification Multiple Vulnerabilities
20714| [33639] RETIRED: Microsoft February 2009 Advance Notification Multiple Vulnerabilities
20715| [33170] RETIRED: Microsoft January 2009 Advance Notification Multiple Vulnerabilities
20716| [32632] RETIRED: Microsoft December 2008 Advance Notification Multiple Vulnerabilities
20717| [32153] Retired: Microsoft November 2008 Advance Notification Multiple Vulnerabilities
20718| [31667] Retired: Microsoft October 2008 Advance Notification Multiple Vulnerabilities
20719| [31129] RETIRED: Microsoft SQL Server 2000 'sqlvdir.dll' ActiveX Buffer Overflow Vulnerability
20720| [31014] RETIRED: Microsoft September 2008 Advance Notification Multiple Vulnerabilities
20721| [30593] RETIRED: Microsoft August 2008 Advance Notification Multiple Vulnerabilities
20722| [30075] RETIRED: Microsoft July 2008 Advance Notification Multiple Vulnerabilities
20723| [29576] RETIRED: Microsoft June 2008 Advance Notification Multiple Vulnerabilities
20724| [29108] RETIRED: Microsoft May 2008 Advance Notification Multiple Vulnerabilities
20725| [28598] RETIRED: Microsoft April 2008 Advance Notification Multiple Vulnerabilities
20726| [28124] Retired: Microsoft March 2008 Advance Notification Multiple Vulnerabilities
20727| [27674] RETIRED: Microsoft February 2008 Advance Notification Multiple Vulnerabilities
20728| [27119] RETIRED: Microsoft January 2008 Advance Notification Multiple Vulnerabilities
20729| [26739] RETIRED: Microsoft December 2007 Advance Notification Multiple Vulnerabilities
20730| [26414] Microsoft Forms 2.0 ActiveX Control Memory Access Violation Denial of Service Vulnerabilities
20731| [26380] Retired: Microsoft November 2007 Advance Notification Multiple Vulnerabilities
20732| [25991] RETIRED: Microsoft Office 2000 and XP Unspecified Word Document Handling DoS Vulnerability
20733| [25922] RETIRED: Microsoft October 2007 Advance Notification Multiple Vulnerabilities
20734| [25573] RETIRED: Microsoft September 2007 Advance Notification Multiple Vulnerabilities
20735| [25247] Retired: Microsoft August 2007 Advance Notification Multiple Vulnerabilities
20736| [24771] Retired: Microsoft July 2007 Advance Notification Multiple Vulnerabilities
20737| [24366] RETIRED: Microsoft June 2007 Advance Notification Multiple Vulnerabilities
20738| [24118] Microsoft Office 2000 UA OUACTRL.OCX ActiveX Control Buffer Overflow Vulnerability
20739| [23800] RETIRED: Microsoft May 2007 Advance Notification Multiple Vulnerabilities
20740| [23380] Microsoft Word 2007 WWLib.DLL Unspecified Document File Buffer Overflow Vulnerability
20741| [23335] RETIRED: Microsoft April 2007 Advance Notification Multiple Vulnerabilities
20742| [22716] Microsoft Office 2003 Denial of Service Vulnerability
20743| [22567] Microsoft Word 2000/2002 Document Stream Remote Code Execution Vulnerability
20744| [22328] RETIRED: Microsoft Word 2003 Unspecified Code Execution Vulnerability
20745| [22225] Microsoft Word 2000 Malformed Function Code Execution Vulnerability
20746| [21611] Microsoft Project Server 2003 PDSRequest.ASP XML Request Information Disclosure Vulnerability
20747| [21495] Microsoft Windows 2000 Remote Installation Service Remote Code Execution Vulnerability
20748| [20843] Microsoft Visual Studio 2005 WMI Object Broker Remote Code Execution Vulnerability
20749| [19636] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
20750| [19388] Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
20751| [17134] Microsoft Commerce Server 2002 Authentication Bypass Vulnerability
20752| [16634] Microsoft PowerPoint 2000 Remote Information Disclosure Vulnerability
20753| [14772] Microsoft Exchange Server 2003 Exchange Information Store Denial Of Service Vulnerability
20754| [14093] Microsoft Update Rollup 1 for Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
20755| [13564] Microsoft SQL Server 2000 Multiple Vulnerabilities
20756| [13008] Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability
20757| [12972] Microsoft Windows Server 2003 Service Pack 1 Released - Multiple Vulnerabilities Fixed
20758| [12913] Microsoft Outlook 2002 Connector For IBM Lotus Domino Policy Bypass Vulnerability
20759| [12824] Microsoft InfoPath 2003 Insecure Information Storage Vulnerability
20760| [12641] Microsoft Windows 2000 Group Policy Bypass Vulnerability
20761| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
20762| [11820] Microsoft Windows 2000 Resource Kit W3Who.DLL Multiple Remote Vulnerabilities
20763| [11446] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
20764| [11387] Microsoft Windows 2003 Services Default SACL Access Right Weakness
20765| [10901] Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
20766| [10693] Microsoft Windows 2000 Media Player Control Media Preview Script Execution Vulnerability
20767| [10484] Microsoft ISA Server 2000 FTP Bounce Filtering Vulnerability
20768| [10480] Microsoft ISA Server 2000 Site And Content Rule Bypass Vulnerability
20769| [10440] Microsoft Windows 2000 Domain Expired Account Security Policy Violation Weakness
20770| [10369] Microsoft Outlook 2003 Media File Script Execution Vulnerability
20771| [10307] Microsoft Outlook 2003 Predictable File Location Weakness
20772| [10114] Microsoft Windows 2000 Domain Controller LDAP Denial Of Service Vulnerability
20773| [9409] Microsoft Exchange Server 2003 Outlook Web Access Random Mailbox Access Vulnerability
20774| [9408] Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability
20775| [9118] Microsoft Exchange Server 2003 Outlook Web Access Lowered Security Settings Weakness
20776| [8833] Microsoft Windows 2000 TroubleShooter ActiveX Control Buffer Overflow Vulnerability
20777| [8522] Multiple Microsoft Windows 2003 Stack Protection Implementation Weaknesses
20778| [8397] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
20779| [8104] Microsoft Windows 2000 Unauthorized RPC Connection Weakness
20780| [8098] Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
20781| [8093] Microsoft Windows 2000 Active Directory Forest Origin Validation Vulnerability
20782| [8090] Microsoft Windows 2000 ShellExecute() Buffer Overflow Vulnerability
20783| [8089] Microsoft Windows 2000 Unspecified Cryptnet.DLL Memory Leakage Vulnerability
20784| [8086] Microsoft Windows 2000 Port Name Buffers Potential Buffer Overflow Vulnerability
20785| [8085] Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
20786| [8083] Microsoft Windows 2000 Domain Controller Spoofing Vulnerability
20787| [8081] Microsoft Windows 2000 USBH_IoctlGetNodeConnectionDriverKeyName Information Disclosure Vulnerability
20788| [8063] Microsoft Commerce Server 2002 Weak Registry Key Permissions Weakness
20789| [8045] Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
20790| [7930] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
20791| [7788] Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability
20792| [7469] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
20793| [7360] Microsoft Windows 2000/XP Registry Editor Custom Permissions Weakness
20794| [7102] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
20795| [6769] Microsoft Windows 2000 RPC Service Privilege Escalation Vulnerability
20796| [6766] Microsoft Windows 2000 NetBIOS Continuation Packets Kernel Memory Leak Vulnerability
20797| [6667] Microsoft Outlook 2002 V1 Exchange Server Security Certificate Information Leakage Vulnerability
20798| [6319] Microsoft Outlook 2002 Email Header Processing Denial of Service Vulnerability
20799| [6030] Microsoft Windows 2000 SNMP Printer Query Denial of Service Vulnerability
20800| [5972] Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness
20801| [5922] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
20802| [5480] Microsoft Windows 2000 Network Connection Manager Privilege Elevation Vulnerability
20803| [5422] Microsoft Content Management Server 2001 SQL Injection Vulnerability
20804| [5421] Microsoft Content Management Server 2001 Arbitrary Upload Location Vulnerability
20805| [5420] Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
20806| [5415] Microsoft Windows 2000 Insecure Default File Permissions Vulnerability
20807| [5413] Microsoft Exchange 2000 Post Authorization License Exhaustion Denial Of Service Vulnerability
20808| [5412] Microsoft Exchange 2000 Multiple MSRPC Denial Of Service Vulnerabilities
20809| [5312] Microsoft SQL Server 2000 Resolution Service Denial of Service Vulnerability
20810| [5311] Microsoft SQL Server 2000 Resolution Service Stack Overflow Vulnerability
20811| [5310] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
20812| [5309] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
20813| [5307] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
20814| [5253] Microsoft Windows 2000 Narrator Password Disclosure Vulnerability
20815| [5205] Microsoft SQL Server 2000 Incorrect Registry Key Permissions Vulnerability
20816| [5111] Microsoft Commerce Server 2000 OWC Package Installer Local Command Execution Vulnerability
20817| [5014] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
20818| [4881] Microsoft Exchange 2000 Malformed Mail Attribute DoS Vulnerability
20819| [4853] Microsoft Commerce Server 2000 Profile Service Buffer Overflow Vulnerability
20820| [4852] Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability
20821| [4847] Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability
20822| [4797] Microsoft MSDE/SQL Server 2000 Desktop Engine Default Configuration Vulnerability
20823| [4683] Microsoft Windows 2000 / NT Path Precedence Vulnerability
20824| [4532] Microsoft Windows 2000 Lanman Denial of Service Vulnerability
20825| [4438] Microsoft Windows 2000 Group Policy Evasion Vulnerability
20826| [4426] Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
20827| [4287] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
20828| [4256] Microsoft Windows 2000 Password Policy Bypass Vulnerability
20829| [4157] Microsoft Commerce Server 2000 ISAPI Buffer Overflow Vulnerability
20830| [4095] Microsoft Windows 2000 Server Terminal Services Failure To Lock Terminal Vulnerability
20831| [3652] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability
20832| [3481] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
20833| [3479] Microsoft Windows 2000 NTFS With Macintosh Client Directory Permission Vulnerability
20834| [3445] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
20835| [3339] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
20836| [3305] Norton AntiVirus for Microsoft Exchange 2000 Information Disclosure Vulnerability
20837| [3291] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
20838| [3215] Microsoft Windows 2000 IrDA Buffer Overflow Denial of Service Vulnerability
20839| [3185] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
20840| [3184] Microsoft Windows 2000 RunAs User Credentials Exposure Vulnerability
20841| [3146] Microsoft Windows 2000 System File Replacement Vulnerability
20842| [3115] Microsoft Windows NT and 2000 Command Prompt Reboot Vulnerability
20843| [3063] Microsoft Windows 2000 Unauthorized Password Change Vulnerability
20844| [3033] Microsoft Windows 2000 Task Manager Process Termination Vulnerability
20845| [2988] Microsoft Windows 2000 SMTP Improper Authentication Vulnerability
20846| [2929] Microsoft Windows 2000 LDAP SSL Password Modification Vulnerability
20847| [2849] Microsoft Windows 2000 Telnet Privilege Escalation Vulnerability
20848| [2846] Microsoft Windows 2000 Telnet System Call DoS Vulnerability
20849| [2844] Microsoft Windows 2000 Telnet Service DoS Vulnerability
20850| [2843] Microsoft Windows 2000 Telnet Multiple Sessions DoS Vulnerability
20851| [2838] Microsoft Windows 2000 Telnet Username DoS Vulnerability
20852| [2460] Microsoft Windows 2000 Event Viewer Buffer Overflow Vulnerability
20853| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
20854| [2394] Microsoft Windows 2000 Domain Controller DoS Vulnerability
20855| [2341] Microsoft Windows 2000 Network DDE Escalated Privileges Vulnerability
20856| [2326] Microsoft Windows 2000 RDP DoS Vulnerability
20857| [2133] Microsoft Windows 2000 Directory Services Restore Mode Blank Password Vulnerability
20858| [2066] Microsoft Windows NT 4.0 / 2000 SNMP Registry Key Modification Vulnerability
20859| [2018] Microsoft Windows 2000 Telnet Session Timeout DoS Vulnerability
20860| [2007] Microsoft Windows 2000 DNS Memory Leak Vulnerability
20861| [1973] Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
20862| [1958] Microsoft Exchange 2000 Server EUSR_EXSTOREEVENT Account Vulnerability
20863| [1933] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
20864| [1899] Microsoft Windows 2000 ActiveX Control Buffer Overflow Vulnerability
20865| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
20866| [1758] Microsoft Windows 2000 Unattended Install OEMPreinstall Vulnerability
20867| [1753] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
20868| [1748] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
20869| [1745] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
20870| [1729] Microsoft Windows 2000 Simplified Chinese IME Vulnerability
20871| [1695] Microsoft Proxy 2.0 FTP Permissions Bypass Vulnerability
20872| [1692] Microsoft Proxy 2.0 Internal Network Access Vulnerability
20873| [1683] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
20874| [1673] Microsoft Windows 2000 Malformed RPC Packet DoS Vulnerability
20875| [1651] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
20876| [1632] Microsoft Windows 98 / NT 4.0 / 2000 File Extension Validation Vulnerability
20877| [1620] Microsoft Windows 9x / NT 4.0 / 2000 NetBIOS Cache Corruption Vulnerability
20878| [1613] Microsoft Windows 2000 Local Security Policy Corruption Vulnerability
20879| [1566] Microsoft Word 97 / 2000 Mail Merge Code Execution Vulnerability
20880| [1561] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow Vulnerability
20881| [1535] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
20882| [1507] Microsoft Windows NT 4.0 / 2000 Unspecified Executable Path Vulnerability
20883| [1451] Microsoft Excel 97 / 2000 Register.ID Vulnerability
20884| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
20885| [1415] Microsoft Windows 2000 Remote CPU-overload Vulnerability
20886| [1414] Microsoft Windows 2000 Telnet Server DoS Vulnerability
20887| [1399] Microsoft Internet Explorer 5.01 and Excel/Powerpoint 2000 ActiveX Object Execution Vulnerability
20888| [1398] Microsoft Internet Explorer 5.01 and Access 2000 / 97 VBA Code Execution Vulnerability
20889| [1350] Microsoft Windows 2000 Windows Station Access Vulnerability
20890| [1304] Microsoft Windows NT 4.0 / 2000 SMB Write Request DoS Vulnerability
20891| [1301] Microsoft Windows NT 4.0 / 2000 Ignored SMB Response DoS Vulnerability
20892| [1295] Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
20893| [1198] Microsoft Windows 2000 Default SYSKEY Configuration Vulnerability
20894| [1197] Microsoft Office 2000 UA Control Vulnerability
20895| [990] Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
20896| [945] Microsoft SMS 2.0 Default Permissions Vulnerability
20897| [539] Microsoft Windows 2000 EFS Vulnerability
20898| [180] Microsoft Windows April Fools 2001 Vulnerability
20899| [71487] Microsoft December 2014 Advance Notification Multiple Vulnerabilities
20900| [70966] RETIRED: Microsoft November 2014 Advance Notification Multiple Vulnerabilities
20901| [70367] RETIRED: Microsoft October 2014 Advance Notification Multiple Vulnerabilities
20902| [69636] RETIRED: Microsoft September 2014 Advance Notification Multiple Vulnerabilities
20903| [69108] Microsoft August 2014 Advance Notification Multiple Vulnerabilities
20904| [68367] Microsoft July 2014 Advance Notification Multiple Vulnerabilities
20905| [67905] Microsoft June 2014 Advance Notification Multiple Vulnerabilities
20906| [67298] Microsoft May 2014 Advance Notification Multiple Vulnerabilities
20907| [66639] RETIRED: Microsoft April 2014 Advance Notification Multiple Vulnerabilities
20908| [66016] Microsoft March 2014 Notification Multiple Vulnerabilities
20909| [65426] Microsoft February 2014 Notification Multiple Vulnerabilities
20910| [64757] RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
20911| [64083] RETIRED: Microsoft December 2013 Advance Notification Multiple Vulnerabilities
20912| [63604] RETIRED: Microsoft November 2013 Advance Notification Multiple Vulnerabilities
20913| [62797] RETIRED: Microsoft October 2013 Advance Notification Multiple Vulnerabilities
20914| [62228] RETIRED: Microsoft September 2013 Advance Notification Multiple Vulnerabilities
20915| [62181] Microsoft Office Pinyin IME 2010 CVE-2013-3859 Local Privilege Escalation Vulnerability
20916| [61686] Microsoft August 2013 Advance Notification Multiple Vulnerabilities
20917| [60960] RETIRED: Microsoft July 2013 Advance Notification Multiple Vulnerabilities
20918| [60394] Microsoft June 2013 Advance Notification Multiple Vulnerabilities
20919| [59785] RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities
20920| [58881] RETIRED: Microsoft April 2013 Advance Notification Multiple Vulnerabilities
20921| [58380] RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities
20922| [57846] RETIRED: Microsoft February 2013 Advance Notification Multiple Vulnerabilities
20923| [57137] RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities
20924| [56838] RETIRED: Microsoft December 2012 Advance Notification Multiple Vulnerabilities
20925| [56450] RETIRED: Microsoft November 2012 Advance Notification Multiple Vulnerabilities
20926| [56304] Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability
20927| [55794] RETIRED: Microsoft October 2012 Advance Notification Multiple Vulnerabilities
20928| [55472] RETIRED: Microsoft September 2012 Advance Notification Multiple Vulnerabilities
20929| [54944] RETIRED: Microsoft August 2012 Advance Notification Multiple Vulnerabilities
20930| [54318] RETIRED: Microsoft July 2012 Advance Notification Multiple Vulnerabilities
20931| [53862] RETIRED: Microsoft June 2012 Advance Notification Multiple Vulnerabilities
20932| [53372] RETIRED: Microsoft May 2012 Advance Notification Multiple Vulnerabilities
20933| [52910] RETIRED: Microsoft April 2012 Advance Notification Multiple Vulnerabilities
20934| [52366] RETIRED: Microsoft March 2012 Advance Notification Multiple Vulnerabilities
20935| [51944] RETIRED: Microsoft February 2012 Advance Notification Multiple Vulnerabilities
20936| [51289] RETIRED: Microsoft January 2012 Advance Notification Multiple Vulnerabilities
20937| [50980] RETIRED: Microsoft December 2011 Advance Notification Multiple Vulnerabilities
20938| [50513] RETIRED: Microsoft November 2011 Advance Notification Multiple Vulnerabilities
20939| [49994] RETIRED: Microsoft October 2011 Advance Notification Multiple Vulnerabilities
20940| [49515] RETIRED: Microsoft September 2011 Advance Notification Multiple Vulnerabilities
20941| [49017] RETIRED: Microsoft August 2011 Advance Notification Multiple Vulnerabilities
20942| [48616] RETIRED: Microsoft July 2011 Advance Notification Multiple Vulnerabilities
20943| [48235] Microsoft Lync Server 2010 'ReachJoin.aspx' Remote Command Injection Vulnerability
20944| [48193] RETIRED: Microsoft June 2011 Advance Notification Multiple Vulnerabilities
20945| [47725] RETIRED: Microsoft May 2011 Advance Notification Multiple Vulnerabilities
20946| [47255] RETIRED: Microsoft April 2011 Advance Notification Multiple Vulnerabilities
20947| [46675] RETIRED: Microsoft March 2011 Advance Notification Multiple Vulnerabilities
20948| [46132] RETIRED: Microsoft February 2011 Advance Notification Multiple Vulnerabilities
20949| [45696] RETIRED: Microsoft January 2011 Advance Notification Multiple Vulnerabilities
20950| [45307] RETIRED: Microsoft December 2010 Advance Notification Multiple Vulnerabilities
20951| [44649] RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities
20952| [43831] RETIRED: Microsoft October 2010 Advance Notification Multiple Vulnerabilities
20953| [43115] RETIRED: Microsoft September 2010 Advance Notification Multiple Vulnerabilities
20954| [42234] RETIRED: Microsoft August 2010 Advance Notification Multiple Vulnerabilities
20955| [41474] RETIRED: Microsoft July 2010 Advance Notification Multiple Vulnerabilities
20956| [40548] RETIRED: Microsoft June 2010 Advance Notification Multiple Vulnerabilities
20957| [39961] RETIRED: Microsoft May 2010 Advance Notification Multiple Vulnerabilities
20958| [39313] RETIRED: Microsoft April 2010 Advance Notification Multiple Vulnerabilities
20959| [38540] RETIRED: Microsoft March 2010 Advance Notification Multiple Vulnerabilities
20960| [38096] RETIRED: Microsoft February 2010 Advance Notification Multiple Vulnerabilities
20961| [37887] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
20962| [37664] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
20963| [32642] Microsoft Word RTF Malformed Control Word Variant 2 Remote Code Execution Vulnerability
20964|
20965| IBM X-Force - https://exchange.xforce.ibmcloud.com:
20966| [82417] Microsoft Windows Knowledge Base Article 2801261 update is not installed
20967| [82415] Microsoft Windows Knowledge Base Article 2807986 update is not installed
20968| [82410] Microsoft Windows Knowledge Base Article 2809289 update is not installed
20969| [81859] Microsoft Windows Knowledge Base Article 2802968 update is not installed
20970| [81857] Microsoft Windows Knowledge Base Article 2809279 update is not installed
20971| [81668] Microsoft Windows Knowledge Base Article 2800277 update is not installed
20972| [77323] Microsoft Windows Knowledge Base Article 2706045 update is not installed
20973| [75949] Microsoft Windows Knowledge Base Article 2707960 update is not installed
20974| [75942] Microsoft Windows Knowledge Base Article 2706726 update is not installed
20975| [75934] Microsoft Windows Knowledge Base Article 2709162 update is not installed
20976| [75926] Microsoft Windows Knowledge Base Article 2709100 update is not installed
20977| [75905] Microsoft Windows Knowledge Base Article 2707956 update is not installed
20978| [71991] Microsoft Windows Knowledge Base Article 2607664 update is not installed
20979| [71542] Microsoft Windows Knowledge Base Article 2607702 update is not installed
20980| [70945] Microsoft Windows Knowledge Base Article 2603381 update is not installed
20981| [70150] Microsoft Windows Knowledge Base Article 2607670 update is not installed
20982| [67755] Microsoft Windows Knowledge Base Article 2503665 update is not installed
20983| [67749] Microsoft Windows Knowledge Base Article 2507938 update is not installed
20984| [66845] Microsoft Windows Knowledge Base Article 2506014 update is not installed
20985| [66844] Microsoft Windows Knowledge Base Article 2501584 update is not installed
20986| [66448] Microsoft Windows Knowledge Base Article 2508272 update is not installed
20987| [66442] Microsoft Windows Knowledge Base Article 2509553 update is not installed
20988| [66440] Microsoft Windows Knowledge Base Article 2508429 update is not installed
20989| [66438] Microsoft Windows Knowledge Base Article 2507618 update is not installed
20990| [66430] Microsoft Windows Knowledge Base Article 2503658 update is not installed
20991| [66425] Microsoft Windows Knowledge Base Article 2506223 update is not installed
20992| [65570] Microsoft Windows Knowledge Base Article 2500212 update is not installed
20993| [65568] Microsoft Windows Knowledge Base Article 2508062 update is not installed
20994| [63840] Microsoft Visual C++ 2008 Redistributable Package dynamic-linked library (DLL) code execution
20995| [63780] Microsoft PowerPoint 2007 dynamic-linked library (rpawinet.dll) code execution
20996| [63775] Microsoft Visio 2003 dynamic-linked library (mfc71enu.dll) code execution
20997| [63586] Microsoft Windows Knowledge Base Article 2207559 update is not installed
20998| [63573] Microsoft Windows Knowledge Base Article 2407132 update is not installed
20999| [62797] Microsoft Windows Knowledge Base Article 2305420 update is not installed
21000| [62149] Microsoft Windows Knowledge Base Article 2207566 update is not installed
21001| [62133] Microsoft Windows Knowledge Base Article 2405882 update is not installed
21002| [53980] Microsoft Windows 2000 License Logging Server buffer overflow
21003| [53601] Microsoft Office 2008 for Mac user ID 502 security bypass
21004| [50973] Microsoft Windows Server 2003 and Vista win32k.sys denial of service
21005| [50759] Microsoft Windows 2000 Active Directory LDAP code execution
21006| [48595] Microsoft Word 2007 Email as PDF information disclosure
21007| [46102] Microsoft Windows 2003 SP2 is not installed on the system
21008| [46101] Microsoft Windows 2003 SP1 is not installed on the system
21009| [45186] Microsoft SQL Server 2000 SQLVDIRLib.SQLVDirControl ActiveX control buffer overflow
21010| [37200] Microsoft SQL Server 2000 Service Pack 1 update is not installed
21011| [37198] Microsoft SQL Server 2000 Service Pack 3 update is not installed
21012| [34634] Microsoft Windows Server 2003 Active Directory information disclosure
21013| [34599] Microsoft Windows Server 2003 terminal server security bypass
21014| [34473] Microsoft Office 2000 ActiveX control buffer overflow
21015| [33713] Microsoft Word 2007 multiple unspecified denial of service
21016| [33712] Microsoft Word 2007 wwlib.dll buffer overflow
21017| [32631] Microsoft SQL Server 2000 Service Pack 2 update is not installed
21018| [31821] Microsoft Windows time zone update for year 2007
21019| [31196] Microsoft Office 2003 Brazilian Grammar Checker buffer overflow
21020| [30905] Microsoft Project Server 2003 pdsrequest.asp information disclosure
21021| [29546] Microsoft Windows 2000/2003 user logoff initiated
21022| [29545] Microsoft Windows 2000/2003 system time changed
21023| [29544] Microsoft Windows 2000/2003 system security access removed
21024| [29543] Microsoft Windows 2000/2003 security access granted
21025| [29542] Microsoft Windows 2000/2003 SAM notification package loaded
21026| [29541] Microsoft Windows 2000/2003 primary security token issued
21027| [29540] Microsoft Windows 2000/2003 user password reset successful
21028| [29539] Microsoft Windows 2000/2003 object indirectly accessed
21029| [29538] Microsoft Windows 2000/2003 object handle duplicated
21030| [29537] Microsoft Windows 2000/2003 logon with explicit credentials success
21031| [29536] Microsoft Windows 2000/2003 logon attempt using explicit credentials unsuccessful
21032| [29535] Microsoft Windows 2000/2003 IPSEC policy agent failed
21033| [29534] Microsoft Windows 2000/2003 IPSEC policy agent disabled
21034| [29533] Microsoft Windows 2000/2003 IPSEC policy agent changed
21035| [29532] Microsoft Windows 2000/2003 IKE security association established
21036| [29531] Microsoft Windows 2000/2003 IKE quick mode association ended
21037| [29530] Microsoft Windows 2000/2003 IKE main mode association ended
21038| [29529] Microsoft Windows 2000/2003 IKE association negotiation failed
21039| [29528] Microsoft Windows 2000/2003 IKE association peer authentication failed
21040| [29527] Microsoft Windows 2000/2003 IKE association failed invalid proposal
21041| [29526] Microsoft Windows 2000/2003 IKE association failed authentication parameters
21042| [29525] Microsoft Windows 2000/2003 DPAPI master key backup attempted
21043| [29524] Microsoft Windows 2000/2003 DPAPI key recovery attempted
21044| [29523] Microsoft Windows 2000/2003 DPAPI auditable data unprotected
21045| [29522] Microsoft Windows 2000/2003 administrative group security descriptor set
21046| [29521] Microsoft Windows 2000/2003 account name changed
21047| [29507] Microsoft Office 2003 unspecified PowerPoint NULL pointer dereference denial of service
21048| [28512] Microsoft Internet Explorer multiple Windows 2000 COM object denial of service
21049| [28005] Microsoft Windows 2000 Management Console (MMC) resource file cross-site scripting
21050| [26118] Microsoft Office 2003 mailto: information disclosure
21051| [25330] Microsoft Commerce Server 2002 authfiles/login.asp authentication bypass
21052| [24474] Microsoft Windows 2000 LDAP client accepts untrusted CA
21053| [24473] Microsoft Windows 2000 event ID 565 not logged
21054| [24472] Microsoft Windows 2000 Event ID 1704 records incorrect group policy settings
21055| [24407] Microsoft Windows 2000 SECEDIT command fails to set ACLs correctly
21056| [24405] Microsoft Windows 2000 UPN credentials with trailing dot group policy bypass
21057| [24403] Microsoft Windows 2000 WideCharToMultiByte() incorrect Japanese character conversion
21058| [24402] Microsoft Windows 2000 Terminal Service client IP not logged
21059| [24400] Microsoft Windows 2000 domain authentication can be bypassed by a local administrator
21060| [23066] Microsoft Windows XP and 2000 Server MSRPC memory allocation denial of service
21061| [22318] Microsoft SQL Server 2000 Service Pack 4 update is not installed
21062| [22183] Microsoft Exchange Server 2003 public folder denial of service
21063| [21345] Microsoft Windows 2000 Update Rollup 1 for Service Pack 4 has not been installed
21064| [21315] Microsoft Outlook 2002 connector for Domino bypass restrictions
21065| [19969] Multiple Microsoft Windows Server 2003 Edition printer driver denial of service
21066| [19965] Multiple Microsoft Windows Server 2003 Editions SMB redirector denial of service
21067| [19727] Microsoft Windows 2000 GDI32.DLL denial of service
21068| [19629] Microsoft Exchange Server 2003 folder denial of service
21069| [17826] Microsoft Outlook 2003 CID security bypass
21070| [17624] Microsoft Windows XP and Windows Server 2003 Compressed Folders buffer overflow
21071| [17621] Microsoft Windows 2003 SMTP service code execution
21072| [17560] Microsoft Windows 2000 and XP GDI library denial of service
21073| [17521] Microsoft Windows 2000 Service Pack 4 is not installed
21074| [16913] Microsoft Windows 2003 users with Synchronize directory service data privilege
21075| [16912] Microsoft Windows 2003 groups with Synchronize directory service data privilege
21076| [16909] Microsoft Windows 2003 groups with Remove computer from docking station privilege
21077| [16907] Microsoft Windows 2003 users with Create global objects privilege
21078| [16905] Microsoft Windows 2003 users or groups with Create global objects privilege
21079| [16851] Microsoft Windows 2003 and XP WinKey and U key denial of service
21080| [16704] Microsoft Windows 2000 Media Player control code execution
21081| [16582] Microsoft Windows Server 2003 kernel CPU denial of service
21082| [16572] Microsoft Windows 2003 Users with Impersonate a client after authentication privilege
21083| [16570] Microsoft Windows 2003 Users with Create global objects privilege
21084| [16564] Microsoft Windows 2003 Groups with Create global objects privilege
21085| [16562] Microsoft Windows 2003 Groups with "
21086| [16522] Microsoft Windows 2003 Impersonate a client after authentication privilege
21087| [16521] Microsoft Windows 2003 Deny Logon Through Terminal Services privilege
21088| [16520] Microsoft Windows 2003 Create global objects privilege
21089| [16276] Microsoft Windows 2000 Advanced Server fully qualified domain name security bypass
21090| [16173] Microsoft Outlook 2003 OLE object bypass restricted security zone
21091| [16119] Microsoft Outlook 2000 URL spoofing
21092| [16104] Microsoft Outlook 2003 predictable file location could allow code execution
21093| [16095] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
21094| [15704] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
21095| [15700] Microsoft Windows 2000 Domain Controller LSASS LDAP message denial of service
21096| [15632] Microsoft Windows 2000 Utility Manger allows privilege escalation
21097| [15414] Microsoft Outlook 2002 mailto URL allows execution of code
21098| [15263] Microsoft Windows XP and 2000 Server kernel allows elevated privileges
21099| [15057] Microsoft Windows XP and Windows Server 2003 smbmount Linux client denial of service
21100| [15038] Microsoft Windows 2000 Server Windows Media Services denial of service
21101| [15037] Microsoft Windows Server 2003 WINS /GS flag denial of service
21102| [14178] Microsoft ISA Exchange Server 2003 MS04-002 patch is not installed
21103| [14167] Microsoft ISA Server 2000 H.323 filter buffer overflow
21104| [13426] Microsoft Windows 2000 and XP RPC race condition
21105| [13423] Microsoft Windows 2000 Local Troubleshooter ActiveX control buffer overflow
21106| [13407] Microsoft Windows 2000 Server mqsvc.exe MQLocateBegin packet buffer overflow
21107| [13385] Microsoft Windows Server 2003 "
21108| [13211] Microsoft Windows 2000 and XP URG memory leak
21109| [13171] Microsoft Windows Server 2003 can allow attacker to bypass mechanism used to detect buffer overflows
21110| [13131] Microsoft Windows 2000 Message Queue Manager buffer overflow
21111| [12684] Microsoft Exchange Server OWA Outlook 2003 denial of service
21112| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
21113| [12620] Microsoft Windows 2000 Server SMTP FILETIME denial of service
21114| [12543] Microsoft Windows 2000 Accessibility Utility Manager could allow an attacker to gain privileges
21115| [12493] Microsoft Windows Shell32.dll 2000 ShellExecute function buffer overflow
21116| [12489] Microsoft Windows 2000 Server Active Directory buffer overflow
21117| [12128] Microsoft Windows 2000 and Windows NT MS03-019 patch is not installed
21118| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
21119| [12048] Microsoft Windows 2000 and Windows Server 2003 LAN Manager hash creation enabled
21120| [11901] Microsoft BizTalk Server 2002 SQL injection
21121| [11900] Microsoft BizTalk Server 2002 HTTP Receiver function buffer overflow
21122| [11816] Microsoft Windows 2000 Terminal Services MSGINA.DLL insecure access permissions
21123| [11696] Microsoft Windows 2000 Terminal Services man-in-the-middle attack
21124| [11617] Microsoft Windows 2000 MS03-007 patch is not installed on the system
21125| [11546] Microsoft Windows 2000 Windows Help Facility .cnt file buffer overflow
21126| [11329] Microsoft Windows NT and 2000 cmd.exe CD path name buffer overflow
21127| [11274] Microsoft Windows 2000 NetBIOS continuation packets denial of service
21128| [11273] Microsoft Windows 2000 RPC service could allow an attacker to gain elevated privileges
21129| [11216] Microsoft Windows NT and 2000 command prompt denial of service
21130| [11141] Microsoft Windows 2000 Terminal Services MSGINA.DLL denial of service
21131| [11133] Microsoft Outlook 2002 using V1 Exchange Server Security certificates transmits plaintext emails
21132| [10843] Microsoft Windows 2000 and XP SMB signing group policy modification
21133| [10431] Microsoft Windows 2000 SNMP LANMAN Extension memory leak denial of service
21134| [10400] Microsoft Windows 2000 RPC TCP port 135 denial of service
21135| [10377] Microsoft Windows XP and 2000 administrative alerts fail when security event log is full
21136| [10199] Microsoft Windows 2000/XP PPTP packet buffer overflow
21137| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
21138| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
21139| [9946] Microsoft Windows 2000 Terminal Services session screensaver fails to lock the console
21140| [9856] Microsoft Windows 2000 NCM handler routine could allow elevated privileges
21141| [9779] Microsoft Windows 2000 weak system partition permissions
21142| [9752] Microsoft Windows 2000 Service Pack 3 is not installed
21143| [9746] Microsoft Windows 2000 HTML Help item parameter buffer overflow
21144| [9625] Microsoft Windows 2000 Narrator allows login information to be audible
21145| [9154] Microsoft Data Engine (MSDE) and Microsoft SQL Server 2000 Desktop Engine have a default blank "
21146| [8867] Microsoft Windows 2000 LanMan denial of service
21147| [8813] Microsoft Windows 2000 Terminal Services allows attacker to bypass group policy settings
21148| [8759] Microsoft Windows 2000 could allow an attacker to block the application of Group Policy settings
21149| [8752] Microsoft Windows NT, 2000, and XP MUP buffer overflow
21150| [8739] Microsoft Windows 2000 DCOM memory leak
21151| [8708] Microsoft Outlook 2000 and 2002 executes embedded script in object tag when replying or forwarding HTML mail
21152| [8402] Microsoft Windows 2000 allows an attacker to bypass password policy
21153| [8307] Microsoft Windows 2000, Windows XP, and Exchange 2000 SMTP data transfer command denial of service
21154| [8304] Microsoft Windows 2000 and Exchange 5.5 SMTP service unauthorized mail privileges
21155| [8254] Microsoft Commerce Server 2000 AuthFilter ISAPI filter buffer overflow
21156| [8199] Microsoft Windows 2000 Terminal Services unlocked client
21157| [8094] Microsoft Windows 2000 and Interix 2.2 Telnet protocol option buffer overflow
21158| [8092] Microsoft Exchange 2000 System Attendant sets incorrect registry permissions
21159| [8043] Microsoft Windows NT, 2000, and XP using NTFS could allow files to be hidden
21160| [8037] Microsoft Windows 2000 empty TCP packet denial of service
21161| [8023] Microsoft Windows NT and Windows 2000 SIDs could allow an attacker to gain elevated privileges in another domain
21162| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
21163| [7667] Microsoft Windows 2000 IKE UDP packet flood denial of service
21164| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
21165| [7538] Microsoft Windows 2000 and XP Terminal services allow an attacker to spoof IP addresses
21166| [7533] Microsoft Windows 2000 RunAs service denial of service
21167| [7532] Microsoft Windows 2000 RunAs service allows local attacker to bypass pipe authentication
21168| [7531] Microsoft Windows 2000 RunAs service reveals sensitive information
21169| [7528] Microsoft Windows NT and Windows 2000 malformed RPC request denial of service
21170| [7409] Microsoft Windows 2000 and Windows XP GDI denial of service
21171| [7302] Microsoft Windows NT and 2000 Terminal Server malformed RDP packet series denial of service
21172| [7008] Microsoft Windows 2000 IrDA device denial of service
21173| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
21174| [6931] Microsoft Windows 2000 without Service Pack 2
21175| [6919] Microsoft Windows 2000 Task Manager does not terminate malicious files with the same name as a system process
21176| [6912] Microsoft Windows NT and 2000 Terminal Server RDP memory leak denial of service
21177| [6876] Microsoft Windows 2000 could allow an attacker to change network passwords
21178| [6803] Microsoft Windows 2000 SMTP service allows mail relaying
21179| [6745] Microsoft Windows 2000 LDAP function could allow domain user password change
21180| [6669] Microsoft Windows 2000 Telnet system call denial of service
21181| [6668] Microsoft Windows 2000 Telnet handle leak denial of service
21182| [6667] Microsoft Windows 2000 Telnet multiple idle sessions denial of service
21183| [6666] Microsoft Windows 2000 Telnet username denial of service
21184| [6665] Microsoft Windows 2000 Telnet service weak domain authentication
21185| [6664] Microsoft Windows 2000 Telnet service predictable pipe names could allow elevation of privileges
21186| [6652] Microsoft Exchange 2000 OWA script execution
21187| [6590] Microsoft Windows 2000 debug registers allow attacker to gain elevated privileges
21188| [6506] Microsoft Windows 2000 Server Kerberos denial of service
21189| [6443] Microsoft Windows 2000 catalog file could remove installed hotfixes
21190| [6160] Microsoft Windows 2000 event viewer buffer overflow
21191| [6136] Microsoft Windows 2000 domain controller denial of service
21192| [6035] Microsoft Windows 2000 Server RDP denial of service
21193| [5973] Microsoft Windows 2000 EFS allows local user to recover sensitive data
21194| [5936] Microsoft Windows 2000 Server Directory Service Restore Mode allows user to login with blank password
21195| [5800] Microsoft Windows 2000 Index Service ActiveX controls allow unauthorized access to file information
21196| [5623] Microsoft Windows NT and 2000 Phone Book service buffer overflow
21197| [5598] Microsoft Windows 2000 Telnet daemon could allow a denial of service
21198| [5585] Microsoft Windows 2000 brute force attack
21199| [5502] Microsoft Windows 2000 Indexing Services ixsso.query
21200| [5467] Microsoft Windows 2000 System Monitor ActiveX control buffer overflow
21201| [5399] Microsoft Windows NT and 2000 Network Monitor buffer overflow
21202| [5301] Microsoft Windows 2000 Simplified Chinese IME State Recognition
21203| [5263] Microsoft Office 2000 executes .dll without users knowledge
21204| [5242] Microsoft Windows 2000 Telnet client NTLM authentication weakness
21205| [5222] Microsoft Windows 2000 malformed RPC packet denial of service
21206| [5203] Microsoft Windows 2000 still image service
21207| [5171] Microsoft Windows 2000 Local Security Policy corruption
21208| [5080] Microsoft Office 2000 HTML object tag buffer overflow
21209| [5033] Microsoft Windows 2000 without Service Pack 1
21210| [5031] Microsoft Windows 2000 Service Control Manager named pipe could allow a unauthorized user to gain privileges
21211| [5015] Microsoft Windows NT and 2000 executable path
21212| [4887] Microsoft Windows 2000 Kerberos ticket renewed
21213| [4886] Microsoft Windows 2000 logon session reconnected
21214| [4885] Microsoft Windows 2000 logon session disconnected
21215| [4882] Microsoft Windows 2000 Kerberos pre-authentication failed
21216| [4873] Microsoft Windows 2000 user account mapped for logon
21217| [4872] Microsoft Windows 2000 account logon failed
21218| [4871] Microsoft Windows 2000 account used for logon
21219| [4855] Microsoft Windows 2000 group type change
21220| [4842] Microsoft Internet Explorer and Microsoft Powerpoint 2000 ActiveX object execution
21221| [4841] Microsoft Internet Explorer and Microsoft Access 2000 VBA code execution
21222| [4823] Microsoft Windows 2000 Telnet server binary stream denial of service
21223| [4819] Microsoft Windows 2000 default SYSKEY configuration
21224| [4787] Microsoft Windows 2000 user account locked out
21225| [4786] Microsoft Windows 2000 computer account created
21226| [4785] Microsoft Windows 2000 computer account changed
21227| [4784] Microsoft Windows 2000 computer account deleted
21228| [4714] Microsoft Windows 2000 "
21229| [4589] Microsoft Windows 2000 protected store can be compromised by brute force attack
21230| [4278] Microsoft Windows 2000 unattended install does not secure All Users profile
21231| [4138] Microsoft Windows 2000 system file integrity feature is disabled
21232| [4086] Microsoft Windows 2000 may not start Jaz drives correctly
21233| [4085] Microsoft Windows 2000 non-Gregorial calendar error
21234| [4084] Microsoft Windows 2000 may prevent Adobe FrameMaker files from being saved in some formats
21235| [4083] Microsoft Windows 2000 Terminal Services may damage Office files saved as HTML
21236| [4082] Microsoft Windows 2000 and Iomega parallel port drives display error
21237| [4080] Microsoft Windows 2000 AOL image support
21238| [4079] Microsoft Windows 2000 High Encryption Pack
21239| [3854] Microsoft Office 2000 security setting
21240| [1376] Microsoft Proxy 2.0 denial of service
21241| [86256] Microsoft Windows Knowledge Base Article 2876063 update is not installed
21242| [86097] Microsoft Windows Knowledge Base Article 2859537 update is not installed
21243| [86091] Microsoft Windows Knowledge Base Article 2868623 update is not installed
21244| [86089] Microsoft Windows Knowledge Base Article 2862772 update is not installed
21245| [86075] Microsoft Windows Knowledge Base Article 2850869 update is not installed
21246| [86073] Microsoft Windows Knowledge Base Article 2873872 update is not installed
21247| [86070] Microsoft Windows Knowledge Base Article 2849568 update is not installed
21248| [85245] Microsoft Windows Knowledge Base Article 2848295 update is not installed
21249| [85244] Microsoft Windows Knowledge Base Article 2847927 update is not installed
21250| [85243] Microsoft Windows Knowledge Base Article 2861561 update is not installed
21251| [85236] Microsoft Windows Knowledge Base Article 2850851 update is not installed
21252| [85227] Microsoft Windows Knowledge Base Article 2847883 update is not installed
21253| [85223] Microsoft Windows Knowledge Base Article 2846071 update is not installed
21254| [85205] Microsoft Windows Knowledge Base Article 2845187 update is not installed
21255| [84621] Microsoft Windows Knowledge Base Article 2845690 update is not installed
21256| [84619] Microsoft Windows Knowledge Base Article 2839894 update is not installed
21257| [84617] Microsoft Windows Knowledge Base Article 2839571 update is not installed
21258| [84615] Microsoft Windows Knowledge Base Article 2839229 update is not installed
21259| [84613] Microsoft Windows Knowledge Base Article 2838727 update is not installed
21260| [84156] Microsoft Windows Knowledge Base Article 2847204 update is not installed
21261| [83912] Microsoft Windows Knowledge Base Article 2829254 update is not installed
21262| [83910] Microsoft Windows Knowledge Base Article 2829530 update is not installed
21263| [83898] Microsoft Windows Knowledge Base Article 2830397 update is not installed
21264| [83886] Microsoft Windows Knowledge Base Article 2830399 update is not installed
21265| [83884] Microsoft Windows Knowledge Base Article 2834692 update is not installed
21266| [83882] Microsoft Windows Knowledge Base Article 2834695 update is not installed
21267| [83880] Microsoft Windows Knowledge Base Article 2836440 update is not installed
21268| [83876] Microsoft Windows Knowledge Base Article 2840221 update is not installed
21269| [83192] Microsoft Windows Knowledge Base Article 2817183 update is not installed
21270| [83100] Microsoft Windows Knowledge Base Article 2830914 update is not installed
21271| [83098] Microsoft Windows Knowledge Base Article 2829996 update is not installed
21272| [83093] Microsoft Windows Knowledge Base Article 2828223 update is not installed
21273| [83091] Microsoft Windows Knowledge Base Article 2813170 update is not installed
21274| [83088] Microsoft Windows Knowledge Base Article 2827663 update is not installed
21275| [83086] Microsoft Windows Knowledge Base Article 2823482 update is not installed
21276| [83084] Microsoft Windows Knowledge Base Article 2821818 update is not installed
21277| [83082] Microsoft Windows Knowledge Base Article 2820917 update is not installed
21278| [82600] Microsoft Windows Knowledge Base Article 2813707 update is not installed
21279| [82424] Microsoft Windows Knowledge Base Article 2814124 update is not installed
21280| [82422] Microsoft Windows Knowledge Base Article 2780176 update is not installed
21281| [82401] Microsoft Windows Knowledge Base Article 2813682 update is not installed
21282| [82399] Microsoft Windows Knowledge Base Article 2816264 update is not installed
21283| [81683] Microsoft Windows Knowledge Base Article 2780091 update is not installed
21284| [81681] Microsoft Windows Knowledge Base Article 2784242 update is not installed
21285| [81680] Microsoft Windows Knowledge Base Article 2790113 update is not installed
21286| [81678] Microsoft Windows Knowledge Base Article 2790655 update is not installed
21287| [81676] Microsoft Windows Knowledge Base Article 2790978 update is not installed
21288| [81674] Microsoft Windows Knowledge Base Article 2797052 update is not installed
21289| [81672] Microsoft Windows Knowledge Base Article 2799494 update is not installed
21290| [81666] Microsoft Windows Knowledge Base Article 2778344 update is not installed
21291| [81634] Microsoft Windows Knowledge Base Article 2792100 update is not installed
21292| [81339] Microsoft Windows Knowledge Base Article 2799329 update is not installed
21293| [80875] Microsoft Windows Knowledge Base Article 2756145 update is not installed
21294| [80872] Microsoft Windows Knowledge Base Article 2769324 update is not installed
21295| [80867] Microsoft Windows Knowledge Base Article 2769327 update is not installed
21296| [80865] Microsoft Windows Knowledge Base Article 2769369 update is not installed
21297| [80863] Microsoft Windows Knowledge Base Article 2778930 update is not installed
21298| [80861] Microsoft Windows Knowledge Base Article 2785220 update is not installed
21299| [80365] Microsoft Windows Knowledge Base Article 2761465 update is not installed
21300| [80360] Microsoft Windows Knowledge Base Article 2765809 update is not installed
21301| [80358] Microsoft Windows Knowledge Base Article 2770660 update is not installed
21302| [80356] Microsoft Windows Knowledge Base Article 2780642 update is not installed
21303| [80352] Microsoft Windows Knowledge Base Article 2783534 update is not installed
21304| [80349] Microsoft Windows Knowledge Base Article 2784126 update is not installed
21305| [79693] Microsoft Windows Knowledge Base Article 2745030 update is not installed
21306| [79687] Microsoft Windows Knowledge Base Article 2761451 update is not installed
21307| [79683] Microsoft Windows Knowledge Base Article 2761226 update is not installed
21308| [79679] Microsoft Windows Knowledge Base Article 2758857 update is not installed
21309| [79677] Microsoft Windows Knowledge Base Article 2727528 update is not installed
21310| [78864] Microsoft Windows Knowledge Base Article 2754670 update is not installed
21311| [78862] Microsoft Windows Knowledge Base Article 2743555 update is not installed
21312| [78858] Microsoft Windows Knowledge Base Article 2754849 update is not installed
21313| [78856] Microsoft Windows Knowledge Base Article 2724197 update is not installed
21314| [78853] Microsoft Windows Knowledge Base Article 2741517 update is not installed
21315| [78851] Microsoft Windows Knowledge Base Article 2742319 update is not installed
21316| [78848] Microsoft Windows Knowledge Base Article 2742321 update is not installed
21317| [78760] Microsoft Windows Knowledge Base Article 2744842 update is not installed
21318| [78077] Microsoft Windows Knowledge Base Article 2741528 update is not installed
21319| [78075] Microsoft Windows Knowledge Base Article 2720184 update is not installed
21320| [78071] Microsoft Windows Knowledge Base Article 2748552 update is not installed
21321| [77512] Microsoft Windows Knowledge Base Article 2740358 update is not installed
21322| [77362] Microsoft Windows Knowledge Base Article 2733918 update is not installed
21323| [77360] Microsoft Windows Knowledge Base Article 2733829 update is not installed
21324| [77357] Microsoft Windows Knowledge Base Article 2733594 update is not installed
21325| [77352] Microsoft Windows Knowledge Base Article 2731879 update is not installed
21326| [77350] Microsoft Windows Knowledge Base Article 2731847 update is not installed
21327| [77348] Microsoft Windows Knowledge Base Article 2723135 update is not installed
21328| [77346] Microsoft Windows Knowledge Base Article 2722913 update is not installed
21329| [77342] Microsoft Windows Knowledge Base Article 2720573 update is not installed
21330| [77325] Microsoft Windows Knowledge Base Article 2719584 update is not installed
21331| [76808] Microsoft Windows Knowledge Base Article 2721015 update is not installed
21332| [76725] Microsoft Windows Knowledge Base Article 2722479 update is not installed
21333| [76724] Microsoft Windows Knowledge Base Article 2719177 update is not installed
21334| [76721] Microsoft Windows Knowledge Base Article 2718523 update is not installed
21335| [76718] Microsoft Windows Knowledge Base Article 2698365 update is not installed
21336| [76711] Microsoft Windows Knowledge Base Article 2695502 update is not installed
21337| [76704] Microsoft Windows Knowledge Base Article 2691442 update is not installed
21338| [76702] Microsoft Windows Knowledge Base Article 2655992 update is not installed
21339| [75963] Microsoft Windows Knowledge Base Article 2699988 update is not installed
21340| [75939] Microsoft Windows Knowledge Base Article 2685939 update is not installed
21341| [75928] Microsoft Windows Knowledge Base Article 2711167 update is not installed
21342| [75136] Microsoft Windows Knowledge Base Article 2693777 update is not installed
21343| [75132] Microsoft Windows Knowledge Base Article 2690533 update is not installed
21344| [75130] Microsoft Windows Knowledge Base Article 2688338 update is not installed
21345| [75127] Microsoft Windows Knowledge Base Article 2681578 update is not installed
21346| [75123] Microsoft Windows Knowledge Base Article 2680352 update is not installed
21347| [75116] Microsoft Windows Knowledge Base Article 2597981 update is not installed
21348| [74556] Microsoft Windows Knowledge Base Article 2639185 update is not installed
21349| [74384] Microsoft Windows Knowledge Base Article 2675157 update is not installed
21350| [74378] Microsoft Windows Knowledge Base Article 2671605 update is not installed
21351| [74373] Microsoft Windows Knowledge Base Article 2664258 update is not installed
21352| [74369] Microsoft Windows Knowledge Base Article 2663860 update is not installed
21353| [73543] Microsoft Windows Knowledge Base Article 2671387 update is not installed
21354| [73540] Microsoft Windows Knowledge Base Article 2665364 update is not installed
21355| [73538] Microsoft Windows Knowledge Base Article 2651019 update is not installed
21356| [73536] Microsoft Windows Knowledge Base Article 2651018 update is not installed
21357| [73533] Microsoft Windows Knowledge Base Article 2647170 update is not installed
21358| [73530] Microsoft Windows Knowledge Base Article 2641653 update is not installed
21359| [72887] Microsoft Windows Knowledge Base Article 2663841 update is not installed
21360| [72873] Microsoft Windows Knowledge Base Article 2663830 update is not installed
21361| [72867] Microsoft Windows Knowledge Base Article 2663510 update is not installed
21362| [72857] Microsoft Windows Knowledge Base Article 2661637 update is not installed
21363| [72855] Microsoft Windows Knowledge Base Article 2660465 update is not installed
21364| [72853] Microsoft Windows Knowledge Base Article 2653956 update is not installed
21365| [72851] Microsoft Windows Knowledge Base Article 2654428 update is not installed
21366| [72849] Microsoft Windows Knowledge Base Article 2651026 update is not installed
21367| [72846] Microsoft Windows Knowledge Base Article 2647516 update is not installed
21368| [72841] Microsoft Windows Knowledge Base Article 2645640 update is not installed
21369| [72838] Microsoft Windows Knowledge Base Article 2643719 update is not installed
21370| [72029] Microsoft Windows Knowledge Base Article 2638420 update is not installed
21371| [72003] Microsoft Windows Knowledge Base Article 2646524 update is not installed
21372| [71998] Microsoft Windows Knowledge Base Article 2644615 update is not installed
21373| [71995] Microsoft Windows Knowledge Base Article 2643584 update is not installed
21374| [71994] Microsoft Windows Knowledge Base Article 2636391 update is not installed
21375| [71565] Microsoft Windows Knowledge Base Article 2648048 update is not installed
21376| [71562] Microsoft Windows Knowledge Base Article 2640241 update is not installed
21377| [71560] Microsoft Windows Knowledge Base Article 2640045 update is not installed
21378| [71558] Microsoft Windows Knowledge Base Article 2639417 update is not installed
21379| [71557] Microsoft Windows Knowledge Base Article 2639142 update is not installed
21380| [71554] Microsoft Windows Knowledge Base Article 2633171 update is not installed
21381| [71552] Microsoft Windows Knowledge Base Article 2624667 update is not installed
21382| [71550] Microsoft Windows Knowledge Base Article 2620712 update is not installed
21383| [71548] Microsoft Windows Knowledge Base Article 2618451 update is not installed
21384| [71546] Microsoft Windows Knowledge Base Article 2618444 update is not installed
21385| [71538] Microsoft Windows Knowledge Base Article 2590602 update is not installed
21386| [70951] Microsoft Windows Knowledge Base Article 2630837 update is not installed
21387| [70949] Microsoft Windows Knowledge Base Article 2620704 update is not installed
21388| [70947] Microsoft Windows Knowledge Base Article 2617657 update is not installed
21389| [70943] Microsoft Windows Knowledge Base Article 2588516 update is not installed
21390| [70152] Microsoft Windows Knowledge Base Article 2623699 update is not installed
21391| [70140] Microsoft Windows Knowledge Base Article 2652016 update is not installed
21392| [70130] Microsoft Windows Knowledge Base Article 2586448 update is not installed
21393| [70115] Microsoft Windows Knowledge Base Article 2567053 update is not installed
21394| [69501] Microsoft Windows Knowledge Base Article 2587634 update is not installed
21395| [69498] Microsoft Windows Knowledge Base Article 2587505 update is not installed
21396| [69492] Microsoft Windows Knowledge Base Article 2571621 update is not installed
21397| [69490] Microsoft Windows Knowledge Base Article 2570947 update is not installed
21398| [68840] Microsoft Windows Knowledge Base Article 2451858 update is not installed
21399| [68833] Microsoft Windows Knowledge Base Article 2567943 update is not installed
21400| [68831] Microsoft Windows Knowledge Base Article 2570222 update is not installed
21401| [68829] Microsoft Windows Knowledge Base Article 2567951 update is not installed
21402| [68827] Microsoft Windows Knowledge Base Article 2578230 update is not installed
21403| [68825] Microsoft Windows Knowledge Base Article 2546250 update is not installed
21404| [68823] Microsoft Windows Knowledge Base Article 2559049 update is not installed
21405| [68816] Microsoft Windows Knowledge Base Article 2556532 update is not installed
21406| [68814] Microsoft Windows Knowledge Base Article 2560656 update is not installed
21407| [68812] Microsoft Windows Knowledge Base Article 2560978 update is not installed
21408| [68809] Microsoft Windows Knowledge Base Article 2562485 update is not installed
21409| [68806] Microsoft Windows Knowledge Base Article 2566454 update is not installed
21410| [68804] Microsoft Windows Knowledge Base Article 2563894 update is not installed
21411| [68801] Microsoft Windows Knowledge Base Article 2567680 update is not installed
21412| [68315] Microsoft Windows Knowledge Base Article 2555917 update is not installed
21413| [68299] Microsoft Windows Knowledge Base Article 2566220 update is not installed
21414| [68283] Microsoft Windows Knowledge Base Article 2560847 update is not installed
21415| [67955] Microsoft Windows Knowledge Base Article 2530548 update is not installed
21416| [67943] Microsoft Windows Knowledge Base Article 2544521 update is not installed
21417| [67762] Microsoft Windows Knowledge Base Article 2543893 update is not installed
21418| [67759] Microsoft Windows Knowledge Base Article 2544893 update is not installed
21419| [67757] Microsoft Windows Knowledge Base Article 2476490 update is not installed
21420| [67753] Microsoft Windows Knowledge Base Article 2514842 update is not installed
21421| [67751] Microsoft Windows Knowledge Base Article 2518295 update is not installed
21422| [67737] Microsoft Windows Knowledge Base Article 2520426 update is not installed
21423| [67733] Microsoft Windows Knowledge Base Article 2525694 update is not installed
21424| [67731] Microsoft Windows Knowledge Base Article 2525835 update is not installed
21425| [67728] Microsoft Windows Knowledge Base Article 2535512 update is not installed
21426| [67725] Microsoft Windows Knowledge Base Article 2536275 update is not installed
21427| [67722] Microsoft Windows Knowledge Base Article 2536276 update is not installed
21428| [67718] Microsoft Windows Knowledge Base Article 2537146 update is not installed
21429| [67709] Microsoft Windows Knowledge Base Article 2538814 update is not installed
21430| [67302] Microsoft Windows Knowledge Base Article 2545814 update is not installed
21431| [67101] Microsoft Windows Knowledge Base Article 2524426 update is not installed
21432| [66446] Microsoft Windows Knowledge Base Article 2514666 update is not installed
21433| [66444] Microsoft Windows Knowledge Base Article 2511455 update is not installed
21434| [66436] Microsoft Windows Knowledge Base Article 2497640 update is not installed
21435| [66432] Microsoft Windows Knowledge Base Article 2527308 update is not installed
21436| [66428] Microsoft Windows Knowledge Base Article 2489979 update is not installed
21437| [66423] Microsoft Windows kernel-mode driver (win32k.sys) variant 29 privilege escalation
21438| [66422] Microsoft Windows kernel-mode driver (win32k.sys) variant 28 privilege escalation
21439| [66421] Microsoft Windows kernel-mode driver (win32k.sys) variant 27 privilege escalation
21440| [66420] Microsoft Windows kernel-mode driver (win32k.sys) variant 26 privilege escalation
21441| [66419] Microsoft Windows kernel-mode driver (win32k.sys) variant 25 privilege escalation
21442| [66418] Microsoft Windows kernel-mode driver (win32k.sys) variant 24 privilege escalation
21443| [66417] Microsoft Windows kernel-mode driver (win32k.sys) variant 23 privilege escalation
21444| [66416] Microsoft Windows kernel-mode driver (win32k.sys) variant 22 privilege escalation
21445| [66415] Microsoft Windows kernel-mode driver (win32k.sys) variant 21 privilege escalation
21446| [66414] Microsoft Windows kernel-mode driver (win32k.sys) variant 20 privilege escalation
21447| [66396] Microsoft Windows kernel-mode driver (win32k.sys) variant 2 privilege escalation
21448| [66394] Microsoft Windows Knowledge Base Article 2485663 update is not installed
21449| [65588] Microsoft Windows Knowledge Base Article 2489279 update is not installed
21450| [65581] Microsoft Windows Knowledge Base Article 2510030 update is not installed
21451| [65580] Microsoft Windows Knowledge Base Article 2489283 update is not installed
21452| [65575] Microsoft Windows Knowledge Base Article 2489293 update is not installed
21453| [65573] Microsoft Windows Knowledge Base Article 2494047 update is not installed
21454| [64973] Microsoft Windows Knowledge Base Article 2478960 update is not installed
21455| [64971] Microsoft Windows Knowledge Base Article 2479628 update is not installed
21456| [64927] Microsoft Windows Knowledge Base Article 2393802 update is not installed
21457| [64925] Microsoft Windows Knowledge Base Article 2451879 update is not installed
21458| [64920] Microsoft Windows Knowledge Base Article 2475792 update is not installed
21459| [64918] Microsoft Windows Knowledge Base Article 2476687 update is not installed
21460| [64916] Microsoft Windows Knowledge Base Article 2478953 update is not installed
21461| [64914] Microsoft Windows Knowledge Base Article 2482017 update is not installed
21462| [64910] Microsoft Windows Knowledge Base Article 2483185 update is not installed
21463| [64909] Microsoft Windows Knowledge Base Article 2484015 update is not installed
21464| [64907] Microsoft Windows Knowledge Base Article 2485376 update is not installed
21465| [64905] Microsoft Windows Knowledge Base Article 2489256 update is not installed
21466| [64902] Microsoft Windows Knowledge Base Article 2496930 update is not installed
21467| [64342] Microsoft Windows Knowledge Base Article 2451910 update is not installed
21468| [64339] Microsoft Windows Knowledge Base Article 2478935 update is not installed
21469| [63584] Microsoft Windows Knowledge Base Article 2424434 update is not installed
21470| [63582] Microsoft Windows Knowledge Base Article 2423089 update is not installed
21471| [63580] Microsoft Windows Knowledge Base Article 2436673 update is not installed
21472| [63571] Microsoft Windows Knowledge Base Article 2440591 update is not installed
21473| [63569] Microsoft Windows Knowledge Base Article 2385678 update is not installed
21474| [63566] Microsoft Windows Knowledge Base Article 2442962 update is not installed
21475| [63564] Microsoft Windows Knowledge Base Article 2345316 update is not installed
21476| [63562] Microsoft Windows Knowledge Base Article 2296199 update is not installed
21477| [63558] Microsoft Windows Knowledge Base Article 2416400 update is not installed
21478| [63550] Microsoft Windows Knowledge Base Article 2447961 update is not installed
21479| [63548] Microsoft Windows Knowledge Base Article 2443105 update is not installed
21480| [63546] Microsoft Windows Knowledge Base Article 2455005 update is not installed
21481| [63544] Microsoft Windows Knowledge Base Article 2292970 update is not installed
21482| [62805] Microsoft Windows Knowledge Base Article 2316074 update is not installed
21483| [62793] Microsoft Windows Knowledge Base Article 2293386 update is not installed
21484| [62789] Microsoft Windows Knowledge Base Article 2423930 update is not installed
21485| [62170] Microsoft Windows Knowledge Base Article 2296011 update is not installed
21486| [62166] Microsoft Windows Knowledge Base Article 2294255 update is not installed
21487| [62163] Microsoft Windows Knowledge Base Article 2281679 update is not installed
21488| [62154] Microsoft Windows Knowledge Base Article 2279986 update is not installed
21489| [62147] Microsoft Windows Knowledge Base Article 2160841 update is not installed
21490| [62134] Microsoft Windows Knowledge Base Article 2412048 update is not installed
21491| [62129] Microsoft Windows Knowledge Base Article 2387149 update is not installed
21492| [62126] Microsoft Windows Knowledge Base Article 2378111 update is not installed
21493| [62123] Microsoft Windows Knowledge Base Article 2360937 update is not installed
21494| [62118] Microsoft Windows Knowledge Base Article 2293211 update is not installed
21495| [62104] Microsoft Windows Knowledge Base Article 2360131 update is not installed
21496| [62098] Microsoft Windows Knowledge Base Article 2293194 update is not installed
21497| [62069] Microsoft Windows Knowledge Base Article 2418042 update is not installed
21498| [61519] Microsoft Windows Knowledge Base Article 2121546 update is not installed
21499| [61517] Microsoft Windows Knowledge Base Article 2259922 update is not installed
21500| [61514] Microsoft Windows Knowledge Base Article 2267960 update is not installed
21501| [61510] Microsoft Windows Knowledge Base Article 2315011 update is not installed
21502| [61507] Microsoft Windows Knowledge Base Article 2320113 update is not installed
21503| [61504] Microsoft Windows Knowledge Base Article 2347290 update is not installed
21504| [60736] Microsoft Windows Knowledge Base Article 2265906 update is not installed
21505| [60734] Microsoft Windows Knowledge Base Article 2269638 update is not installed
21506| [60728] Microsoft Windows Knowledge Base Article 2269707 update is not installed
21507| [60724] Microsoft Windows Knowledge Base Article 2286198 update is not installed
21508| [60713] Microsoft Windows Knowledge Base Article 2183461 update is not installed
21509| [60698] Microsoft Windows Knowledge Base Article 2160329 update is not installed
21510| [60686] Microsoft Windows Knowledge Base Article 2115168 update is not installed
21511| [60684] Microsoft Windows Knowledge Base Article 2079403 update is not installed
21512| [60680] Microsoft Windows Knowledge Base Article 2264072 update is not installed
21513| [59901] Microsoft Windows Knowledge Base Article 2229593 update is not installed
21514| [59898] Microsoft Windows Knowledge Base Article 2229593 update is not installed
21515| [58913] Microsoft Windows Knowledge Base Article 2027452 update is not installed
21516| [58891] Microsoft Windows Knowledge Base Article 2028554 update is not installed
21517| [17004] Microsoft Windows XP Service Pack 2 is not installed on the system
21518| [9187] Microsoft Passport SDK 2.1 Component Configuration Document (CCD) permission
21519| [9146] Microsoft Passport SDK 2.1 events reporting disabled
21520| [9068] Microsoft Passport SDK 2.1 registry default permission exposure
21521| [9067] Microsoft Passport SDK 2.1 default test site exposure
21522| [9066] Microsoft Passport SDK 2.1 Adventure Works Sample Site exposure
21523| [9065] Microsoft Passport SDK 2.1 Adventure Works Sample Site global.asa file default permission exposure
21524| [9064] Microsoft Passport SDK 2.1 default time window exposure
21525| [1271] Microsoft IIS version 2 installed
21526| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
21527|
21528| Exploit-DB - https://www.exploit-db.com:
21529| [30756] Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilities
21530| [30749] Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability
21531| [30636] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (2)
21532| [30635] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (1)
21533| [30281] Microsoft .Net Framework <= 2.0 - Multiple Null Byte Injection Vulnerabilities
21534| [29664] Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability
21535| [29660] Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
21536| [29630] Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability
21537| [29524] Microsoft Word 2000 - Malformed Function Code Execution Vulnerability
21538| [28420] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
21539| [28357] Microsoft Windows Explorer 2000/2003/XP Drag and Drop Remote Code Execution Vulnerability
21540| [28227] Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability
21541| [28226] Microsoft PowerPoint 2003 PPT File Closure Memory Corruption
21542| [28225] Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
21543| [28224] Microsoft PowerPoint 2003 mso.dll PPT Processing Unspecified Code Execution
21544| [28198] Microsoft Office 2000/2002 Property Code Execution Vulnerability
21545| [28189] Microsoft Excel 2000-2004 Style Handling and Repair Remote Code Execution Vulnerability
21546| [28087] Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
21547| [28005] Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability
21548| [26690] Microsoft Windows 2000/2003/XP CreateRemoteThread Local Denial of Service Vulnerability
21549| [26517] Microsoft Office PowerPoint 2007 - Crash PoC
21550| [26341] Microsoft Windows 2000/2003/XP MSDTC TIP Denial of Service Vulnerability
21551| [26222] Microsoft Windows 2000/2003/XP Keyboard Event Privilege Escalation Weakness
21552| [25384] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (2)
21553| [25383] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (1)
21554| [25231] Microsoft Windows 2000/2003/XP Graphical Device Interface Library Denial of Service Vulnerability
21555| [25085] Microsoft Office XP 2000/2002 HTML Link Processing Remote Buffer Overflow Vulnerability
21556| [25084] Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability
21557| [25050] Microsoft Windows 2000/2003/XP winhlp32 Phrase Heap Overflow Vulnerability
21558| [25049] Microsoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability
21559| [24686] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
21560| [24277] Microsoft Windows 2000/NT 4 POSIX Subsystem Buffer Overflow Local Privilege Escalation Vulnerability
21561| [24114] Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
21562| [24101] Microsoft Outlook 2003 Predictable File Location Weakness
21563| [23989] Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability
21564| [23796] Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
21565| [23019] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
21566| [22919] Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities
21567| [22883] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (2)
21568| [22882] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)
21569| [22837] Microsoft Windows 2000/NT 4 Media Services NSIISlog.DLL Remote Buffer Overflow
21570| [22782] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
21571| [22591] Microsoft Office Excel 2007 - WriteAV Crash PoC
21572| [22555] Microsoft BizTalk Server 2000/2002 DTA RawCustomSearchField.asp SQL Injection
21573| [22554] Microsoft BizTalk Server 2000/2002 DTA rawdocdata.asp SQL Injection Vulnerability
21574| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
21575| [22528] Microsoft Windows 2000 RegEdit.EXE Registry Key Value Buffer Overflow Vulnerability
21576| [22354] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
21577| [21920] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
21578| [21718] Microsoft SQL 2000/7.0 Agent Jobs Privilege Elevation Vulnerability
21579| [21693] Microsoft SQL Server 2000 User Authentication Remote Buffer Overflow Vulnerability
21580| [21652] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
21581| [21651] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
21582| [21650] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
21583| [21549] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
21584| [21541] Microsoft SQL Server 2000 SQLXML Script Injection Vulnerability
21585| [21540] Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability
21586| [21389] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (2)
21587| [21388] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (1)
21588| [21344] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
21589| [21258] Microsoft Windows 2000/NT 4 NTFS File Hiding Vulnerability
21590| [21246] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (2)
21591| [21245] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (1)
21592| [21172] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (2)
21593| [21171] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)
21594| [21131] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
21595| [21123] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
21596| [21113] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
21597| [21099] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
21598| [21069] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
21599| [20907] Microsoft Windows 2000 Telnet Username DoS Vulnerability
21600| [20802] Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
21601| [20763] Microsoft ISA Server 2000 Web Proxy DoS Vulnerability
21602| [20571] Microsoft Outlook 2000 0/98 0/Express 5.5 Concealed Attachment Vulnerability
21603| [20481] Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability
21604| [20399] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
21605| [20335] Microsoft Indexing Services for Windows 2000/NT 4.0 .htw Cross-Site Scripting Vulnerability
21606| [20305] Microsoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability
21607| [20265] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
21608| [20257] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
21609| [20255] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
21610| [20222] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
21611| [20209] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
21612| [20133] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
21613| [20122] Microsoft Office SharePoint Server 2007 Remote Code Execution
21614| [20096] Microsoft IIS 2.0/3.0/4.0/5.0/5.1 Internal IP Address Disclosure Vulnerability
21615| [20048] Microsoft Windows 2000 Remote CPU-overload Vulnerability
21616| [20047] Microsoft Windows 2000 Telnet Server DoS Vulnerability
21617| [19830] Microsoft Index Server 2.0 '%20' ASP Source Disclosure Vulnerability
21618| [19742] microsoft iis 3.0/4.0,microsoft index server 2.0 - Directory Traversal
21619| [19734] Microsoft Virtual Machine 2000 Series/3000 Series getSystemResource Vulnerability
21620| [19731] microsoft index server 2.0/indexing services for windows 2000 - Directory Traversal
21621| [19728] Microsoft Systems Management Server 2.0 Default Permissions Vulnerability
21622| [19425] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (2)
21623| [19424] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (1)
21624| [19376] Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
21625| [19143] "Microsoft Windows ""April Fools 2001"" Vulnerability"
21626| [19118] Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability
21627| [18334] Microsoft Office 2003 Home/Pro 0day
21628| [18087] MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
21629| [18078] Microsoft Excel 2003 11.8335.8333 Use After Free
21630| [18067] Microsoft Excel 2007 SP2 Buffer Overwrite Exploit
21631| [17305] "Microsoft Windows Vista/Server 2008 ""nsiproxy.sys"" Local Kernel DoS Exploit"
21632| [14971] MOAUB #11 - Microsoft Office Word 2007 sprmCMajority Buffer Overflow
21633| [14782] Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)
21634| [14746] Microsoft Office Groove 2007 DLL Hijacking Exploit (mso.dll)
21635| [14744] Microsoft Visio 2003 DLL Hijacking Exploit (mfc71enu.dll)
21636| [12450] Microsoft SharePoint Server 2007 XSS Vulnerability
21637| [10068] Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution
21638| [4121] Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC
21639| [3973] Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote DoS Exploit
21640| [3690] microsoft office word 2007 - Multiple Vulnerabilities
21641| [3260] Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
21642| [2523] Microsoft Office 2003 PPT Local Buffer Overflow PoC
21643| [2091] Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)
21644| [2001] Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
21645| [1999] Microsoft Word 2000/2003 Hlink Local Buffer Overflow Exploit PoC
21646| [1988] Microsoft Excel 2003 Hlink Local Buffer Overflow Exploit (italian)
21647| [1986] Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit (french)
21648| [1958] Microsoft Excel 2003 Hlink Stack/SEH Buffer Overflow Exploit
21649| [28238] Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Vulnerability MS13-067
21650| [23034] Microsoft URLScan 2.5/ RSA Security SecurID 5.0 Configuration Enumeration Weakness
21651| [22850] Microsoft Office OneNote 2010 Crash PoC
21652| [22679] Microsoft Visio 2010 Crash PoC
21653| [22655] Microsoft Publisher 2013 Crash PoC
21654| [22621] Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability
21655| [22330] Microsoft Office Excel 2010 Crash PoC
21656| [22310] Microsoft Office Publisher 2010 Crash PoC
21657| [22237] Microsoft Office Picture Manager 2010 Crash PoC
21658| [22215] Microsoft Office Word 2010 Crash PoC
21659| [19451] Microsoft Windows 98 a/98 b/98SE,Solaris 2.6 IRDP Vulnerability
21660| [19440] Microsoft Windows NT 4.0/SP 1/SP 2/Sp 3/SP 4/SP 5 Malformed Dialer Entry Vulnerability
21661| [19372] Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability
21662| [17164] Microsoft Reader <= 2.1.1.3143 NULL Byte Write
21663| [17163] Microsoft Reader <= 2.1.1.3143 Array Overflow
21664| [17162] Microsoft Reader <= 2.1.1.3143 Integer Overflow
21665| [17161] Microsoft Reader <= 2.1.1.3143 Heap Overflow
21666| [17160] Microsoft Reader <= 2.1.1.3143 Integer Overflow
21667| [14731] Microsoft Windows Movie Maker <= 2.6.4038.0 DLL Hijacking Exploit (hhctrl.ocx)
21668| [14723] Microsoft Power Point 2010 DLL Hijacking Exploit (pptimpconv.dll)
21669|
21670| OpenVAS (Nessus) - http://www.openvas.org:
21671| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
21672| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
21673| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
21674| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
21675| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
21676| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
21677| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
21678| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
21679| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
21680| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
21681| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
21682| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
21683| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
21684|
21685| SecurityTracker - https://www.securitytracker.com:
21686| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
21687| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
21688| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
21689| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
21690| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
21691| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
21692| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
21693| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
21694| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
21695| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
21696| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
21697| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
21698| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
21699| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
21700| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
21701| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
21702| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
21703| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
21704| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
21705| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
21706| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
21707| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
21708| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
21709| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
21710| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
21711| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
21712| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
21713| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
21714| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
21715| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
21716| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
21717| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
21718| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
21719| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
21720| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
21721| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
21722| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
21723| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
21724| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
21725| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
21726| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
21727| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
21728| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
21729| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
21730| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
21731| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
21732| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
21733| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
21734| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
21735| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
21736| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
21737| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
21738| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
21739| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
21740| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
21741| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
21742| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
21743| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
21744| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
21745|
21746| OSVDB - http://www.osvdb.org:
21747| [90257] Microsoft Windows Server 2003 ICACLS.EXE Permission Inheritance Weakness
21748| [86790] Microsoft Virtual PC 2007 Crafted x86 Instruction Sequence Handling Local DoS
21749| [86061] Microsoft Windows Server 2008 R1 CSRSS ReadConsole / CloseHandle Local DoS
21750| [79442] Microsoft Windows Server 2008 DNS Server Service Cache Update Policy Deleted Domain Name Resolving Weakness
21751| [72670] Microsoft Windows Server 2003 ActiveDirectory BROWSER ELECTION Remote Overflow
21752| [68554] Microsoft Windows Server 2008 Shared Cluster Disks Addition Default Permission Weakness
21753| [62251] Microsoft Windows Server 2008 Hyper-V Crafted Instruction Sequence DoS
21754| [60329] Microsoft Windows 2000 NetBIOS Continuation Packet Remote DoS
21755| [59733] Microsoft Windows 2000 Terminal Services Screensaver Screen Minimization Locking Weakness
21756| [59731] Microsoft Windows 2000 DCOM Client Alter Context Request Remote Information Disclosure
21757| [59730] Microsoft Windows 2000 Terminal Services Disconnect Feature Local Privilege Escalation
21758| [59514] Microsoft Windows 2000 Task Manager Uppercase Process Name Termination Weakness
21759| [59509] Microsoft Windows 2000 Encrypted File System Cleartext Backup File Local Disclosure
21760| [59346] Microsoft Windows 2000 Crafted TCP/UDP Traffic CPU Consumption Remote DoS
21761| [55836] Microsoft ISA Server 2006 Radius OTP Security Bypass
21762| [53663] Microsoft Office Word 2000 WordPerfect 6.x Converter Document Handling Stack Corruption
21763| [50589] Microsoft SQL Server 2000 sp_replwritetovarbin() Stored Procedure Overflow
21764| [37629] Microsoft Windows 2000 RPC Authentication Unspecified Information Disclosure
21765| [37628] Microsoft Windows 2000 RPC Authentication Crafted Request Remote DoS
21766| [36034] Microsoft Office 2000 Controllo ActiveX (OUACTRL.OCX) HelpPopup Method Overflow
21767| [34489] Microsoft Office 2003 Malformed WMF File Handling DoS
21768| [34488] Microsoft Excel 2003 XLS Handling Corrupt Format DoS
21769| [31251] Microsoft Office 2003 Brazilian Portuguese Grammar Checker Arbitrary Code Execution
21770| [29529] Microsoft Windows 2000 creator.dll ActiveX COM Object Memory Corruption
21771| [29528] Microsoft Windows 2000 msdxm.ocx ActiveX COM Object Memory Corruption
21772| [29527] Microsoft Windows 2000 myinfo.dll ActiveX COM Object Memory Corruption
21773| [29526] Microsoft Windows 2000 ciodm.dll ActiveX COM Object Memory Corruption
21774| [28539] Microsoft Word 2000 Unspecified Code Execution
21775| [24121] Microsoft Commerce Server 2002 authfiles/login.asp Authentication Bypass
21776| [24081] Microsoft Outlook 2003 Unspecified Malformed Word Attachment DoS
21777| [23484] Microsoft SQLServer 2000 sp_addalias Procedure Privileged Alias Creation
21778| [23234] Microsoft SQLServer 2000 Unspecified Invalid Client Buffer DoS
21779| [23231] Microsoft SQL Server 2000 SQL Profiler Multiple Method DoS
21780| [23205] Microsoft SQLServer 2000 Crafted Sort Command User Mode Scheduler (UMS) Bypass DoS
21781| [23203] Microsoft SQL Server 2000 Database Name Transact-SQL Statement Privilege Escalation
21782| [23202] Microsoft SQLServer 2000 sysmembers Virtual Table Query Overflow
21783| [23201] Microsoft SQL Server 2000 Dynamic Transact-SQL Statement Disclosure
21784| [23200] Microsoft SQLServer 2000 Encrypted Stored Procedure Dynamic Query Disclosure
21785| [21907] Microsoft Office InfoPath 2003 Mshtml.dll Form Handling DoS
21786| [21598] Microsoft Windows 2000 NetBIOS Port Malformed TCP Packet Parsing Remote DoS
21787| [20256] Microsoft Windows 2000 NTFS Volume Macintosh Client Directory Permission Modification
21788| [20222] Microsoft Windows 2000 runas.exe Named Pipe Spoofing Information Disclosure
21789| [20221] Microsoft Windows 2000 runas.exe Named Pipe Single Thread DoS
21790| [20220] Microsoft Windows 2000 runas.exe Cleartext Authentication Information Disclosure
21791| [20002] Microsoft Windows 2000 CHKDSK Fix Mode File ACL Failure
21792| [20001] Microsoft Windows 2000 Terminal Service Client Connection IP Logging Failure
21793| [20000] Microsoft Windows 2000 Domain Administrator Computer Lock Bypass
21794| [19999] Microsoft Windows 2000 FQDN Domain Login Password Expiry Bypass
21795| [19998] Microsoft Windows 2000 UPN Credentialed Login Group Policy Failure
21796| [19997] Microsoft Windows 2000 WideCharToMultiByte Function String Termination Issue
21797| [19996] Microsoft Windows 2000 Event ID 1704 Group Policy Failure
21798| [19995] Microsoft Windows 2000 SECEDIT Long Folder ACL Set Issue
21799| [19994] Microsoft Windows 2000 audit directory service access 565 Event Logging Failure
21800| [19993] Microsoft Windows 2000 LDAPS CA Trust Issue
21801| [19264] Microsoft Exchange Server 2003 Crafted IMAP4 Folder Listing Request DoS
21802| [17031] Microsoft ISA Server 2000 SecureNAT Traffic Saturation DoS
21803| [15343] Microsoft Windows Server 2003 Malformed HTTP Cookie Header CGI DoS
21804| [15341] Microsoft Windows Server 2003 SMB Redirector Processing DoS
21805| [15340] Microsoft Windows Server 2003 Terminal Service Client Print DoS
21806| [15338] Microsoft Windows Server 2003 Terminal Session Close DoS
21807| [15337] Microsoft Windows Server 2003 CreateProcessWithLogonW() Function Process Disclosure
21808| [15336] Microsoft Windows Server 2003 Shutdown.exe Shut Down Failure
21809| [15335] Microsoft Windows Server 2003 MIT Kerberos Realm Authentication Group Policy Failure
21810| [15334] Microsoft Windows Server 2003 Shared Folder Permission Weakness
21811| [15333] Microsoft Windows Server 2003 EFS File Copy LDAP Connection DoS
21812| [15332] Microsoft Windows Server 2003 Citrix Metaframe Encryption Policy Failure
21813| [15331] Microsoft Windows Server 2003 Home Folder Path Permission Inheritance Failure
21814| [14617] Microsoft Exchange Server 2003 Folder Handling DoS
21815| [14430] Microsoft Commerce Server 2000 Profile Service Affected API Overflow
21816| [13996] Microsoft Windows 2000 IKE Malformed Packet Saturation Remote DoS
21817| [13762] Microsoft 2000 Domain Controller Directory Service Restore Mode Blank Password
21818| [13761] Microsoft Exchange 2000 Malformed URL Request DoS
21819| [13475] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution Variant
21820| [13474] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution
21821| [13441] Microsoft Windows 2000 Security Interface Change Password Option Account Enumeration
21822| [13437] Microsoft Windows 2000 Debug Register Local Privilege Escalation
21823| [13424] Microsoft Windows 2000 Current Password Change Policy Bypass
21824| [13423] Microsoft Windows 2000 Terminal Server SYSVOL Share Connection Saturation Restriction Bypass
21825| [13415] Microsoft Windows 2000 System Root Folder Search Path Permission Weakness
21826| [13410] Microsoft Windows 2000 Accessibility Utility Manager Arbitrary Code Execution
21827| [11958] Microsoft Outlook 2003 Image Rendering Security Policy Bypass
21828| [11945] Microsoft Outlook 2002 IFRAME Tag Embedded URL
21829| [11944] Microsoft Outlook 2002 HREF Tag Embedded JavaScript Execution
21830| [11750] Microsoft Windows 2000 Message Queue Manager Queue Registration Request Overflow DoS
21831| [11712] Microsoft ISA Server 2000 H.323 Filter Overflow
21832| [10633] Microsoft Windows 2000 Protected Store Weak Encryption Default
21833| [9386] Microsoft Windows 2000 msinfo32.exe msinfo_file Variable Overflow
21834| [8243] Microsoft SMS Port 2702 DoS
21835| [7202] Microsoft PowerPoint 2000 File Loader Overflow
21836| [7179] Microsoft Windows 2000 Event Viewer Snap-in Overflow
21837| [6971] Microsoft ISA Server 2000 ICMP Rule Bypass During Startup
21838| [6970] Microsoft ISA Server 2000 Web Publishing Unencrypted Credentials Disclosure
21839| [6969] Microsoft ISA Server 2000 Invalid DNS Request DoS
21840| [6968] Microsoft ISA Server 2000 FTP Port Scan Bounce Weakness
21841| [6967] Microsoft ISA Server 2000 UDP Packet Winsock DoS
21842| [6965] Microsoft ISA Server 2000 SSL Packet DoS
21843| [6964] Microsoft ISA Server 2000 DNS Intrusion Detection Filter DoS
21844| [6515] Microsoft Windows 2000 Domain Expired Account Authentication
21845| [5179] Microsoft Windows 2000 microsoft-ds DoS
21846| [5171] Microsoft Word 2002 Mail Merge Tool Execute Arbitrary Script
21847| [4779] Microsoft Desktop Engine (MSDE) 2000 Stored Procedure SQL Injection
21848| [4778] Microsoft SQL Server 2000 Stored Procedure SQL Injection
21849| [4777] Microsoft Desktop Engine (MSDE) 2000 Database Consistency Checkers (DBCCs) Overflow
21850| [4776] Microsoft SQL Server 2000 Database Consistency Checkers (DBCCs) 2000 Overflow
21851| [4170] Microsoft Windows 2000 Server Media Services TCP Packet Handling Remote DoS
21852| [4168] Microsoft Outlook 2002 mailto URI Script Injection
21853| [3490] Microsoft Exchange 2003 OWA Mailbox Access Information Disclosure
21854| [2705] Microsoft Windows 2000 Windows Troubleshooter ActiveX Overflow
21855| [2655] Microsoft Windows Server 2003 Shell Folders Arbitrary File Access
21856| [2540] Microsoft Windows 2003 Server Buffer Overflow Protection Mechanism Bypass
21857| [2244] Microsoft Windows 2000 ShellExecute() API Let
21858| [2237] Microsoft Windows 2000 Active Directory Lsass.exe Overflow
21859| [1949] Symantec Norton Anti-Virus for Microsoft Exchange 2000 INBOX Path Information Disclosure
21860| [1764] Microsoft Windows 2000 Domain Controller DoS
21861| [1758] Microsoft Windows 2000 Network DDE Escalated Privileges
21862| [1755] Microsoft Windows 2000 RDP Malformed Packet Handling Remote DoS
21863| [1672] Microsoft Windows 2000 Telnet Session Timeout DoS
21864| [1633] Microsoft Windows 2000 System Monitor ActiveX LogFileName Parameter Validation Overflow
21865| [1621] Microsoft Indexing Services for Windows 2000 .htw XSS
21866| [1591] Microsoft Windows 2000 OEMPreinstall Installation Permission Weakness
21867| [1578] Microsoft Windows 2000 Simplified Chinese IME Local Privilege Escalation
21868| [1500] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow
21869| [1437] Microsoft Windows 2000 Telnet Server Binary Zero Parsing Remote DoS
21870| [1399] Microsoft Windows 2000 Windows Station Access
21871| [1328] Microsoft Office 2000 UA Control ActiveX (Ouactrl.ocx) Show Me Function Remote Code Execution
21872| [1297] Microsoft Windows 2000 Active Directory Object Attribute
21873| [1292] Microsoft Windows NT 4.0 / 2000 cmd.exe Buffer Overflow
21874| [773] Microsoft Windows 2000 Group Policy File Lock DoS
21875| [515] Microsoft Windows 2000 LDAP Server Arbitrary User Password Modification
21876| [454] Microsoft Windows 2000 NTLM Domain Account Lockout Policy Bypass
21877| [403] Microsoft Windows 2000 Still Image Service WM_USER Message Local Overflow
21878| [398] Microsoft Windows 2000 Malformed RPC Traffic Local Security Policy Corruption DoS
21879| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
21880| [69085] Microsoft Office 2010 RTF File Handling pFragments Buffer Overflow Arbitrary Code Execution
21881|_
21882139/tcp closed netbios-ssn conn-refused
21883443/tcp open ssl/http syn-ack Microsoft IIS httpd 7.5
21884| vulscan: VulDB - https://vuldb.com:
21885| [68404] Microsoft IIS 7.5 Error Message mypage cross site scripting
21886| [6924] Microsoft IIS 7.5 Log File Permission information disclosure
21887| [5623] Microsoft IIS up to 7.5 File Name Tilde privilege escalation
21888| [4234] Microsoft IIS 7.5 FTP Server Telnet IAC Character Heap-based denial of service
21889| [4179] Microsoft IIS 7.5 FastCGI Request Header memory corruption
21890| [98097] Microsoft IIS 7.0/7.5/8.0/8.5/10 /uncpath/ cross site scripting
21891| [6925] Microsoft IIS 7.0/7.5 FTP Command information disclosure
21892| [4484] Microsoft Windows Phone 7.5 SMS Service denial of service
21893|
21894| MITRE CVE - https://cve.mitre.org:
21895| [CVE-2012-2532] Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
21896| [CVE-2012-2531] Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
21897| [CVE-2010-3972] Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
21898| [CVE-2010-2730] Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
21899| [CVE-2010-1899] Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
21900| [CVE-2010-1256] Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
21901| [CVE-2013-0941] EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
21902| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
21903| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
21904| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
21905| [CVE-2009-2521] Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability."
21906| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
21907| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
21908| [CVE-2008-0074] Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
21909| [CVE-2007-2931] Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
21910| [CVE-2007-1278] Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
21911| [CVE-2006-5858] Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.
21912| [CVE-2006-5028] Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.
21913| [CVE-2006-0363] The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program. NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort. Perhaps this issue should not be included in CVE.
21914|
21915| SecurityFocus - https://www.securityfocus.com/bid/:
21916| [55569] Microsoft Windows Phone 7 SSL Certificate 'Common Name' Validation Security Bypass Vulnerability
21917| [28820] Microsoft Works 7 'WkImgSrv.dll' ActiveX Control Remote Code Execution Vulnerability
21918| [28498] Microsoft Internet Explorer 7 Popup Window Address Bar URI Spoofing Vulnerability
21919| [24483] Microsoft Internet Explorer 7 HTTP Authentication International Domain Name Spoofing Weakness
21920| [20728] Microsoft Internet Explorer 7 Popup Window Address Bar Spoofing Weakness
21921| [18736] Microsoft Internet Explorer 7 Denial of Service Vulnerability
21922| [5877] Microsoft SQL Server 7.0/2000 DBCC Buffer Overflow Vulnerability
21923| [4108] Microsoft Visual C++ 7/Visual C++.Net Buffer Overflow Protection Weakness
21924| [1714] Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability
21925| [1444] Microsoft SQL Server 7.0 Stored Procedure Vulnerability
21926| [1281] Microsoft SQL Server 7.0 System Administrator Password Disclosure Vulnerability
21927| [817] Microsoft SQL Server 7.0 NULL Data DoS Vulnerability
21928| [90065] Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0174 Local Privilege Escalation Vulnerability
21929| [86059] Microsoft IIS CVE-1999-0561 Remote Security Vulnerability
21930| [56440] Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability
21931| [56439] Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability
21932| [54276] Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability
21933| [54251] Microsoft IIS File Enumeration Weakness
21934| [53906] Microsoft IIS Authentication Bypass and Source Code Disclosure Vulnerabilities
21935| [45542] Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
21936| [43140] Microsoft IIS Repeated Parameter Request Denial of Service Vulnerability
21937| [43138] Microsoft IIS Request Header Buffer Overflow Vulnerability
21938| [41314] Microsoft IIS 5.1 Alternate Data Stream Authentication Bypass Vulnerability
21939| [40573] Microsoft IIS Authentication Remote Code Execution Vulnerability
21940| [37460] RETIRED: Microsoft IIS Malformed Local Filename Security Bypass Vulnerability
21941| [36276] RETIRED: Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
21942| [36273] Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
21943| [36189] Microsoft IIS FTPd NLST Remote Buffer Overflow Vulnerability
21944| [35232] Microsoft IIS 5.0 WebDAV Authentication Bypass Vulnerability
21945| [34993] Microsoft IIS Unicode Requests to WebDAV Multiple Authentication Bypass Vulnerabilities
21946| [33374] Microsoft IIS HTTP TRACK Method Information Disclosure Vulnerability
21947| [27101] Microsoft IIS File Change Notification Local Privilege Escalation Vulnerability
21948| [21865] Apache And Microsoft IIS Range Denial of Service Vulnerability
21949| [18858] Microsoft IIS ASP Remote Code Execution Vulnerability
21950| [14764] Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
21951| [10706] Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerability
21952| [9660] Microsoft IIS Unspecified Remote Denial Of Service Vulnerability
21953| [9313] Microsoft IIS Failure To Log Undocumented TRACK Requests Vulnerability
21954| [8244] Microsoft Multiple IIS 6.0 Web Admin Vulnerabilities
21955| [8092] Microsoft IIS _VTI_BOT Malicious WebBot Elevated Permissions Vulnerability
21956| [8035] Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerability
21957| [7735] Microsoft IIS WebDAV PROPFIND and SEARCH Method Denial of Service Vulnerability
21958| [7734] Microsoft IIS SSINC.DLL Server Side Includes Buffer Overflow Vulnerability
21959| [7733] Microsoft IIS ASP Header Denial Of Service Vulnerability
21960| [7731] Microsoft IIS Redirection Error Page Cross-Site Scripting Vulnerability
21961| [7492] Microsoft IIS User Existence Disclosure Vulnerability
21962| [6795] Microsoft IIS False Logging Weakness
21963| [6789] Microsoft IIS Malformed HTTP Get Request Denial Of Service Vulnerability
21964| [6072] Microsoft IIS Administrative Pages Cross Site Scripting Vulnerabilities
21965| [6071] Microsoft IIS Script Source Access File Upload Vulnerability
21966| [6070] Microsoft IIS WebDAV Denial Of Service Vulnerability
21967| [6069] Microsoft IIS Out Of Process Privilege Escalation Vulnerability
21968| [6068] Multiple Microsoft IIS Vulnerabilities
21969| [5907] Microsoft IIS Malformed HTTP HOST Header Field Denial Of Service Vulnerability
21970| [5900] Microsoft IIS IDC Extension Cross Site Scripting Vulnerability
21971| [5213] Microsoft IIS SMTP Service Encapsulated SMTP Address Vulnerability
21972| [4855] Microsoft IIS HTR Chunked Encoding Transfer Heap Overflow Vulnerability
21973| [4846] Microsoft IIS 5.0 Denial Of Service Vulnerability
21974| [4543] Microsoft IIS CodeBrws.ASP File Extension Check Out By One Vulnerability
21975| [4525] Microsoft IIS CodeBrws.ASP Source Code Disclosure Vulnerability
21976| [4490] Microsoft IIS Chunked Encoding Heap Overflow Variant Vulnerability
21977| [4487] Microsoft IIS HTTP Redirect Cross Site Scripting Vulnerability
21978| [4486] Microsoft IIS HTTP Error Page Cross Site Scripting Vulnerability
21979| [4485] Microsoft IIS Chunked Encoding Transfer Heap Overflow Vulnerability
21980| [4483] Microsoft IIS Help File Search Cross Site Scripting Vulnerability
21981| [4482] Microsoft IIS FTP Connection Status Request Denial of Service Vulnerability
21982| [4479] Microsoft IIS ISAPI Filter Access Violation Denial of Service Vulnerability
21983| [4478] Microsoft IIS ASP Server-Side Include Buffer Overflow Vulnerability
21984| [4476] Microsoft IIS HTTP Header Field Delimiter Buffer Overflow Vulnerability
21985| [4474] Microsoft IIS HTR ISAPI Extension Buffer Overflow Vulnerability
21986| [4235] Microsoft IIS Authentication Method Disclosure Vulnerability
21987| [4084] Microsoft IIS 5.1 Frontpage Server Extensions File Source Disclosure Vulnerability
21988| [4078] Microsoft IIS 5.1 Frontpage Extensions Path Disclosure Information Vulnerability
21989| [3667] Microsoft IIS False Content-Length Field DoS Vulnerability
21990| [3195] Microsoft IIS MIME Header Denial of Service Vulnerability
21991| [3194] Microsoft IIS WebDAV Invalid Request Denial of Service Vulnerability
21992| [3193] Microsoft IIS 5.0 In-Process Table Privelege Elevation Vulnerability
21993| [3191] Microsoft IIS 4.0 URL Redirection DoS Vulnerability
21994| [3190] Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability
21995| [2977] Microsoft IIS Device File Remote DoS Vulnerability
21996| [2973] Microsoft IIS Device File Local DoS Vulnerability
21997| [2909] Microsoft IIS Unicode .asp Source Code Disclosure Vulnerability
21998| [2719] Microsoft IIS Various Domain User Account Access Vulnerability
21999| [2717] Microsoft IIS FTP Denial of Service Vulnerability
22000| [2690] Microsoft IIS WebDAV 'Propfind' Server Restart Vulnerability
22001| [2674] Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability
22002| [2654] Microsoft IIS Long URL Denial of Service Vulnerability
22003| [2483] Microsoft IIS WebDAV 'Search' Denial of Service Vulnerability
22004| [2453] Microsoft IIS WebDAV Denial of Service Vulnerability
22005| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
22006| [2440] Microsoft IIS Multiple Invalid URL Request DoS Vulnerability
22007| [2313] Microsoft IIS File Fragment Disclosure Vulnerability
22008| [2280] Microsoft IIS 3.0/4.0 Upgrade BDIR.HTR Vulnerability
22009| [2218] Microsoft IIS '../..' Denial of Service Vulnerability
22010| [2144] Microsoft IIS Front Page Server Extension DoS Vulnerability
22011| [2110] Microsoft IIS 4.0 IISADMPWD Proxied Password Attack
22012| [2100] Microsoft IIS Far East Edition DBCS File Disclosure Vulnerability
22013| [2074] Microsoft IIS Appended Dot Script Source Disclosure Vulnerability
22014| [1912] Microsoft IIS Executable File Parsing Vulnerability
22015| [1911] Microsoft IIS 4.0 ISAPI Buffer Overflow Vulnerability
22016| [1832] Microsoft IIS 4.0/5.0 Session ID Cookie Disclosure Vulnerability
22017| [1819] Microsoft IIS 4.0 Pickup Directory DoS Vulnerability
22018| [1818] Microsoft IIS 3.0 newdsn.exe File Creation Vulnerability
22019| [1814] Microsoft IIS 3.0 %2e ASP Source Disclosure Vulnerability
22020| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
22021| [1806] Microsoft IIS and PWS Extended Unicode Directory Traversal Vulnerability
22022| [1756] Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability
22023| [1642] Microsoft NT 4.0 and IIS 4.0 Invalid URL Request DoS Vulnerability
22024| [1595] Microsoft IIS Cross Site Scripting .shtml Vulnerability
22025| [1594] Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability
22026| [1578] Microsoft IIS 5.0 Translate: f Source Disclosure Vulnerability
22027| [1565] Microsoft IIS 4.0/5.0 File Permission Canonicalization Vulnerability
22028| [1499] Microsoft IIS Internal IP Address Disclosure Vulnerability
22029| [1488] Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerability
22030| [1476] Microsoft IIS 3.0 .htr Missing Variable Denial of Service Vulnerability
22031| [1193] Microsoft IIS 4.0/5.0 Malformed Filename Request Vulnerability
22032| [1191] Microsoft IIS 4.0/5.0 Malformed .htr Request Vulnerability
22033| [1190] Microsoft IIS 4.0/5.0 Malformed File Extension DoS Vulnerability
22034| [1101] Microsoft IIS 4.0/5.0 Escaped Characters Vulnerability
22035| [1081] Microsoft IIS UNC Mapped Virtual Host Vulnerability
22036| [1066] Microsoft IIS 4.0 Chunked Transfer Encoding Buffer Overflow Vulnerability
22037| [1065] Microsoft IIS UNC Path Disclosure Vulnerability
22038| [886] Microsoft IIS Escape Character Parsing Vulnerability
22039| [882] Microsoft IIS Virtual Directory Naming Vulnerability
22040| [658] Microsoft IIS FTP NO ACCESS Read/Delete File Vulnerability
22041| [657] Microsoft IIS 4.0 Domain Resolution Vulnerability
22042| [582] Microsoft IIS And PWS 8.3 Directory Name Vulnerability
22043| [190] Microsoft VisualInterDev 6.0 - IIS4- Management With No Authentication Vulnerability
22044|
22045| IBM X-Force - https://exchange.xforce.ibmcloud.com:
22046| [78620] Microsoft Windows Phone 7 domain name spoofing
22047| [66401] Microsoft Windows kernel-mode driver (win32k.sys) variant 7 privilege escalation
22048| [29670] Microsoft Internet Explorer 7 is installed
22049| [76716] Microsoft IIS FTP denial of service
22050| [76664] Microsoft IIS tilde information disclosure
22051| [61513] Microsoft Internet Information Services (IIS) URL authentication bypass
22052| [58864] Microsoft Internet Information Services (IIS) authentication code execution
22053| [55031] Microsoft Internet Information Services (IIS) filenames security bypass
22054| [53034] Microsoft Internet Information Services (IIS) directory listings denial of service
22055| [52915] Microsoft Internet Information Services (IIS) FTP buffer overflow
22056| [52243] Microsoft IIS With .NET Path Disclosure
22057| [52241] Microsoft IIS servervariables_vbscript.asp Information Disclosure
22058| [52240] Microsoft IIS Sample Application Physical Path Disclosure
22059| [52233] Microsoft IIS With .NET Path Disclosure
22060| [50573] Microsoft Internet Information Services (IIS) WebDAV security bypass
22061| [45584] Microsoft IIS adsiis.dll ActiveX control denial of service
22062| [42899] Microsoft IIS HTTP request smuggling
22063| [39235] Microsoft IIS root folders file change notification privilege escalation
22064| [39230] Microsoft IIS HTML encoded ASP code execution
22065| [34434] Microsoft IIS Hit-highlighting security bypass
22066| [34418] Microsoft Internet Information Server (IIS) AUX/.aspx denial of service
22067| [32074] Microsoft IIS iissamples directory present
22068| [31644] Microsoft IIS Web server access.cnf file detected
22069| [31642] Microsoft IIS Web server service.cnf file detected
22070| [31638] Microsoft IIS Web server svcacl.cnf file detected
22071| [31630] Microsoft Internet Information Services IISAdmin directory detected
22072| [27854] Microsoft IIS ASP cache virtual server information disclosure
22073| [26796] Microsoft Internet Information Services (IIS) ASP buffer overflow
22074| [16872] Microsoft Internet Information Server (IIS) ActivePerl command execution
22075| [16656] Microsoft Internet Information Server (IIS) MS04-021 patch is not installed
22076| [16578] Microsoft Internet Information Server (IIS) redirect buffer overflow
22077| [14077] Microsoft Internet Information Server (IIS) fails to properly log HTTP TRACK requests
22078| [13116] Microsoft IIS MS03-018 patch is not installed on the system
22079| [13088] Microsoft IIS running RealSecure Server Sensor ISAPI plug-in denial of service
22080| [12687] Microsoft IIS Remote Administration Tool allows attacker to reset administrative password
22081| [12686] Microsoft IIS Remote Administration Tool could allow an attacker to obtain valid session IDs
22082| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
22083| [12100] Microsoft IIS long WebDAV requests containing XML denial of service
22084| [12099] Microsoft IIS Response.AddHeader denial of service
22085| [12098] Microsoft IIS Server-Side Include (SSI) long file name buffer overflow
22086| [12097] Microsoft IIS redirect error cross-site scripting
22087| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
22088| [11918] Microsoft IIS authentication mechanism could allow an attacker to determine valid user account names
22089| [11537] Microsoft IIS WebDAV service is running on the system
22090| [11533] Microsoft IIS WebDAV long request buffer overflow
22091| [10590] Microsoft Internet Information Server (IIS) MS02-062 patch
22092| [10504] Microsoft IIS script source access could be bypassed to upload .COM files
22093| [10503] Microsoft IIS WebDAV memory allocation denial of service
22094| [10502] Microsoft IIS out-of-process applications could be used to gain elevated privileges
22095| [10501] Microsoft IIS administrative Web pages cross-site scripting
22096| [10370] Microsoft IIS HTTP HOST header denial of service
22097| [10294] Microsoft IIS .idc extension error message cross-site scripting
22098| [10184] Microsoft IIS 5.0 resource utilization denial of service
22099| [9791] Microsoft Exchange IIS license exhaustion denial of service
22100| [9580] Microsoft IIS SMTP service encapsulated addresses could allow mail relaying
22101| [9327] Microsoft IIS ISAPI HTR chunked encoding heap buffer overflow
22102| [9123] Microsoft IIS 5.0 Log Files Directory Permission Exposure
22103| [8853] Microsoft IIS CodeBrws.asp sample script can be used to view arbitrary file source code
22104| [8811] Microsoft IIS MS02-018 patch is not installed on the system
22105| [8804] Microsoft IIS redirected URL error cross-site scripting
22106| [8803] Microsoft IIS HTTP error page cross-site scripting
22107| [8802] Microsoft IIS Help File search cross-site scripting
22108| [8801] Microsoft IIS FTP session status request denial of service
22109| [8800] Microsoft IIS FrontPage Server Extensions and ASP.NET ISAPI filter error handling denial of service
22110| [8799] Microsoft IIS HTR ISAPI ISM.DLL extension buffer overflow
22111| [8798] Microsoft IIS SSI safety check buffer overflow
22112| [8797] Microsoft IIS ASP HTTP header parsing buffer overflow
22113| [8796] Microsoft IIS ASP data transfer heap buffer overflow
22114| [8795] Microsoft IIS ASP chunked encoding heap buffer overflow
22115| [8388] Microsoft Windows NT Server with IIS 4.0 could allow users to bypass "
22116| [8385] Microsoft IIS specially-crafted request reveals IP address
22117| [8382] Microsoft IIS authentication error messages reveal configuration information
22118| [8191] Microsoft IIS 5.1 specially-crafted .cnf file request could reveal file contents
22119| [8174] Microsoft IIS 5.1 .cnf file request could reveal sensitive information
22120| [8056] Microsoft IIS is running on the system
22121| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
22122| [7691] Microsoft IIS HTTP GET request with false "
22123| [7640] Microsoft IIS is present on the system
22124| [7613] Microsoft IIS allows attackers to create fake log entries
22125| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
22126| [7559] Microsoft Index Server installed with IIS 4.0 could allow a local attacker to obtain physical path information
22127| [7558] Microsoft IIS FileSystemObject in showfile.asp could allow remote attackers to read arbitrary files
22128| [7202] Microsoft IIS 4.0/5.0 escaped percent found
22129| [7201] Microsoft IIS 4.0/5.0 malformed double percent sequence
22130| [7199] Microsoft IIS 4.0/5.0 malformed hex sequence
22131| [6995] Microsoft IIS %u Unicode wide character encoding detected
22132| [6994] Microsoft IIS %u Unicode encoding detected
22133| [6985] Microsoft IIS relative path usage in system file process table could allow elevated privileges
22134| [6984] Microsoft IIS specially-crafted SSI directives buffer overflow
22135| [6983] Microsoft IIS invalid MIME header denial of service
22136| [6982] Microsoft IIS WebDAV long invalid request denial of service
22137| [6981] Microsoft IIS URL redirection denial of service
22138| [6963] Microsoft IIS HTTPS connection could reveal internal IP address
22139| [6858] Microsoft IIS cross-site scripting patch denial of service
22140| [6800] Microsoft IIS device file request can crash the ASP processor
22141| [6742] Microsoft IIS reveals .asp source code with Unicode extensions
22142| [6705] Microsoft IIS idq.dll ISAPI extension buffer overflow
22143| [6549] Microsoft IIS WebDAV lock method memory leak can cause a denial of service
22144| [6545] Microsoft IIS FTP weak domain authentication
22145| [6535] Microsoft IIS FTP wildcard processing function denial of service
22146| [6534] Microsoft IIS URL decoding error could allow remote code execution
22147| [6485] Microsoft IIS 5.0 ISAPI Internet Printing Protocol extension buffer overflow
22148| [6205] Microsoft IIS WebDAV denial of service
22149| [6171] Microsoft IIS and Exchange malformed URL request denial of service
22150| [6029] Microsoft IIS CmdAsp could allow remote attackers to gain privileges
22151| [5903] Microsoft IIS 5.0 allows the viewing of files through malformed URL
22152| [5823] Microsoft IIS Web form submission denial of service
22153| [5729] Microsoft IIS Far East editions file disclosure
22154| [5510] Microsoft Internet Information Service (IIS) ISAPI buffer overflow
22155| [5470] Microsoft Internet Information Service (IIS) invalid executable filename passing
22156| [5441] Microsoft IIS .htw cross-site scripting
22157| [5377] Microsoft IIS Unicode translation error allows remote command execution
22158| [5335] Microsoft IIS Index Server directory traversal
22159| [5202] Microsoft IIS invalid URL allows attackers to crash service
22160| [5156] Microsoft IIS Cross-Site Scripting
22161| [5106] Microsoft IIS 4.0 discloses internal IP addresses
22162| [5104] Microsoft IIS allows remote attackers to obtain source code fragments using +.htr
22163| [5071] Microsoft IIS canonicalization error applies incorrect permissions to certain types of files
22164| [4960] Microsoft IIS on Win2kPro security button restriction
22165| [4951] Microsoft IIS absent directory browser argument
22166| [4790] Microsoft IIS \mailroot\pickup directory denial of service
22167| [4757] Microsoft IIS server-side includes (SSI) #exec directive
22168| [4558] Microsoft IIS is installed on a domain controller
22169| [4448] Microsoft IIS ISM.DLL could allow users to read file contents
22170| [4430] Microsoft IIS malformed URL extension data denial of service
22171| [4392] Microsoft IIS could reveal source code of ASP files in some virtual directories
22172| [4302] Microsoft IIS malformed AuthChangUrl request can cause the server to stop servicing requests
22173| [4279] Microsoft IIS escape characters denial of service
22174| [4204] Microsoft IIS virtual UNC share source read
22175| [4183] Microsoft IIS could disclose path of network shares
22176| [4117] Microsoft IIS chunked encoding post or put denial of service
22177| [3986] Microsoft IIS ASP could be used to gain sensitive information
22178| [3892] Microsoft IIS Long URL with excessive forward slashes passed to ASP causes an access violation
22179| [3306] Microsoft IIS could allow remote access to servers marked as Restrict Access
22180| [3115] Microsoft IIS and SiteServer denial of service caused by malformed HTTP requests
22181| [2675] Microsoft IIS 4.0 samples installation on Web server
22182| [2673] Microsoft IIS samples installation on Web server
22183| [2671] Microsoft IIS Passive FTP patch not applied (asp.dll out of date)
22184| [2670] Microsoft IIS Passive FTP patch not applied (wam.dll out of date)
22185| [2669] Microsoft IIS Passive FTP patch not applied (w3svc.dll out of date)
22186| [2668] Microsoft IIS Passive FTP patch not applied (infocomm.dll out of date)
22187| [2662] Microsoft IIS CGI overflow
22188| [2412] Microsoft IIS account is member of Domain Users
22189| [2381] Microsoft IIS and SiteServer Showcode.asp sample file allows remote file viewing
22190| [2302] Microsoft IIS using double-byte code pages could allow remote attackers to retrieve source code
22191| [2282] Microsoft IIS bdir.htr allows remote traversal of directory structure
22192| [2281] Microsoft IIS buffer overflow in HTR requests can allow remote code execution
22193| [2229] Microsoft IIS ExAir sample site denial of service
22194| [2185] Microsoft IIS and Site Server sample programs can be used to remotely view files
22195| [1823] Microsoft IIS long GET request denial of service
22196| [1735] Microsoft IIS with Visual InterDev no authentication
22197| [1656] Microsoft IIS 4.0 allows user to avoid HTTP request logging
22198| [1654] Microsoft IIS remote FTP buffer overflow
22199| [1638] Microsoft IIS crashes processing some GET commands
22200| [1530] Microsoft IIS 3.0 newdsn.exe sample application allows remote creation of arbitrary files
22201| [1368] Microsoft IIS 4.0 allows file execution in the Web site directory
22202| [1273] Microsoft IIS special characters allowed in shell
22203| [1272] Microsoft IIS CGI scripts run as system
22204| [1271] Microsoft IIS version 2 installed
22205| [1270] Microsoft IIS incorrect permissions on restricted item
22206| [1269] Microsoft IIS incorrect Web permissions
22207| [1268] Microsoft IIS SSI #exec enabled
22208| [1216] Microsoft IIS SSL patch not applied
22209| [1215] Microsoft IIS Passive FTP patch not applied
22210| [1212] Microsoft IIS unauthorized ODBC data access with RDS
22211| [1125] Microsoft IIS ASP DATA issue could reveal source code
22212| [949] Microsoft IIS server script debugging enabled
22213| [948] Microsoft IIS samples installed on Web server
22214| [936] Microsoft IIS NTFS insecure permissions
22215| [935] Microsoft IIS executable paths
22216| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
22217| [336] Microsoft IIS ASP dot bug
22218| [256] Microsoft IIS can be remotely crashed by excessively long client requests
22219| [7] Microsoft IIS ASP source visible
22220|
22221| Exploit-DB - https://www.exploit-db.com:
22222| [19033] microsoft iis 6.0 and 7.5 - Multiple Vulnerabilities
22223| [17476] Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]
22224|
22225| OpenVAS (Nessus) - http://www.openvas.org:
22226| [902914] Microsoft IIS GET Request Denial of Service Vulnerability
22227| [902796] Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability
22228| [902694] Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)
22229| [901120] Microsoft IIS Authentication Remote Code Execution Vulnerability (982666)
22230| [900944] Microsoft IIS FTP Server 'ls' Command DOS Vulnerability
22231| [900874] Microsoft IIS FTP Service Remote Code Execution Vulnerabilities (975254)
22232| [900711] Microsoft IIS WebDAV Remote Authentication Bypass Vulnerability
22233| [900567] Microsoft IIS Security Bypass Vulnerability (970483)
22234| [802806] Microsoft IIS Default Welcome Page Information Disclosure Vulnerability
22235| [801669] Microsoft Windows IIS FTP Server DOS Vulnerability
22236| [801520] Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability
22237| [100952] Microsoft IIS FTPd NLST stack overflow
22238| [11443] Microsoft IIS UNC Mapped Virtual Host Vulnerability
22239| [10680] Test Microsoft IIS Source Fragment Disclosure
22240| [903041] Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)
22241| [903037] Microsoft JScript and VBScript Engines Remote Code Execution Vulnerability (2706045)
22242| [903036] Microsoft Windows Networking Components Remote Code Execution Vulnerabilities (2733594)
22243| [903035] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)
22244| [903033] Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2718523)
22245| [903026] Microsoft Office Remote Code Execution Vulnerabilities (2663830)
22246| [903017] Microsoft Office Remote Code Execution Vulnerability (2639185)
22247| [903000] Microsoft Expression Design Remote Code Execution Vulnerability (2651018)
22248| [902936] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)
22249| [902934] Microsoft .NET Framework Remote Code Execution Vulnerability (2745030)
22250| [902933] Microsoft Windows Shell Remote Code Execution Vulnerabilities (2727528)
22251| [902932] Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities (2761451)
22252| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
22253| [902930] Microsoft Office Remote Code Execution Vulnerabilities (2720184)
22254| [902923] Microsoft Internet Explorer Multiple Vulnerabilities (2722913)
22255| [902922] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2723135)
22256| [902921] Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)
22257| [902920] Microsoft Office Remote Code Execution Vulnerability (2731879)
22258| [902919] Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)
22259| [902916] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2711167)
22260| [902913] Microsoft Office Remote Code Execution Vulnerabilities-2663830 (Mac OS X)
22261| [902912] Microsoft Office Word Remote Code Execution Vulnerability-2680352 (Mac OS X)
22262| [902911] Microsoft Office Word Remote Code Execution Vulnerability (2680352)
22263| [902910] Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)
22264| [902909] Microsoft Windows Service Pack Missing Multiple Vulnerabilities
22265| [902908] Microsoft Windows DirectWrite Denial of Service Vulnerability (2665364)
22266| [902906] Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)
22267| [902900] Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
22268| [902846] Microsoft Windows TLS Protocol Information Disclosure Vulnerability (2655992)
22269| [902845] Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)
22270| [902842] Microsoft Lync Remote Code Execution Vulnerabilities (2707956)
22271| [902841] Microsoft .NET Framework Remote Code Execution Vulnerability (2706726)
22272| [902839] Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability
22273| [902833] Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
22274| [902832] MS Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
22275| [902829] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2664258)
22276| [902828] Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)
22277| [902818] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
22278| [902817] Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)
22279| [902811] Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities (2651026)
22280| [902807] Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
22281| [902798] Microsoft SMB Signing Enabled and Not Required At Server
22282| [902797] Microsoft SMB Signing Information Disclosure Vulnerability
22283| [902785] Microsoft AntiXSS Library Information Disclosure Vulnerability (2607664)
22284| [902784] Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)
22285| [902783] Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)
22286| [902782] MicroSoft Windows Server Service Remote Code Execution Vulnerability (921883)
22287| [902766] Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)
22288| [902746] Microsoft Active Accessibility Remote Code Execution Vulnerability (2623699)
22289| [902727] Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)
22290| [902708] Microsoft Remote Desktop Protocol Denial of Service Vulnerability (2570222)
22291| [902696] Microsoft Internet Explorer Multiple Vulnerabilities (2761465)
22292| [902693] Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)
22293| [902692] Microsoft Office Excel ReadAV Arbitrary Code Execution Vulnerability
22294| [902689] Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
22295| [902688] Microsoft System Center Configuration Manager XSS Vulnerability (2741528)
22296| [902687] Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)
22297| [902686] Microsoft Internet Explorer Multiple Vulnerabilities (2719177)
22298| [902683] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2685939)
22299| [902682] Microsoft Internet Explorer Multiple Vulnerabilities (2699988)
22300| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
22301| [902677] Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)
22302| [902676] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (2688338)
22303| [902670] Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
22304| [902663] Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)
22305| [902662] MicroSoft SMB Server Trans2 Request Remote Code Execution Vulnerability
22306| [902660] Microsoft SMB Transaction Parsing Remote Code Execution Vulnerability
22307| [902658] Microsoft RDP Server Private Key Information Disclosure Vulnerability
22308| [902649] Microsoft Internet Explorer Multiple Vulnerabilities (2647516)
22309| [902642] Microsoft Internet Explorer Multiple Vulnerabilities (2618444)
22310| [902626] Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)
22311| [902625] Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
22312| [902613] Microsoft Internet Explorer Multiple Vulnerabilities (2559049)
22313| [902609] Microsoft Windows CSRSS Privilege Escalation Vulnerabilities (2507938)
22314| [902598] Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)
22315| [902597] Microsoft Windows Media Remote Code Execution Vulnerability (2648048)
22316| [902596] Microsoft Windows OLE Remote Code Execution Vulnerability (2624667)
22317| [902588] Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability
22318| [902581] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2604930)
22319| [902580] Microsoft Host Integration Server Denial of Service Vulnerabilities (2607670)
22320| [902567] Microsoft Office Remote Code Execution Vulnerabilites (2587634)
22321| [902566] Microsoft Windows WINS Local Privilege Escalation Vulnerability (2571621)
22322| [902552] Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)
22323| [902551] Microsoft .NET Framework Information Disclosure Vulnerability (2567951)
22324| [902523] Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)
22325| [902522] Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)
22326| [902518] Microsoft .NET Framework Security Bypass Vulnerability
22327| [902516] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
22328| [902502] Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)
22329| [902501] Microsoft JScript and VBScript Scripting Engines Remote Code Execution Vulnerability (2514666)
22330| [902496] Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
22331| [902495] Microsoft Office Remote Code Execution Vulnerability (2590602)
22332| [902494] Microsoft Office Excel Remote Code Execution Vulnerability (2640241)
22333| [902493] Microsoft Publisher Remote Code Execution Vulnerabilities (2607702)
22334| [902492] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)
22335| [902487] Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
22336| [902484] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)
22337| [902464] Microsoft Visio Remote Code Execution Vulnerabilities (2560978)
22338| [902463] Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)
22339| [902455] Microsoft Visio Remote Code Execution Vulnerability (2560847)
22340| [902445] Microsoft XML Editor Information Disclosure Vulnerability (2543893)
22341| [902443] Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
22342| [902440] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)
22343| [902430] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)
22344| [902425] Microsoft Windows SMB Accessible Shares
22345| [902423] Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)
22346| [902411] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)
22347| [902410] Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)
22348| [902403] Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability
22349| [902395] Microsoft Bluetooth Stack Remote Code Execution Vulnerability (2566220)
22350| [902378] Microsoft Office Excel Remote Code Execution Vulnerabilities (2537146)
22351| [902377] Microsoft Windows OLE Automation Remote Code Execution Vulnerability (2476490)
22352| [902365] Microsoft GDI+ Remote Code Execution Vulnerability (2489979)
22353| [902364] Microsoft Office Remote Code Execution Vulnerabilites (2489293)
22354| [902351] Microsoft Groove Remote Code Execution Vulnerability (2494047)
22355| [902337] Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)
22356| [902336] Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)
22357| [902325] Microsoft Internet Explorer 'CSS Import Rule' Use-after-free Vulnerability
22358| [902324] Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
22359| [902319] Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)
22360| [902290] Microsoft Windows Active Directory SPN Denial of Service (2478953)
22361| [902289] Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)
22362| [902288] Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)
22363| [902287] Microsoft Visio Remote Code Execution Vulnerabilities (2451879)
22364| [902285] Microsoft Internet Explorer Information Disclosure Vulnerability (2501696)
22365| [902281] Microsoft Windows Data Access Components Remote Code Execution Vulnerabilities (2451910)
22366| [902280] Microsoft Windows BranchCache Remote Code Execution Vulnerability (2385678)
22367| [902277] Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)
22368| [902276] Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)
22369| [902274] Microsoft Publisher Remote Code Execution Vulnerability (2292970)
22370| [902269] Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)
22371| [902265] Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)
22372| [902264] Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)
22373| [902263] Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)
22374| [902262] Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)
22375| [902256] Microsoft Windows win32k.sys Driver 'CreateDIBPalette()' BOF Vulnerability
22376| [902255] Microsoft Visual Studio Insecure Library Loading Vulnerability
22377| [902254] Microsoft Office Products Insecure Library Loading Vulnerability
22378| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
22379| [902246] Microsoft Internet Explorer 'toStaticHTML()' Cross Site Scripting Vulnerability
22380| [902243] Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)
22381| [902232] Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (978886)
22382| [902231] Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
22383| [902230] Microsoft .NET Common Language Runtime Remote Code Execution Vulnerability (2265906)
22384| [902229] Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)
22385| [902228] Microsoft Office Word Remote Code Execution Vulnerabilities (2269638)
22386| [902227] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
22387| [902226] Microsoft Windows Shell Remote Code Execution Vulnerability (2286198)
22388| [902217] Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability (978212)
22389| [902210] Microsoft IE cross-domain IFRAME gadgets keystrokes steal Vulnerability
22390| [902193] Microsoft .NET Framework XML HMAC Truncation Vulnerability (981343)
22391| [902192] Microsoft Office COM Validation Remote Code Execution Vulnerability (983235)
22392| [902191] Microsoft Internet Explorer Multiple Vulnerabilities (982381)
22393| [902183] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability
22394| [902178] Microsoft Visual Basic Remote Code Execution Vulnerability (978213)
22395| [902176] Microsoft SharePoint '_layouts/help.aspx' Cross Site Scripting Vulnerability
22396| [902166] Microsoft Internet Explorer 'neutering' Mechanism XSS Vulnerability
22397| [902159] Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability (980232)
22398| [902158] Microsoft Office Publisher Remote Code Execution Vulnerability (981160)
22399| [902157] Microsoft 'ISATAP' Component Spoofing Vulnerability (978338)
22400| [902156] Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)
22401| [902155] Microsoft Internet Explorer Multiple Vulnerabilities (980182)
22402| [902151] Microsoft Internet Explorer Denial of Service Vulnerability - Mar10
22403| [902133] Microsoft Office Excel Multiple Vulnerabilities (980150)
22404| [902117] Microsoft DirectShow Remote Code Execution Vulnerability (977935)
22405| [902116] Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)
22406| [902115] Microsoft Kerberos Denial of Service Vulnerability (977290)
22407| [902114] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)
22408| [902112] Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)
22409| [902095] Microsoft Office Excel Remote Code Execution Vulnerability (2269707)
22410| [902094] Microsoft Windows Kernel Mode Drivers Privilege Elevation Vulnerabilities (2160329)
22411| [902093] Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)
22412| [902080] Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)
22413| [902069] Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
22414| [902068] Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
22415| [902067] Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (979559)
22416| [902039] Microsoft Visio Remote Code Execution Vulnerabilities (980094)
22417| [902038] Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)
22418| [902033] Microsoft Windows '.ani' file Denial of Service vulnerability
22419| [902015] Microsoft Paint Remote Code Execution Vulnerability (978706)
22420| [901305] Microsoft Windows IP-HTTPS Component Security Feature Bypass Vulnerability (2765809)
22421| [901304] Microsoft Windows File Handling Component Remote Code Execution Vulnerability (2758857)
22422| [901301] Microsoft Windows Kerberos Denial of Service Vulnerability (2743555)
22423| [901212] Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)
22424| [901211] Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)
22425| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
22426| [901209] Microsoft Windows Media Center Remote Code Execution Vulnerabilities (2604926)
22427| [901208] Microsoft Internet Explorer Multiple Vulnerabilities (2586448)
22428| [901205] Microsoft Windows Components Remote Code Execution Vulnerabilities (2570947)
22429| [901193] Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
22430| [901183] Internet Information Services (IIS) FTP Service Remote Code Execution Vulnerability (2489256)
22431| [901180] Microsoft Internet Explorer Multiple Vulnerabilities (2482017)
22432| [901169] Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
22433| [901166] Microsoft Office Remote Code Execution Vulnerabilites (2423930)
22434| [901164] Microsoft Windows SChannel Denial of Service Vulnerability (2207566)
22435| [901163] Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))
22436| [901162] Microsoft Internet Explorer Multiple Vulnerabilities (2360131)
22437| [901161] Microsoft ASP.NET Information Disclosure Vulnerability (2418042)
22438| [901151] Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)
22439| [901150] Microsoft Windows Print Spooler Service Remote Code Execution Vulnerability(2347290)
22440| [901140] Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)
22441| [901139] Microsoft Internet Explorer Multiple Vulnerabilities (2183461)
22442| [901119] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)
22443| [901102] Microsoft Windows Media Services Remote Code Execution Vulnerability (980858)
22444| [901097] Microsoft Internet Explorer Multiple Vulnerabilities (978207)
22445| [901095] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)
22446| [901069] Microsoft Office Project Remote Code Execution Vulnerability (967183)
22447| [901065] Microsoft Windows IAS Remote Code Execution Vulnerability (974318)
22448| [901064] Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)
22449| [901063] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
22450| [901048] Microsoft Windows Active Directory Denial of Service Vulnerability (973309)
22451| [901041] Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
22452| [901012] Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)
22453| [900973] Microsoft Office Word Remote Code Execution Vulnerability (976307)
22454| [900965] Microsoft Windows SMB2 Negotiation Protocol Remote Code Execution Vulnerability
22455| [900964] Microsoft .NET Common Language Runtime Code Execution Vulnerability (974378)
22456| [900963] Microsoft Windows Kernel Privilege Escalation Vulnerability (971486)
22457| [900957] Microsoft Windows Patterns & Practices EntLib DOS Vulnerability
22458| [900956] Microsoft Windows Patterns & Practices EntLib Version Detection
22459| [900929] Microsoft JScript Scripting Engine Remote Code Execution Vulnerability (971961)
22460| [900908] Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)
22461| [900907] Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)
22462| [900898] Microsoft Internet Explorer 'XSS Filter' XSS Vulnerabilities - Nov09
22463| [900897] Microsoft Internet Explorer PDF Information Disclosure Vulnerability - Nov09
22464| [900891] Microsoft Internet Denial Of Service Vulnerability - Nov09
22465| [900887] Microsoft Office Excel Multiple Vulnerabilities (972652)
22466| [900886] Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities (969947)
22467| [900881] Microsoft Windows Indexing Service ActiveX Vulnerability (969059)
22468| [900880] Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)
22469| [900879] Microsoft Windows Media Player ASF Heap Overflow Vulnerability (974112)
22470| [900878] Microsoft Products GDI Plus Code Execution Vulnerabilities (957488)
22471| [900877] Microsoft Windows LSASS Denial of Service Vulnerability (975467)
22472| [900876] Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)
22473| [900873] Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)
22474| [900863] Microsoft Internet Explorer 'window.print()' DOS Vulnerability
22475| [900838] Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
22476| [900837] Microsoft DHTML Editing Component ActiveX Remote Code Execution Vulnerability (956844)
22477| [900836] Microsoft Internet Explorer Address Bar Spoofing Vulnerability
22478| [900826] Microsoft Internet Explorer 'location.hash' DOS Vulnerability
22479| [900814] Microsoft Windows WINS Remote Code Execution Vulnerability (969883)
22480| [900813] Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)
22481| [900809] Microsoft Visual Studio ATL Remote Code Execution Vulnerability (969706)
22482| [900808] Microsoft Visual Products Version Detection
22483| [900757] Microsoft Windows Media Player '.AVI' File DOS Vulnerability
22484| [900741] Microsoft Internet Explorer Information Disclosure Vulnerability Feb10
22485| [900740] Microsoft Windows Kernel Could Allow Elevation of Privilege (977165)
22486| [900690] Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)
22487| [900689] Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371))
22488| [900670] Microsoft Office Excel Remote Code Execution Vulnerabilities (969462)
22489| [900589] Microsoft ISA Server Privilege Escalation Vulnerability (970953)
22490| [900588] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
22491| [900568] Microsoft Windows Search Script Execution Vulnerability (963093)
22492| [900566] Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)
22493| [900476] Microsoft Excel Remote Code Execution Vulnerabilities (968557)
22494| [900465] Microsoft Windows DNS Memory Corruption Vulnerability - Mar09
22495| [900461] Microsoft MSN Live Messneger Denial of Service Vulnerability
22496| [900445] Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
22497| [900404] Microsoft Windows RTCP Unspecified Remote DoS Vulnerability
22498| [900400] Microsoft Internet Explorer Unicode String DoS Vulnerability
22499| [900391] Microsoft Office Publisher Remote Code Execution Vulnerability (969516)
22500| [900366] Microsoft Internet Explorer Web Script Execution Vulnerabilites
22501| [900365] Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
22502| [900337] Microsoft Internet Explorer Denial of Service Vulnerability - Apr09
22503| [900336] Microsoft Windows Media Player MID File Integer Overflow Vulnerability
22504| [900328] Microsoft Internet Explorer Remote Code Execution Vulnerability (963027)
22505| [900314] Microsoft XML Core Service Information Disclosure Vulnerability
22506| [900303] Microsoft Internet Explorer HTML Form Value DoS Vulnerability
22507| [900299] Microsoft Report Viewer Information Disclosure Vulnerability (2578230)
22508| [900297] Microsoft Windows Kernel Denial of Service Vulnerability (2556532)
22509| [900296] Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)
22510| [900295] Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)
22511| [900294] Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)
22512| [900288] Microsoft Distributed File System Remote Code Execution Vulnerabilities (2535512)
22513| [900287] Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)
22514| [900285] Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)
22515| [900282] Microsoft DNS Resolution Remote Code Execution Vulnerability (2509553)
22516| [900281] Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)
22517| [900280] Microsoft Windows SMB Server Remote Code Execution Vulnerability (2508429)
22518| [900279] Microsoft SMB Client Remote Code Execution Vulnerabilities (2511455)
22519| [900278] Microsoft Internet Explorer Multiple Vulnerabilities (2497640)
22520| [900273] Microsoft Remote Desktop Client Remote Code Execution Vulnerability (2508062)
22521| [900267] Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)
22522| [900266] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (2424434)
22523| [900263] Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)
22524| [900262] Microsoft Internet Explorer Multiple Vulnerabilities (2416400)
22525| [900261] Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386)
22526| [900248] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (981997)
22527| [900246] Microsoft Media Decompression Remote Code Execution Vulnerability (979902)
22528| [900245] Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)
22529| [900241] Microsoft Outlook Express and Windows Mail Remote Code Execution Vulnerability (978542)
22530| [900240] Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)
22531| [900237] Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)
22532| [900236] Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)
22533| [900235] Microsoft Windows Media Player Could Allow Remote Code Execution (979402)
22534| [900232] Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (975561)
22535| [900230] Microsoft Windows SMB Server Multiple Vulnerabilities (971468)
22536| [900229] Microsoft Data Analyzer ActiveX Control Vulnerability (978262)
22537| [900228] Microsoft Office (MSO) Remote Code Execution Vulnerability (978214)
22538| [900227] Microsoft Windows Shell Handler Could Allow Remote Code Execution Vulnerability (975713)
22539| [900223] Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)
22540| [900192] Microsoft Internet Explorer Information Disclosure Vulnerability
22541| [900187] Microsoft Internet Explorer Argument Injection Vulnerability
22542| [900178] Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability
22543| [900173] Microsoft Windows Media Player Version Detection
22544| [900172] Microsoft Windows Media Player 'MIDI' or 'DAT' File DoS Vulnerability
22545| [900170] Microsoft iExplorer '&NBSP
22546| [900131] Microsoft Internet Explorer Denial of Service Vulnerability
22547| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
22548| [900120] Microsoft Organization Chart Remote Code Execution Vulnerability
22549| [900108] Microsoft Windows NSlookup.exe Remote Code Execution Vulnerability
22550| [900097] Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution
22551| [900095] Microsoft ISA Server and Forefront Threat Management Gateway DoS Vulnerability (961759)
22552| [900093] Microsoft DirectShow Remote Code Execution Vulnerability (961373)
22553| [900080] Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
22554| [900079] Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)
22555| [900064] Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)
22556| [900063] Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173)
22557| [900061] Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070)
22558| [900058] Microsoft XML Core Services Remote Code Execution Vulnerability (955218)
22559| [900048] Microsoft Excel Remote Code Execution Vulnerability (956416)
22560| [900047] Microsoft Office nformation Disclosure Vulnerability (957699)
22561| [900046] Microsoft Office Remote Code Execution Vulnerabilities (955047)
22562| [900033] Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities (949785)
22563| [900029] Microsoft Office Filters Could Allow Remote Code Execution Vulnerabilities (924090)
22564| [900028] Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)
22565| [900025] Microsoft Office Version Detection
22566| [900006] Microsoft Word Could Allow Remote Code Execution Vulnerability
22567| [900004] Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
22568| [855384] Solaris Update for snmp/mibiisa 108870-36
22569| [855273] Solaris Update for snmp/mibiisa 108869-36
22570| [803028] Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
22571| [803007] Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)
22572| [802912] Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
22573| [802888] Microsoft Windows Media Service Handshake Sequence DoS Vulnerability
22574| [802886] Microsoft Sidebar and Gadgets Remote Code Execution Vulnerability (2719662)
22575| [802864] Microsoft XML Core Services Remote Code Execution Vulnerability (2719615)
22576| [802774] Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)
22577| [802726] Microsoft SMB Signing Disabled
22578| [802708] Microsoft Internet Explorer Code Execution and DoS Vulnerabilities
22579| [802634] Microsoft Windows Unauthorized Digital Certificates Spoofing Vulnerability (2718704)
22580| [802500] Microsoft Windows TrueType Font Parsing Privilege Elevation Vulnerability
22581| [802468] Compatibility Issues Affecting Signed Microsoft Binaries (2749655)
22582| [802462] Microsoft ActiveSync Null Pointer Dereference Denial Of Service Vulnerability
22583| [802426] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)
22584| [802383] Microsoft Windows Color Control Panel Privilege Escalation Vulnerability
22585| [802379] Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability
22586| [802287] Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability
22587| [802286] Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities
22588| [802260] Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
22589| [802203] Microsoft Internet Explorer Cookie Hijacking Vulnerability
22590| [802202] Microsoft Internet Explorer Cookie Hijacking Vulnerability
22591| [802140] Microsoft Explorer HTTPS Sessions Multiple Vulnerabilities (Windows)
22592| [802136] Microsoft Windows Insecure Library Loading Vulnerability (2269637)
22593| [801991] Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability
22594| [801966] Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)
22595| [801935] Microsoft Silverlight Multiple Memory Leak Vulnerabilities
22596| [801934] Microsoft Silverlight Version Detection
22597| [801914] Microsoft Windows IPv4 Default Configuration Security Bypass Vulnerability
22598| [801876] Microsoft Internet Explorer 'msxml.dll' Information Disclosure Vulnerability
22599| [801831] Microsoft Internet Explorer Incorrect GUI Display Vulnerability
22600| [801830] Microsoft Internet Explorer 'ReleaseInterface()' Remote Code Execution Vulnerability
22601| [801725] Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)
22602| [801721] Microsoft Active Directory Denial of Service Vulnerability (953235)
22603| [801719] Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)
22604| [801718] Microsoft Windows Vista Information Disclosure Vulnerability (931213)
22605| [801717] Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability
22606| [801716] Microsoft Outlook Express/Windows Mail MHTML URI Handler Information Disclosure Vulnerability (929123)
22607| [801715] Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
22608| [801713] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
22609| [801707] Microsoft Internet Explorer mshtml.dll Remote Memory Corruption Vulnerability (942615)
22610| [801706] Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)
22611| [801705] Microsoft Windows TCP/IP Denial of Service Vulnerability (946456)
22612| [801704] Microsoft Internet Information Services Privilege Elevation Vulnerability (942831)
22613| [801702] Microsoft Internet Explorer HTML Rendering Remote Memory Corruption Vulnerability (944533)
22614| [801701] Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)
22615| [801677] Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerabilities
22616| [801606] Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability
22617| [801598] Microsoft Windows2k3 Active Directory 'BROWSER ELECTION' Buffer Overflow Vulnerability
22618| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
22619| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
22620| [801595] Microsoft Office Excel Axis and Art Object Parsing Remote Code Execution Vulnerabilities
22621| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
22622| [801580] Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities
22623| [801527] Microsoft Windows 32-bit Platforms Unspecified vulnerabilities
22624| [801491] Microsoft 'hxvz.dll' ActiveX Control Memory Corruption Vulnerability (948881)
22625| [801489] Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)
22626| [801488] Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability (947864)
22627| [801487] Microsoft Windows Kernel Usermode Callback Local Privilege Elevation Vulnerability (941693)
22628| [801486] Microsoft Windows Speech Components Voice Recognition Command Execution Vulnerability (950760)
22629| [801485] Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)
22630| [801484] Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)
22631| [801483] Microsoft Windows Search Remote Code Execution Vulnerability (959349)
22632| [801482] Microsoft Windows ASP.NET Denial of Service Vulnerability(970957)
22633| [801481] Microsoft Wireless LAN AutoConfig Service Remote Code Execution Vulnerability (970710)
22634| [801480] Microsoft Web Services on Devices API Remote Code Execution Vulnerability (973565)
22635| [801479] Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)
22636| [801457] Microsoft Windows Address Book Insecure Library Loading Vulnerability
22637| [801456] Microsoft Windows Progman Group Converter Insecure Library Loading Vulnerability
22638| [801349] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability (June-10)
22639| [801348] Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability -june 10
22640| [801345] Microsoft .NET 'ASP.NET' Cross-Site Scripting vulnerability
22641| [801344] Microsoft .NET '__VIEWSTATE' Cross-Site Scripting vulnerability
22642| [801342] Microsoft ASP.NET Cross-Site Scripting vulnerability
22643| [801333] Microsoft Windows Kernel 'win32k.sys' Multiple DOS Vulnerabilities
22644| [801330] Microsoft Internet Explorer Cross Site Data Leakage Vulnerability
22645| [801109] Microsoft IE CA SSL Certificate Security Bypass Vulnerability - Oct09
22646| [801090] Microsoft Windows Indeo Codec Multiple Vulnerabilities
22647| [800968] Microsoft SharePoint Team Services Information Disclosure Vulnerability
22648| [800910] Microsoft Internet Explorer Buffer Overflow Vulnerability - Jul09
22649| [800902] Microsoft Internet Explorer XSS Vulnerability - July09
22650| [800872] Microsoft Internet Explorer 'li' Element DoS Vulnerability - Sep09
22651| [800863] Microsoft Internet Explorer XML Document DoS Vulnerability - Aug09
22652| [800862] Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
22653| [800861] Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability
22654| [800845] Microsoft Office Web Components ActiveX Control Code Execution Vulnerability
22655| [800829] Microsoft Video ActiveX Control 'msvidctl.dll' BOF Vulnerability
22656| [800742] Microsoft Internet Explorer Unspecified vulnerability
22657| [800700] Microsoft GDIPlus PNG Infinite Loop Vulnerability
22658| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
22659| [800669] Microsoft Internet Explorer Denial Of Service Vulnerability - July09
22660| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
22661| [800505] Microsoft HTML Help Workshop buffer overflow vulnerability
22662| [800504] Microsoft Windows XP SP3 denial of service vulnerability
22663| [800481] Microsoft SharePoint Cross Site Scripting Vulnerability
22664| [800480] Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability
22665| [800466] Microsoft Windows TLS/SSL Spoofing Vulnerability (977377)
22666| [800461] Microsoft Internet Explorer Information Disclosure Vulnerability (980088)
22667| [800442] Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
22668| [800429] Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)
22669| [800382] Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)
22670| [800347] Microsoft Internet Explorer Clickjacking Vulnerability
22671| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
22672| [800337] Microsoft Internet Explorer NULL Pointer DoS Vulnerability
22673| [800332] Microsoft Windows Live Messenger Information Disclosure Vulnerability
22674| [800331] Microsoft Windows Live Messenger Client Version Detection
22675| [800328] Integer Overflow vulnerability in Microsoft Windows Media Player
22676| [800310] Microsoft Windows Media Services nskey.dll ActiveX BOF Vulnerability
22677| [800267] Microsoft GDIPlus Library File Integer Overflow Vulnerability
22678| [800218] Microsoft Money 'prtstb06.dll' Denial of Service vulnerability
22679| [800217] Microsoft Money Version Detection
22680| [800209] Microsoft Internet Explorer Version Detection (Win)
22681| [800208] Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities
22682| [800083] Microsoft Outlook Express Malformed MIME Message DoS Vulnerability
22683| [800082] Microsoft SQL Server sp_replwritetovarbin() BOF Vulnerability
22684| [800023] Microsoft Windows Image Color Management System Code Execution Vulnerability (952954)
22685| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
22686| [102059] Microsoft Windows Vector Markup Language Buffer Overflow (938127)
22687| [102055] Microsoft Windows GDI Multiple Vulnerabilities (925902)
22688| [102053] Microsoft Windows Vector Markup Language Vulnerabilities (929969)
22689| [102015] Microsoft RPC Interface Buffer Overrun (KB824146)
22690| [101100] Vulnerabilities in Microsoft ATL Could Allow Remote Code Execution (973908)
22691| [101017] Microsoft MS03-018 security check
22692| [101016] Microsoft MS03-022 security check
22693| [101015] Microsoft MS03-034 security check
22694| [101014] Microsoft MS00-078 security check
22695| [101012] Microsoft MS03-051 security check
22696| [101010] Microsoft Security Bulletin MS05-004
22697| [101009] Microsoft Security Bulletin MS06-033
22698| [101007] Microsoft dotNET version grabber
22699| [101006] Microsoft Security Bulletin MS06-056
22700| [101005] Microsoft Security Bulletin MS07-040
22701| [101004] Microsoft MS04-017 security check
22702| [101003] Microsoft MS00-058 security check
22703| [101000] Microsoft MS00-060 security check
22704| [100950] Microsoft DNS server internal hostname disclosure detection
22705| [100624] Microsoft Windows SMTP Server DNS spoofing vulnerability
22706| [100607] Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability
22707| [100596] Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
22708| [100283] Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability
22709| [100062] Microsoft Remote Desktop Protocol Detection
22710| [90024] Windows Vulnerability in Microsoft Jet Database Engine
22711| [80007] Microsoft MS00-06 security check
22712| [13752] Denial of Service (DoS) in Microsoft SMS Client
22713| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
22714| [11874] IIS Service Pack - 404
22715| [11808] Microsoft RPC Interface Buffer Overrun (823980)
22716| [11433] Microsoft ISA Server DNS - Denial Of Service (MS03-009)
22717| [11217] Microsoft's SQL Version Query
22718| [11177] Flaw in Microsoft VM Could Allow Code Execution (810030)
22719| [11146] Microsoft RDP flaws could allow sniffing and DOS(Q324380)
22720| [11142] IIS XSS via IDC error
22721| [11067] Microsoft's SQL Hello Overflow
22722| [11003] IIS Possible Compromise
22723| [10993] IIS ASP.NET Application Trace Enabled
22724| [10991] IIS Global.asa Retrieval
22725| [10936] IIS XSS via 404 error
22726| [10862] Microsoft's SQL Server Brute Force
22727| [10755] Microsoft Exchange Public Folders Information Leak
22728| [10732] IIS 5.0 WebDav Memory Leakage
22729| [10699] IIS FrontPage DoS II
22730| [10695] IIS .IDA ISAPI filter applied
22731| [10674] Microsoft's SQL UDP Info Query
22732| [10673] Microsoft's SQL Blank Password
22733| [10671] IIS Remote Command Execution
22734| [10667] IIS 5.0 PROPFIND Vulnerability
22735| [10661] IIS 5 .printer ISAPI filter applied
22736| [10657] NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability
22737| [10585] IIS FrontPage DoS
22738| [10576] Check for dangerous IIS default files
22739| [10575] Check for IIS .cnf file leakage
22740| [10573] IIS 5.0 Sample App reveals physical path of web root
22741| [10572] IIS 5.0 Sample App vulnerable to cross-site scripting attack
22742| [10537] IIS directory traversal
22743| [10492] IIS IDA/IDQ Path Disclosure
22744| [10491] ASP/ASA source using Microsoft Translate f: bug
22745| [10144] Microsoft SQL TCP/IP listener is running
22746|
22747| SecurityTracker - https://www.securitytracker.com:
22748| [1027751] Microsoft Internet Information Server (IIS) FTP Server Lets Remote Users Obtain Files and Local Users Obtain Passwords
22749| [1027223] Microsoft IIS Web Server Discloses Potentially Sensitive Information to Remote Users
22750| [1024921] Microsoft IIS FTP Server Lets Remote Users Deny Service
22751| [1024496] Microsoft Internet Information Server (IIS) Web Server Stack Overflow in Reading POST Data Lets Remote Users Deny Service
22752| [1023387] Microsoft Internet Information Services (IIS) Filename Extension Parsing Configuration Error May Let Users Bypass Security Controls
22753| [1022792] Microsoft Internet Information Server (IIS) FTP Server Buffer Overflows Let Remote Authenticated Users Execute Arbitrary Code and Deny Service
22754| [1016466] Microsoft Internet Information Server (IIS) Buffer Overflow in Processing ASP Pages Lets Remote Authenticated Users Execute Arbitrary Code
22755| [1015376] Microsoft IIS Lets Remote Users Deny Service or Execute Arbitrary Code With Malformed HTTP GET Requests
22756| [1015049] Microsoft Internet Explorer Drag-and-Drop Timing May Let Remote Users Install Arbitrary Files
22757| [1014777] Microsoft IIS ASP Error Page May Disclose System Information in Certain Cases
22758| [1011633] Microsoft IIS WebDAV XML Message Handler Error Lets Remote Users Deny Service
22759| [1010692] Microsoft IIS 4.0 Buffer Overflow in Redirect Function Lets Remote Users Execute Arbitrary Code
22760| [1010610] Microsoft IIS Web Server May Disclose Private IP Addresses in Certain Cases
22761| [1010079] Microsoft IIS ASP Script Cookie Processing Flaw May Disclose Application Information to Remote Users
22762| [1008563] Microsoft IIS Fails to Log HTTP TRACK Requests
22763| [1007262] Microsoft IIS 6.0 Vulnerabilities Permit Cross-Site Scripting and Password Changing Attacks Against Administrators
22764| [1007059] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Has Another Buffer Overflow That Lets Remote Execute Arbitrary Code
22765| [1006867] Microsoft IIS Buffer Overflow Lets Remote Users With Upload Privileges Execute Code - Remote Users Can Also Crash the Service
22766| [1006866] Microsoft Windows Media Services (nsiislog.dll) Extension to Internet Information Server (IIS) Lets Remote Execute Arbitrary Code
22767| [1006704] Microsoft IIS Authentication Manager Discloses Validity of User Names to Remote Users
22768| [1006305] Microsoft IIS Web Server WebDAV Buffer Overflow Lets Remote Users Execute Arbitrary Code
22769| [1005505] Microsoft Internet Information Server (IIS) Script Access Control Bug May Let Remote Authenticated Users Upload Unauthorized Executable Files
22770| [1005504] Microsoft Internet Information Server (IIS) WebDAV Memory Allocation Flaw Lets Remote Users Crash the Server
22771| [1005503] Microsoft Internet Information Server (IIS) Administrative Pages Allow Cross-Site Scripting Attacks
22772| [1005502] Microsoft Internet Information Server (IIS) Out-of-Process Access Control Bug Lets Certain Authenticated Users Gain Full Control of the Server
22773| [1005083] Microsoft Internet Information Server (IIS) Web Server Fails to Properly Validate Client-side Certificates, Allowing Remote Users to Impersonate Other Users or Certificate Issuers
22774| [1004757] Microsoft IIS SMTP Service Encapsulation Bug Lets Remote Users Relay Mail and Send SPAM Via the Service
22775| [1004646] ColdFusion MX Buffer Overflow When Used With Microsoft Internet Information Server (IIS) Lets Remote Users Crash the IIS Web Server or Execute Arbitrary Code
22776| [1004526] Microsoft Internet Information Server (IIS) Heap Overflow in HTR ISAPI Extension While Processing Chunked Encoded Data Lets Remote Users Execute Arbitrary Code
22777| [1004044] Cisco CallManager Affected by Microsoft Internet Information Server (IIS) Bugs
22778| [1004032] Microsoft Internet Information Server (IIS) FTP STAT Command Bug Lets Remote Users Crash Both the FTP and the Web Services
22779| [1004031] Microsoft Internet Information Server (IIS) URL Length Bug Lets Remote Users Crash the Web Service
22780| [1004011] Microsoft Internet Information Server (IIS) Buffer Overflow in ASP Server-Side Include Function May Let Remote Users Execute Arbitrary Code on the Web Server
22781| [1004006] Microsoft Internet Information Server (IIS) Off-By-One Heap Overflow in .HTR Processing May Let Remote Users Execute Arbitrary Code on the Server
22782| [1003224] Microsoft Internet Information Server (IIS) Version 4 Lets Local Users Modify the Log File Undetected
22783| [1002778] Microsoft Internet Information Server (IIS) Lets Remote Users Create Bogus Web Log Entries
22784| [1002733] Microsoft IIS 4.0 Configuration Error May Allow Remote Users to Obtain Physical Directory Path Information
22785| [1002651] Microsoft Internet Information Server (IIS) May Disclose PHP Scripting Source Code
22786| [1002212] Microsoft IIS Web Server Contains Multiple Vulnerabilities That Allow Local Users to Gain System Privileges and Allow Remote Users to Cause the Web Server to Crash
22787| [1002161] Microsoft Internet Information Server (IIS) Web Server Discloses Internal IP Addresses or NetBIOS Host Names to Remote Users
22788| [1001818] Microsoft Internet Information Server (IIS) Web Server Discloses ASP Source Code When Installed on FAT-based Filesystem
22789| [1001576] eEye Digital Security's SecureIIS Application Firewall for Microsoft Web Servers Fails to Filter Certain Web URL Characters, Allowing Remote Users to Bypass the SecureIIS Firewall
22790| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
22791| [1001530] Microsoft IIS Web Server Allows Remote Users to Execute Commands on the Server Due to CGI Decoding Error
22792| [1001483] Microsoft IIS Web Server Lets Remote Users Restart the Web Server with Another Specially Crafted PROPFIND XML Command
22793| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
22794| [1001402] Microsoft IIS Web Server Can Be Effectively Shutdown By Certain Internal-Network Attacks When The Underlying OS Supports User Account Lockouts
22795| [1001116] Microsoft Personal Web Server Contains An Old Internet Information Server (IIS) Vulnerability Allowing Unauthorized Directory Listings and Possible Code Execution For Remote Users
22796| [1001050] Microsoft IIS 5.0 Web Server Can Be Restarted Remotely By Any User
22797| [1028908] Microsoft Active Directory Federation Services Discloses Account Information to Remote Users
22798| [1028905] (Microsoft Issues Fix for Exchange Server) Oracle Fusion Middleware Bugs Let Remote Users Deny Service and Access and Modify Data
22799| [1028904] (Microsoft Issues Fix for Exchange Server) Oracle PeopleSoft Products Bugs Let Remote Users Partially Access and Modify Data and Partially Deny Service
22800| [1028903] Microsoft Windows Unicode Scripts Processor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22801| [1028902] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
22802| [1028759] (Microsoft Issues Fix for Internet Explorer) Adobe Flash Player Buffer Overflows Let Remote Users Execute Arbitrary Code
22803| [1028756] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
22804| [1028755] Microsoft Silverlight Null Pointer Dereference Lets Remote Users Execute Arbitrary Code
22805| [1028754] Microsoft Windows Defender Pathname Bug Lets Local Users Gain Elevated Privileges
22806| [1028752] Microsoft DirectShow GIF Image Processing Flaw Lets Remote Users Execute Arbitrary Code
22807| [1028751] Microsoft Office TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
22808| [1028750] Microsoft Visual Studio .NET TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
22809| [1028749] Microsoft Lync TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
22810| [1028748] Microsoft Windows GDI+ TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
22811| [1028745] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
22812| [1028651] Microsoft Internet Explorer Multiple Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
22813| [1028650] Microsoft Office Buffer Overflow in PNG Image Processing Lets Remote Users Execute Arbitrary Code
22814| [1028560] Microsoft Visio Discloses Information to Remote Users
22815| [1028558] Microsoft .NET Flaws Let Remote Users Bypass Authentication and Bypass XML File Signature Verification
22816| [1028557] Microsoft Malware Protection Engine Flaw Lets Remote Users Execute Arbitrary Code
22817| [1028553] Microsoft Word RTF Shape Data Parsing Error Lets Remote Users Execute Arbitrary Code
22818| [1028552] Microsoft Publisher Multiple Bugs Let Remote Users Execute Arbitrary Code
22819| [1028551] Microsoft Lync Object Access Flaw Lets Remote Users Execute Arbitrary Code
22820| [1028550] Microsoft Office Communicator Object Access Flaw Lets Remote Users Execute Arbitrary Code
22821| [1028545] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
22822| [1028514] Microsoft Internet Explorer Object Access Bug Lets Remote Users Execute Arbitrary Code
22823| [1028412] Microsoft SharePoint Server Discloses Files to Remote Authenticated Users
22824| [1028411] Microsoft Office Web Apps Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
22825| [1028410] Microsoft InfoPath Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
22826| [1028409] Microsoft Groove Server Input Validation Flaw in Sanitization Component Permits Cross-Site Scripting Attacks
22827| [1028408] Microsoft SharePoint Input Validation Flaw in HTML Sanitization Component Permits Cross-Site Scripting Attacks
22828| [1028405] Microsoft Active Directory LDAP Processing Flaw Lets Remote Users Deny Service
22829| [1028404] Microsoft Antimalware Client Path Name Flaw Lets Local Users Gain Elevated Privileges
22830| [1028398] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
22831| [1028281] Microsoft Office for Mac HTML Loading Bug Lets Remote Users Obtain Potentially Sensitive Information
22832| [1028279] Microsoft OneNote Buffer Validation Flaw Lets Remote Users Obtain Potentially Sensitive Information
22833| [1028278] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting and Denial of Service Attacks
22834| [1028276] Microsoft Visio Viewer Tree Object Type Confusion Error Lets Remote Users Execute Arbitrary Code
22835| [1028275] Microsoft Internet Explorer Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
22836| [1028273] Microsoft Silverlight Memory Pointer Dereference Lets Remote Users Execute Arbitrary Code
22837| [1028123] Microsoft .NET Bug Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions
22838| [1028119] Microsoft DirectShow Media Decompression Flaw Lets Remote Users Execute Arbitrary Code
22839| [1028117] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Access Information Across Domains
22840| [1028116] Microsoft Internet Explorer Vector Markup Language Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22841| [1027949] Microsoft .NET Open Data (OData) Protocol Bug Lets Remote Users Deny Service
22842| [1027948] Microsoft System Center Configuration Manager Input Validation Flaws Permit Cross-Site Scripting Attacks
22843| [1027945] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
22844| [1027943] Microsoft XML Core Services (MSXML) XML Parsing Flaws Let Remote Users Execute Arbitrary Code
22845| [1027934] Microsoft Windows Includes Some Invalid TURKTRUST Certificates
22846| [1027930] Microsoft Internet Explorer CDwnBindInfo Object Reuse Flaw Lets Remote Users Execute Arbitrary Code
22847| [1027870] Microsoft Internet Explorer Discloses Mouse Location to Remote Users
22848| [1027859] Microsoft DirectPlay Heap Overflow Lets Remote Users Execute Arbitrary Code
22849| [1027857] Microsoft Exchange Server RSS Feed Bug Lets Remote Users Deny Service
22850| [1027852] Microsoft Word RTF Parsing Error Lets Remote Users Execute Arbitrary Code
22851| [1027851] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
22852| [1027753] Microsoft .NET Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions
22853| [1027752] Microsoft Excel Buffer Overflow, Memory Corruption, and Use-After-Free Errors Let Remote Users Execute Arbitrary Code
22854| [1027749] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
22855| [1027647] EMC NetWorker Module for Microsoft Applications Lets Remote Users Execute Arbitrary Code and Local Users Obtain Passwords
22856| [1027629] Microsoft Office InfoPath HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
22857| [1027628] Microsoft Office Communicator HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
22858| [1027627] Microsoft Lync HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
22859| [1027626] Microsoft SharePoint HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
22860| [1027625] Microsoft Groove Server HTML Sanitizer Flaw Permits Cross-Site Scripting Attacks
22861| [1027623] Microsoft SQL Server Input Validation Flaw in Reporting Services Permits Cross-Site Scripting Attacks
22862| [1027621] Microsoft Works Heap Corruption Flaw Lets Remote Users Execute Arbitrary Code
22863| [1027620] Microsoft Kerberos Null Pointer Dereference Lets Remote Users Deny Service
22864| [1027618] Microsoft Word Memory Errors Let Remote Users Execute Arbitrary Code
22865| [1027555] Microsoft Internet Explorer Multiple Use-After-Free Bugs Let Remote Users Execute Arbitrary Code
22866| [1027538] Microsoft Internet Explorer execCommand Flaw Lets Remote Users Execute Arbitrary Code
22867| [1027512] Microsoft System Center Configuration Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
22868| [1027511] Microsoft Visual Studio Team Foundation Server Input Validation Flaw Permits Cross-Site Scripting Attacks
22869| [1027394] Microsoft Visio Buffer Overflow in Processing DXF Format Files Lets Remote Users Execute Arbitrary Code
22870| [1027393] Microsoft Office CGM Graphics File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22871| [1027392] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
22872| [1027390] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
22873| [1027389] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22874| [1027385] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22875| [1027384] Microsoft Host Integration Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22876| [1027383] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22877| [1027381] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22878| [1027380] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22879| [1027295] Microsoft SharePoint Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
22880| [1027294] Microsoft Exchange Server Bugs in Oracle Outside In Libraries Let Remote Users Execute Arbitrary Code
22881| [1027234] Microsoft Office for Mac Folder Permission Flaw Lets Local Users Gain Elevated Privileges
22882| [1027232] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting, Information Disclosure, and URL Redirection Attacks
22883| [1027229] Microsoft Office DLL Loading Error Lets Remote Users Execute Arbitrary Code
22884| [1027228] Microsoft Visual Basic for Applications DLL Loading Error Lets Remote Users Execute Arbitrary Code
22885| [1027227] Microsoft Data Access Components (MDAC) ADO Cachesize Buffer Overflow Lets Remote Users Execute Arbitrary Code
22886| [1027226] Microsoft Internet Explorer Deleted Object Access Bugs Let Remote Users Execute Arbitrary Code
22887| [1027157] Microsoft XML Core Services (MSXML) Object Access Error Lets Remote Users Execute Arbitrary Code
22888| [1027151] Microsoft Dynamics AX Input Validation Flaw Permits Cross-Site Scripting Attacks
22889| [1027150] Microsoft Lync DLL Loading Error Lets Remote Users Execute Arbitrary Code
22890| [1027149] Microsoft .NET Memory Access Bug Lets Remote Users Execute Arbitrary Code
22891| [1027147] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Conduct Cross-Site Scripting Attacks, and Obtain Potentially Sensitive Information
22892| [1027114] Microsoft Windows Includes Some Invalid Certificates
22893| [1027048] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code and Deny Service
22894| [1027043] Microsoft Windows Partition Manager Memory Allocation Error Lets Local Users Gain Elevated Privileges
22895| [1027042] Microsoft Visio Viewer Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22896| [1027041] Microsoft Office Excel File Memory Corruption Errors and Heap Overflows Let Remote Users Execute Arbitrary Code
22897| [1027040] Microsoft Silverlight Double Free Memory Error Lets Remote Users Execute Arbitrary Code
22898| [1027038] Microsoft GDI+ Bugs Let Remote Users Execute Arbitrary Code
22899| [1027036] Microsoft .NET Framework Serialization Bugs Let Remote Users Execute Arbitrary Code
22900| [1027035] Microsoft Word RTF Processing Flaw Lets Remote Users Execute Arbitrary Code
22901| [1026911] Microsoft Office WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
22902| [1026910] Microsoft Works WPS File Heap Overflow Lets Remote Users Execute Arbitrary Code
22903| [1026909] Microsoft Forefront Unified Access Gateway Bugs Let Remote Users Obtain Potentially Sensitive Information and Conduct Browser Redirection Attacks
22904| [1026907] Microsoft .NET Parameter Validation Flaw Lets Remote Users Execute Arbitrary Code
22905| [1026905] Microsoft BizTalk Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22906| [1026904] Microsoft Visual Basic Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22907| [1026903] Microsoft Visual FoxPro Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22908| [1026902] Microsoft Commerce Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22909| [1026901] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
22910| [1026900] Microsoft Office Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22911| [1026899] Microsoft SQL Server Windows Common Controls (MSCOMCTL.OCX) Bug Lets Remote Users Execute Arbitrary Code
22912| [1026794] Microsoft DirectWrite Unicode Character Processing Flaw Lets Remote Users Deny Service
22913| [1026792] Microsoft Visual Studio Lets Local Users Gain Elevated Privileges
22914| [1026791] Microsoft Expression Design DLL Loading Error Lets Remote Users Execute Arbitrary Code
22915| [1026789] Microsoft DNS Server Lets Remote Users Deny Service
22916| [1026686] Microsoft SharePoint Input Validation Flaws Permit Cross-Site Scripting Attacks
22917| [1026685] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
22918| [1026684] Microsoft Visio Viewer Multiple Bugs Let Remote Users Execute Arbitrary Code
22919| [1026681] Microsoft Silverlight Bugs Let Remote Users Execute Arbitrary Code
22920| [1026680] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
22921| [1026677] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
22922| [1026499] Microsoft Anti-Cross Site Scripting Library Flaw May Permit Cross-Site Scripting Attacks
22923| [1026497] Microsoft Windows ClickOnce Feature Lets Remote Users Execute Arbitrary Code
22924| [1026479] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Commands, Access User Accounts, and Redirect Users
22925| [1026469] Microsoft ASP.NET Hash Table Collision Bug Lets Remote Users Deny Service
22926| [1026416] Microsoft Office IME (Chinese) Lets Local Users Gain Elevated Privileges
22927| [1026414] Microsoft Publisher Multiple Errors Let Remote Users Execute Arbitrary Code
22928| [1026413] Microsoft Internet Explorer DLL Loading Error Lets Remote Users Execute Arbitrary Code and HTML Processing Bugs Let Remote Users Obtain Information
22929| [1026412] Microsoft Active Directory Memory Access Error Lets Remote Authenticated Users Execute Arbitrary Code
22930| [1026411] Microsoft PowerPoint DLL Loading and OfficeArt Object Processing Flaws Let Remote Users Execute Arbitrary Code
22931| [1026410] Microsoft Office Excel File Memory Error Lets Remote Users Execute Arbitrary Code
22932| [1026409] Microsoft Office Use-After-Free Bug Lets Remote Users Execute Arbitrary Code
22933| [1026408] Microsoft Internet Explorer Error in Microsoft Time Component Lets Remote Users Execute Arbitrary Code
22934| [1026294] Microsoft Active Directory CRL Validation Flaw Lets Remote Users Bypass Authentication
22935| [1026271] Microsoft Windows TrueType Font Parsing Flaw Lets Remote Users Execute Arbitrary Code
22936| [1026220] Microsoft Publisher 'Pubconv.dll' Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22937| [1026169] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permits Cross-Site Scripting, HTTP Response Splitting, and Denial of Service Attacks
22938| [1026168] Microsoft Host Integration Server Bugs Let Remote Users Deny Service
22939| [1026167] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
22940| [1026164] Microsoft Active Accessibility Component DLL Loading Error Lets Remote Users Execute Arbitrary Code
22941| [1026162] Microsoft .NET Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
22942| [1026161] Microsoft Silverlight Inheritance Restriction Error Lets Remote Users Execute Arbitrary Code
22943| [1026160] Microsoft Internet Explorer Multiple Flaws Let Remote Users Execute Arbitrary Code
22944| [1026103] Microsoft Windows SSL/TLS Protocol Flaw Lets Remote Users Decryption Sessions
22945| [1026041] Microsoft Windows Components DLL Loading Error Lets Remote Users Execute Arbitrary Code
22946| [1026040] Microsoft SharePoint Multiple Flaws Permit Cross-Site Scripting and Information Disclosure Attacks
22947| [1026039] Microsoft Office DLL Loading Error and Unspecified Bug Lets Remote Users Execute Arbitrary Code
22948| [1026038] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
22949| [1026037] Microsoft Windows Internet Name Service (WINS) Input Validation Flaw in ECommEndDlg() Lets Local Users Gain Elevated Privileges
22950| [1025937] Microsoft Windows DHCPv6 Processing Flaw Lets Remote Denial of Service to RPC Services
22951| [1025905] Microsoft .NET Socket Trust Validation Error Lets Remote Users Obtain Information and Redirect Certain Network Traffic
22952| [1025903] Microsoft Visual Studio Input Validation Hole Permits Cross-Site Scripting Attacks
22953| [1025902] Microsoft ASP.NET Chart Control Remote File Disclosure
22954| [1025896] Microsoft Visio Memory Corruption Errors Let Remote Users Execute Arbitrary Code
22955| [1025895] Microsoft Data Access Components Insecure Library Loading Lets Remote Users Execute Arbitrary Code
22956| [1025894] Microsoft DNS Server Flaws Let Remote Users Execute Arbitrary Code and Deny Service
22957| [1025893] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
22958| [1025847] Microsoft Internet Explorer Flaw in Processing EUC-JP Encoded Characters Lets Remote Users Conduct Cross-Site Scripting Attacks
22959| [1025763] Microsoft Visio May Load DLLs Unsafely and Remotely Execute Arbitrary Code
22960| [1025760] Microsoft Windows Bluetooth Stack Memory Access Error Lets Remote Users Execute Arbitrary Code
22961| [1025675] Microsoft Word Unspecified Flaw Lets Remote Users Execute Arbitrary Code
22962| [1025655] Microsoft MHTML Input Validation Hole Permits Cross-Site Scripting Attacks
22963| [1025654] Microsoft Internet Explorer Vector Markup Language (VML) Object Access Error Lets Remote Users Execute Arbitrary Code
22964| [1025653] Microsoft Active Directory Input Validation Flaw in Certificate Services Web Enrollment Permits Cross-Site Scripting Attacks
22965| [1025649] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
22966| [1025648] Microsoft SQL Server XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
22967| [1025647] Microsoft Visual Studio XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
22968| [1025646] Microsoft Office InfoPath XML Editor External Entity Resolution Flaw Lets Remote Users Obtain Potentially Sensitive Information
22969| [1025644] Microsoft Hyper-V VMBus Packet Validation Flaw Lets Local Users Deny Service
22970| [1025643] Microsoft Windows Ancillary Function Driver Lets Local Users Gain Elevated Privileges
22971| [1025642] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
22972| [1025641] Microsoft .NET JIT Compiler Validation Flaw Lets Remote Users Execute Arbitrary Code
22973| [1025639] Microsoft Distributed File System Bugs Let Remote Users Deny Service and Execute Arbitrary Code
22974| [1025637] Microsoft Forefront Threat Management Gateway Bounds Validation Flaw in Winsock Provider Lets Remote Users Execute Arbitrary Code
22975| [1025636] Microsoft .NET Array Offset Error Lets Remote Users Execute Code
22976| [1025635] Microsoft Silverlight Array Offset Error Lets Remote Users Execute Arbitrary Code
22977| [1025634] Microsoft Windows OLE Automation Underflow Lets Remote Users Execute Arbitrary Code
22978| [1025513] Microsoft PowerPoint Memory Corruption Errors Let Remote Users Execute Arbitrary Code
22979| [1025512] Microsoft Windows Internet Name Service Socket Send Exception Handling Bug Lets Remote Users Execute Arbitrary Code
22980| [1025360] Microsoft Reader Memory Corruption Errors Let Remote Users Execute Arbitrary Code
22981| [1025359] Microsoft MHTML Stack Overflow Lets Remote Users Execute Arbitrary Code
22982| [1025347] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
22983| [1025346] Microsoft Foundation Classes May Load DLLs Unsafely and Remotely Execute Arbitrary Code
22984| [1025344] Microsoft WordPad Parsing Error Lets Remote Users Execute Arbitrary Code
22985| [1025343] Microsoft Office DLL Loading and Graphic Object Processing Flaws Let Remote Users Execute Arbitrary Code
22986| [1025340] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
22987| [1025337] Microsoft Excel Multiple Bugs Let Remote Users Execute Arbitrary Code
22988| [1025335] Microsoft GDI+ EMF Image Integer Overflow Lets Remote Users Execute Arbitrary Code
22989| [1025334] Microsoft OpenType Compact Font Format (CFF) Driver Stack Overflow Lets Remote Users Execute Arbitrary Code
22990| [1025333] Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
22991| [1025331] Microsoft .NET Stack Corruption Error in JIT Compiler Lets Remote Users Execute Arbitrary Code
22992| [1025330] Microsoft WMITools and Windows Messenger ActiveX Controls Let Remote Users Execute Arbitrary Code
22993| [1025327] Microsoft Internet Explorer Bugs Let Remote Users Obtain Potentially Sensitive Information, Execute Arbitrary Code, and Hijack User Clicks
22994| [1025312] Microsoft Windows Kernel Bug in AFD.sys Lets Local Users Deny Service
22995| [1025248] Microsoft Windows Includes Some Invalid Comodo Certificates
22996| [1025171] Microsoft Groove DLL Loading Error Lets Remote Users Execute Arbitrary Code
22997| [1025170] Microsoft DirectShow DLL Loading Error Lets Remote Users Execute Arbitrary Code
22998| [1025164] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar
22999| [1025117] Microsoft Malware Protection Engine Registry Processing Error Lets Local Users Gain Elevated Privileges
23000| [1025086] Microsoft Active Directory Heap Overflow in Processing BROWSER ELECTION Packets May Let Remote Users Execute Arbitrary Code
23001| [1025049] Microsoft Local Security Authority Subsystem Service (LSASS) Lets Local Users Gain Elevated Privileges
23002| [1025044] Microsoft JScript and VBScript Disclose Information to Remote Users
23003| [1025043] Microsoft Visio Memory Corruption Error in Processing Visio Files Lets Remote Users Execute Arbitrary Code
23004| [1025042] Microsoft Active Directory SPN Collosions May Let Remote Authenticated Users Deny Service
23005| [1025038] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
23006| [1025003] Microsoft MHTML Input Validation Hole May Permit Cross-Site Scripting Attacks
23007| [1024947] Microsoft Data Access Components (MDAC) Memory Corruption Errors in Processing DSN Data and ADO Records Let Remote Users Execute Arbitrary Code
23008| [1024940] Microsoft Internet Explorer Use-After-Free in 'mshtml.dll' May Let Remote Users Execute Arbitrary Code
23009| [1024925] Microsoft Fax Cover Page Editor Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23010| [1024922] Microsoft Internet Explorer Recursive CSS Import Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23011| [1024888] Microsoft Exchange Server RPC Processing Flaw Lets Remote Authenticated Users Deny Service
23012| [1024887] Microsoft Office Graphics Filters Let Remote Users Execute Arbitrary Code
23013| [1024886] Microsoft SharePoint Input Validation Flaw in Processing SOAP Requests Let Remote Users Execute Arbitrary Code
23014| [1024885] Microsoft Publisher Bugs Let Remote Users Execute Arbitrary Code
23015| [1024884] Microsoft Hyper-V Input Validation Flaw Lets Local Guest Operating System Users Deny Service
23016| [1024879] Microsoft Windows Internet Connection Signup Wizard May Load DLLs Unsafely and Remotely Execute Arbitrary Code
23017| [1024877] Microsoft Windows May Load DLLs Unsafely and Remotely Execute Arbitrary Code
23018| [1024874] Microsoft Windows Task Scheduler Lets Local Users Gain Elevated Privileges
23019| [1024872] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
23020| [1024790] Microsoft Outlook Attachment Processing Flaw Lets Remote Users Deny Service
23021| [1024707] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permit Cross-Site Scripting and URL Redirection Attacks
23022| [1024706] Microsoft PowerPoint Bugs Let Remote Users Execute Arbitrary Code
23023| [1024705] Microsoft Office Flaws Let Remote Users Execute Arbitrary Code
23024| [1024676] Microsoft Internet Explorer Freed Object Invalid Flag Reference Access Lets Remote Users Execute Arbitrary Code
23025| [1024630] Microsoft Internet Explorer 'window.onerror' Callback Lets Remote Users Obtain Information From Other Domains
23026| [1024559] Microsoft SharePoint Input Validation Hole in SafeHTML Permits Cross-Site Scripting Attacks
23027| [1024558] Microsoft Cluster Service Disk Permission Flaw Lets Local Users Gain Elevated Privileges
23028| [1024557] Microsoft Foundation Classes Library Buffer Overflow in Window Title Lets Remote Users Execute Arbitrary Code
23029| [1024552] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
23030| [1024551] Microsoft Office Word Processing Flaws Let Remote Users Execute Arbitrary Code
23031| [1024546] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code, Obtain Information, and Conduct Cross-Site Scripting Attacks
23032| [1024543] Microsoft .NET Framework JIT Compiler Memory Access Error Lets Remote Users Execute Arbitrary Code
23033| [1024459] Microsoft ASP.NET Padding Oracle Attack Lets Remote Users Decrypt Data
23034| [1024445] Microsoft Outlook Web Access Authentication Flaw Lets Remote Users Hijack User Sessions
23035| [1024443] Microsoft Local Security Authority Subsystem Service (LSASS) Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
23036| [1024442] Microsoft WordPad Parsing Error in Text Converters Lets Remote Users Execute Arbitrary Code
23037| [1024441] Microsoft Windows RPC Memory Allocation Error Lets Remote Users Execute Arbitrary Code
23038| [1024440] Microsoft Internet Information Services Bugs Let Remote Users Bypass Authentication, Deny Service, and Execute Arbitrary Code
23039| [1024439] Microsoft Outlook Heap Overflow Lets Remote Users Execute Arbitrary Code
23040| [1024438] Microsoft Office Unicode Font Parsing in USP10.DLL Lets Remote Users Execute Arbitrary Code
23041| [1024312] Microsoft Windows Tracing Feature for Services Lets Local Users Gain Elevated Privileges
23042| [1024310] Microsoft Office Excel Flaw Lets Remote Users Execute Arbitrary Code
23043| [1024306] Microsoft Silverlight Memory Corruption Errors Let Remote Users Execute Arbitrary Code
23044| [1024305] Microsoft .NET Framework Virtual Method Delegate Processing Error Lets Remote Users Execute Arbitrary Code
23045| [1024304] Microsoft Cinepak Codec Memory Pointer Error Lets Remote Users Execute Arbitary Code
23046| [1024303] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Domain Attacks
23047| [1024302] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
23048| [1024301] Microsoft XML Core Services (MSXML) HTTP Response Processing Flaw Lets Remote Users Execute Arbitrary Code
23049| [1024298] Microsoft Office Word RTF, Word, and HTML Processing Errors Let Remote Users Execute Arbitrary Code
23050| [1024216] Microsoft Windows Shell LNK Shortcut Processing Flaw Lets Users Execute Arbitrary Code
23051| [1024189] Microsoft Office Outlook Validation Error in Processing Attachments Lets Remote Users Execute Arbitrary Code
23052| [1024188] Microsoft Office Access ActiveX Controls Let Remote Users Execute Arbitrary Code
23053| [1024084] Microsoft Help and Support Center URL Escaping Flaw Lets Remote Users Execute Arbitrary Commands
23054| [1024080] Microsoft .NET XML Digital Signature Flaw May Let Remote Users Bypass Authentication
23055| [1024079] Microsoft Internet Information Services Memory Allocation Error Lets Remote Authenticated Users Execute Arbitrary Code
23056| [1024078] Microsoft SharePoint Input Validation Flaw in toStaticHTML API Permits Cross-Site Scripting Attacks
23057| [1024077] Microsoft SharePoint Help Page Processing Bug Lets Remote Users Deny Service
23058| [1024076] Microsoft Office Excel Has Multiple Flaws That Let Remote Users Execute Arbitrary Code
23059| [1024075] Microsoft Office Open XML File Format Converter for Mac Lets Local Users Gain Elevated Privileges
23060| [1024073] Microsoft Office COM Object Instantiation Error Lets Remote Users Execute Arbitrary Code
23061| [1024070] Microsoft Internet Explorer 8 Developer Tools ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23062| [1024068] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks
23063| [1023975] Microsoft Office Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
23064| [1023974] Microsoft Visual Basic for Applications Memory Corruption Error in VBE6.DLL Lets Remote Users Execute Arbitrary Code
23065| [1023972] Microsoft Outlook Express Integer Overflow in Processing POP3/IMAP Responses Lets Remote Users Execute Arbitrary Code
23066| [1023938] Microsoft Office Visio Buffer Overflow in Processing DXF Files Lets Remote Users Execute Arbitrary Code
23067| [1023932] Microsoft Office SharePoint Input Validation Flaw in 'help.aspx' Permits Cross-Site Scripting Attacks
23068| [1023856] Microsoft Visio Index Calculation and Attribute Validation Flaws Let Remote Users Execute Code
23069| [1023855] Microsoft Exchange May Disclose Message Fragments to Remote Users
23070| [1023854] Microsoft Exchange Error in Parsing MX Records Lets Remote Users Deny Service
23071| [1023853] Microsoft Office Publisher TextBox Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code
23072| [1023848] Microsoft MPEG Layer-3 Codecs Stack Overflow Lets Remote Users Execute Arbitary Code
23073| [1023773] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information
23074| [1023720] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges
23075| [1023699] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
23076| [1023698] Microsoft Office Excel Bugs Let Remote Users Execute Arbitrary Code
23077| [1023571] Microsoft Windows Protocol Flaw in SSL Renegotiation Lets Remote Users Conduct Man-in-the-Middle Attacks
23078| [1023567] Microsoft Hyper-V Instruction Validation Bug Lets Local Users Deny Service
23079| [1023566] Microsoft Windows Kerberos Ticket-Granting-Ticket Processing Flaw Lets Remote Authenticated Users Deny Service
23080| [1023565] Microsoft Office Buffer Overflow in 'MSO.DLL' Lets Remote Users Execute Arbitrary Code
23081| [1023564] Microsoft Paint Integer Overflow Lets Remote Users Execute Arbitrary Code
23082| [1023563] Microsoft PowerPoint Buffer Overflows and Memory Errors Let Remote Users Execute Arbitrary Code
23083| [1023562] Microsoft DirectShow Heap Overflow Lets Remote Users Execute Arbitrary Code
23084| [1023560] Microsoft Internet Explorer Flaw in Microsoft Data Analyzer ActiveX Control Lets Remote Users Execute Arbitrary Code
23085| [1023542] Microsoft Internet Explorer Discloses Known Files to Remote Users
23086| [1023495] Microsoft Internet Explorer and Windows OS Shell Handler URL Validation Flaw Lets Remote Users Execute Arbitrary Code
23087| [1023494] Microsoft Internet Explorer Cross-Site Scripting Filter Can Be Bypassed
23088| [1023493] Microsoft Internet Explorer Multiple Memory Access Flaws Let Remote Users Execute Arbitrary Code
23089| [1023462] Microsoft Internet Explorer Invalid Pointer Reference Lets Remote Users Execute Arbitrary Code
23090| [1023432] Microsoft Embedded OpenType Font Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
23091| [1023301] Microsoft Internet Explorer Indeo Codec Bugs Let Remote Users Execute Arbitrary Code
23092| [1023297] Microsoft Local Security Authority Subsystem Service Validation Flaw Lets Remote Users Deny Service
23093| [1023296] Microsoft Active Directory Federation Services Lets Remote Authenticated Users Execute Arbitrary Code and Spoof Web Sites
23094| [1023294] Microsoft Office Word and WordPad Text Converter Memory Errors Let Remote Users Execute Arbitrary Code
23095| [1023293] Microsoft Internet Explorer Memory Access Flaws Let Remote Users Execute Arbitrary Code
23096| [1023292] Microsoft Office Publisher Memory Allocation Validation Flaw Lets Remote Users Execute Arbitrary Code
23097| [1023291] Microsoft Internet Authentication Service Bugs Let Remote Authenticated Users Execute Arbitrary Code or Gain Privileges of the Target User
23098| [1023233] Microsoft Internet Explorer Discloses Local Path Names When Printing Local HTML Files to PDF Files
23099| [1023226] Microsoft Internet Explorer Invalid Pointer Reference in getElementsByTagName() Method Lets Remote Users Execute Arbitrary Code
23100| [1023158] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23101| [1023157] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
23102| [1023156] Microsoft Active Directory Stack Memory Consumption Flaw Lets Remote Users Deny Service
23103| [1023154] Microsoft License Logging Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
23104| [1023153] Microsoft Web Services on Devices API (WSDAPI) Validation Error Lets Remote Users Execute Arbitrary Code
23105| [1023013] Microsoft Crypto API NULL Character Flaw in Common Name Field and ASN.1 Integer Overflow Lets Remote Users Spoof Certficiates
23106| [1023011] Microsoft Indexing Service ActiveX Control Lets Remote Users Execute Arbitrary Code
23107| [1023010] Microsoft Local Security Authority Subsystem Service (LSASS) Integer Underflow Lets Local Users Deny Service
23108| [1023009] Microsoft Silverlight Memory Modification Flaw Lets Remote Users Execute Arbitrary Code
23109| [1023008] Microsoft .NET Bugs Let Remote Users Execute Arbitrary Code
23110| [1023006] Microsoft GDI+ Overflows Let Remote Users Execute Arbitrary Code
23111| [1023002] Microsoft Internet Explorer Flaws Let Remote Users Execute Arbitrary Code
23112| [1022846] Microsoft Wireless LAN AutoConfig Service Heap Overflow Lets Remote Wireless Users Execute Arbitrary Code
23113| [1022843] Microsoft DHTML Editing Component ActiveX Control Lets Remote Users Execute Arbitrary Code
23114| [1022842] Microsoft JScript Scripting Engine Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23115| [1022716] Microsoft Telnet NTLM Credential Reflection Flaw Lets Remote Users Gain Access
23116| [1022715] Microsoft ASP.NET Request Scheduling Flaw Lets Remote Users Deny Service
23117| [1022712] Microsoft Active Template Library (ATL) Bugs Let Remote Users Execute Arbitrary Code
23118| [1022710] Microsoft Windows Internet Name Service (WINS) Buffer Overflows Let Remote Users Execute Arbitrary Code
23119| [1022708] Microsoft Office Web Components Buffer Overflows in ActiveX Control Let Remote Users Execute Arbitrary Code
23120| [1022611] Microsoft Internet Explorer Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
23121| [1022610] Microsoft Visual Studio Active Template Library Bugs Let Remote Users Execute Arbitrary Code
23122| [1022547] Microsoft Internet Security and Acceleration Server OTP Authentication Bug Lets Remote Users Access Resources
23123| [1022546] Microsoft Office Publisher Pointer Dereference Bug Lets Remote Users Execute Arbitrary Code
23124| [1022545] Microsoft DirectX DirectShow Validation Bugs Let Remote Users Execute Arbitrary Code
23125| [1022544] Microsoft Virtual PC/Server Lets Local Users Gain Elevated Privileges Within a Guest Operating System
23126| [1022535] Microsoft Office Web Components Bug in Spreadsheet ActiveX Control Lets Remote Users Execute Arbitrary Code
23127| [1022514] Microsoft DirectShow Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
23128| [1022369] Microsoft PowerPoint Buffer Overflow in Freelance Translator Lets Remote Users Execute Arbitrary Code
23129| [1022358] Microsoft Internet Information Services WebDAV Bug Lets Remote Users Bypass Authentication
23130| [1022356] Microsoft Word Buffer Overflows Let Remote USers Execute Arbitrary Code
23131| [1022355] Microsoft Office Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
23132| [1022354] Microsoft Works Document Converter Bug Lets Remote Users Execute Arbitrary Code
23133| [1022351] Microsoft Excel Bugs Let Remote Users Execute Arbitrary Code
23134| [1022350] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
23135| [1022349] Microsoft Active Directory Bugs Let Remote Users Execute Arbitrary Code or Deny Service
23136| [1022330] Microsoft Windows Bug in SETDESKWALLPAPER and GETDESKWALLPAPER Calls Let Local Users Deny Service
23137| [1022299] Microsoft DirectX Bug in DirectShow QuickTime Parser Lets Remote Users Execute Arbitrary Code
23138| [1022240] Microsoft Internet Information Server WebDAV Input Validation Flaw Lets Remote Users Execute Arbitrary Code
23139| [1022205] Microsoft PowerPoint Has Multiple Buffer Overflows and Memory Corruption Bugs That Let Remote Users Execute Arbitrary Code
23140| [1022047] Microsoft Windows SearchPath Function May Let Remote Users Execute Arbitrary Code
23141| [1022046] Microsoft ISA Server Input Validation Flaw in 'cookieauth.dll' Permits Cross-Site Scripting Attacks
23142| [1022045] Microsoft ISA Server TCP State Error Lets Remote Users Deny Service
23143| [1022044] Microsoft Windows Privilege Separation and Access Control Bugs Let Local Users Gain Elevated Privileges
23144| [1022043] Microsoft WordPad and Office Text Converter Bugs Let Remote Users Execute Arbitrary Code
23145| [1022042] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
23146| [1022040] Microsoft DirectX Bug in Decompressing DirectShow MJPEG Content Lets Remote Users Execute Arbitrary Code
23147| [1022039] Microsoft Excel Malformed Object Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
23148| [1021967] Microsoft Office PowerPoint Invalid Object Access Bug Lets Remote Users Execute Arbitrary Code
23149| [1021880] Microsoft Internet Explorer Unspecified Bug Lets Remote Users Execute Arbitrary Code
23150| [1021831] Microsoft DNS Server Bugs Let Remote Users Spoof the DNS Service
23151| [1021830] Microsoft DNS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
23152| [1021829] Microsoft WINS Server Registration Validation Flaw Lets Remote Users Conduct Spoofing Attacks
23153| [1021744] Microsoft Excel Invalid Object Access Flaw Lets Remote Users Execute Arbitrary Code
23154| [1021702] Microsoft Visio Bugs Let Remote Users Execute Arbitrary Code
23155| [1021701] Microsoft Exchange MAPI Command Literal Processing Bug Lets Remote Users Deny Service
23156| [1021700] Microsoft Exchange Memory Corruption Error in Decoding TNEF Data Lets Remote Users Execute Arbitrary Code
23157| [1021699] Microsoft Internet Explorer Bugs in Handling CSS Sheets and Deleted Objects Lets Remote Users Execute Arbitrary Code
23158| [1021629] Microsoft Windows Guidelines for Disabling AutoRun are Ineffective and May Permit Code Execution
23159| [1021490] Microsoft SQL Server Heap Overflow Lets Remote Authenticated Users Execute Arbitrary Code
23160| [1021381] Microsoft Internet Explorer DHTML Data Binding Invalid Pointer Reference Bug Lets Remote Users Execute Arbitrary Code
23161| [1021376] Microsoft WordPad Word 97 Text Converter Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23162| [1021371] Microsoft Internet Explorer HTML Processing Bugs Let Remote Users Execute Arbitrary Code
23163| [1021370] Microsoft Word Memory Corruption Errors Let Remote Users Execute Arbitrary Code
23164| [1021369] Microsoft Visual Basic DataGrid/FlexGrid/Heirarchival FlexGrid/Windows Common/Charts ActiveX Controls Let Remote Users Execute Arbitrary Code
23165| [1021368] Microsoft Excel Formula, Object, and Global Array Bugs Let Remote Users Execute Arbitrary Code
23166| [1021367] Microsoft Office SharePoint Server Access Control Flaw Lets Remote Users Gain Administrative Access
23167| [1021365] Microsoft GDI Buffer Overflows in Processing WMF Files Lets Remote Users Execute Arbitrary Code
23168| [1021363] Microsoft SQL Server Memory Overwrite Bug in sp_replwritetovarbin May Let Remote Users Execute Arbitrary Code
23169| [1021294] Microsoft Office Communicator VoIP Processing Bugs Let Remote Users Deny Service
23170| [1021164] Microsoft XML Core Services (MSXML) Bugs Let Remote Users Obtain Information and Execute Arbitrary Code
23171| [1021053] Microsoft Ancillary Function Driver 'afd.sys' Lets Local Users Gain Elevated Privileges
23172| [1021052] Microsoft Message Queuing (MSMQ) Heap Overflow Lets Remote Users Execute Arbitrary Code
23173| [1021047] Microsoft Internet Explorer Flaws Permit Cross-Domain Scripting Attacks and Let Remote Users Execute Arbitrary Code
23174| [1021045] Microsoft Office CDO Protocol Bug Lets Remote Users Execute Arbitrary Scripting Code
23175| [1021044] Microsoft Excel Object, Calendar, and Formula Bugs Let Remote Users Execute Arbitrary Code
23176| [1021043] Microsoft Host Integration Server RPC Buffer Overflow Lets Remote Users Execute Arbitrary Code
23177| [1021042] Microsoft Active Directory LDAP Memory Allocation Error Lets Remote Users Execute Arbitrary Code
23178| [1021020] Cisco Unity Bug in Microsoft API Lets Remote Users Deny Service
23179| [1021018] Microsoft Digital Image 'PipPPush.DLL' ActiveX Control Lets Remote Users Access Files
23180| [1020838] Microsoft GDI+ Integer Overflow in Processing BMP Files Lets Remote Users Execute Arbitrary Code
23181| [1020837] Microsoft GDI+ Buffer Overflow in Processing WMF Files Lets Remote Users Execute Arbitrary Code
23182| [1020836] Microsoft GDI+ Bug in Processing GIF Image Files Lets Remote Users Execute Arbitrary Code
23183| [1020835] Microsoft GDI+ Memory Corruption Error in Processing EMF Image Files Lets Remote Users Execute Arbitrary Code
23184| [1020834] Microsoft GDI+ Heap Overflow in Processing Gradient Sizes Lets Remote Users Execute Arbitrary Code
23185| [1020833] Microsoft Office OneNote Buffer Overflow Lets Remote Users Execute Arbitrary Code
23186| [1020679] Microsoft Outlook Express MTHML Redirect Bug Lets Remote Users Obtain Information
23187| [1020678] Microsoft Windows IPSec Policy May Not Be Enforced in Certain Cases
23188| [1020677] Microsoft Windows Event System Bugs Let Remote Authenticated Users Execute Arbitrary Code
23189| [1020676] Microsoft PowerPoint Memory Errors Let Remote Users Execute Arbitrary Code
23190| [1020675] Microsoft Color Management Module Heap Overflow Lets Remote Users Execute Arbitrary Code
23191| [1020674] Microsoft Internet Explorer Multiple Bugs Let Remote Users Execute Arbitrary Code
23192| [1020673] Microsoft Office Format Filter Bugs Let Remote Users Execute Arbitrary Code
23193| [1020672] Microsoft Excel Input Validation Bug in Parsing Records Lets Remote Users Execute Arbitrary Code
23194| [1020671] Microsoft Excel Input Validation Bug in Processing Array Index Values Lets Remote Users Execute Arbitrary Code
23195| [1020670] Microsoft Excel Input Validation Bug in Processing Index Values Lets Remote Users Execute Arbitrary Code
23196| [1020669] Microsoft Excel Credential Caching Bug Lets Local Users Gain Access to Remote Data Sources
23197| [1020607] Mac OS X Quick Look Buffer Overflow in Downloading Microsoft Office Files Lets Remote Users Execute Arbitrary Code
23198| [1020447] Microsoft Word Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23199| [1020446] Microsoft Windows AutoRun Bug May Let Users Execute Arbitrary Code
23200| [1020441] Microsoft SQL Server Bugs Let Remote Authenticated Users Obtain Information and Execute Arbitrary Code
23201| [1020439] Microsoft Outlook Web Access for Exchange Server Input Validation Bugs Permit Cross-Site Scripting Attacks
23202| [1020433] Microsoft Access Snapshot Viewer ActiveX Control Lets Remote Users Download Files to Arbitrary Locations
23203| [1020382] Microsoft Internet Explorer Lets Remote Users Conduct Cross-Domain Scripting Attacks
23204| [1020232] Microsoft Speech API Lets Remote Users Execute Arbitrary Commands
23205| [1020229] Microsoft Active Directory LDAP Validation Bug Lets Remote Users Deny Service
23206| [1020228] Microsoft WINS Data Structure Validation Bug Lets Local Users Gain Elevated Privileges
23207| [1020226] Microsoft Internet Explorer HTTP Request Header Bug May Let Remote Users Obtain Information in a Different Domain
23208| [1020225] Microsoft Internet Explorer Bug in Processing Method Calls Lets Remote Users Execute Arbitrary Code
23209| [1020223] Microsoft DirectX SAMI File Validation Bug Lets Remote Users Execute Arbitrary Code
23210| [1020222] Microsoft DirectX MJPEG Stream Error Handling Bug Lets Remote Users Execute Arbitrary Code
23211| [1020016] Microsoft Malware Protection Engine Lets Remote Users Deny Service
23212| [1020015] Microsoft Publisher Bug in Processing Object Header Data Lets Remote Users Execute Arbitrary Code
23213| [1020014] Microsoft Word Memory Error in Processing CSS Values Lets Remote Users Execute Arbitrary Code
23214| [1020013] Microsoft Word Memory Error in Processing RTF Files Lets Remote Users Execute Arbitrary Code
23215| [1020006] Microsoft Windows XP 'i2omgmt.sys' Input Validation Flaw Lets Local Users Gain Elevated Privileges
23216| [1019804] Microsoft Visio Lets Remote Users Execute Arbitrary Code
23217| [1019801] Microsoft Internet Explorer Data Stream Processing Bug Lets Remote Users Execute Arbitrary Code
23218| [1019800] Microsoft Internet Explorer 'hxvz.dll' ActiveX Control Lets Remote Users Execute Arbitrary Code
23219| [1019798] Microsoft GDI Buffer Overflow in Processing EMF and WMF Files Lets Remote Users Execute Arbitrary Code
23220| [1019797] Microsoft Project Memory Error Lets Remote Users Execute Arbitrary Code
23221| [1019738] Microsoft Office S/MIME Processing Lets Remote Users Access Arbitrary URLs
23222| [1019736] Microsoft Outlook S/MIME Processing Lets Remote Users Access Arbitrary URLs
23223| [1019686] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code via Word Documents
23224| [1019587] Microsoft Excel Input Validation Bug in Processing Conditional Formatting Values Lets Remote Users Execute Arbitrary Code
23225| [1019586] Microsoft Excel Input Validation Bug in Processing Rich Text Data Lets Remote Users Execute Arbitrary Code
23226| [1019585] Microsoft Excel Formula Parsing Error Lets Remote Users Execute Arbitrary Code
23227| [1019584] Microsoft Excel Input Validation Bug in Processing Style Record Data Lets Remote Users Execute Arbitrary Code
23228| [1019583] Microsoft Excel Flaw in Importing '.slk' Files Lets Remote Users Execute Arbitrary Code
23229| [1019582] Microsoft Excel Input Validation Bug in Processing Data Validation Records Lets Remote Users Execute Arbitrary Code
23230| [1019581] Microsoft Office Web Components DataSource Bug Lets Remote Users Execute Arbitrary Code
23231| [1019580] Microsoft Office Web Components URL Parsing Bug Lets Remote Users Execute Arbitrary Code
23232| [1019579] Microsoft Outlook 'mailto:' URL Validation Flaw Lets Remote Users Execute Arbitrary Code
23233| [1019578] Microsoft Office and Excel Memory Corruption Bugs Let Remote Users Execute Arbitrary Code
23234| [1019388] Microsoft Works/Microsoft Office Bug in Processing '.wps' Field Length Values Lets Remote Users Execute Arbitrary Code
23235| [1019387] Microsoft Works/Microsoft Office Bug in Processing '.wps' Header Index Table Lets Remote Users Execute Arbitrary Code
23236| [1019386] Microsoft Works/Microsoft Office Bug in Processing '.wps' File Section Length Headers Lets Remote Users Execute Arbitrary Code
23237| [1019385] Microsoft Internet Information Services Error in Processing ASP Page Input Lets Remote Users Execute Arbitrary Code
23238| [1019384] Microsoft Internet Information Services File Change Notification Bug Lets Local Users Gain Elevated Privileges
23239| [1019381] Microsoft Internet Explorer Argument Validation Flaw in 'dxtmsft.dll' Lets Remote Users Execute Arbitrary Code
23240| [1019380] Microsoft Internet Explorer Property Method Processing Bug Lets Remote Users Execute Arbitrary Code
23241| [1019379] Microsoft Internet Explorer HTML Layout Rendering Bug Lets Remote Users Execute Arbitrary Code
23242| [1019378] Microsoft Internet Explorer Buffer Overflow in Fox Pro ActiveX Control Lets Remote Users Execute Arbitrary Code
23243| [1019377] Microsoft Office Publisher Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
23244| [1019376] Microsoft Office Publisher Invalid Memory Reference Bug Lets Remote Users Execute Arbitrary Code
23245| [1019375] Microsoft Office Object Processing Flaw Lets Remote Users Execute Arbitrary Code
23246| [1019374] Microsoft Word Memory Error Lets Remote Users Execute Arbitrary Code
23247| [1019258] Microsoft Visual Basic '.dsr' File Buffer Overflow Lets Remote Users Execute Arbitrary Code
23248| [1019200] Microsoft Excel File Header Bug Lets Remote Users Execute Arbitrary Code
23249| [1019165] Microsoft Windows LSASS Lets Local Users Gain Elevated Privileges
23250| [1019078] Microsoft Internet Explorer Object Access Bugs Let Remote Users Execute Arbitrary Code
23251| [1019077] Microsoft Message Queuing (MSMQ) Buffer Overflow Lets Remote Users Execute Arbitrary Code
23252| [1019073] Microsoft DirectX Bugs in Parsing SAMI, WAV, and AVI Files Let Remote Users Execute Arbitrary Code
23253| [1019033] Microsoft Web Proxy Auto-Discovery Name Server Resolution Bug Lets Remote Users Conduct Man-in-the-Middle Attacks
23254| [1018976] Microsoft Jet Engine Stack Overflow May Let Remote Users Execute Arbitrary Code
23255| [1018942] Microsoft Windows DNS Service Insufficent Entropy Lets Remote Users Spoof the DNS Service
23256| [1018903] Microsoft DebugView 'Dbgv.sys' Module Lets Local Users Gain Kernel Level Privileges
23257| [1018831] Microsoft Windows ShellExecute() URI Handler Bug Lets Remote Users Execute Arbitrary Commands
23258| [1018790] Microsoft Word Bug in Processing Office Files Lets Remote Users Execute Arbitrary Code
23259| [1018789] Microsoft SharePoint Input Validation Hole Permits Cross-Site Scripting Attacks
23260| [1018788] Microsoft Internet Explorer Bugs Let Remote Users Spoof the Address Bar and Execute Arbitrary Code
23261| [1018786] Microsoft Outlook Express Bug in Processing NNTP Responses Lets Remote Users Execute Arbitrary Code
23262| [1018727] Microsoft Internet Security and Acceleration Server SOCKS4 Proxy Discloses IP Address Information to Remote Users
23263| [1018677] Microsoft Agent ActiveX Control Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23264| [1018676] Microsoft Visual Basic VBP File Buffer Overflow Lets Remote Users Execute Arbitrary Code
23265| [1018568] Microsoft Vector Markup Language Buffer Overflow Lets Remote Users Execute Arbitrary Code
23266| [1018567] Microsoft Virtual PC/Server Heap Overflow Lets Local Users Gain Elevated Privileges
23267| [1018563] Microsoft GDI Buffer Overflow Lets Remote Users Execute Arbitrary Code
23268| [1018562] Microsoft Internet Explorer CSS and ActiveX Control Bugs Let Remote Users Execute Arbitrary Code
23269| [1018561] Microsoft Excel Workspace Index Validation Bug Lets Remote Users Execute Arbitrary Code
23270| [1018560] Microsoft OLE Automation Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
23271| [1018559] Microsoft Core XML Services Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23272| [1018551] Microsoft DirectX Buffer Overflow in FlashPix ActiveX Control Lets Remote Users Execute Arbitrary Code
23273| [1018520] Microsoft Visual Database Tools Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
23274| [1018420] Microsoft DirectX Heap Overflow in Processing RLE-Compressed Targa Images Lets Remote Users Execute Arbitrary Code
23275| [1018353] Microsoft Office Publisher Lets Remote Users Execute Arbitrary Code
23276| [1018352] Microsoft Excel Caculation Error and Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23277| [1018351] Microsoft Internet Explorer Bug in Firefox URL Protocol Handler Lets Remote Users Execute Arbitrary Commands
23278| [1018321] Microsoft Excel Sheet Name Buffer Overflow Lets Remote Users Execute Arbitrary Code
23279| [1018251] Microsoft Office Buffer Overflow in MSODataSourceControl ActiveX Control May Let Remote Users Execute Arbitrary Code
23280| [1018235] Microsoft Internet Explorer Bugs Let Remote Users Execute Arbitrary Code
23281| [1018202] Microsoft GDI+ ICO File Divide By Zero Bug Lets Remote Users Deny Service
23282| [1018193] Microsoft Internet Explorer Lets Remote Users Spoof Certain Objects
23283| [1018192] Microsoft Internet Explorer Input Validation Hole Permits Cross-Site Scripting Attacks
23284| [1018107] Microsoft Office Buffer Overflow in OUACTRL.OCX ActiveX Control Lets Remote Users Execute Arbitrary Code
23285| [1018019] Microsoft Internet Explorer Bugs Let Remote Users Modify Files or Execute Arbitrary Code
23286| [1018017] Microsoft CAPICOM 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
23287| [1018016] Microsoft BizTalk Server 'CAPICOM.Certificates' ActiveX Control Lets Remote Users Execute Arbitrary Code
23288| [1018015] Microsoft Exchange Base64, iCal, IMAP, and Attachment Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code
23289| [1018014] Microsoft Office Drawing Object Validation Flaw Lets Remote Users Execute Arbitrary Code
23290| [1018013] Microsoft Word Array and RTF Processing Bugs Let Remote Users Execute Arbitrary Code
23291| [1018012] Microsoft Excel Specially Crafted BIFF Records, Set Font Values, and Filter Records Permit Remote Code Execution
23292| [1017969] Microsoft Internet Explorer Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
23293| [1017910] Microsoft Windows DNS Service RPC Stack Overflow Lets Remote Users Execute Arbitrary Code
23294| [1017902] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
23295| [1017901] Microsoft Windows Help File Heap Overflow Lets Remote Users Execute Arbitrary Code
23296| [1017896] Microsoft Agent URL Parsing Bug Lets Remote Users Execute Arbitrary Code
23297| [1017894] Microsoft Content Management Server Permits Cross-Site Scripting Attacks and Lets Remote Users Execute Arbitrary Code
23298| [1017827] Microsoft Windows Animated Cursor Bug Lets Remote Users Execute Arbitrary Code
23299| [1017752] Adobe JRun IIS Connector Bug Lets Remote Users Deny Service
23300| [1017736] Microsoft Windows Explorer OLE Parsing Bug Lets Users Deny Service
23301| [1017694] VeriSign Secure Messaging for Microsoft Exchange Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code
23302| [1017653] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
23303| [1017643] Microsoft Internet Explorer Multiple COM Objects Let Remote Users Execute Arbitrary Code
23304| [1017642] Microsoft Internet Explorer FTP Server Response Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23305| [1017641] Microsoft Windows RichEdit OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23306| [1017640] Microsoft Office OLE Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23307| [1017639] Microsoft Word Macro Security Warning Bug and Drawing Object Memory Corrupution Error Lets Remote Users Execute Arbitrary Code
23308| [1017638] Microsoft MFC Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23309| [1017637] Microsoft OLE Dialog RTF File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23310| [1017636] Microsoft Windows Defender Integer Overflow in Parsing PDF Files Lets Remote Users Execute Arbitrary Code
23311| [1017635] Microsoft HTML Help ActiveX Control Lets Remote Users Execute Arbitrary Code
23312| [1017632] Microsoft Step-by-Step Interactive Training Buffer Overflow in Processing Bookmark Links Lets Remote Users Execute Arbitrary Code
23313| [1017584] Microsoft Office Excel Buffer Overflow Lets Remote Users Execute Arbitrary Code
23314| [1017579] [Duplicate Entry] Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code
23315| [1017564] Microsoft Word Function Processing Bug Lets Remote Users Execute Arbitrary Code
23316| [1017530] Microsoft Help Workshop Buffer Overflow in Processing '.CNT' Files Lets Remote Users Execute Arbitrary Code
23317| [1017488] Microsoft Outlook '.iCal', '.oss', and SMTP Header Bugs Let Remote Users Execute Arbitrary Code or Deny Service
23318| [1017487] Microsoft Excel Buffer Overflows in Processing Various Records and Strings Lets Remote Users Execute Arbitrary Code
23319| [1017486] Microsoft Office Brazilian Portuguese Grammar Checker Lets Remote Users Execute Arbitrary Code
23320| [1017485] Microsoft Excel Memory Access Error Lets Remote Users Execute Arbitrary Code
23321| [1017441] Microsoft Windows Workstation Service Memory Allocation Error in NetrWkstaUserEnum() Lets Remote Users Deny Service
23322| [1017397] Microsoft Outlook Recipient ActiveX Control Lets Remote Users Deny Service
23323| [1017390] Microsoft Word Unchecked Count Vulnerability Lets Remote Users Execute Arbitrary Code
23324| [1017388] Microsoft Project Discloses Database Password to Remote Authenticated Users
23325| [1017374] Microsoft Internet Explorer May Disclose Contents of the Temporary Internet Files Folder to Remote Users
23326| [1017373] Microsoft Internet Explorer DHTML and Script Error Handling Bugs Let Remote Users Execute Arbitrary Code
23327| [1017369] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Book Files Let Remote Users Execute Arbitrary Code
23328| [1017358] Microsoft Word Data Structure Processing Bug Lets Remote Users Cause Arbitrary Code to Be Executed
23329| [1017339] Microsoft Word String Processing Bug Lets Remote Users Execute Arbitrary Code
23330| [1017224] Microsoft Client Service for Netware Buffer Overflows Let Remote Users Execute Arbitrary Code and Crash the System
23331| [1017223] Microsoft Internet Explorer Bug in Rending HTML Layout Combinations May Let Remote Users Execute Arbitrary Code
23332| [1017222] Microsoft Agent '.ACF' File Memory Corruption Error Lets Remote Users Execute Arbitrary Code
23333| [1017168] Microsoft Windows Kernel GDI Data Structure Processing Bug Lets Local Users Gain Elevated Privileges
23334| [1017165] Microsoft Internet Explorer 'ieframe.dll' Lets Remote Users Spoof Invalid Certificates
23335| [1017157] Microsoft XML Core Services ActiveX Control Lets Remote Users Execute Arbitrary Code
23336| [1017142] Microsoft Visual Studio WMI Object Broker ActiveX Control Lets Remote Users Execute Arbitrary Code
23337| [1017133] Microsoft NAT Helper 'ipnathlp.dll' Lets Remote Users Deny Service
23338| [1017127] Microsoft Data Access Components 'ADODB.Connection' Execute Function Lets Remote Users Execute Arbitrary Code
23339| [1017122] Microsoft Internet Explorer Lets Remote Users Partially Spoof Address Bar URLs
23340| [1017059] Microsoft PowerPoint Bug Causes PowerPoint to Crash
23341| [1017034] Microsoft Office String, Chart Record, and SmartTag Validation Errors Let Remote Users Execute Arbitrary Code
23342| [1017033] Microsoft XML Core Services Lets Remote Users Execute Arbitrary Code or Obtain Information
23343| [1017032] Microsoft Word String and Mail Merge Record Validation Flaws Let Remote Users Execute Arbitrary Code
23344| [1017031] Microsoft Excel DATETIME/COLINFO Record Errors and Lotus 1-2-3 Errors Let Remote Users Execute Arbitrary Code
23345| [1017030] Microsoft PowerPoint Errors in Parsing Object Pointers and Data Records Lets Remote Users Execute Arbitrary Code
23346| [1016941] Microsoft Windows Shell Integer Overflow Lets Remote Users Execute Arbitrary Code
23347| [1016937] Microsoft PowerPoint Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
23348| [1016886] [Duplicate] Microsoft PowerPoint Bug Lets Remote Users Execute Arbitrary Code
23349| [1016879] Microsoft Internet Explorer VML Buffer Overflow Lets Remote Users Execute Arbitrary Code
23350| [1016854] Microsoft Internet Explorer Buffer Overflow in 'daxctle.ocx' ActiveX in KeyFrame Method Control Lets Remote Users Execute Arbitrary Code
23351| [1016839] Microsoft Internet Explorer URLMON.DLL Buffer Overflow Lets Remote Users Execute Arbitrary Code
23352| [1016827] Microsoft PGM Implementation Buffer Overflow in MSMQ Service Lets Remote Users Execute Arbitrary Code
23353| [1016825] Microsoft Publisher Buffer Overflow in Parsing '.pub' Files Lets Remote Users Execute Arbitrary Code
23354| [1016787] Microsoft Word Record Validation Vulnerability Lets Remote Users Execute Arbitrary Code
23355| [1016764] Microsoft Internet Explorer (IE) Buffer Overflow in 'daxctle.ocx' ActiveX Control Lets Remote Users Execute Arbitrary Code
23356| [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
23357| [1016720] [Duplicate Entry] Microsoft PowerPoint Unknown Bug May Let Remote Users Execute Arbitrary Code
23358| [1016663] Microsoft Internet Explorer Bugs Let Remote Users Obtain Information or Execute Arbitrary Code
23359| [1016657] Microsoft Office Buffer Overflow in Processing PowerPoint Records Lets Remote Users Execute Arbitrary Code
23360| [1016656] Microsoft Visual Basic for Applications Buffer Overflow Lets Remote Users Execute Arbitrary Code
23361| [1016655] Microsoft Management Console Input Validation Hole Permits Remote Code Execution
23362| [1016654] Microsoft Outlook Express MHTML Parsing Error Lets Remote Users Execute Arbitrary Code
23363| [1016506] Microsoft Internet Security and Acceleration Server HTTP File Exentsion Filter Can Be Bypassed By Remote Users
23364| [1016504] Microsoft Works Buffer Overflow in Processing Spreadsheet Files May Let Remote Users Execute Arbitrary Code
23365| [1016496] Microsoft PowerPoint 'mso.dll' Buffer Overflow May Let Remote Users Execute Arbitrary Code
23366| [1016472] Microsoft Excel Errors in Processing Various Malformed Records Let Remote Users Execute Arbitrary Code
23367| [1016470] Microsoft Office PNG and GIF File Buffer Error Lets Remote Users Execute Arbitrary Code
23368| [1016469] Microsoft Office String Parsing and Property Bugs Let Remote Users Execute Arbitrary Code
23369| [1016468] Microsoft DHCP Client Buffer Overflow Lets Remote Users Execute Arbitrary Code
23370| [1016453] Microsoft Office LsCreateLine() Function May Let Remote Users Execute Arbitrary Code
23371| [1016434] Microsoft HTML Help Heap Overflow in HHCtrl ActiveX Control May Let Remote Users Execute Arbitrary Code
23372| [1016430] Microsoft Excel STYLE Record Bug May Let Remote Users Execute Arbitrary Code
23373| [1016388] Microsoft Windows Explorer Lets Remote Users Access Information in Other Domains and Execute HTA Applications
23374| [1016344] Microsoft Excel 'Shockwave Flash Object' Lets Remote Users Execute Code Automatically
23375| [1016339] Microsoft Windows 'hlink.dll' Buffer Overflow in Processing Hyperlinks Lets Remote Users Execute Arbitrary Code
23376| [1016316] Microsoft Excel Memory Validation Flaw May Let Remote Users Cause Arbitrary Code to Be Executed
23377| [1016292] Microsoft Windows Buffer Overflow in AOL ART Image Rendering Library Lets Remote Users Execute Arbitrary Code
23378| [1016291] Microsoft Internet Explorer Multiple Memory and Access Control Errors Let Remote Users Execute Arbitrary Code
23379| [1016290] Microsoft Windows Buffer Overflow in TCP/IP Stack Lets Remote Users Execute Arbitrary Code
23380| [1016289] Microsoft RPC Mutual Authentication Bug Lets Remote Users Spoof Other Systems
23381| [1016287] Microsoft PowerPoint Buffer Overflow in Processing Malformed Records Lets Remote Users Execute Arbitrary Code
23382| [1016286] Microsoft Windows 98 Graphics Rendering Engine Buffer Overflow in Processing WMF Images Lets Remote Users Execute Arbitrary Code
23383| [1016283] Microsoft JScript Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
23384| [1016280] Microsoft Outlook Web Access Input Validation Hole Permits Cross-Site Scripting Attacks
23385| [1016196] F-Secure Anti-Virus for Microsoft Exchange Buffer Overflow in Web Console May Let Remote Users Execute Arbitrary Code
23386| [1016130] Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed
23387| [1016048] Microsoft Exchange Error in Processing iCAL/vCAL Properties Lets Remote Users Execute Arbitrary Code
23388| [1016047] Microsoft Distributed Transaction Coordinator Bugs Let Remote Users Deny Service
23389| [1016005] Microsoft Outlook Express 'mhtml:' Redirect URL Processing Lets Remote Users Bypass Security Domains
23390| [1016001] Microsoft Internet Explorer Bug in Processing Nested OBJECT Tags Lets Remote Users Execute Arbitrary Code
23391| [1015900] Microsoft Internet Explorer Parsing and State Errors Let Remote Users Execute Arbitrary Code
23392| [1015899] Microsoft Internet Explorer Lets Remote Users Spoof the Address Bar URL
23393| [1015898] Microsoft Outlook Express Buffer Overflow in Processing Windows Address Books Lets Remote Users Execute Arbitrary Code
23394| [1015897] Microsoft Windows Explorer COM Object Bug Lets Remote Users Execute Arbitrary Code
23395| [1015896] Microsoft FrontPage Server Extensions Input Validation Holes Permit Cross-Site Scripting Attacks
23396| [1015895] Microsoft SharePoint Team Services Input Validation Holes Permit Cross-Site Scripting Attacks
23397| [1015894] Microsoft Data Access Components RDS.Dataspace Access Control Bug Lets Remote Users Execute Arbitrary Code
23398| [1015892] Microsoft Internet Explorer Popup Window Object Bugs Let Remote Users Execute Scripting Code in Arbitrary Domains
23399| [1015855] Microsoft Office Array Index Boundary Error Lets Remote Users Execute Arbitrary Code
23400| [1015825] Microsoft ASP.NET Incorrect COM Component Reference Lets Remote Users Deny Service
23401| [1015812] Microsoft Internet Explorer createTextRange() Memory Error Lets Remote Users Execute Arbitrary Code
23402| [1015800] (Vendor Issues Fix) Microsoft Internet Explorer (IE) Lets Remote Users Cause HTA Files to Be Executed
23403| [1015794] (Vendor Issues Fix) Microsoft Internet Explorer 'mshtml.dll' Bug in Processing Multiple Action Handlers Lets Remote Users Deny Service
23404| [1015766] Microsoft Office and Excel Buffer Overflows Let Remote Users Execute Arbitrary Code
23405| [1015765] Microsoft Windows Services Have Unsafe Default ACLs That Let Remote Authenticated Users Gain Elevated Privileges
23406| [1015720] Microsoft Internet Explorer Modal Security Dialog Race Condition May Let Remote Users Install Code or Obtain Information
23407| [1015632] Microsoft PowerPoint May Let Users Access Contents of the Temporary Internet Files Folder
23408| [1015631] Microsoft Office Korean Input Method Editor Lets Local Users Gain Elevated Privileges
23409| [1015630] Microsoft Windows Web Client Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
23410| [1015629] Microsoft Windows IGMP Processing Bug Lets Remote Users Deny Service
23411| [1015595] Microsoft Windows UPnP/NetBT/SCardSvr/SSDP Services May Be Incorrectly Configured By 3rd Party Applications, Allowing Local Users to Gain Elevated Privileges
23412| [1015585] Microsoft HTML Help Workshop Buffer Overflow in Processing .hhp Files Lets Remote User Execute Arbitrary Code
23413| [1015559] Microsoft Internet Explorer Shockwave Flash Scripting Bug Lets Remote Users Deny Service
23414| [1015489] Microsoft Wireless Network Connection Software May Broadcast Ad-Hoc SSID Information in Certain Cases
23415| [1015461] Microsoft Outlook Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
23416| [1015460] Microsoft Exchange Buffer Overflow in Processing TNEF Messages Lets Remote Users Execute Arbitrary Code
23417| [1015459] Microsoft Windows Embedded Web Fonts Buffer Overflow Lets Remote Users Execute Arbitrary Code
23418| [1015453] Microsoft Windows Graphics Rendering Engine WMF File Memory Access Error Lets Remote Users Execute Arbitrary Code
23419| [1015416] Microsoft Windows Unspecified WMF Rendering Bug Lets Remote Users Execute Arbitrary Code
23420| [1015350] Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users
23421| [1015349] Microsoft Windows Internet Explorer May Let Remote Users Obfuscate the Download Dialog Box
23422| [1015348] Microsoft Internet Explorer Bug in Instantiating COM Objects May Let Remote Users Execute Arbitrary Code
23423| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
23424| [1015333] Microsoft Excel Unspecified Stack Overflow May Let Remote Users Cause Arbitrary Code to Be Executed
23425| [1015251] Microsoft Internet Explorer Bug in Processing Mismatched Document Object Model Objects May Let Remote Users Execute Arbitrary Code
23426| [1015233] Microsoft Windows RPC Service May Let Remote Users Deny Service
23427| [1015226] Microsoft AntiSpyware Improper CreateProcess() Call Lets Local Users Execute Arbitrary Code
23428| [1015168] Microsoft Windows Buffer Overflows in Graphics Rendering Engine Lets Remote Users Execute Arbitrary Code
23429| [1015143] F-Secure Anti-Virus for Microsoft Exchange Web Console May Disclose Files to Remote Users
23430| [1015101] Microsoft Internet Explorer J2SE Runtime Environment Bug Lets Remote Users Crash the Target User's Browser
23431| [1015044] Microsoft Windows Multiple COM Objects Let Remote Users Execute Arbitrary Code
23432| [1015043] Microsoft Network Connection Manager Lets Remote Users Deny Service
23433| [1015042] Microsoft Windows Plug and Play Buffer Overflow Lets Remote Users Execute Arbitrary Code
23434| [1015041] Microsoft Client Service for NetWare Buffer Overflow Lets Remote Users Execute Arbitrary Code
23435| [1015040] Microsoft Windows Shell Bugs in Processing '.lnk' Files and in Web View Preview Mode Lets Remote Users Execute Arbitrary Code
23436| [1015039] Microsoft Windows Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
23437| [1015038] Microsoft Exchange Buffer Overflow in Collaboration Data Objects Lets Remote Users Execute Arbitrary Code
23438| [1015037] Microsoft Windows Buffer Overflows in MSDTC and COM+ Let Remote Users Execute Arbitrary Code and Local User Gain Elevated Privileges
23439| [1015036] Microsoft Windows FTP Client Input Validation Hole Lets Remote Servers Create/Overwrite Files on the Target User's System
23440| [1015034] Microsoft DirectX DirectShow Buffer Overflow Lets Remote Users Execute Arbitrary Code
23441| [1014829] Microsoft Windows Firewall User Interface May Not Properly Display Exception Rules
23442| [1014809] Microsoft Internet Explorer Unspecified Bug May Permit Remote Code Execution
23443| [1014727] Microsoft 'msdds.dll' COM Object Lets Remote Users Execute Arbitrary Code
23444| [1014643] Microsoft Internet Explorer COM Object Instantiation Bug May Let Remote Users Execute Arbitrary Code
23445| [1014642] Microsoft Windows Kerberos and PKINIT Vulnerabilities Allow Denial of Service, Information Disclosure, and Spoofing
23446| [1014641] Microsoft Internet Explorer Web Folder URL Validation Bug Lets Remote Users Execute Scripting Code in an Arbitrary Security Domain
23447| [1014640] Microsoft Windows Plug and Play Stack Overflow Lets Remote Users Execute Arbitrary Code
23448| [1014639] Microsoft Windows Telephony Service Remote Code Execution or Local Privilege Escalation
23449| [1014638] Microsoft Windows Print Spooler Service Buffer Overflow Lets Remote Users Execute Arbitrary Code
23450| [1014501] Hosting Controller 'IISActions.asp' Script Lets Remote Authenticated Users Add Domains/Subdomains
23451| [1014500] Microsoft Internet Explorer (IE) JPEG Rendering Bugs Let Remote Users Deny Service or Execute Arbitrary Code
23452| [1014498] Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
23453| [1014458] Microsoft Office Buffer Overflow in Parsing Fonts Lets Remote Users Cause Arbitrary Code to Be Executed
23454| [1014457] Microsoft Microsoft Color Management Module Lets Remote Users Execute Arbitrary Code
23455| [1014417] Microsoft Windows Named Pipe NULL Session Bugs in svcctl and eventlog RPC Interfaces Disclose Information to Remote Users
23456| [1014364] Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
23457| [1014356] Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required
23458| [1014352] Microsoft Front Page May Crash When Editing a Specially Crafted Web Page
23459| [1014329] Microsoft Internet Explorer 'javaprxy.dll' COM Object Exception Handling Lets Remote Users Execute Arbitrary Code
23460| [1014261] Microsoft Internet Explorer Lets Remote Users Spoof Javascript Dialog Boxes
23461| [1014201] Microsoft Internet Explorer Buffer Overflow in Rendering PNG Images Lets Remote Users Execute Arbitrary Code
23462| [1014200] Microsoft Outlook Express Buffer Overflow in NNTP Response Parser Lets Remote Users Execute Arbitrary Code
23463| [1014199] Microsoft Outlook Web Access Input Validation Hole in IMG Tags Permits Cross-Site Scripting Attacks
23464| [1014198] Microsoft Windows Buffer Overflow in Processing Server Message Block Packets Lets Remote Users Execute Arbitrary Code
23465| [1014197] Microsoft Agent Lets Remote Users Spoof Security Dialog Box Contents
23466| [1014196] Microsoft Windows Buffer Overflow in Web Client Service Lets Remote Authenticated Users Execute Arbitrary Code
23467| [1014195] Microsoft HTML Help Input Validation Flaw Lets Remote Users Execute Arbitrary Code
23468| [1014194] Microsoft Step-by-Step Interactive Training Bookmark Link File Validation Flaw Lets Remote Users Execute Arbitrary Code
23469| [1014193] Microsoft Internet Security and Acceleration Server Bugs Let Remote Users Poison the Cache and Establish NetBIOS Connections
23470| [1014174] Microsoft Internet Explorer Lets Remote Users Obfuscate Scripting Code
23471| [1014113] Microsoft ISA Server in SecureNAT Configuration Can Be Crashed By Remote Users
23472| [1014050] Computer Associates eTrust Antivirus Integer Overflow in Processing Microsoft OLE Data Lets Remote Users Execute Arbitrary Code
23473| [1013996] Microsoft ASP.NET May Disclose System Information to Remote Users in Certain Cases
23474| [1013761] Microsoft Windows Explorer 'webvw.dll' Input Validation Error Lets Remote Users Execute Arbitrary Scripting Code
23475| [1013724] RSA Authentication Agent for Web for IIS Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks
23476| [1013692] Microsoft Internet Explorer Buffer Overflows in DHTML, URL Parsing, and Content Advisor Let Remote Users Execute Arbitrary Code
23477| [1013691] Microsoft Message Queuing Buffer Overflow Lets Remote Users Execute Arbitrary Code
23478| [1013689] Microsoft Windows Shell MSHTA Lets Remote Users Code Execute Arbitrary Scripting Code
23479| [1013688] Microsoft Windows Kernel and Font Buffer Overflows Let Local Users Deny Service or Obtain System Privileges
23480| [1013687] Microsoft Exchange Heap Overlow in Processing Extended SMTP Verb Lets Remote Users Execute Arbitrary Code
23481| [1013686] Microsoft Windows TCP, IP, and ICMP Processing Errors Let Remote Users Deny Service and Execute Arbitrary Code
23482| [1013684] Microsoft Word Unspecified Buffer Overflow in Processing Documents Lets Remote Users Execute Arbitrary Code
23483| [1013669] Microsoft Outlook Web Access 'From' Address Display Lets Remote Users Spoof Origination Addresses
23484| [1013668] Microsoft Outlook 'From' Address Display Lets Remote Users Spoof Origination Addresses
23485| [1013618] Microsoft Jet Database Buffer Overflow in 'msjet40.dll' Lets Remote Users Execute Arbitrary Code
23486| [1013583] Microsoft Outlook Connector for IBM Lotus Domino Lets Users Bypass Password Storage Policy
23487| [1013552] Microsoft Windows Remote Desktop 'TSShutdn.exe' Lets Remote Authenticated Users Shutdown the System
23488| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
23489| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
23490| [1013205] Microsoft Internet Explorer Can Be Crashed With URL Containing Special URL Characters
23491| [1013126] Microsoft Internet Explorer CDF Scripting Error Lets Remote Users Execute Scripting Code in Arbitrary Domains
23492| [1013125] Microsoft Internet Explorer DHTML Method Heap Overflow Lets Remote Users Execute Arbitrary Code
23493| [1013124] Microsoft Internet Explorer URL Encoding Error Lets Remote Users Spoof Arbitrary URLs and Execute Scripting Code in Arbitrary Security Zone
23494| [1013120] Microsoft Windows OLE Buffer Overflow Lets Remote Users Execute Arbitrary Code and COM Access Flaw Lets Remote Authenticated Users Gain Elevated Privileges
23495| [1013119] Microsoft Windows Hyperlink Object Library Lets Remote Users Execute Arbitrary Code
23496| [1013117] Microsoft Windows License Logging Service Lets Remote Users Execute Arbitrary Code
23497| [1013115] Microsoft Windows Media Player Buffer Overflow in Processing PNG Files Lets Remote Users Execute Arbitrary Code
23498| [1013114] Microsoft Windows SMB Lets Remote Users Execute Arbitrary Code
23499| [1013112] Microsoft Windows XP Named Pipe Validation Error Lets Remote Users Obtain Information
23500| [1013111] Microsoft SharePoint Services Redirection Query Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks
23501| [1013110] Microsoft Office XP Buffer Overflow in Processing URLs Lets Remote Users Execute Arbitrary Code
23502| [1013086] Microsoft Outlook Web Access 'owalogon.asp' Lets Remote Users Redirect Login Requests
23503| [1012891] Microsoft IE Windows XP SP2 File Download Security Can Be Bypassed With Dynamic IFRAME Tag
23504| [1012836] Microsoft HTML Help Active Control Cross-Domain Error Lets Remote Users Execute Arbitrary Commands
23505| [1012835] Microsoft Cursor and Icon Validation Error Lets Remote Users Execute Arbitrary Code
23506| [1012684] Microsoft Windows LoadImage API Buffer Overflow Lets Remote Users Execute Arbitrary Code
23507| [1012683] Microsoft Windows ANI File Parsing Errors Let Remote Users Deny Service
23508| [1012682] Microsoft Windows Help System Buffer Overflows in Processing Phrase Compressed Help Files Lets Remote Users Execute Arbitrary Code
23509| [1012626] Microsoft Windows Media Player setItemInfo Lets Remote Users Execute Arbitrary Code
23510| [1012584] Microsoft IE dhtmled.ocx Lets Remote Users Execute Cross-Domain Scripting Attacks
23511| [1012518] Microsoft HyperTerminal Buffer Overflow Lets Remote Users Execute Arbitrary Code
23512| [1012517] Microsoft WINS Buffer Overflow in Name Value Lets Remote Users Execute Arbitrary Code
23513| [1012515] Microsoft Windows NT 4.0 Buffer Overflows in the Logging and Processing of DHCP Packets May Let Remote Users Execute Arbitrary Code
23514| [1012514] Microsoft WordPad Error in Converting Tables/Fonts Lets Remote Users Execute Arbitrary Code
23515| [1012513] Microsoft Windows Kernel Buffer Overflow in Processing Local Procedure Call Messages Lets Local Users Gain System Privileges
23516| [1012512] Microsoft LSASS Bug in Validating Identity Tokens Lets Local Users Gain Elevated Privileges
23517| [1012458] Microsoft Internet Explorer Lets Remote Users Inject Content into Open Windows
23518| [1012444] Microsoft Internet Explorer Input Validation Error in Processing FTP URLs May Let Remote Users Inject Arbitrary FTP Commands
23519| [1012435] Microsoft Windows Resource Kit Buffer Overflow and Input Validation Holes in 'w3who.dll' May Permit Remote Code Execution and Cross-Site Scripting Attacks
23520| [1012341] Microsoft WINS Memory Overwrite Lets Remote Users Execute Arbitary Code
23521| [1012288] Microsoft IE Custom 404 Error Message and execCommand SaveAs Lets Remote Users Bypass XP SP2 Download Warning Mechanisms
23522| [1012234] Microsoft Internet Explorer on XP SP2 Has Unspecified Flaws That Let Remote Users Bypass File Download Restrictions
23523| [1012155] Microsoft Internet Security and Acceleration Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
23524| [1012154] Microsoft Proxy Server Reverse DNS Caching Bug Lets Remote Users Spoof Web Sites
23525| [1012138] Microsoft IE Discloses Whether Specified Files Exist to Remote Users
23526| [1012057] F-Secure Anti-Virus for Microsoft Exchange Lets Remote Users Bypass Anti-Virus Detection With a ZIP Archive
23527| [1012049] (Exploit Code Has Been Released) Microsoft Internet Explorer Buffer Overflow in IFRAME/EMBED Tag Processing Lets Remote Users Execute Arbitrary Code
23528| [1011987] Microsoft Internet Explorer Lets Remote Users Spoof the Status Bar Address with a Table Within a Link
23529| [1011940] Microsoft Remote Desktop on Windows XP Lets Remote Authenticated Users Restart the System
23530| [1011895] Microsoft IE for Mac Multi-Window Browsing Errors Let Remote Users Spoof Sites
23531| [1011890] Microsoft Outlook May Display Images in Plaintext Only Mode
23532| [1011880] Microsoft Windows XP Error in Explorer in Processing WAV Files Lets Remote Users Deny Service
23533| [1011859] Microsoft Internet Explorer on Windows XP Fails to Restrict Drag and Drop Operations When Configured to Disable These Operations
23534| [1011851] Microsoft IE AnchorClick Behavior and HTML Help Let Remote Users Execute Arbitrary Code
23535| [1011735] Microsoft Internet Explorer May Display the Incorrect URL When Loading a Javascript Homepage
23536| [1011706] Microsoft Operating System 'asycpict.dll' Lets Remote Users Crash the System
23537| [1011678] Microsoft IE MSN 'heartbeat.ocx' Component Has Unspecified Flaw
23538| [1011647] Microsoft Windows Shell Buffer Overflows Let Remote Users Execute Arbitrary Code
23539| [1011646] Microsoft Program Group Converter Buffer Overflow Lets Remote Users Execute Arbitrary Code
23540| [1011645] Microsoft Various Operating System Flaws Lets Remote Users Execute Code and Local Users Gain Elevated Privileges or Deny Service
23541| [1011644] Microsoft IE Plug-in Navigation Flaw Lets Remote Users Spoof URLs in the Addresses Bar
23542| [1011643] Microsoft IE Double Byte Parsing Flaw Lets Remote Users Spoof URLs in the Addresses Bar
23543| [1011642] Microsoft IE SSL Caching Flaw Lets Remote Users Run Scripting Code in the Context of Arbitrary Secure Sites
23544| [1011640] Microsoft IE Buffer Overflow in Install Engine Lets Remote Users Execute Arbitrary Code
23545| [1011639] Microsoft IE Buffer Overflow in Processing Cascading Style Sheets Lets Remote Users Execute Arbitrary Code
23546| [1011637] Microsoft Windows Buffer Overflow in Processing Compressed Folders Lets Remote Users Execute Arbitrary Code
23547| [1011636] Microsoft SMTP Service Buffer Overflow in Processing DNS Responses May Let Remote Users Execute Arbitrary Code
23548| [1011635] Microsoft Excel Unspecified Flaw Lets Remote Users Execute Arbitrary Code
23549| [1011634] Microsoft NetDDE Buffer Overflow Lets Remote Users Execute Arbitrary Code With System Privileges
23550| [1011632] Microsoft NT RPC Runtime Library Buffer Overflow Lets Remote Users Deny Service
23551| [1011631] Microsoft NNTP Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
23552| [1011626] Microsoft Cabarc Directory Traversal Flaw Lets Remote Users Create/Overwrite Files on the Target System
23553| [1011565] Microsoft Word Parsing Flaw May Let Remote Users Execute Arbitrary Code
23554| [1011563] Microsoft Internet Explorer Lets Remote Users Access XML Documents
23555| [1011559] Microsoft .NET Forms Authentication Can Be Bypassed By Remote Users
23556| [1011434] Microsoft SQL Server Can Be Crashed By Remote Users Sending a Specially Crafted Large Buffer
23557| [1011332] Microsoft Internet Explorer Bug in Setting Cookies in Certain Domains May Let Remote Users Conduct Session Fixation Attacks
23558| [1011253] Microsoft GDI+ Buffer Overflow in Processing JPEG Images Lets Remote Users Execute Arbitrary Code
23559| [1011252] Microsoft Works Suite Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
23560| [1011251] Microsoft Publisher Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
23561| [1011250] Microsoft FrontPage Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
23562| [1011249] Microsoft Office Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
23563| [1011200] F-Secure Anti-Virus for Microsoft Exchange Input Validation Bug in Content Scanner Server Lets Remote Users Deny Service
23564| [1011141] HP Systems Insight Manager May Not Let Users Login After Applying a Microsoft Security Patch
23565| [1011067] Microsoft Outlook Express May Disclose 'bcc:' Recipient Addresses
23566| [1011043] Microsoft Internet Explorer Local File IFRAME Error Response Lets Remote Users Determine if Files or Directories Exist
23567| [1010996] Microsoft Windows XP SP2 Local Computer Scripting Restrictions Can Be Bypassed With a Specially Crafted MHT File
23568| [1010992] Microsoft Internet Security and Acceleration Server Does Not Block FTP Bounce Attacks
23569| [1010959] Microsoft Windows Explorer (in XP SP2) May Fail to Warn Users When Executing Untrusted Files
23570| [1010957] Microsoft Internet Explorer Unregistered Protocol State Error Lets Remote Users Spoof Location Bar
23571| [1010916] Microsoft Outlook Web Access Input Validation Hole in Redirection Query Permits Cross-Site Scripting Attacks
23572| [1010827] Microsoft Internet Explorer Error in 'mshtml.dll' in Processing GIF Files Lets Remote Users Crash the Browser
23573| [1010713] Microsoft Systems Management Server (SMS) Client Can Be Crashed By Remote Users
23574| [1010694] Microsoft IE Lets Remote Users Spoof Filenames Using CLSIDs
23575| [1010693] Microsoft Internet Explorer 'shell:' Protocol Lets Remote Users Execute Arbitrary Scripting Code in the Local Zone
23576| [1010690] Microsoft HTML Help Input Validation Error Lets Remote Users Execute Arbitrary Code
23577| [1010688] Microsoft Windows Task Scheduler Buffer Overflow Lets Remote Users Execute Arbitrary Code
23578| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
23579| [1010686] Microsoft Utility Manager Permits Local Applications to Run With Elevated Privileges
23580| [1010683] Microsoft Internet Explorer Same Name Javascript Bug Lets Remote Users Execute Arbitrary Javascript in the Domain of an Arbitrary Site
23581| [1010679] Microsoft Internet Explorer Access Control Flaw in popup.show() Lets Remote Users Execute Mouse-Click Actions
23582| [1010673] Microsoft Internet Explorer Can Be Crashed By Remote Users With Large Text Files
23583| [1010550] Microsoft MN-500 Wireless Base Station Lets Remote Users Deny Administrative Access
23584| [1010491] Microsoft Internet Explorer Crashes When Saving Files With Special Character Strings
23585| [1010482] Microsoft Internet Explorer '%2F' URL Parsing Error Lets Remote Users Spoof Sites in the Trusted Zone
23586| [1010479] (US-CERT Issues Advisory) Microsoft Internet Explorer Cross-Domain Redirect Hole Lets Remote Users Execute Arbitrary Code
23587| [1010427] Microsoft DirectX DirectPlay Input Validation Error Lets Remote Users Crash the Application
23588| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
23589| [1010314] Microsoft Windows IPSec Filtering Can Be Bypassed By Remote Users
23590| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
23591| [1010175] Microsoft Visual Basic Buffer Overflow May Let Local Users Gain Elevated Privileges
23592| [1010166] Microsoft Outlook Express Mail Troubleshooting Function May Disclose SMTP Password to Local Users
23593| [1010165] Microsoft Internet Explorer Image Map URL Display Error Lets Remote Users Spoof URLs
23594| [1010157] Microsoft Internet Explorer showHelp Path Search Lets Remote Users Load Existing Local CHM Files
23595| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
23596| [1010119] Microsoft Help and Support Center HCP URL Validation Error May Let Remote Users Execute Arbitrary Code If User Interactions Occur
23597| [1010092] Microsoft Internet Explorer 'file://' URL Processing Flaw Lets Remote Users Damage the Registry
23598| [1010009] Microsoft Internet Explorer SSL Icon Error May Let Remote Users Impersonate Secure Web Sites
23599| [1009940] Microsoft Windows Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
23600| [1009939] Microsoft Internet Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code
23601| [1009778] Microsoft H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
23602| [1009777] Microsoft SSL Library Input Validation Error Lets Remote Users Crash the Service
23603| [1009776] Microsoft Windows Kernel Local Descriptor Table Flaw Lets Local Users Gain Elevated Privileges
23604| [1009771] Microsoft Windows Negotiate Security Software Provider (SSP) Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code
23605| [1009770] Microsoft Windows Management Interface Provider Lets Local Users Gain Elevated Privileges
23606| [1009769] Microsoft Utility Manager Lets Local Users Run Applications With Elevated Privileges
23607| [1009768] Microsoft Winlogon Buffer Overflow Lets Certain Remote Users Execute Arbitrary Code
23608| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
23609| [1009762] Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users
23610| [1009761] Microsoft Windows COM Object Identifier Creation Flaw May Let Remote Users Cause Applications to Open Network Ports
23611| [1009760] Microsoft Virtual DOS Machine (VDM) Lets Local Users Gain Elevated Privileges
23612| [1009758] Microsoft Windows RCP Memory Leak Lets Remote Users Deny Service
23613| [1009757] Microsoft Jet Database Engine 'msjet40.dll' Buffer Overflow Lets Remote Users Execute Arbitrary Code
23614| [1009754] Microsoft ASN.1 Library (msasn1.dll) Double-Free Memory Allocation Error May Let Remote Users Execute Arbitrary Code
23615| [1009753] Microsoft SSL Library PCT Buffer Overflow Lets Remote Users Execute Arbitrary Code
23616| [1009752] Microsoft Help and Support Center Input Validation Flaw Lets Remote Users Execute Arbitrary Code in the My Computer Zone
23617| [1009751] Microsoft LSASS Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
23618| [1009746] Microsoft Internet Explorer Bitmap Memory Allocation Error Lets Remote Users Cause All Available Memory to Be Consumed
23619| [1009743] Microsoft Outlook Express Can Be Crashed By Remote Users With Specially Crafted EML File
23620| [1009739] Microsoft Internet Explorer Javascript OLE Object Lets Remote Users Automatically Print Without Authorization
23621| [1009690] Microsoft Internet Explorer Security Domain Flaw in Accessing CHM Files Lets Remote Users Execute Arbitrary Code
23622| [1009673] Microsoft Windows XP 'mswebdvd.dll' Buffer Overflow Lets Remote Users Deny Service
23623| [1009666] Microsoft SharePoint Portal Server Input Validation Holes Permit Cross-Site Scripting Attacks
23624| [1009604] Microsoft Internet Explorer Does Not Correctly Display Links With Embedded FORM Data
23625| [1009603] Microsoft Outlook Express Does Not Correctly Display Links With Embedded FORM Data
23626| [1009546] Microsoft Operating Systems Have Unspecified Flaw That Yields Kernel Level Access to Local Users
23627| [1009361] Microsoft Internet Explorer Cookie Path Restrictions Can Be Bypassed By Remote Servers
23628| [1009360] Microsoft MSN Messenger May Disclose Known Files to Remote Users
23629| [1009359] Microsoft Windows Media Services Can Be Crashed By Remote Users
23630| [1009358] Microsoft Office XP 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
23631| [1009357] Microsoft Outlook 'mailto' URL Parsing Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Domain
23632| [1009243] Microsoft Internet Explorer (IE) May Leak Keystrokes Across Frames
23633| [1009181] Microsoft Windows Explorer Heap Overflow in Processing '.emf' Files Permits Code Execution
23634| [1009067] Microsoft Internet Explorer Integer Overflow in Processing Bitmap Files Lets Remote Users Execute Arbitrary Code
23635| [1009009] Microsoft Virtual PC for Mac Temporary File Flaw Lets Local Users Gain Root Privileges
23636| [1009008] Microsoft Windows Internet Naming Service (WINS) Length Validation Flaw Lets Remote Users Deny Service
23637| [1009007] Microsoft ASN.1 Library Heap Overflows Let Remote Users Execute Arbitrary Code With SYSTEM Privileges
23638| [1008901] Microsoft Internet Explorer Travel Log Input Validation Flaw Lets Remote Users Run Arbitrary Scripting Code in the Local Computer Domain
23639| [1008699] Microsoft Windows Buffer Overflow in MDAC Lets Remote Users Execute Arbitrary Code
23640| [1008698] Microsoft Internet Security and Acceleration Server H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code
23641| [1008586] Microsoft Office Security Features Can Be Bypassed
23642| [1008583] Microsoft Internet Explorer Flaw in Processing '.lnk' Shortcuts Lets Remote Users Execute Arbitrary Code
23643| [1008578] Microsoft Internet Explorer showHelp() '\..\' Directory Traversal Flaw Lets Remote Users Execute Files on the Target System
23644| [1008558] Microsoft Internet Explorer Trusted Domain Default Settings Facilitate Silent Installation of Executables
23645| [1008554] Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field
23646| [1008510] Openwares.org 'Microsoft IE Security Patch' URL Buffer Overflow Lets Remote Users Execute Arbitrary Code
23647| [1008428] Microsoft ASP.NET Web Services XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests
23648| [1008425] Microsoft IE Does Not Properly Display Some URLs
23649| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
23650| [1008293] Microsoft Internet Explorer Invalid ContentType May Disclose Cache Directory Location to Remote Users
23651| [1008292] Microsoft Internet Explorer MHT Redirect Flaws Let Remote Users Execute Arbitrary Code
23652| [1008245] Microsoft SharePoint May Let Remote Users Access Protected Pages Without Authenticating
23653| [1008151] Microsoft Works Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
23654| [1008150] Microsoft Word Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code
23655| [1008149] Microsoft Excel Macro Security Flaw Lets Remote Users Execute Arbitrary Macro Codes
23656| [1008148] Microsoft SharePoint Team Services Buffer Overflow May Let Remote Users Execute Arbitrary Code
23657| [1008147] Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
23658| [1008146] Microsoft Windows Workstation Service (wkssvc.dll) Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Privileges
23659| [1008053] Microsoft Internet Explorer IFRAME Refresh Lets Remote HTML Access Local Files
23660| [1008000] Microsoft Internet Explorer Lets Remote Users Execute Arbitrary Files in the Local Zone Using a Specially Crafted IFRAME/Location Header
23661| [1007937] Microsoft Exchange Server Buffer Overflow in Processing Extended Verb Requests May Let Remote Users Execute Arbitrary Code
23662| [1007936] Microsoft Outlook Web Access Input Validation Flaw in 'Compose New Message' Permits Remote Cross-Site Scripting Attacks
23663| [1007935] Microsoft ListBox and ComboBox 'user32.dll' Buffer Overflow May Allow Local Users to Gain Elevated Privileges
23664| [1007934] Microsoft Help and Support Center HCP Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code With Local Computer Privileges
23665| [1007933] Microsoft Windows Messenger Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With Local System Privileges
23666| [1007932] Microsoft Windows Troubleshooter ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
23667| [1007931] Microsoft Authenticode Low Memory Flaw May Let Remote Users Execute Arbitrary Code
23668| [1007922] Microsoft Windows RPC Multi-threaded Race Condition Lets Remote Users Crash the Service or Execute Arbitrary Code
23669| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
23670| [1007874] Microsoft Windows OS PostThreadMessage() API Permits Local Users to Terminate Processes That Have Message Queues
23671| [1007750] Microsoft BizTalk Server Default Directory Permissions May Let Remote Users Deny Service
23672| [1007689] Microsoft Internet Explorer Media Sidebar Flaw Lets Remote Users Execute Arbitrary Code on the System
23673| [1007687] Microsoft Internet Explorer Various Cross-Domain Flaws Permit Remote Scripting in Arbitrary Domains
23674| [1007670] Microsoft Windows Remote Procedure Call (RPC) DCOM Activation Buffer Overflows Let Remote Users Execute Arbitrary Code
23675| [1007651] RealSecure Server Sensor Unicode Flaw Lets Remote Users Crash the IIS Web Service
23676| [1007618] Microsoft Visual Basic for Applications (VBA) in Multiple Microsoft Products Permits Remote Code Execution
23677| [1007617] Microsoft Converter for WordPerfect Has Buffer Overflow That Lets Remote Users Execute Arbitrary Code
23678| [1007616] Microsoft Word Document Validation Error Lets Macros Run Without Warning
23679| [1007615] Microsoft Windows NetBIOS Name Service May Disclose Memory Contents to Remote Users
23680| [1007614] Microsoft Access Snapshot Viewer ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
23681| [1007599] Microsoft Outlook May Fail to Delete Outlook Data From the PST File
23682| [1007538] Microsoft Internet Explorer Buffer Overflow in CR549.DLL ActiveX Control Permits Remote Code Execution
23683| [1007537] Microsoft Internet Explorer Object Tag Flaw Lets Remote Users Execute Arbitrary Code
23684| [1007536] Microsoft Internet Explorer Cache Script Flaw Lets Remote Users Execute Code in the My Computer Zone
23685| [1007535] Microsoft MDAC Database Component Lets Remote Users Execute Arbitrary Code
23686| [1007507] RSA SecurID Interaction With Microsoft URLScan May Disclose URLScan Configuration to Remote Users
23687| [1007493] Microsoft Visual Studio Buffer Overflow in 'mciwndx.ocx' May Let Remote Users Execute Arbitrary Code
23688| [1007388] Microsoft WebServer Beta for Pocket PC Yields Administrative Access to Remote Users
23689| [1007364] IISShield May Fail to Drop a Specific Malformed HTTP Request
23690| [1007306] Microsoft Outlook Express Again Executes Scripting Code in Plain Text E-mail Messages
23691| [1007281] Microsoft Windows NT File Management Flaw May Let Remote Users Crash Certain Applications
23692| [1007280] Microsoft Data/Desktop Engine Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
23693| [1007279] Microsoft SQL Server Named Pipe and LPC Flaws Let Local Users Execute Arbitrary Code
23694| [1007278] Microsoft DirectX Heap Overflow in Loading MIDI Files Lets Remote Users Execute Arbitrary Code
23695| [1007265] Microsoft MDAC ODBC Component May Store Database Passwords in Plaintext in the Registry
23696| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
23697| [1007214] Microsoft Windows XP Shell Buffer Overflow in Processing Folder Display Attributes Permits Remote Code Execution
23698| [1007212] Microsoft Windows Remote Procedure Call (RPC) Service Buffer Overflow in Processing DCOM Requests Allows Remote Code Execution
23699| [1007206] Microsoft SMTP Service Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
23700| [1007205] Microsoft Exchange Server Can Be Crashed By Remote Users Sending Mail With an Invalid FILETIME Header
23701| [1007190] Microsoft Internet Explorer 'Chromeless' Window May Let Remote Users Spoof Various User Interface Characteristics
23702| [1007172] Microsoft Jet Database Engine Buffer Overflow May Let Remote Users Execute Arbitrary Code
23703| [1007154] Microsoft SMB Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code
23704| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
23705| [1007133] Microsoft Outlook Web Access (OWA) May Disclose The User's OWA Password to Remote Users
23706| [1007126] Microsoft Internet Explorer Can By Crashed By Loading 'C:\aux' URL
23707| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
23708| [1007098] Microsoft Commerce Server Discloses SQL Server Password to Local Users
23709| [1007094] Microsoft NetMeeting Directory Traversal Flaw Lets Remote Users Execute Arbitrary Code
23710| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
23711| [1007072] Microsoft Internet Explorer Buffer Overflow in Processing Scripted 'HR' Tags Lets Remote Users Execute Arbitrary Code
23712| [1007057] Microsoft Windows Media Player Access Control Flaw Lets Remote Users View, Modify, and Delete Media Library Metadata
23713| [1007022] SurfControl for Microsoft ISA Server Discloses Files to Remote Users
23714| [1007008] Microsoft Internet Explorer XML Parsing Error Lets Remote Users Conduct Cross-Site Scripting Attacks
23715| [1007007] Microsoft Internet Explorer Custom HTTP Error Pages May Let Remote Users Execute Scripts in the Local Computer Zone
23716| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
23717| [1006924] Microsoft Internet Explorer Input Validation Flaw in Displaying FTP Site Names Lets Remote Users Execute Arbitrary Scripting Code in Arbitrary Domains
23718| [1006918] Microsoft Internet Explorer (IE) Object Tag Buffer Overflow Lets Remote Users Execute Arbitrary Code
23719| [1006901] Microsoft UrlScan Default Configuration Displays Identifying Characteristics to Remote Users
23720| [1006894] iisCART2000 Upload Authentication Error Lets Remote Users Upload and Execute Arbitrary Scripts
23721| [1006844] Microsoft Internet Connection Firewall Fails to Block IP Version 6 Protocol
23722| [1006829] iisPROTECT Input Validation Hole Lets Remote Users Execute SQL Stored Procedures
23723| [1006815] iisPROTECT Lets Remote Users Access Protected Files Using URL Encoding
23724| [1006809] Microsoft Outlook Express Lets Remote Users Silently Install Arbitrary Code Using Audio and Media Files
23725| [1006808] Microsoft Outlook Express May Be Affected by W32/Palyh@MM Mass-Mailing Worm
23726| [1006807] Microsoft Outlook May Be Affected by W32/Palyh@MM Mass-Mailing Worm
23727| [1006803] Microsoft Windows Can Be Crashed By Remote Users via Malformed NetMeeting URLs
23728| [1006789] Microsoft ISA Server Input Validation Flaw Lets Remote Users Execute Scripting Code in Arbitrary Security Domains
23729| [1006774] Microsoft Internet Explorer May Execute Arbitrary Code in the Wrong Security Domain When Processing Large Numbers of Download Requests
23730| [1006771] Microsoft Outlook Express Integer Overflow Lets Remote IMAP Servers Cause the Client to Crash
23731| [1006748] Microsoft Outlook Express May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
23732| [1006747] Microsoft Outlook May Be Affected by W32.Fizzer.A@mm Mass-Mailing Worm
23733| [1006728] Microsoft .NET Passport Passwords, Including Hotmail Passwords, Can Be Changed By Remote Users
23734| [1006696] Microsoft Internet Explorer Web Folder Access Flaw Lets Remote Users Execute Arbitrary Scripting Code in the My Computer Zone
23735| [1006691] Microsoft MN-500 Wireless Base Station Backup Configuration File Discloses Administrator Password
23736| [1006686] Microsoft BizTalk Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
23737| [1006634] Microsoft Internet Explorer Bugs (URLMON.DLL Buffer Overflow, File Upload Control Bypass, Plug-in URL Input Validation Flaw, CSS Modal Dialog Input Validation Flaw) Let Remote Users Execute Arbitrary Code or Access Local Files
23738| [1006608] Microsoft NTLM Authentication Protocol Flaw Lets Malicious SMB Servers Gain Access to Systems
23739| [1006599] Microsoft REGEDIT.EXE May Let Local Users Gain Elevated Privileges
23740| [1006588] Microsoft Windows OS Kernel Messaging Buffer Overflow Lets Local Users Gain Full Control of the System
23741| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
23742| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
23743| [1006533] Microsoft Firewall Service in ISA Server Has Unspecified Flaw That Lets Remote Users Stop Traffic
23744| [1006532] Microsoft Windows VM Input Validation Flaw in ByteCode Verifier Lets Malicious Java Applets Execute Arbitrary Code
23745| [1006447] Microsoft Windows Terminal Services RDP Implementation Does Not Validate Server Identity, Allowing Man-in-the-Middle Attacks
23746| [1006361] Microsoft ActiveSync Application Can Be Crashed By Remote Users
23747| [1006323] Microsoft Windows Buffer Overflow in Windows Script Engine JScript.DLL Lets Remote Users Execute Arbitrary Code
23748| [1006322] Microsoft ISA Server DNS Intrusion Detection Flaw Lets Remote Users Block DNS Inbound Requests
23749| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
23750| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
23751| [1006257] Microsoft Internet Explorer Buffer Overflow in Processing '.MHT' Web Archives Lets Remote Users Execute Arbitrary Code
23752| [1006179] Microsoft Windows Me Help and Support Center URL Handler Overflow Lets Remote Users Execute Arbitrary Code
23753| [1006169] Microsoft Internet Explorer Vulnerable Codebase Object Lets Remote Users Execute Arbitrary Code
23754| [1006148] Microsoft Outlook Express Security Domain Flaw Lets Remote Users Silently Install and Execute Arbitrary Code
23755| [1006121] Microsoft Windows 'riched20.DLL' Buffer Overflow May Let Remote Users Crash Applications
23756| [1006046] Microsoft Internet Explorer showHelp() Domain Security Flaw Lets Remote Users Execute Commands
23757| [1006045] Microsoft Windows XP Redirector Buffer Overflow May Let Local Users Gain System Level Privileges
23758| [1006036] Microsoft Internet Explorer May Let Remote Users Read or Write Files Via the dragDrop() Method
23759| [1006023] ColdFusion MX Configuration Error When Used With IIS and NT Authentication May Grant Unauthorized Access to Remote Authenticated Users
23760| [1005986] Microsoft Windows Terminal Server MSGINA.DLL Flaw Lets Remote Authenticated Users Reboot the Server
23761| [1005966] Microsoft Outlook May Fail to Encrypt User E-mail, Disclosing the Contents to Remote Users
23762| [1005964] Microsoft Locator Service Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Level Privileges
23763| [1005859] Microsoft Windows File Protection Mechanism Weakness in Trusting Code-Signing Certificate Chains Lets Arbitrary Remote Users Sign Code That Will Be Trusted By Windows
23764| [1005858] Microsoft Windows File Protection Weakness May Let Local Users Replace Code With Previous Vulnerable Versions Without Detection
23765| [1005857] Microsoft Internet Explorer Bug in Loading Multimedia Files May Let Remote Users Execute Arbitrary Scripting Code in Other Domains
23766| [1005833] Microsoft Windows XP Shell Buffer Overflow in Processing Audio Files Allows Remote Users to Execute Arbitrary Code
23767| [1005799] Microsoft Windows OS Bug in Processing WM_TIMER Messages May Let Local Users Gain Elevated Privileges
23768| [1005796] Microsoft SMB Signing Flaw May Let Remote Users With Access to an SMB Session Gain Control of a Network Client
23769| [1005761] Microsoft Windows XP Wireless LAN Support May Disclose Access Point Information to Remote Users
23770| [1005757] Microsoft Outlook Bug in Processing Malformed E-mail Headers Lets Remote Users Crash the Client
23771| [1005747] Microsoft Internet Explorer showModalDialog() Input Validation Flaw Lets Remote Users Execute Arbitary Scripting Code in Any Security Zone
23772| [1005699] Microsoft Internet Explorer (IE) Java Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
23773| [1005698] Microsoft Java Virtual Machine (VM) Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions
23774| [1005674] Microsoft Internet Explorer Buffer Overflow in Processing PNG Images Allows Denial of Service Attacks
23775| [1005672] Microsoft Internet Explorer MDAC Component Buffer Overflow Allows Remote Users to Execute Arbitrary Code
23776| [1005671] Microsoft Data Access Components (MDAC) Buffer Overflow Allows Remote Users to Execute Arbitrary Code
23777| [1005627] IISPop EMail Server Can Be Crashed By Remote Users
23778| [1005489] Microsoft Outlook Express May Fail to Delete E-mail Messages from Local Storage
23779| [1005466] Microsoft Internet Explorer Cached Object Flaw Lets Remote Users Execute Arbitrary Programs on the Target User's Computer
23780| [1005455] Microsoft Windows Remote Procedure Call (RPC) Service Null Pointer Dereference Allows Remote Users to Crash the Service
23781| [1005454] Microsoft Windows Media Player for Solaris Uses Unsafe Default Permissions
23782| [1005436] Microsoft Data Engine/Desktop Engine (MSDE) Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
23783| [1005435] Microsoft SQL Server Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges
23784| [1005416] Microsoft Internet Explorer Flaw in WebBrowser Control Document Property Lets Remote Users Run Code in the My Computer Security Zone
23785| [1005405] Microsoft Outlook Express Buffer Overflow in Parsing S/MIME Messages Lets Remote Users Execute Arbitrary Code
23786| [1005395] Microsoft Content Management Server Input Validation Bug in 'ManualLogin.asp' Allows Cross-Site Scripting Attacks
23787| [1005377] Microsoft MSN Hotmail/Passport Login Page May Permit Cookie Stealing Via Cross-Site Scripting Attacks
23788| [1005343] Microsoft Windows Help System Bug in Processing Compiled HTML Help Files Lets Remote Users Execute Arbitrary Commands in the Local Computer Security Zone
23789| [1005339] Microsoft Services for Unix Interix SDK Bugs May Allow Denial of Service Conditions or May Execute Arbitrary Code
23790| [1005338] Microsoft Data/Desktop Engine (MSDE) Buffer Overflow Lets Remote Users Execute Arbitrary Code
23791| [1005337] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
23792| [1005336] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Files to Be Created
23793| [1005335] Microsoft Windows Operating System Compressed Folders Allow Arbitrary Code to Be Executed
23794| [1005332] Microsoft Windows Help System Buffer Overflow in 'hhctrl.ocx' Lets Remote Users Execute Arbitrary Code
23795| [1005296] Microsoft PPTP Service Buffer Overflow May Let Remote Users Execute Arbitrary Code
23796| [1005287] Microsoft FrontPage Server Extensions SmartHTML Interpreter Bugs May Let Remote Users Execute Arbitrary Code with System Privileges
23797| [1005256] (Vendor Issues Fix) Microsoft Windows XP Remote Desktop Implementation Bug Lets Remote Users Crash the Operating System
23798| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
23799| [1005246] Microsoft Remote Desktop Protocol (RDP) Design Flaw May Disclose Information About the Unencrypted Data to Remote Users and May Let Data Be Modified During Transmission
23800| [1005243] Microsoft NetMeeting Remote Desktop Sharing Screen Saver Access Control Flaw Lets Physically Local Users Hijack Remote Sessions
23801| [1005242] Microsoft Windows XP Remote Desktop Can Be Crashed By Remote Users Sending a Modified RDP Packet
23802| [1005223] (Microsoft Responds) Microsoft Word Document Processing File Include Bug May Let Remote Users Obtain Files From a Target User's System
23803| [1005207] Microsoft Outlook Express Can Be Crashed By Remote Users Sending HTML Mail With Long Links Embedded
23804| [1005203] Microsoft Internet Explorer Frame Domain Security Bug Lets Remote Users Execute Arbitrary Code in the Local Computer Zone Via Frame URLs
23805| [1005200] Microsoft Internet Explorer Implementation Bugs in Java Native Methods May Let Remote Users Execute Arbitrary Code Via Malicious Applets
23806| [1005182] Microsoft Internet Explorer URL Decoding Inconsistency May Result in a Web Page Loading in the Incorrect Security Domain
23807| [1005177] Microsoft Visual FoxPro Filename Processing Bug Lets Remote Users Create HTML That Will Cause Arbitrary Code to Be Executed When the HTML is Loaded
23808| [1005150] Microsoft Windows Operating System Certificate Enrollment ActiveX Control Allows Remote Users to Delete Certificates on a Target User's System
23809| [1005128] Microsoft Internet Explorer XML Script Element Redirect Bug Lets Remote Users View XML Files on the Target User's Computer
23810| [1005127] Microsoft Visual Studio .NET Web Projects May Disclose the Web Directory Structure to Remote Users
23811| [1005123] Microsoft Internet Explorer Buffer Overflow in Unspecified Text Formatting ActiveX Control Lets Remote Users Execute Arbitrary Code
23812| [1005120] Microsoft Terminal Services Advanced Client (TSAC) ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
23813| [1005119] Microsoft Operating System SMB Protocol Implementation in the Network
23814| [1005112] Microsoft File Transfer Manager ActiveX Control Buffer Overflow May Let Remote Users Execute Arbitrary Code
23815| [1005108] Microsoft Windows Media Player Allows Malicious Windows Media Download (.wmd) Files to Silently Create Files in a Known Location and Execute Them
23816| [1005075] Microsoft Internet Explorer XMLDSO Java Class Lets Remote HTML Code Access Local Files
23817| [1005071] Microsoft DirectX Files Viewer ActiveX Control Has Buffer Overflow That Allows Remote Users to Execute Arbitrary Code
23818| [1005070] Microsoft Internet Explorer (IE) Browser Error Message Processing Allows Remote Users to Execute Arbitrary Code on Certain Windows 98 Platforms
23819| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
23820| [1005067] Microsoft Desktop Engine (MSDE) Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
23821| [1005066] Microsoft SQL Server Extended Stored Procedures May Let Local Users Execute Commands With Database Administrator Privileges
23822| [1005065] Microsoft Network Connection Manager Could Give a Local User System Level Privileges
23823| [1005063] Microsoft Windows XP Help and Support Center Hole Lets Remote Users Create URLs That, When Loaded, Will Delete Arbitrary Files on Your System
23824| [1004986] Microsoft Content Management Server Buffer Overflow in Authentication Function May Allow Remote Users to Execute Arbitrary Code With System Level Privileges
23825| [1004983] Microsoft Visual C++ Flaw in calloc() and Similar Functions May Result in Buffer Overflows in Applications That Use the Compiler or Runtime Library
23826| [1004965] Microsoft Internet Explorer SSL Implementation Flaw in Following Certificate Chains Allows Remote Users to Conduct Man-in-the-Middle Attacks to Obtain Unencrypted Data from the Browser
23827| [1004927] Microsoft Terminal Services Can Be Crashed By Remote Users Conducting a TCP SYN Scan in Certain Situations
23828| [1004917] Microsoft SQL Server MDAC Function Buffer Overflow May Let Remote Users Execute Arbitrary Code to Gain Full Control Over the Database
23829| [1004877] Microsoft Internet Explorer (IE) Web Browser JavaScript 'Same Origin Policy' Flaw Allows Remote Users to Create Malicious JavaScript to Retrieve Web Data from a Victim's Internal Network
23830| [1004862] Microsoft Outlook Express Flaw in Parsing XML Using Internet Explorer Allows a Remote User to Silently Deliver and Install an Executable on a Target User's Computer
23831| [1004831] Microsoft Data Engine (MSDE) Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
23832| [1004830] Microsoft SQL Server Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service
23833| [1004829] Microsoft SQL Server Resolution Service Buffer Overflows Let Remote Users Execute Arbitrary Code with the Privileges of the SQL Service
23834| [1004828] Microsoft Exchange Server Buffer Overflow in Processing SMTP EHLO Command Lets Remote Users Execute Arbitrary Code on the Server with System Level Privileges
23835| [1004827] Microsoft Metadirectory Services Authentication Flaw May Let Remote Users Modify Data and Obtain Elevated Privileges on the System
23836| [1004805] Microsoft Outlook Express (and Possibly Outlook) Has File Attachment Name Bugs That Let Remote Users Send Malicious Mail to Bypass Attachment Type Filters and Modify the Apparent File Name and File Size
23837| [1004761] Microsoft Foundation Classes (MFC) Information Server Application Programming Interface (ISAPI) 'mfc42.dll' Contains Buffer Overflows That Can Crash the System or Possibly Allow for the Remote Execution of Arbitrary Code
23838| [1004746] Microsoft Internet Explorer Flaw in OBJECT Domain Security Enforcement Lets Remote Users Execute Code in Arbitrary Domains
23839| [1004744] Microsoft SQL Server Install Process May Disclose Sensitive Passwords to Local Users
23840| [1004739] Microsoft SQL Server Desktop Engine (MSDE) Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
23841| [1004738] Microsoft SQL Server Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges
23842| [1004637] Microsoft Commerce Server Buffer Overflows and Other Flaws Let Remote Users Execute Arbitrary Code with LocalSystem Privileges
23843| [1004618] Microsoft Internet Explorer Can Be Crashed By Malicious AVI Object in HTML
23844| [1004595] Microsoft Word Documents May Execute Remotely Supplied Macro Code Under Certain Conditions
23845| [1004594] Microsoft Excel Spreadsheet May Execute Remotely Supplied Macro Code Within Malicious Documents
23846| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
23847| [1004569] Microsoft Visual Studio .NET Korean Language Version Contains Nimda Virus
23848| [1004544] Microsoft SQL Server Buffer Overflow in 'pwdencrypt()' Function May Let Remote Authorized Users Execute Arbitrary Code
23849| [1004542] Lumigent Log Explorer Buffer Overflow May Let Remote Users Crash the Microsoft SQL Server Service or Execute Arbitrary Code on the System
23850| [1004541] Compaq Insight Manager May Include a Vulnerable Default Configuration of Microsoft MSDE/SQL Server That Allows Remote Users to Execute Commands on the System
23851| [1004529] Microsoft Remote Access Service (RAS) Phonebook Buffer Overflow May Let Local Users Execute Arbitrary Code with Local System Privileges
23852| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
23853| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
23854| [1004518] Microsoft Proxy Server Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
23855| [1004517] Microsoft Internet Security and Acceleration Server (ISA) Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server
23856| [1004486] Microsoft ASP.NET Buffer Overflow in Processing Cookies in StateServer Mode May Let Remote Users Crash the Service or Execute Arbitrary Code on the Server
23857| [1004479] Microsoft Internet Explorer May Execute Remotely Supplied Scripting in the My Computer Zone if FTP Folder Viewing is Enabled
23858| [1004464] Microsoft Internet Explorer Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Victim's Computer
23859| [1004441] Microsoft Windows Help System Buffer Overflows in 'htctrl.ocx' ActiveX Control May Let Remote Users Execute Arbitrary Code on a Target User's Computer By Sending Malicious HTML
23860| [1004436] Microsoft Internet Explorer Allows HTML-Delivered Compiled Help Files to Be Automatically Executed on the Target User's Computer
23861| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
23862| [1004372] Microsoft Excel Spreadsheet XML Stylesheet ActiveX Object Flaw Lets Remote Users Create Malicious Excel Spreadsheets That May Execute Arbitrary Code When Opened With the XML Stylesheet Option
23863| [1004369] Microsoft Active Directory May Have Bug That Allows Remote Users to Crash the Directory
23864| [1004361] Microsoft Date Engine (MSDE) Default Configuration Leaves Blank Password for System Administrator Account
23865| [1004360] Opty-Way Enterprise Glassworks Management Application Installs Microsoft Data Engine Insecurely, Allowing Remote Users to Execute Commands on the System
23866| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
23867| [1004304] Microsoft Internet Explorer (IE) New Content-Disposition Bugs May Let Remote Users Execute Arbitrary Code on the Victim's Computer
23868| [1004300] Microsoft Internet Explorer (IE) Zone Spoofing Hole Lets Remote Users Create HTML That, When Loaded, May Run in a Less-Secure IE Security Zone
23869| [1004290] Microsoft Internet Explorer Bugs in 'BGSOUND' and 'IFRAME' Tags Let Remote Users Create HTML That Will Cause Denial of Service Conditions or Will Access Special DOS Devices
23870| [1004251] Microsoft Exchange Instant Messenger ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
23871| [1004250] Microsoft MSN Messenger Includes an ActiveX Control That Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
23872| [1004249] Microsoft MSN Chat Control ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code
23873| [1004236] L.Y.S.I.A.S. Lidik Web Server for Microsoft Windows Systems Lets Remote Users View Files Located Anywhere on the Partition
23874| [1004229] Microsoft Office 'Word Mail Merge' Feature Allows Remote Users to Cause Arbitrary Programs to Be Executed on the Target User's Computer
23875| [1004226] Microsoft MSN Messenger Instant Messaging Client Malformed Header Processing Flaw Lets Remote Users Crash the Client
23876| [1004197] Microsoft Internet Explorer Can Be Crashed By Incorrectly Sized XBM Graphics Files
23877| [1004157] Microsoft Outlook Weak Security Enforcement When Editing Messages with Microsoft Word Lets Remote Users Send Malicious Code to Outlook Recipients That Will Be Executed When Forwarded or Replied To
23878| [1004146] Microsoft Internet Explorer Browser Can Be Crashed By Remote HTML Containing Malicious Image Tags That Cause Infinite Processing Loops
23879| [1004130] Microsoft MSN Messenger Instant Messaging Client Discloses Buddy List to Local Users
23880| [1004121] Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users With OLE OBJECT Element Dependency Loops
23881| [1004109] Microsoft Distributed Transaction Coordinator Can Be Crashed By Remote Users Sending Malformed Packets
23882| [1004090] Microsoft Back Office Web Administration Authentication Mechanism Can Be Bypassed By Remote Users
23883| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
23884| [1004079] Microsoft Internet Explorer (IE) 'dialogArguments' Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against IE Users
23885| [1004051] Microsoft Outlook Express for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
23886| [1004050] Microsoft Office for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
23887| [1004049] Microsoft Internet Explorer for Mac OS Has Buffer Overflow in Processing the 'file://' URL That Allows Remote Users to Cause Arbitrary Code to Be Executed
23888| [1004048] Microsoft Word Object Creation Flaw Lets Remote Users Create ActiveX That Will Consume Memory on the Victim's Computer
23889| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
23890| [1004014] Microsoft Internet Information Server ASP HTTP Header Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
23891| [1004008] Microsoft Internet Information Server Comes With Code That Allows Remote Users to Conduct Cross-Site Scripting Attacks
23892| [1004005] Microsoft Internet Information Server Buffer Overflow in Chunked Encoding Mechanism Lets Remote Users Run Arbitrary Code on the Server
23893| [1004002] Microsoft Office Web Components Let Remote Users Determine if Specified Files Exist on Another User's Host
23894| [1004001] Microsoft Office Web Components Let Remote Users Gain Full Read and Write Control Over Another User's Clipboard, Even if Clipboard Access Via Scripts is Disabled
23895| [1004000] Microsoft Office Web Components Let Remote Users Write Code to Run in the Victim's Local Security Domain and Access Local or Remote Files
23896| [1003999] Microsoft Office Web Components in Office XP Lets Remote Users Cause Malicious Scripting to Be Executed By Another User's Browser Even If Scripting is Disabled
23897| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
23898| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
23899| [1003948] Microsoft Internet Explorer Cascading Style Sheets (CSS) Invalid Attribute Bug Lets Remote Users Read Portions of Files on the Victim's Computer
23900| [1003932] Microsoft Office XP Active Content Bug Lets Remote Users Cause Code to Be Executed on an Office User's Computer
23901| [1003922] Microsoft Outlook Web Access With SecurID Authentication May Allow Remote Users to Avoid the SecurID Authentication in Certain Cases
23902| [1003915] Microsoft Internet Explorer Browser Security Zone Flaw Lets Remote Users Cause Cookie-based Scripts to Be Executed on Another User's Browser in the Incorrect Security Domain
23903| [1003907] Microsoft Internet Explorer Discloses The Existence of and Details of Local Files to Remote Users
23904| [1003871] Microsoft .NET Unspecified Vulnerabilities May Allow a Remote User to Cause Arbitrary Code to Be Executed on Another User's Systems
23905| [1003856] Microsoft Internet Explorer Can Be Crashed By Malicious 'location.replace' Javascript
23906| [1003839] Microsoft Internet Explorer (IE) 6 Lets Remote Users Cause Files to Be Downloaded and Executed Without the Knowledge or Consent of the Victim
23907| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
23908| [1003800] A Multitude of Microsoft SQL Server Extended Stored Procedures Have Buffer Overflows That Allow Remote Users to Crash the Database Server or Execute Arbitrary Code on the Server to Gain Full Control of the System
23909| [1003764] Microsoft Windows Operating System Shell URL Handler Bug Lets Remote Users Create HTML That Could Cause Arbitrary Code to Be Executed on Another User's System in Certain Situations
23910| [1003756] Microsoft Internet Information Server 4.0 .HTR Web Application Lets Users Change Their Passwords When the NT Security Policy is Configured to Prohibit Password Changing
23911| [1003744] Microsoft SQL Server 'xp_dirtree' Buffer Overflow Lets Users Crash the Database Service
23912| [1003730] Microsoft Java Virtual Machine in Internet Explorer Lets Remote Malicious Applets Redirect Web Proxy Connections
23913| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
23914| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
23915| [1003686] Microsoft Windows SMTP Service Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
23916| [1003685] Microsoft Exchange Server Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server
23917| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
23918| [1003633] Microsoft XML Core Services in Microsoft Windows XP Operating System Lets Remote Scripts Access and Send Local Files
23919| [1003630] Microsoft Internet Explorer Has Another Frame Domain Security Bug That Lets Remote Users View Files or Other Personal Information from a Victim's Computer By Using Malicious VBScripts
23920| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
23921| [1003611] Gator Plugin for Microsoft Internet Explorer Lets Remote Users Install Arbitrary Software on the User's Host
23922| [1003605] Microsoft SQL Server Buffer Overflow Lets Remote Users Crash the Server and May Allow Remote Code to Be Executed on the Database Server
23923| [1003597] Microsoft Outlook Web Access Discloses 'Include' Archive Files in the 'lib' Directory to Remote Users
23924| [1003591] Microsoft Windows Terminal Services May Cause the System's Screen Saver Lockout Mechanism to Fail in Certain Situations
23925| [1003582] Microsoft Internet Security Acceleration Server Can Be Affected By Remote Users Conducting a LAND Flood Attack
23926| [1003556] Microsoft Visual C++ Compiler Buffer Security Mode Does Not Eliminate Buffer Overflows in Compiled Applications
23927| [1003546] Microsoft Outlook E-mail Client May Display Potentially Malicious File Attachments Illegally Embedded Within Mail Headers
23928| [1003540] Microsoft Internet Explorer Browser MIME Flaw Causes 'text/plain' Pages to Be Displayed as HTML and Any Embedded Scripting to Be Executed By the Browser
23929| [1003538] NetWin CWMail Web-Mail Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the System With the Privileges of the IIS Web Server
23930| [1003519] Microsoft Internet Explorer (IE) HTML Directive Buffer Overflow Lets Remote Users Cause Arbitrary Code to Be Executed on Another User's Computer
23931| [1003517] Microsoft Internet Explorer (IE) 'Content-Type' Processing Hole Lets Remote Users Open Applications on Another User's Computer
23932| [1003516] Microsoft Internet Explorer (IE) Web Browser Has New Frame Domain Verification Bug That Lets Remote Users Obtain Files from Another User's Local File System
23933| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
23934| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
23935| [1003462] Microsoft Internet Explorer Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
23936| [1003458] Microsoft Office v. X for Mac OS X Can Be Crashed By Remote Users Sending Malformed Product Identification Packets
23937| [1003446] Microsoft Internet Information Server Can Be Stopped By Local Users Removing Virtual Directories in a Shared Hosting Environment
23938| [1003434] Microsoft ASP.NET Web Application Framework Allows Cross Site Scritping Attacks and Discloses Path Information to Remote Users
23939| [1003420] Microsoft Site Server Commerce Edition Discloses Potentially Sensitive Administration Information and Source Code to Remote Users With Valid Accounts and Discloses User Passwords from the LDAP Directory to Anonymous Remote Users
23940| [1003419] Microsoft Site Server Commerce Edition Lets Remote Users With Valid NT Accounts Upload and Then Execute ASP Scripts on the Server or Consume Disk Space on the Server
23941| [1003415] Microsoft Distributed Transaction Coordinator (MSDTC) Service Can Be Crashed By Remote Users
23942| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
23943| [1003369] PGPfire Personal Firewall for Microsoft Windows Discloses Identifying Information to Remote Users
23944| [1003326] Microsoft Internet Explorer for Macintosh OS Executes Remotely Supplied Commands in AppleScripts
23945| [1003310] Microsoft Windows NT/2000 Authentication Lockout Bug May Record Successful Logins as Failed Login Attempts in Certain Situations
23946| [1003308] Microsoft Windows XP Manifest Processing Bug Lets Local Users Corrupt the System and Cause the Boot Process to Fail
23947| [1003257] Microsoft Windows XP Upgrade Effectively Removes Patches from Internet Explorer (IE) During Upgrade, Leaving Users Exposed to IE Vulnerabilities
23948| [1003239] Python Language Implementation on Microsoft Windows Allows a Remote Server to Access Files on a Web Surfing User's PC
23949| [1003228] Microsoft Windows Media Player Discloses Unique ID to Remote Users in the Default Configuration, Allowing Web Sites to Track Users
23950| [1003221] Microsoft Internet Explorer (IE) Default Configuration Allows HTML-based Scripts to Access Your Windows Clipboard Contents
23951| [1003215] Microsoft Internet Explorer Popup Object Tag Flaw Lets Remote Users Execute Programs on the Browser's Host
23952| [1003201] Microsoft Windows 95 Backup Utility Has Buffer Overflow That Could Cause Denial of Service Conditions
23953| [1003135] Microsoft Internet Explorer Can Be Crashed By Remote Users With Javascript That Calls an Endless Loop of Modeless Dialogs
23954| [1003121] Microsoft Windows XP Task Manager Will Not Kill Certain Processes
23955| [1003109] Microsoft Internet Explorer (IE) May Allow Malicious Javascript to Poll a User's System for Known Files
23956| [1003084] Microsoft Internet Explorer GetObject() Active Scripting Bug Lets Remote Code Access Files on the PC
23957| [1003050] Microsoft Internet Explorer Web Browser Can Be Crashed By Malicious Image Source Tag Javascript Supplied By Remote Users
23958| [1003049] Microsoft Internet Explorer (IE) Text Form Processing Flaw May Cause IE to Crash
23959| [1003043] PGP Plug-in For Microsoft Outlook May Fail to Encrypt E-mail in Certain Situations
23960| [1003042] Microsoft Internet Explorer Web Browser SSL Security Flaw Lets Remote Users Conduct Man-in-the-Middle Attacks to Access Sensitive Information
23961| [1003041] Microsoft Windows XP Remote Desktop Client May Disclose Recently Used Account Names to Remote Users
23962| [1003040] Microsoft Excel Password Protection Flaw Lets Local Users Obtain Contents of Password-Protect Cells
23963| [1003033] Microsoft C Runtime Format String Flaw Lets Remote Users Crash the Microsoft SQL Server Service
23964| [1003032] Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code in the Security Context of the SQL Server
23965| [1003028] Microsoft Windows Universal Plug and Play Component Buffer Overflow Gives Remote Users System Level Access to Windows XP and 98/ME Hosts
23966| [1003024] Microsoft Internet Explorer (IE) Web Browser 'document.open()' Scripting Flaw Lets Remote Users Steal Cookies, Read Local Files, and Spoof Web Sites
23967| [1003003] Microsoft Windows XP Hot Key Function Lets Physically Local Users Execute Administrator Hot Key Functions in Certain Situations
23968| [1002986] Microsoft Internet Explorer Version 6 Lets Remote Scripts Access and Send Local Files
23969| [1002979] Microsoft Windows Explorer Discloses Stored FTP Passwords to Local Users
23970| [1002973] Microsoft Internet Explorer (IE 6) Browser May Automatically and Silently Execute Arbitrary Code from a Remote Web Site When the User Views a Web Page or HTML-based E-mail
23971| [1002957] Microsoft Internet Information Server Can Be Crashed By Remote Users With HTTP Requests Containing Invalid Content-Length Values
23972| [1002942] Microsoft Internet Explorer May Execute Javascript Contained Within an 'About:' URL in an Unauthorized Security Domain When the URL Contains an Extraneous '%' Character
23973| [1002926] Microsoft Windows Operating System File Locking Design May Allow Local Users to Block Group Policy Scripts
23974| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
23975| [1002919] Microsoft Internet Explorer Browser Can Be Crashed By Certain Image Tags
23976| [1002915] Microsoft Outlook Web Access for Exchange May Execute Remotely Supplied Scripts When a Recipient Views a Malicious E-mail Message
23977| [1002885] Microsoft Internet Explorer Can Be Crashed By Malicious Javascript Causing a Stack Overflow in setTimeout() Function
23978| [1002823] Microsoft Internet Explorer Fails to Enforce Cookie Prompting Preferences for Local Security Zone
23979| [1002820] Microsoft Internet Explorer Allows Malicious Web Pages to Spoof Downloadable File Types And Execute Code on the User's Computer When Opened Directly from the Browser
23980| [1002819] Microsoft Internet Explorer ActiveX Flaw Permits Remote Malicious HTML Code Containing an 'htmlfile' or 'htmlfile_FullWindowEmbed' Object to Access Local Files and Potentially Execute Commands
23981| [1002802] Microsoft Help and Support Center Software (helpctr.exe) Has Buffer Overflow That May Allow a Remote User to Cause Arbitrary Code to Be Executed on a User's PC
23982| [1002773] Titan Application Firewall for IIS Web Server Fails to Decode URLs, Letting Remote Users Bypass URL-based Firewall Restrictions
23983| [1002772] Microsoft Internet Explorer Cookie Disclosure Fix Discloses Patch Information to Remote Users
23984| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
23985| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
23986| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
23987| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
23988| [1002728] Microsoft SQL Server May Disclose Database Passwords When Creating Data Transformation Service (DTS) Packages
23989| [1002702] Microsoft Passport May Disclose Wallet Contents, Including Credit Card and Contact Information, to Remote Users
23990| [1002693] Microsoft Internet Security and Acceleration Server UDP Fragmentation Processing Can Cause 100% of CPU Resources to Be Consumed
23991| [1002601] Microsoft Windows Me Universal Plug and Play (UPnP) Ssdpsrv.exe Server Component Can Be Crashed by Remote Users
23992| [1002595] Microsoft Internet Explorer Has Fixed Security Zone for about: URLs and Has Shared Cookie Flaw That Diminishes Cross-Site Scripting Protections
23993| [1002594] Microsoft Internet Explorer for Mac OS X is Configured to Automatically Execute Downloaded Files
23994| [1002581] Microsoft Terminal Servers Can Be Crashed By Remote Users Sending Certain Remote Desktop Protocol (RDP) Packets
23995| [1002560] Internet Explorer Sends Potentially Sensitive Web Browser Contents to Microsoft via the Network When an Error Occurs
23996| [1002559] Microsoft Office XP Sends Potentially Sensitive Information to Microsoft Via the Network When an Error Occurs
23997| [1002526] Microsoft Internet Explorer (IE) Web Browser Has Multiple URL-related Flaws That May Allow for Remote Code Execution, Remote HTTP Request Generation, and Application of Incorrect Security Restrictions
23998| [1002519] TYPSoft FTP Server for Microsoft Windows Can Be Crashed by Remote Users
23999| [1002487] Microsoft PowerPoint Macro Security Features Can Be Bypassed by Malformed PowerPoint Documents
24000| [1002486] Microsoft Excel Macro Security Features Can Be Bypassed by Malformed Excel Documents
24001| [1002456] Microsoft Outlook Web Access Directory Validation Flaw Lets Remote Users Consume CPU Resources by Requesting Mail from Nested Folders
24002| [1002421] Microsoft Index Server Sample File Discloses File Information to Remote Users
24003| [1002418] Counterpane's Password Safe Password Encryption Utility for Microsoft Windows May Disclose Passwords to Local Users in Certain Situations
24004| [1002413] Microsoft Outlook Express Will Execute Active Scripting in Plain Text E-mail Messages, Circumventing Some Scripting Controls
24005| [1002394] Microsoft Windows NT Remote Procedure Call (RPC) Services Can Be Crashed With Malformed Packets
24006| [1002385] Norton Anti-Virus For Microsoft Exchange Discloses User Path Information to Remote Users
24007| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
24008| [1002331] Internet Security Systems RealSecure Intrusion Detection Misses '%u' Encoded Attacks Against Microsoft Web Servers
24009| [1002330] Cisco Catalyst 6000 Intrusion Detection System Module Fails to Detect '%u' Encoding Obfuscation Attacks Against Microsoft Web Servers
24010| [1002329] Dragon Sensor Intrusion Detection System Does Not Detect Certain Attacks Against Microsoft Web Servers
24011| [1002327] Snort Network Intrusion Detection System Will Not Detect '%u' URL Encoding Attacks Against Microsoft Web Servers
24012| [1002326] Cisco Secure Intrusion Detection System (NetRanger) Fails to Detect Certain Attacks Against Microsoft Web Servers
24013| [1002317] Microsoft DNS Server Software Susceptible to DNS Cache Poisoning in Default Configuration, Allowing Remote Users to Inject False DNS Records in Certain Situations
24014| [1002269] Microsoft Outlook Web Access with SSL Can Be Crashed by Remote Users
24015| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
24016| [1002201] Microsoft Windows TCP/IP Stack Vulnerable to a Certain Man-in-the-Middle Denial of Service Attack
24017| [1002197] Microsoft Windows NNTP Network News Service Has a Memory Leak That Allows Remote Users to Cause the Server to Crash
24018| [1002124] Microsoft Windows 98 Operating System Can Be Crashed When Running a Web Server or Other Servers And the AUX Device is Accessed By the Program
24019| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
24020| [1002105] Microsoft SQL Database Server RPC Input Validation Failure Lets Remote Users Crash the Database Service
24021| [1002104] Microsoft Exchange Server RPC Input Validation Failure Lets Remote Users Crash the Exchange Service
24022| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
24023| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
24024| [1002075] Microsoft Services for Unix Memory Leak in Telnet and NFS Services Allows Remote Users to Crash the Operating System
24025| [1002028] Microsoft Exchange LDAP Service Can Be Crashed By Remote Users
24026| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
24027| [1001992] Microsoft Windows NT Lets Remote Users Cause Increased Packet Overhead and Increased CPU Resource Consumption
24028| [1001984] Microsoft Outlook Allows Rogue HTML to Execute Arbitrary Commands on the User's Host
24029| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
24030| [1001923] Microsoft's Internet Information Server's ASP Processor Can Be Crashed by Remote Users in Certain Situations
24031| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
24032| [1001819] Microsoft NetMeeting Can Be Crashed By Remote Users
24033| [1001816] Microsoft Visual Studio RAD Support Component of FrontPage Lets Remote Users Execute Arbitrary Code on the FrontPage Server
24034| [1001815] Microsoft Word May Execute Macros in Malformed Word Documents Without Warning Even if Macros are Disabled
24035| [1001775] Microsoft Index Server Lets Remote Users Execute Arbitrary Code With System Level Privileges, Giving Remote Users Full Control of the Operating System
24036| [1001734] Microsoft SQL Server May Let Remote Authenticated Users Take Full Control of the Database Server and the Underlying Operating System
24037| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
24038| [1001699] Microsoft Internet Explorer Web Browser May Allow Remote Users to Read Some Text Files on the Browser's Hard Drive
24039| [1001696] Microsoft Exchange Server's Outlook Web Access (OWA) Lets Remote Users Execute Arbitrary Code on the OWA User's Web Browser
24040| [1001687] Microsoft Outlook Express May Allow A Remote User to Obtain E-mail Destined for a Different User
24041| [1001661] Microsoft Hotmail May Allow a Worm to Send Mail to Other Destinations Listed in a Remote User's Inbox
24042| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
24043| [1001603] Microsoft Windows Media Player May Allow Remote Users to Execute Code Contained in Internet Shortcuts and View Files on the Media Player's Host
24044| [1001587] Microsoft Word for Windows and for Mac May Run Macros Linked By RTF Documents Without Warning
24045| [1001572] Apache Web Server on Microsoft Windows Platforms Allows Remote Users to Crash the Web Server
24046| [1001562] Microsoft Internet Explorer Allows Remote Web Sites to Cause a Different Web URL Address to Be Displayed in the Browser's Address Bar, Allowing Rogue Web Sites to Spoof the Browser and Masquerade as Different Web Sites
24047| [1001561] Microsoft Internet Explorer Web Browser Fails To Validate Digital Certificates in Some Configurations, Allowing Rogue Secure Web Sites to Spoof the Browser and Masquerade as a Different Secure Web Site
24048| [1001538] Older Version of Microsoft Internet Explorer Web Browser Can Be Crashed By Remote Users
24049| [1001537] Microsoft's Internet Information Server's FTP Services May Give Remote Users Information About User Account Names on the Server's Domain and Trusted Domains
24050| [1001535] Microsoft's Internet Information Server's FTP Services Can Be Crashed By Remote Users
24051| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
24052| [1001512] Microsoft Index Server for NT Can Be Crashed By Local Users, Allows Local Users to Execute Arbitrary Code With System Level Privileges, and Lets Remote Users View Certain Include Files
24053| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
24054| [1001467] Microsoft Windows Media Player ASX Processing Vulnerability Lets Remote Users Execute Arbitrary Code on the Player's Host System
24055| [1001445] Microsoft Internet Security and Acceleration Server May Allow Remote Users to Execute Arbitrary Code on the Firewall
24056| [1001424] Microsoft Internet Explorer Can Consume All Memory Due to Malicious HTML Code
24057| [1001380] Microsoft Internet Explorer and Outlook Express May Execute Arbitrary Code Without User Authorization or Intervention
24058| [1001360] Microsoft Windows Operating System DLL May Allow Malicious Remote Scripts to Run Code on the User's Host Without the User's Intervention
24059| [1001344] Microsoft Internet Explorer May Not Display File Extensions in Certain Cases
24060| [1001330] Microsoft ActiveSync Software for Portable Computing Devices Allows Portable Devices to Access Files on a Locked Server
24061| [1001319] Microsoft Internet Security and Acceleration Server Can Be Crashed By Remote Users
24062| [1001311] Netscape's SmartDownload Can Automatically Execute Arbitrary Code Without User Intervention or Knowledge for Both Netscape and Microsoft Browsers
24063| [1001255] Microsoft's Ping.exe Allows Local Users to Cause Certain Applications to Crash
24064| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
24065| [1001221] E-Mail Clients that use Microsoft Internet Explorer to Process HTML May Disguise Executable Attachments as Data Files
24066| [1001219] Microsoft's Internet Security and Acceleration Server Performance Can Be Significantly Affected By Remote Users Under Certain Configurations
24067| [1001216] Microsoft Internet Explorer Can Be Made to Execute Arbitrary Files on the User's Computer
24068| [1001211] TrendMicro's ScanMail E-Mail Virus Scanner for Microsoft Exchange Discloses Administrative System Usernames and Passwords
24069| [1001210] Microsoft Internet Explorer Allows Malicious Web Pages to Retrieve Files from the User's Computer
24070| [1001209] Microsoft Telnet Can Be Crashed Locally, Causing Other Applications Including Outlook Express To Crash
24071| [1001197] Microsoft Internet Explorer May Automatically Execute Certain E-mail Attachments
24072| [1001187] Microsoft Internet Explorer Is Vulnerable to Malicious Web Pages That May Obtain the User's Exchange E-mail Messages and May Access Restricted Web Server Directory Listings
24073| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
24074| [1001172] Microsoft Visual Studio Could Allow Users to Crash the Debugger or to Execute Code on the Server
24075| [1001163] Microsoft's Dr. Watson Diagnostic Utility May Reveal Passwords and Other Sensitive Information
24076| [1001147] Microsoft Outlook Express Crashes When Reading Certain E-mail Messages
24077| [1001142] Microsoft Internet Explorer Does Not Check for Revoked Digital Certificates (Two Fraudlent Certificates Are Known to Exist)
24078| [1001139] SurfControl for Microsoft Proxy Server May Fail to Block Sites
24079| [1001123] Microsoft's FTP Server May Allow Remote Users to Deny Service on the Server
24080| [1001110] A Microsoft German-Language Hotfix for Windows NT 4 Incorrectly Displays Some Security Events as Other Security Events
24081| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
24082|
24083| OSVDB - http://www.osvdb.org:
24084| [91195] Microsoft Windows 7 Unspecified ASLR Protection Mechanism Bypass
24085| [91194] Microsoft Windows 7 Kernel Unspecified Local Privilege Escalation (pwn2own)
24086| [91193] Microsoft Windows 7 Unspecified ASLR / DEP Protection Mechanism Bypass (pwn2own)
24087| [85619] Microsoft Windows Phone 7 X.509 Certificate Subject's Common Name (CN) Field Domain Name Validation Multiple Protocol SSL Server MitM Spoofing Weakness
24088| [67783] Microsoft Windows SDK for Windows 7 / .NET Framework 4 GraphEdit Path Subversion Arbitrary DLL Injection Code Execution
24089| [87555] Adobe ColdFusion for Microsoft IIS Unspecified DoS
24090| [87262] Microsoft IIS FTP Command Injection Information Disclosure
24091| [87261] Microsoft IIS Log File Permission Weakness Local Password Disclosure
24092| [86899] Microsoft IIS 302 Redirect Message Internal IP Address Remote Disclosure
24093| [83771] Microsoft IIS Tilde Character Request Parsing File / Folder Name Information Disclosure
24094| [83454] Microsoft IIS ODBC Tool ctguestb.idc Unauthenticated Remote DSN Initialization
24095| [83386] Microsoft IIS Non-existent IDC File Request Web Root Path Disclosure
24096| [82848] Microsoft IIS $INDEX_ALLOCATION Data Stream Request Authentication Bypass
24097| [76237] Microsoft Forefront Unified Access Gateway IIS NULL Session Cookie Parsing Remote DoS
24098| [71856] Microsoft IIS Status Header Handling Remote Overflow
24099| [70167] Microsoft IIS FTP Server Telnet IAC Character Handling Overflow
24100| [67980] Microsoft IIS Unspecified Remote Directory Authentication Bypass
24101| [67979] Microsoft IIS FastCGI Request Header Handling Remote Overflow
24102| [67978] Microsoft IIS Repeated Parameter Request Unspecified Remote DoS
24103| [66160] Microsoft IIS Basic Authentication NTFS Stream Name Permissions Bypass
24104| [65216] Microsoft IIS Extended Protection for Authentication Memory Corruption
24105| [62229] Microsoft IIS Crafted DNS Response Inverse Lookup Log Corruption XSS
24106| [61432] Microsoft IIS Colon Safe Extension NTFS ADS Filename Syntax Arbitrary Remote File Creation
24107| [61294] Microsoft IIS ASP Crafted semicolon Extension Security Bypass
24108| [61249] Microsoft IIS ctss.idc table Parameter SQL Injection
24109| [59892] Microsoft IIS Malformed Host Header Remote DoS
24110| [59621] Microsoft IIS CodeBrws.asp Off-By-One File Check Bypass Source Disclosure
24111| [59561] Microsoft IIS CodeBrws.asp Encoded Traversal Arbitrary File Source Disclosure
24112| [59360] Microsoft IIS ASP Page Visual Basic Script Malformed Regex Parsing DoS
24113| [57753] Microsoft IIS FTP Server Crafted Recursive Listing Remote DoS
24114| [57589] Microsoft IIS FTP Server NLST Command Remote Overflow
24115| [56474] Microsoft IIS WebDAV Extension URL Decode Crafted HTTP Request Authentication Bypass
24116| [55269] Microsoft IIS Traversal GET Request Remote DoS
24117| [54555] Microsoft IIS WebDAV Unicode URI Request Authentication Bypass
24118| [52924] Microsoft IIS WebDAV PROPFIND Method Forced Directory Listing
24119| [52680] Microsoft IIS httpext.dll WebDav LOCK Method Nonexistent File Request Parsing Memory Exhaustion Remote DoS
24120| [52238] Microsoft IIS IDC Extension XSS
24121| [49899] Microsoft IIS iissext.dll Unspecified ActiveX SetPassword Method Remote Password Manipulation
24122| [49730] Microsoft IIS ActiveX (adsiis.dll) GetObject Method Remote DoS
24123| [49059] Microsoft IIS IPP Service Unspecified Remote Overflow
24124| [45583] Microsoft IIS w/ Visual Interdev Unspecified Authentication Bypass
24125| [43451] Microsoft IIS HTTP Request Smuggling
24126| [41456] Microsoft IIS File Change Handling Local Privilege Escalation
24127| [41445] Microsoft IIS ASP Web Page Input Unspecified Arbitrary Code Execution
24128| [41091] Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass
24129| [41063] Microsoft IIS ODBC Tool newdsn.exe Remote DSN Creation
24130| [41057] Microsoft IIS w/ .NET MS-DOS Device Request Blacklist Bypass
24131| [35950] Microsoft IIS IUSR_Machine Account Arbitrary Non-EXE Command Execution
24132| [33457] Microsoft IIS Crafted TCP Connection Range Header DoS
24133| [28260] Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
24134| [27152] Microsoft Windows IIS ASP Page Processing Overflow
24135| [27087] Microsoft IIS SMTP Encapsulated SMTP Address Open Relay
24136| [23590] Microsoft IIS Traversal Arbitrary FPSE File Access
24137| [21805] Microsoft IIS Crafted URL Remote DoS
24138| [21537] Microsoft IIS Log File Permission Weakness Remote Modification
24139| [18926] Microsoft IIS SERVER_NAME Variable Spoofing Filter Bypass
24140| [17124] Microsoft IIS Malformed WebDAV Request DoS
24141| [17123] Microsoft IIS Multiple Unspecified Admin Pages XSS
24142| [17122] Microsoft IIS Permission Weakness .COM File Upload
24143| [15749] Microsoft IIS / Site Server code.asp Arbitrary File Access
24144| [15342] Microsoft IIS Persistent FTP Banner Information Disclosure
24145| [14229] Microsoft IIS asp.dll Scripting.FileSystemObject Malformed Program DoS
24146| [13985] Microsoft IIS Malformed HTTP Request Log Entry Spoofing
24147| [13760] Microsoft IIS Malformed URL Request DoS
24148| [13759] Microsoft IIS ISAPI .ASP Parser Script Tag LANGUAGE Argument Overflow
24149| [13634] Microsoft IIS Inetinfo.exe Malformed Long Mail File Name DoS
24150| [13558] Microsoft IIS SSL Request Resource Exhaustion DoS
24151| [13507] Microsoft IIS showfile.asp FileSystemObject Arbitrary File Access
24152| [13479] Microsoft IIS for Far East Parsed Page Source Disclosure
24153| [13473] Microsoft IIS on FAT Partition Local ASP Source Disclosure
24154| [13439] Microsoft IIS HTTP Request Malformed Content-Length Parsing Remote DoS
24155| [13433] Microsoft IIS WebDAV MKCOL Method Location Server Header Internal IP Disclosure
24156| [13432] Microsoft IIS WebDAV WRITE Location Server Header Internal IP Disclosure
24157| [13431] Microsoft IIS WebDAV Malformed PROPFIND Request Internal IP Disclosure
24158| [13430] Microsoft IIS aexp4.htr Password Policy Bypass
24159| [13429] Microsoft IIS aexp3.htr Password Policy Bypass
24160| [13428] Microsoft IIS aexp2b.htr Password Policy Bypass
24161| [13427] Microsoft IIS aexp2.htr Password Policy Bypass
24162| [13426] Microsoft IIS NTLM Authentication Request Parsing Remote Information Disclosure
24163| [13385] Microsoft IIS WebDAV Long PROPFIND/SEARCH Request DoS
24164| [11455] Microsoft IIS / PWS DOS Filename Request Access Bypass
24165| [11452] Microsoft IIS Double Byte Code Arbitrary Source Disclosure
24166| [11277] Microsoft IIS SSL ISAPI Filter Cleartext Information Disclosure
24167| [11257] Microsoft IIS Malformed GET Request DoS
24168| [11157] Microsoft IIS FTP Service PASV Connection Saturation DoS
24169| [11101] Microsoft IIS Multiple Slash ASP Page Request DoS
24170| [9315] Microsoft IIS getdrvs.exe ODBC Sample Information Disclosure
24171| [9314] Microsoft IIS mkilog.exe ODBC Sample Arbitrary Command Execution
24172| [9200] Microsoft IIS Unspecified XSS Variant
24173| [9199] Microsoft IIS shtml.dll XSS
24174| [8098] Microsoft IIS Virtual Directory ASP Source Disclosure
24175| [7807] Microsoft IIS ISAPI Virtual Directory UNC Mapping ASP Source Disclosure
24176| [7737] Microsoft IIS ASP Redirection Function XSS
24177| [7265] Microsoft IIS .ASP Session ID Disclosure and Hijacking
24178| [5851] Microsoft IIS Single Dot Source Code Disclosure
24179| [5736] Microsoft IIS Relative Path System Privilege Escalation
24180| [5693] Microsoft MS00-060 Patch IIS Malformed Request DoS
24181| [5633] Microsoft IIS Invalid WebDAV Request DoS
24182| [5606] Microsoft IIS WebDAV PROPFIND Request DoS
24183| [5584] Microsoft IIS URL Redirection Malformed Length DoS
24184| [5566] Microsoft IIS Form_VBScript.asp XSS
24185| [5316] Microsoft IIS ISAPI HTR Chunked Encoding Overflow
24186| [4864] Microsoft IIS TRACK Logging Failure
24187| [4863] Microsoft IIS Active Server Page Header DoS
24188| [4791] Microsoft IIS Response Object DoS
24189| [4655] Microsoft IIS ssinc.dll Long Filename Overflow
24190| [4535] Microsoft Media Services ISAPI nsiislog.dll POST Overflow
24191| [3512] Microsoft IIS ODBC Tool getdrvrs.exe Remote DSN Creation
24192| [3500] Microsoft IIS fpcount.exe Remote Overflow
24193| [3341] Microsoft IIS Redirect Response XSS
24194| [3339] Microsoft IIS HTTP Error Page XSS
24195| [3338] Microsoft IIS Help File XSS
24196| [3328] Microsoft IIS FTP Status Request DoS
24197| [3326] Microsoft IIS w3svc.dll ISAPI Filter URL Handling Remote DoS
24198| [3325] Microsoft IIS HTR ISAPI Overflow
24199| [3323] Microsoft IIS ISAPI .printer Extension Host Header Overflow
24200| [3320] Microsoft IIS ASP Server-Side Include Buffer Overflow
24201| [3316] Microsoft IIS HTTP Header Field Delimiter Overflow
24202| [3301] Microsoft IIS ASP Chunked Encoding Variant Heap Overflow
24203| [3284] Microsoft IIS Winmsdp.exe Arbitrary File Retrieval
24204| [3231] Microsoft IIS Log Bypass
24205| [2106] Microsoft Media Services ISAPI nsiislog.dll Overflow
24206| [1931] Microsoft IIS MIME Content-Type Header DoS
24207| [1930] Microsoft IIS SSI ssinc.dll Filename Handling Overflow
24208| [1826] Microsoft IIS Domain Guest Account Disclosure
24209| [1824] Microsoft IIS FTP DoS
24210| [1804] Microsoft IIS Long Request Parsing Remote DoS
24211| [1770] Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS
24212| [1750] Microsoft IIS File Fragment Disclosure
24213| [1543] Microsoft NT/IIS Invalid URL Request DoS
24214| [1504] Microsoft IIS File Permission Canonicalization Bypass
24215| [1465] Microsoft IIS .htr Missing Variable DoS
24216| [1325] Microsoft IIS Malformed Filename Request File Fragment Disclosure
24217| [1322] Microsoft IIS Malformed .htr Request DoS
24218| [1281] Microsoft IIS Escaped Character Saturation Remote DoS
24219| [1261] Microsoft IIS Chunked Transfer Encoding Remote Overflow DoS
24220| [1210] Microsoft IIS WebHits.dll ISAPI Filter Traversal Arbitrary File Access
24221| [1170] Microsoft IIS Escape Character URL Access Bypass
24222| [1083] Microsoft IIS FTP NO ACCESS Read/Delete File
24223| [1082] Microsoft IIS Domain Resolution Access Bypass
24224| [1041] Microsoft IIS Malformed HTTP Request Header DoS
24225| [1020] Microsoft IIS ISAPI GetExtensionVersion() Privilege Escalation
24226| [930] Microsoft IIS Shared ASP Cache Information Disclosure
24227| [929] Microsoft IIS FTP Server NLST Command Overflow
24228| [928] Microsoft IIS Long Request Log Evasion
24229| [815] Microsoft IIS ASP.NET trace.axd Application Tracing Information Disclosure
24230| [814] Microsoft IIS global.asa Remote Information Disclosure
24231| [782] Microsoft IIS / Site Server codebrws.asp Arbitrary File Access
24232| [771] Microsoft IIS Hosting Process (dllhost.exe) Out of Process Application Unspecified Privilege Escalation
24233| [768] Microsoft IIS ASP Chunked Encoding Heap Overflow
24234| [636] Microsoft IIS sqlqhit.asp Sample Script CiScope Parameter Information Disclosure
24235| [630] Microsoft IIS Multiple Malformed Header Field Internal IP Address Disclosure
24236| [568] Microsoft IIS idq.dll IDA/IDQ ISAPI Remote Overflow
24237| [564] Microsoft IIS ISM.dll Fragmented Source Disclosure
24238| [556] Microsoft IIS/PWS Encoded Filename Arbitrary Command Execution
24239| [525] Microsoft IIS Webserver Invalid Filename Request Arbitrary Command Execution
24240| [482] Microsoft IIS FrontPage Server Extensions (FPSE) Malformed Form DoS
24241| [475] Microsoft IIS bdir.htr Arbitrary Directory Listing
24242| [474] Microsoft IIS / Site Server viewcode.asp Arbitrary File Access
24243| [473] Microsoft IIS Multiple .cnf File Information Disclosure
24244| [471] Microsoft IIS ServerVariables_Jscript.asp Path Disclosure
24245| [470] Microsoft IIS Form_JScript.asp XSS
24246| [463] Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow
24247| [436] Microsoft IIS Unicode Remote Command Execution
24248| [425] Microsoft IIS WebDAV SEARCH Method Arbitrary Directory Forced Listing
24249| [391] Microsoft IIS IDA/IDQ Document Root Path Disclosure
24250| [390] Microsoft IIS Translate f: Request ASP Source Disclosure
24251| [308] Microsoft IIS Malformed File Extension URL DoS
24252| [285] Microsoft IIS repost.asp File Upload
24253| [284] Microsoft IIS IISADMPWD Virtual Directory Information Enumeration
24254| [283] Microsoft IIS /iissamples Multiple Sample Scripts Installed
24255| [277] Microsoft IIS / PWS %2e Request ASP Source Disclosure
24256| [276] Microsoft IIS ASP::$DATA Stream Request ASP Source Disclosure
24257| [275] Microsoft IIS newdsn.exe Remote Arbitrary File Creation
24258| [274] Microsoft IIS ctss.idc ODBC Sample Arbitrary Command Execution
24259| [273] Microsoft IIS Upgrade ism.dll Local Privilege Escalation
24260| [272] Microsoft IIS MDAC RDS Arbitrary Remote Command Execution
24261| [271] Microsoft IIS WebHits null.htw .asp Source Disclosure
24262| [98] Microsoft IIS perl.exe HTTP Path Disclosure
24263| [97] Microsoft IIS ISM.DLL HTR Request Overflow
24264| [96] Microsoft IIS idq.dll Traversal Arbitrary File Access
24265| [7] Microsoft IIS / Site Server showcode.asp source Parameter Traversal Arbitrary File Access
24266| [4] Microsoft IIS ExAir advsearch.asp Direct Request Remote DoS
24267| [3] Microsoft IIS ExAir query.asp Direct Request Remote DoS
24268| [2] Microsoft IIS ExAir search.asp Direct Request DoS
24269|_
24270445/tcp closed microsoft-ds conn-refused
242718080/tcp open http syn-ack Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
24272|_http-server-header: <empty>
24273| vulscan: VulDB - https://vuldb.com:
24274| [131683] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Win32k memory corruption
24275| [131642] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Active Directory privilege escalation
24276| [127822] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 Kernel information disclosure
24277| [125103] Microsoft Windows Server 2008 SP2 Graphics Component information disclosure
24278| [123853] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel Memory information disclosure
24279| [122858] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 LNK memory corruption
24280| [122833] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI+ memory corruption
24281| [121109] Microsoft Wireless Display Adapter V2 2.0.8350/2.0.8365/2.0.8372 privilege escalation
24282| [120449] Microsoft Forefront Unified Access Gateway 2000 InitParams.aspx Parameter Server-Side Request Forgery
24283| [119469] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Kernel privilege escalation
24284| [116015] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
24285| [114563] Microsoft Office 2007 SP3/2010 SP2/2013/2013 RT SP1 memory corruption
24286| [114528] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 GDI privilege escalation
24287| [114524] Microsoft ASP.NET Core 2.0 denial of service
24288| [114523] Microsoft ASP.NET Core 2.0 Kestrel Web Application privilege escalation
24289| [113257] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
24290| [113256] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
24291| [113255] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2012 Kernel information disclosure
24292| [113247] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
24293| [113246] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
24294| [113245] Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2012 EOT Font Engine information disclosure
24295| [113244] Microsoft Windows 7 SP1/Server 2008 R2 SP1 EOT Font Engine information disclosure
24296| [113235] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2016 privilege escalation
24297| [113234] Microsoft Office 2007 SP2/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24298| [113216] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24299| [112285] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24300| [112284] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24301| [112283] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24302| [112282] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24303| [111578] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24304| [111577] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24305| [111576] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24306| [111575] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24307| [111574] Microsoft Word 2003/2007/2010/2013/2016 Equation Editor memory corruption
24308| [111573] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
24309| [111572] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
24310| [111570] Microsoft Office 2007/2010/2013/2016 Equation Editor memory corruption
24311| [111568] Microsoft Excel 2007/2010/2013/2016 memory corruption
24312| [111566] Microsoft Word 2007/2010/2013/2016 memory corruption
24313| [111565] Microsoft Word 2007/2010/2013 Email Message memory corruption
24314| [111563] Microsoft Outlook 2007/2010/2013/2016 Email Message privilege escalation
24315| [111347] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Color Management Icm32.dll information disclosure
24316| [109388] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 memory corruption
24317| [109387] Microsoft ASP.NET Core 2.0 privilege escalation
24318| [109386] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24319| [109385] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature Macro privilege escalation
24320| [109381] Microsoft Office/Word 2007 SP3/2010 SP2 memory corruption
24321| [107703] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24322| [106530] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24323| [106528] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24324| [106515] Microsoft Publisher 2007 SP3/2010 SP2 memory corruption
24325| [106497] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Uniscribe memory corruption
24326| [106476] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24327| [106475] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24328| [105051] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 Font Library privilege escalation
24329| [105032] Microsoft Internet Explorer 9/10 on Server 2008/Server 2012 memory corruption
24330| [102513] Microsoft Windows XP SP3/Server 2003 SP2 OLE olecnv32.dll privilege escalation
24331| [102512] Microsoft Windows XP SP3/Server 2003 SP2 rpc privilege escalation
24332| [102511] Microsoft Windows XP SP3/Server 2003 SP2 RDP EsteemAudit privilege escalation
24333| [102447] Microsoft PowerPoint/SharePoint Server 2007 SP3 privilege escalation
24334| [102444] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
24335| [102442] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
24336| [102441] Microsoft Outlook 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24337| [102401] Microsoft Windows 7 SP1/Server 2008 R2 SP1 GDI USP10!NextCharInLiga Uniscribe Font information disclosure
24338| [101491] Microsoft Windows up to XP SP3/Server 2003 SP2 Remote Desktop Protocol gpkcsp.dll memory corruption
24339| [101017] Microsoft Office 2007 SP3/2010 SP2/2016 memory corruption
24340| [101012] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2016 memory corruption
24341| [101011] Microsoft Windows 7 SP1/Server 2008 SP2/Server 2008 R2 SP1 ActiveX Object Memory memory corruption
24342| [100854] Microsoft Windows Server 2003 SP2 RRAS ERRATICGOPHER memory corruption
24343| [99904] Microsoft Windows XP SP3/Server 2003 SP2 SmartCard Authentication RDP Packet EsteemAudit privilege escalation
24344| [99698] Microsoft OneNote 2007 SP3/2010 SP2 DLL Loader privilege escalation
24345| [99684] Microsoft Excel 2007 SP3/2010 SP2 Memory information disclosure
24346| [99654] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
24347| [99653] Microsoft Outlook 2007 SP3/2010 SP2/2011/2013 SP1/2016 Email Message privilege escalation
24348| [99533] Microsoft Office 2007/2010/2013/2016 RTF Document Necurs Dridex memory corruption
24349| [98561] Microsoft IIS 6.0 on Windows Server 2003 WebDAV ScStoragePathFromUrl Long Header memory corruption
24350| [98092] Microsoft SharePoint Server 2007 SP3 memory corruption
24351| [98088] Microsoft SharePoint Server 2007 SP3 memory corruption
24352| [98087] Microsoft Office 2007 SP3/2010 SP2 memory corruption
24353| [98086] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24354| [98085] Microsoft Excel 2007 SP3 memory corruption
24355| [98084] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
24356| [98083] Microsoft Word 2007 SP3/2010 SP2/2011 memory corruption
24357| [98078] Microsoft Word/Excel 2007 SP3 memory corruption
24358| [98072] Microsoft Office 2007 SP3/2010 SP2/Word Viewer Graphics Component privilege escalation
24359| [98071] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
24360| [98070] Microsoft Office 2007 SP3/2010 SP2/Word Viewer GDI+ information disclosure
24361| [94450] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
24362| [94449] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
24363| [94448] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1 information disclosure
24364| [94445] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 information disclosure
24365| [94441] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
24366| [94440] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24367| [94439] Microsoft Office 2007 SP3/2011 privilege escalation
24368| [94438] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
24369| [93542] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 memory corruption
24370| [93541] Microsoft Office 2007 SP3 denial of service
24371| [93539] Microsoft Office 2007/2010 SP2/2011 memory corruption
24372| [93538] Microsoft Office 2007/2010 SP2/2011/2013 SP1 memory corruption
24373| [93537] Microsoft Office 2007/2010 SP2/2011 memory corruption
24374| [93396] Microsoft Office 2007/2010/2011 memory corruption
24375| [93395] Microsoft Office 2007/2010/2011 memory corruption
24376| [93394] Microsoft Office 2007/2010 memory corruption
24377| [92596] Microsoft Windows Vista SP2/7 SP1/Server 2008 SP2/Server 2008 R2 Internet Messaging API File information disclosure
24378| [91554] Microsoft Exchange 2007/2010/2013/2016 Email information disclosure
24379| [91553] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24380| [91552] Microsoft Office 2007/2010/2013/2013 RT/2016 spoofing
24381| [91551] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24382| [91549] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24383| [91548] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24384| [91546] Microsoft Office 2007/2010/2013/2013 RT memory corruption
24385| [91545] Microsoft Office 2007/2010 memory corruption
24386| [91544] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24387| [91542] Microsoft Office 2007/2010/2013/2013 RT/2016 information disclosure
24388| [90707] Microsoft OneNote 2007/2010/2013/2013 RT/2016 information disclosure
24389| [90706] Microsoft Office 2007/2010/2013/2013 RT Graphics memory corruption
24390| [90705] Microsoft Office 2007/2010/2011 memory corruption
24391| [90703] Microsoft Office 2007/2010/2013/2013 RT/2016 memory corruption
24392| [89039] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
24393| [89034] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
24394| [87960] Microsoft Windows Server 2008 R2/Server 2012/Server 2012 R2 Active Directory denial of service
24395| [87955] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
24396| [87954] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
24397| [87953] Microsoft Exchange 2007/2010/2013/2016 Oracle Outside In Libraries privilege escalation
24398| [87939] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL memory corruption
24399| [87938] Microsoft Office 2007 SP3/2010 SP2/2011 information disclosure
24400| [87937] Microsoft Office 2007 SP3/2010 SP2/2011 memory corruption
24401| [87935] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
24402| [87934] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
24403| [87933] Microsoft Windows Vista SP2/Server 2008 SP2/Server 2008 R2 SP1 VBScript/JScript memory corruption
24404| [87147] Microsoft Office 2007/2010 memory corruption
24405| [87145] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
24406| [87144] Microsoft Windows Vista SP2/Server 2008 JScript/VBScript memory corruption
24407| [82228] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
24408| [82225] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
24409| [82224] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
24410| [81273] Microsoft Office 2007/2010/2013/2016 memory corruption
24411| [81272] Microsoft Office 2007/2010/2013 memory corruption
24412| [81265] Microsoft Windows Vista SP2/Server 2008 Library Loader memory corruption
24413| [80872] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24414| [80871] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24415| [80869] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
24416| [79506] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Library Loader memory corruption
24417| [79505] Microsoft Office 2007 memory corruption
24418| [79504] Microsoft Office 2007/2010/2013/2016 memory corruption
24419| [79503] Microsoft Office 2007/2010/2013 memory corruption
24420| [79502] Microsoft Office 2007/2010/2011 memory corruption
24421| [79501] Microsoft Office 2007/2010 memory corruption
24422| [79499] Microsoft Windows 7/Server 2008 R2 Uniscribe memory corruption
24423| [79493] Microsoft Windows Vista/Server 2008 Graphics memory corruption
24424| [79190] Microsoft Word 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
24425| [79189] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1/2016 Office Document memory corruption
24426| [79187] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2016 Sandbox privilege escalation
24427| [79167] Microsoft Windows Vista/7/Server 2008/Server 2008 R2 Journal memory corruption
24428| [78372] Microsoft Visio 2007 SP3/2010 SP2 UML Data memory corruption
24429| [78371] Microsoft SharePoint Server 2007 SP3/2010 SP2 InfoPath Forms Services XXE information disclosure
24430| [77646] Microsoft Office 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 EPS Image memory corruption
24431| [77629] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
24432| [77627] Microsoft Excel 2007 SP3/2010 SP2 Office Document memory corruption
24433| [77626] Microsoft Excel 2007 SP3/2010 SP2/2011/2016 Office Document memory corruption
24434| [77617] Microsoft Office 2007 SP3/2010 SP2 OpenType Font memory corruption
24435| [77252] Microsoft Office 2007 SP3/2010 SP2 Office Graphics Library Font memory corruption
24436| [77038] Microsoft Windows Server 2008 SP2 UDDI Services cross site scripting
24437| [76497] Microsoft PowerPoint 2007 SP3/2010 SP2/2013 SP1 Office Document memory corruption
24438| [76491] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
24439| [76467] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
24440| [76466] Microsoft Word 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
24441| [76464] Microsoft Excel 2007 SP3/2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
24442| [76463] Microsoft Excel 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 Office Document memory corruption
24443| [76449] Microsoft Windows 8/8.1/Server 2008/Server 2012/Server 2012 R2 Hyper-V memory corruption
24444| [76440] Microsoft SQL Server 2008/2008 R2/2012/2014 Virtual Function Uninitialized Memory memory corruption
24445| [76439] Microsoft SQL Server 2008/2008 R2/2012/2014 Uninitialized Memory memory corruption
24446| [76438] Microsoft SQL Server 2008/2008 R2/2012/2014 Pointer Casting privilege escalation
24447| [75783] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services cross site scripting
24448| [75338] Microsoft SharePoint 2007/2010/2013 Content privilege escalation
24449| [75337] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
24450| [75336] Microsoft Office 2007 SP3/2010 SP2/2011/2013 SP1/2013 RT SP1 memory corruption
24451| [74845] Microsoft Office 2007/2010/2013 Document Use-After-Free memory corruption
24452| [74844] Microsoft Office 2007/2010 Document Use-After-Free memory corruption
24453| [74837] Microsoft Office 2007/2010/2011/2013 RTF Document Use-After-Free privilege escalation
24454| [73979] Microsoft Exchange Server 2003 SP1/2003 CU7 Meeting privilege escalation
24455| [73978] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
24456| [73977] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
24457| [73976] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
24458| [73975] Microsoft Exchange Server 2003 SP1/2003 CU7 cross site scripting
24459| [73964] Microsoft SharePoint 2007/2010/2013 cross site scripting
24460| [69158] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
24461| [69157] Microsoft Office 2007/2010/2013 OneTableDocumentStream memory corruption
24462| [69155] Microsoft Excel 2007/2010/2013/- Object memory corruption
24463| [68416] Microsoft Exchange 2007/2010/2013 Outlook Web Access Token spoofing
24464| [68409] Microsoft Office 2007/2010/2013 Use-After-Free memory corruption
24465| [68408] Microsoft Excel 2007/2010/2013 memory corruption
24466| [68407] Microsoft Excel 2007/2010 memory corruption
24467| [68405] Microsoft Word 2007/2010 Index Use-After-Free memory corruption
24468| [68195] Microsoft Windows Vista/7/Server 2003/Server 2008 Input Method Editor Sandbox privilege escalation
24469| [68189] Microsoft Windows Server 2003 SP2 TCP/IP Stack Stack-Based memory corruption
24470| [68188] Microsoft Word 2007 File memory corruption
24471| [68187] Microsoft Word 2007 File memory corruption
24472| [68186] Microsoft Word 2007 File memory corruption
24473| [67829] Microsoft Office 2007/2010/2011 Object memory corruption
24474| [67825] Microsoft .NET Framework 2.0/3.5/3.5.1 ASLR privilege escalation
24475| [71337] Microsoft Office 2000/2004/XP memory corruption
24476| [67355] Microsoft OneNote 2007 File Processing privilege escalation
24477| [67354] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 SQL Master Data Services cross site scripting
24478| [67353] Microsoft SQL Server 2008 SP3/2008 R2 SP2/2012 SP1/2014 T-SQL Query Stack-Based memory corruption
24479| [67018] Microsoft Windows Server 2008/Server 2012/Server 2012 R2 Service Bus AMQP Message denial of service
24480| [13545] Microsoft Word 2007 Embedded Font memory corruption
24481| [13397] Microsoft Windows XP/2000/Server 2003 DHCP Response DHCP ACK spoofing
24482| [13462] Microsoft Visual Studio 2002/2003/2005/2010 Debug Interface msdia.dll PDB File memory corruption
24483| [13229] Microsoft Office 2007/2010/2013 Common Control Library MSCOMCTL.OCX privilege escalation
24484| [13227] Microsoft Office 2007/2010/2013 Chinese Grammar Checker Library privilege escalation
24485| [13226] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
24486| [13225] Microsoft SharePoint Server 2007/2010/2013 cross site scripting
24487| [13224] Microsoft SharePoint Server 2007/2010/2013 Page memory corruption
24488| [12859] Microsoft Word 2003 Office Document Stack-Based memory corruption
24489| [12852] Microsoft Publisher 2003/2007 Publisher File pubconv.dll memory corruption
24490| [12845] Microsoft Word 2003 Office File Stack-Based memory corruption
24491| [12844] Microsoft Word 2007/2010 Office File memory corruption
24492| [12843] Microsoft Office 2007/2010/2011/2013 XML Parser Nested Entities Memory Consumption denial of service
24493| [12687] Microsoft Word/Office/Outlook 2003/2007/2010/2013 RTF Document memory corruption
24494| [12530] Microsoft Windows XP/Vista/Server 2003/Server 2008/Server 2012 Security Account Manager Lockout privilege escalation
24495| [12266] Microsoft .NET Framework 2.0 SP2/3.5.1 ASLR Bypass privilege escalation
24496| [12070] Apple Pages 2.0/2.0.1/2.0.2/5.0/5.0.1 on Mac Microsoft Word Document memory corruption
24497| [11950] Microsoft Office Compability Pack/Word 2007 SP3 File memory corruption
24498| [11949] Microsoft Word Viewer/Office Compatibility Pack/Word 2003 SP3/2007 SP3 File memory corruption
24499| [11448] Microsoft Office 2007/2010 Address Space Layout Randomization privilege escalation
24500| [11151] Microsoft Outlook 2007/2010/2013/- S/MIME Certificate Metadata Expansion memory corruption
24501| [11149] Microsoft Office 2003/2007/2010/2013/- WordPerfect Document epsimp32.flt memory corruption
24502| [11148] Microsoft Office 2003/2007 WordPerfect Document epsimp32.flt memory corruption
24503| [11146] Microsoft Office 2003/2007 epsimp32.flt memory corruption
24504| [11230] Microsoft Word 2003 DOC Document Embedded Image denial of service
24505| [11081] Microsoft Windows Vista/Server 2008 TIFF Image memory corruption
24506| [10648] Microsoft Word 2007 Word File memory corruption
24507| [10647] Microsoft Word 2003 Word File memory corruption
24508| [10643] Microsoft SharePoint Server 2007/2010/2013 Input Sanitizer memory corruption
24509| [10642] Microsoft SharePoint Server 2007/2010 Content Display in Frames privilege escalation
24510| [10247] Microsoft SharePoint Server 2007/2010/2013 Online Cloud cross site scripting
24511| [10245] Microsoft Office 2003/2007/2010 Word File memory corruption
24512| [10244] Microsoft Office 2003 SP3 Word File memory corruption
24513| [10243] Microsoft Office 2003/2007 Word File memory corruption
24514| [10242] Microsoft Office 2007 Word File memory corruption
24515| [10241] Microsoft Office 2007 Word File memory corruption
24516| [10240] Microsoft Office 2003/2007/2010 Word File memory corruption
24517| [10239] Microsoft Office 2003/2007 Word File memory corruption
24518| [10238] Microsoft Excel 2003/2007 XML External Entity Data information disclosure
24519| [10237] Microsoft Excel 2003/2007/2010 XML External Entity Data information disclosure
24520| [10236] Microsoft Word/Office 2003/2007 XML External Entity Data information disclosure
24521| [10234] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
24522| [10232] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
24523| [10231] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
24524| [10230] Microsoft Word/Sharepoint 2003 SP3/2007 SP3/2010 SP1 Office File memory corruption
24525| [10229] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
24526| [10228] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
24527| [10227] Microsoft Access 2007/2010/2013 Access File ACCDB File memory corruption
24528| [10192] Microsoft Windows XP SP3/Vista/7/2000/Server 2003 SP2 Windows Theme File privilege escalation
24529| [10191] Microsoft Windows XP/Server 2003 OLE Object privilege escalation
24530| [10190] Microsoft Windows Vista/7/8/Server 2008 Active Directory denial of service
24531| [10189] Microsoft Outlook 2007/2010 S/MIME privilege escalation
24532| [9941] Microsoft Windows XP/Server 2003 Unicode Scripts Processor USP10.DLL Uniscribe Font memory corruption
24533| [9929] Microsoft Windows Server 2008/Server 2012 Active Directory Federation Services Unspecified Account information disclosure
24534| [9715] Microsoft PowerPoint 2007 DirectShow Runtime quartz.dll GetMaxSampleSize denial of service
24535| [9397] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Array privilege escalation
24536| [9394] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 on 64-bit Array memory corruption
24537| [9393] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Permission privilege escalation
24538| [8738] Microsoft Visio 2003 SP3/2007 SP3/2010 SP1 XML Parser File information disclosure
24539| [8737] Microsoft Word 2003 SP3 Shape Data Parser File memory corruption
24540| [8736] Microsoft Publisher 2003 SP3 PUB File memory corruption
24541| [8735] Microsoft Publisher 2003 SP3/2007 SP3/2010 SP1 PUB File memory corruption
24542| [8734] Microsoft Publisher 2003 SP3 PUB File memory corruption
24543| [8733] Microsoft Publisher 2003 SP3 PUB File memory corruption
24544| [8732] Microsoft Publisher 2003 SP3 PUB File memory corruption
24545| [8731] Microsoft Publisher 2003 SP3 PUB File memory corruption
24546| [8730] Microsoft Publisher 2003 SP3 PUB File memory corruption
24547| [8729] Microsoft Publisher 2003 SP3 PUB File memory corruption
24548| [8728] Microsoft Publisher 2003 SP3 PUB File memory corruption
24549| [8727] Microsoft Publisher 2003 SP3 PUB File memory corruption
24550| [8726] Microsoft Publisher 2003 PUB File Eingabe memory corruption
24551| [8723] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 XML File spoofing
24552| [7643] Microsoft Windows Server 2008 R2/Server 2012 NFS Server NULL Pointer Dereference denial of service
24553| [7642] Microsoft Exchange 2007/2010 Outlook Web Access vspdx.dll) privilege escalation
24554| [7641] Microsoft Windows XP/Vista/Server 2003/Server 2008 DirectShow Quartz.dll memory corruption
24555| [8589] Microsoft System Center Operations Manager 2007 SP1/2007 R2 ViewTypeManager.aspx cross site scripting
24556| [7252] Microsoft System Center Operations Manager 2007 ExecuteTask.aspx cross site scripting
24557| [7251] Microsoft System Center Operations Manager 2007 cross site scripting
24558| [7248] Microsoft Windows 7/Server 2008 R2 Print Spooler privilege escalation
24559| [7121] Microsoft Exchange 2007/2010 RSS Feed denial of service
24560| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
24561| [62914] Microsoft Office 2003 SP3/2007 SP3/2008/2010 SP1/2011 Spreadsheet Use-After-Free memory corruption
24562| [7058] Microsoft Windows 7/Server 2008 R2 DHCPv6 Message denial of service
24563| [6935] Microsoft Office Excel 2003/2007/2010 Input Sanitizer File Stack-based memory corruption
24564| [6934] Microsoft Office Excel 2003/2007/2010 Input Sanitizer memory corruption
24565| [6933] Microsoft Office Excel 2003/2007/2010 SerAuxErrBar File memory corruption
24566| [6929] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 Web Proxy Setting Auto-Discovery memory corruption
24567| [6927] Microsoft .NET Framework 2.0 SP2/3.5.1 Trusted Code Function information disclosure
24568| [6918] Microsoft Excel 2007 SP2 Input Sanitizer File memory corruption
24569| [6830] Microsoft Word 2007/2010 File memory corruption
24570| [6819] Microsoft Excel 2007 File memory corruption
24571| [6627] Microsoft Windows 7/Server 2008 R2 Kerberos denial of service
24572| [6626] Microsoft SharePoint/Lync/Infopath 2007/2010 HTML Sanitization cross site scripting
24573| [6622] Microsoft Word 2003/2007/2010/- RTF Document memory corruption
24574| [6621] Microsoft Word 2007 PAPX memory corruption
24575| [62239] Microsoft Systems Management Server 2003 Configuration Manager Reflected cross site scripting
24576| [5945] Microsoft Office 2007/2010 Computer Graphics Metafile memory corruption
24577| [5939] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Print Spooler Service memory corruption
24578| [5938] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 R2 Remote Administration Protocol netapi32.dll RAP Request denial of service
24579| [5933] Microsoft SQL Server 2000/2005/2008/2008 R2 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
24580| [5932] Microsoft Office 2003/2007/2010 Common Controls TabStrip ActiveX MSCOMCTL.OCX memory corruption
24581| [5654] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 information disclosure
24582| [5653] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
24583| [5652] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 win32k.sys memory corruption
24584| [5650] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
24585| [5649] Microsoft Office 2003/2007/2010 libraries memory corruption
24586| [5645] Microsoft SharePoint 2007/2010/3.0 Reflected cross site scripting
24587| [5643] Microsoft SharePoint 2007/2010 information disclosure
24588| [5642] Microsoft SharePoint 2007 cross site request forgery
24589| [5553] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Font atmfd.dll denial of service
24590| [5524] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 memory corruption
24591| [5518] Microsoft .NET Framework 2.0 SP2/3.5/3.5.1/4/4.5 memory corruption
24592| [5362] Microsoft Office 2003/2007 GDI+ memory corruption
24593| [5291] Microsoft Visual Studio 2008 Incremental Linker link.exe ConvertRgImgSymToRgImgSymEx memory corruption
24594| [5268] Microsoft Office 2008 on Mac RTF Pfragment File memory corruption
24595| [5080] Microsoft SQL Server 2005/2008/2008R2 CREATE DATABASE sql injection
24596| [5050] Microsoft Office 2007 WPS Converter Heap-based memory corruption
24597| [5049] Microsoft SQL Server 2000/2005/2008 MSCOMCTL.OCX privilege escalation
24598| [5048] Microsoft Office 2003/2007/2010 MSCOMCTL.OCX privilege escalation
24599| [5046] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Windows Authenticode Signature Verification WinVerifyTrust Signature privilege escalation
24600| [4803] Microsoft Windows Server 2003/Server 2008 DNS Server Domain Resource Record Query Parser denial of service
24601| [4802] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Protocol denial of service
24602| [4798] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Remote Desktop Service memory corruption
24603| [60205] Microsoft .NET Framework 2.0 SP2/3.5.1 Heap-based memory corruption
24604| [4642] Microsoft .NET Framework 2.0 SP2/3.5.1/4 XAML Browser Application memory corruption
24605| [60065] Microsoft Windows 2000 mod_sql unknown vulnerability
24606| [4535] Microsoft Windows XP/Server 2003 Object Packager packager.exe privilege escalation
24607| [4534] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Line21 DirectShow Filter Quartz.dll/Qdvd.dll Media File memory corruption
24608| [4533] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Multimedia Library winmm.dll MIDI File memory corruption
24609| [4507] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 Forms Authentication Redirect
24610| [59666] Microsoft Publisher 2003/2007 "Publisher memory corruption
24611| [4482] Microsoft Word 2007/2010/2011 Document Parser memory corruption
24612| [4480] Microsoft Excel 2003 memory corruption
24613| [4478] Microsoft Windows XP/Server 2003 OLE Objects Memory Management memory corruption
24614| [4477] Microsoft PowerPoint 2007 OfficeArt Use-After-Free memory corruption
24615| [4474] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Active Directory Query memory corruption
24616| [4473] Microsoft Powerpoint 2007/2010 DLL-Loader memory corruption
24617| [4471] Microsoft Office 2003/2007 Publisher Out-of-Bounds memory corruption
24618| [4470] Microsoft Office 2003 SP3 memory corruption
24619| [4453] Microsoft Excel 2003 Record Parser memory corruption
24620| [4446] Microsoft Office 2008/2007 OfficeArt Record Parser memory corruption
24621| [4445] Microsoft Office 2007/2010/2011 Word Document Parser memory corruption
24622| [4438] Microsoft Windows Vista/7/Server 2008 TCP/IP Reference Counter denial of service
24623| [5358] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 TrueType Font Handling memory corruption
24624| [59005] Microsoft Host Integration Server 2004 denial of service
24625| [58492] Microsoft SharePoint Server 2007 Spreadsheet memory corruption
24626| [58491] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
24627| [58490] Microsoft Office Compatibility Pack 2007 Spreadsheet memory corruption
24628| [58489] Microsoft Office 2004/2007/2008/2010/2011 Spreadsheet memory corruption
24629| [58488] Microsoft Office 2007/2010 memory corruption
24630| [4412] Microsoft Office 2003/2007 Library Loader Designfehler
24631| [4411] Microsoft Excel 2003 memory corruption
24632| [4409] Microsoft Windows Server 2003/Server 2008 WINS unknown vulnerability
24633| [58240] Microsoft Visio 2003/2007 memory corruption
24634| [58237] Microsoft Visio 2003/2007/2010 memory corruption
24635| [4396] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
24636| [4393] Microsoft Windows Server 2008 DNS Service memory corruption
24637| [4391] Microsoft .NET Framework 2.0 SP2/3.5.1/4 Socket Restriction privilege escalation
24638| [4390] Microsoft Windows Server 2008 Remote Desktop Web Access cross site scripting
24639| [4388] Microsoft Windows Vista/7/Server 2008 File Metadata Parser denial of service
24640| [57691] Microsoft SQL Server 2008 Web Service information disclosure
24641| [57690] Microsoft Excel 2002/2003 Spreadsheet memory corruption
24642| [57689] Microsoft Excel 2002 Spreadsheet memory corruption
24643| [57688] Microsoft Excel 2002 Spreadsheet memory corruption
24644| [57687] Microsoft Excel 2002/2003/2007 Spreadsheet memory corruption
24645| [57686] Microsoft Excel 2002 Spreadsheet memory corruption
24646| [57685] Microsoft Excel 2002/2003/2007 Array Access memory corruption
24647| [57684] Microsoft Excel 2002/2003/2007/2010 Spreadsheet memory corruption
24648| [4369] Microsoft Excel 2002/2003/2007 memory corruption
24649| [4367] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
24650| [4362] Microsoft Windows Vista/7/Server 2008 denial of service
24651| [57420] Microsoft PowerPoint 2002/2003 memory corruption
24652| [4349] Microsoft Office 2004/2008/2007 Presentation File Parser memory corruption
24653| [4348] Microsoft Powerpoint 2002/2003/2007 memory corruption
24654| [57077] Microsoft Excel 2002 Uninitialized Memory memory corruption
24655| [57078] Microsoft Office 2003/2007/Xp docx unknown vulnerability
24656| [57079] Microsoft PowerPoint 2002/2003/2007/2010 memory corruption
24657| [57076] Microsoft Excel 2002/2003 memory corruption
24658| [57075] Microsoft Excel 2002/2003 memory corruption
24659| [57074] Microsoft Excel 2002 memory corruption
24660| [57073] Microsoft Excel 2002/2003/2007/2010 memory corruption
24661| [4334] Microsoft .NET Framework 2.0 SP2/3.5 SP1/3.5.1/4.0 JIT Compiler memory corruption
24662| [4301] Microsoft Windows Server 2003 SMB Browser Heap-based denial of service
24663| [56475] Microsoft Office 2004/2008 memory corruption
24664| [56414] Microsoft Visio 2002/2003/2007 ELEMENTS.DLL memory corruption
24665| [56413] Microsoft Visio 2002/2003/2007 Exception ORMELEMS.DLL memory corruption
24666| [4298] Microsoft Windows 7/Server 2008 JScript/VBScript Engine information disclosure
24667| [4297] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 OpenType Compact Font Format Driver privilege escalation
24668| [4296] Microsoft Windows XP/Server 2003 LSASS Authentication Request unknown vulnerability
24669| [4295] Microsoft Windows 7/Server 2008 Kerberos weak authentication
24670| [4294] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys unknown vulnerability
24671| [4293] Microsoft Windows XP/Server 2003 Kerberos CRC32 Checksum privilege escalation
24672| [4292] Microsoft Windows XP/Server 2003 CSRSS Logoff privilege escalation
24673| [4289] Microsoft Excel 2007 Shape Data Parser memory corruption
24674| [4286] Microsoft Powerpoint 2007 OfficeArt Container Parser memory corruption
24675| [4279] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 MHTML cross site scripting
24676| [56176] Microsoft Windows XP/7/Server 2003 fxscover.exe CDrawPoly::Serialize memory corruption
24677| [55772] Microsoft Publisher 2002 pubconv.dll memory corruption
24678| [55771] Microsoft Publisher 2002/2003/2010 memory corruption
24679| [55765] Microsoft Office 2003/Xp Integer memory corruption
24680| [55764] Microsoft Office 2003/Xp memory corruption
24681| [55750] Microsoft Publisher 2002/2003 pubconv.dll memory corruption
24682| [55749] Microsoft Publisher 2002/2003/2007/2010 pubconv.dll memory corruption
24683| [55748] Microsoft Publisher 2002/2003/2007 pubconv.dll memory corruption
24684| [4230] Microsoft Exchange 2007 on 64-bit RPC store.exe MAPI Request denial of service
24685| [4229] Microsoft SharePoint 2007 Document Conversion Launcher Service Eingabeung\xC3\xBCltigkeit
24686| [4228] Microsoft Windows Server 2008 Hyper-V VMBus denial of service
24687| [4224] Microsoft Windows Vista/7/Server 2008 Consent User Interface privilege escalation
24688| [4231] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Driver win32k.sys GreEnableEUDC denial of service
24689| [55420] Microsoft Office 2007/2010 memory corruption
24690| [55419] Microsoft Office 2004/2008/2011/Xp memory corruption
24691| [55412] Microsoft PowerPoint Viewer 2007 memory corruption
24692| [55411] Microsoft PowerPoint 2002/2003 memory corruption
24693| [4204] Microsoft Windows Server 2008 Color Control Panel Eingabeung\xC3\xBCltigkeit
24694| [54995] Microsoft Office 2004/2008 memory corruption
24695| [54994] Microsoft Office 2004/2008 Out-of-Bounds memory corruption
24696| [54993] Microsoft Office Compatibility Pack 2007 memory corruption
24697| [54992] Microsoft Excel 2002 memory corruption
24698| [54991] Microsoft Office 2004 Future memory corruption
24699| [54990] Microsoft Office 2004 memory corruption
24700| [54989] Microsoft Office 2004/2008 memory corruption
24701| [54988] Microsoft Excel 2002 memory corruption
24702| [54987] Microsoft Excel 2002 memory corruption
24703| [54986] Microsoft Excel 2002/2003 memory corruption
24704| [54985] Microsoft Office Compatibility Pack 2003/2004/2007/2008 memory corruption
24705| [54984] Microsoft Office 2004/2008 memory corruption
24706| [54983] Microsoft Excel 2002 Integer memory corruption
24707| [54980] Microsoft Word 2002/2003 memory corruption
24708| [54979] Microsoft Word 2002 memory corruption
24709| [54978] Microsoft Word 2002 memory corruption
24710| [54977] Microsoft Word 2002 Heap-based memory corruption
24711| [54976] Microsoft Word 2002 memory corruption
24712| [54975] Microsoft Word 2002 memory corruption
24713| [54974] Microsoft Word 2002 memory corruption
24714| [54973] Microsoft Word 2002 memory corruption
24715| [54972] Microsoft Word 2002 memory corruption
24716| [54971] Microsoft Word 2002 memory corruption
24717| [4197] Microsoft SharePoint 2007/3.0 cross site scripting
24718| [4196] Microsoft Word 2002/2003/2007/2010 Stack-based memory corruption
24719| [4194] Microsoft Windows Vista/7/Server 2008 SChannel Client Certificate Request denial of service
24720| [54774] Microsoft Word 2003 word_crash_11.8326.8324_poc.doc denial of service
24721| [54757] Microsoft SharePoint Server 2007 HTML Sanitization SafeHTML cross site scripting
24722| [4186] Microsoft Outlook 2002/2003/2007 Content Parser Heap-based memory corruption
24723| [54584] Microsoft Visual C++ 2005 AtlTraceTool8.exe unknown vulnerability
24724| [54554] Microsoft Groove 2007 mso.dll memory corruption
24725| [4187] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack Ipv4SetEchoRequestCreate() denial of service
24726| [54322] Microsoft Word 2002/2003 memory corruption
24727| [54321] Microsoft Office Compatibility Pack 2007 memory corruption
24728| [54320] Microsoft Office Compatibility Pack 2007 memory corruption
24729| [54319] Microsoft Office Compatibility Pack 2007 memory corruption
24730| [54318] Microsoft .NET Framework 2.0 SP1/2.0 SP2/3.5/3.5 SP1/3.5.1 Interfaces memory corruption
24731| [4165] Microsoft Windows Vista/7/Server 2008 TCP/IP Stack denial of service
24732| [4162] Microsoft Windows Vista/7/Server 2008 Kernel memory corruption
24733| [4159] Microsoft Excel 2002/2003 SXDB PivotTable Cache Data Record memory corruption
24734| [4149] Microsoft Windows XP/Vista/7/Server 2003/Server 2008 Shell Shortcut Parser memory corruption
24735| [54083] Microsoft Access 2003 ActiveX Control ACCWIZ.dll memory corruption
24736| [4146] Microsoft Outlook 2002/2003/2007 SMB Attachment PR_ATTACH_METHOD memory corruption
24737| [4145] Microsoft Access 2003/2007 ActiveX ACCWIZ.dll memory corruption
24738| [54617] Microsoft Outlook Web Access up to 2007 cross site request forgery
24739| [4151] Microsoft Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel memory corruption
24740| [53591] Microsoft Windows Server 2003 GetServerName cross site scripting
24741| [53505] Microsoft Excel 2002/2007 memory corruption
24742| [53501] Microsoft Excel 2002 memory corruption
24743| [53500] Microsoft Excel 2002 memory corruption
24744| [53499] Microsoft Excel 2002 memory corruption
24745| [53495] Microsoft Excel 2002/2003/2007 memory corruption
24746| [53494] Microsoft Excel 2002 Stack-based memory corruption
24747| [53504] Microsoft Excel 2002 memory corruption
24748| [53503] Microsoft Excel 2002 Stack-Based memory corruption
24749| [53502] Microsoft Excel 2002 Heap-based memory corruption
24750| [53498] Microsoft Excel 2002 Stack-based memory corruption
24751| [53497] Microsoft Excel 2002 memory corruption
24752| [53496] Microsoft Excel 2002 memory corruption
24753| [53493] Microsoft Excel 2002/2003/2007 memory corruption
24754| [4133] Microsoft Office 2003/2007/Xp COM Object Instantiator memory corruption
24755| [53366] Microsoft ASP.NET 2.0 cross site scripting
24756| [53385] Microsoft Exchange Server 2007 Outlook Web Access cross site scripting
24757| [53164] Microsoft Office 2003/2007/Xp ActiveX Control VBE6.DLL memory corruption
24758| [53054] Microsoft VISIO 2002/2003/2007 VISIODWG.DLL memory corruption
24759| [4125] Microsoft SharePoint 2007/3.0 help.aspx cross site scripting
24760| [52777] Microsoft Publisher 2002/2003/2007 memory corruption
24761| [52773] Microsoft Visio 2002/2003/2007 memory corruption
24762| [52772] Microsoft Visio 2002/2003/2007 memory corruption
24763| [4107] Microsoft Windows 7/Server 2008 Kernel denial of service
24764| [4103] Microsoft Windows Server 2003 Media Services Stack-based memory corruption
24765| [52543] Microsoft Virtual PC 2007 unknown vulnerability
24766| [52148] Microsoft Office 2004/2008/2007 Uninitialized Memory memory corruption
24767| [52147] Microsoft Office 2004/2008/2007 Spreadsheet Uninitialized Memory memory corruption
24768| [52146] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
24769| [52145] Microsoft Office 2004/2008/2007 Spreadsheet Heap-based memory corruption
24770| [52144] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
24771| [52143] Microsoft Office 2004/2008/2007 Spreadsheet memory corruption
24772| [4090] Microsoft Excel 2002/2003/2007 memory corruption
24773| [52036] Microsoft Windows 2000 MsgBox memory corruption
24774| [51995] Microsoft SharePoint Server up to 2006 cross site scripting
24775| [51810] Microsoft Office 2004/Xp MSO.DLL memory corruption
24776| [51802] Microsoft PowerPoint 2003 Stack-based memory corruption
24777| [51801] Microsoft PowerPoint 2003 Stack-based memory corruption
24778| [51800] Microsoft PowerPoint 2002/2003 Use-After-Free memory corruption
24779| [51799] Microsoft PowerPoint 2002/2003 memory corruption
24780| [51798] Microsoft PowerPoint 2002/2003 Heap-based memory corruption
24781| [4082] Microsoft Powerpoint 2002 memory corruption
24782| [54550] Microsoft PowerPoint 2007 rpawinet.dll memory corruption
24783| [54556] Microsoft Visio 2003 mfc71enu.dll unknown vulnerability
24784| [51497] Microsoft Windows Live Messenger 2009 ActiveX Control msnmsgr.exe denial of service
24785| [51133] Microsoft Windows 2000 SP4/XP SP2/SP3/Server 2003 SP2 memory corruption
24786| [51074] Microsoft Office 2002/2003 Integer memory corruption
24787| [4069] Microsoft Project 2007/2003 Project Memory Validator memory corruption
24788| [50794] Microsoft Office 2004/2008 Spreadsheet memory corruption
24789| [50793] Microsoft Office 2004/2008 Spreadsheet memory corruption
24790| [50792] Microsoft Office 2004/2008 Spreadsheet memory corruption
24791| [50791] Microsoft Office 2004/2008 Spreadsheet memory corruption
24792| [50790] Microsoft Office 2004/2008 Spreadsheet Heap-based memory corruption
24793| [50788] Microsoft Office 2004/2008 Spreadsheet memory corruption
24794| [50787] Microsoft Office 2004/2008 Spreadsheet memory corruption
24795| [50786] Microsoft Windows 2000 llssrv.exe memory corruption
24796| [50789] Microsoft Office 2004/2008 Spreadsheet memory corruption
24797| [4056] Microsoft Word 2002/2003 File Information Block Parser Stack-based memory corruption
24798| [50660] Microsoft SharePoint Server 2007 unknown vulnerability
24799| [50443] Microsoft Office Powerpoint 2007 Integer memory corruption
24800| [50432] Microsoft .NET Framework 2.0/2.0 SP1/2.0 SP2/3.5/3.5 SP1 memory corruption
24801| [49866] Microsoft Windows Server 2003 memory corruption
24802| [4031] Microsoft Windows Vista/Server 2008 SMB Processor EducatedScholar memory corruption
24803| [4030] Microsoft Windows Vista/Server 2008 Wireless LAN AutoConfig Service Heap-based memory corruption
24804| [4029] Microsoft Windows 2000/XP TCP/IP Window Size denial of service
24805| [49745] Microsoft Windows Server 2003 denial of service
24806| [49394] Microsoft Windows Server 2003 memory corruption
24807| [49198] Microsoft Visual Studio 2005 information disclosure
24808| [49047] Microsoft Virtual Server 2005 privilege escalation
24809| [49046] Microsoft Windows Server 2003 quartz.dll memory corruption
24810| [49045] Microsoft Windows Server 2003 quartz.dll memory corruption
24811| [49044] Microsoft ISA Server 2006 privilege escalation
24812| [3999] Microsoft Office 2007 Pointer memory corruption
24813| [4000] Microsoft Office 2003/Xp/Sp3 Web Components memory corruption
24814| [48894] Microsoft Windows Server 2003 msvidctl.dll memory corruption
24815| [48572] Microsoft Office Powerpoint 2002 FL21WIN.DLL memory corruption
24816| [48517] Microsoft Windows 2000 Memory Leak memory corruption
24817| [48516] Microsoft Windows Server 2008 unknown vulnerability
24818| [48512] Microsoft Windows Server 2008 unknown vulnerability
24819| [48515] Microsoft Office Word Viewer 2003 memory corruption
24820| [48514] Microsoft Office Word Viewer 2003 Stack-based memory corruption
24821| [48554] Microsoft Excel 2000/2003/2007 memory corruption
24822| [48157] Microsoft Office PowerPoint 2002 Sound memory corruption
24823| [48156] Microsoft Office PowerPoint 2000 Stack-based memory corruption
24824| [48154] Microsoft Office PowerPoint 2002 Sound PP7X32.DLL memory corruption
24825| [48152] Microsoft Office PowerPoint 2002 PP4X32.DLL memory corruption
24826| [48150] Microsoft Office PowerPoint 2002 Sound memory corruption
24827| [48147] Microsoft Office PowerPoint 2002 Sound memory corruption
24828| [48146] Microsoft Office PowerPoint 2002 Integer memory corruption
24829| [48155] Microsoft Office PowerPoint 2002 Notes Container Heap-based memory corruption
24830| [48153] Microsoft Office PowerPoint 2002 Sound memory corruption
24831| [48151] Microsoft Office PowerPoint 2002 Stack-based memory corruption
24832| [48149] Microsoft Office PowerPoint 2002 memory corruption
24833| [48148] Microsoft Office PowerPoint 2002 Sound memory corruption
24834| [3974] Microsoft Powerpoint 2000/2002/2003 Sound Data Stack-based memory corruption
24835| [3973] Microsoft Powerpoint 2000/2002/2003 Notes Container Stack-based memory corruption
24836| [3972] Microsoft Powerpoint 2000/2002/2003 BuildList memory corruption
24837| [3971] Microsoft Powerpoint 2000/2002/2003 Object Stack-based memory corruption
24838| [3970] Microsoft Powerpoint 2000/2002/2003 Paragraph Stack-based memory corruption
24839| [3969] Microsoft Powerpoint 2000/2002/2003 Atom Stack-based memory corruption
24840| [47719] Microsoft Windows 2000 Stack-based memory corruption
24841| [47720] Microsoft Internet Security And Acceleration Server 2006 Forms Authentication cookieauth.dll cross site scripting
24842| [47716] Microsoft Office Converter Pack 2003 WPFT632.CNV memory corruption
24843| [47715] Microsoft Windows 2000 Wordpad memory corruption
24844| [47718] Microsoft Excel 2000/2002/2003/2007 Spreadsheet memory corruption
24845| [3960] Microsoft Windows XP/2000/Server 2003 DirectShow MJPEG memory corruption
24846| [3952] Microsoft ISA Server 2004/2006 denial of service
24847| [3946] Microsoft PowerPoint 2004/2000/2002/2003 memory corruption
24848| [47091] Microsoft Windows Server 2008 unknown vulnerability
24849| [47090] Microsoft Windows Server 2008 unknown vulnerability
24850| [3939] Microsoft Windows 2000 DNS Designfehler
24851| [3938] Microsoft Windows 2000 SSL weak authentication
24852| [3937] Microsoft Windows 2000 memory corruption
24853| [3932] Microsoft Excel 2004/2000/2002/2003/2007 Object Reference Designfehler
24854| [46620] Microsoft Windows Live Messenger 2009 msnmsgr.exe denial of service
24855| [46455] Microsoft Exchange Server 2007 denial of service
24856| [46454] Microsoft Exchange Server 2007 memory corruption
24857| [46453] Microsoft Visio 2002/2003/2007 memory corruption
24858| [46452] Microsoft Visio 2002/2003/2007 memory corruption
24859| [46451] Microsoft Visio 2002/2003/2007 memory corruption
24860| [46327] Microsoft Word 2007 information disclosure
24861| [45758] Microsoft Money 2006 ActiveX Control prtstb06.dll denial of service
24862| [45381] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
24863| [45380] Microsoft Windows Vista SP1/Server 2008 Search memory corruption
24864| [45379] Microsoft Office SharePoint Server 2007 denial of service
24865| [3896] Microsoft SQL Server up to 2005 sp_replwritetovarbin memory corruption
24866| [3892] Microsoft Excel 2000/2002/2003 Formula memory corruption
24867| [3891] Microsoft Excel 2000/2002/2003 memory corruption
24868| [3890] Microsoft Excel 2000/2002/2003 NAME Index memory corruption
24869| [3889] Microsoft Word 2000/2002/2003/2007 Table Property Stack-based memory corruption
24870| [3888] Microsoft Word 2000/2002/2003/2007 RTF Stylesheet memory corruption
24871| [3887] Microsoft Word 2000/2002/2003/2007 memory corruption
24872| [3886] Microsoft Word 2000/2002/2003/2007 ControlWord Heap-based memory corruption
24873| [3885] Microsoft Word 2000/2002/2003/2007 memory corruption
24874| [3884] Microsoft Word 2000/2002/2003/2007 memory corruption
24875| [3883] Microsoft Word 2000/2002/2003/2007 RTF Heap-based memory corruption
24876| [3882] Microsoft Word 2000/2002/2003/2007 LFO memory corruption
24877| [3880] Microsoft Visual Basic up to 2003 ActiveX Control Mschrt20.ocx memory corruption
24878| [3879] Microsoft Visual Basic up to 2003 ActiveX Control mscomct2.ocx memory corruption
24879| [3878] Microsoft Visual Basic up to 2003 ActiveX Control mshflxgd.ocx memory corruption
24880| [3877] Microsoft Visual Basic up to 2003 ActiveX Control msflxgrd.ocx memory corruption
24881| [3876] Microsoft Visual Basic up to 2003 ActiveX Control msdatgrd.ocx memory corruption
24882| [45197] Microsoft Windows 2000 nskey.dll memory corruption
24883| [45063] Microsoft Windows Server 2003 Active Directory unknown vulnerability
24884| [45040] Microsoft .NET Framework 2.0.50727 Code Access Security unknown vulnerability
24885| [44855] DjVu Activex Control For Microsoft Office 2000 3.0 ActiveX Control DjVu_ActiveX_MSOffice.dll memory corruption
24886| [44665] Microsoft Peachtree Accounting 2004 ActiveX Control PAWWeb11.ocx unknown vulnerability
24887| [44589] Microsoft Exchange Server 2003 Outlook Web Access unknown vulnerability
24888| [3845] Microsoft Windows 2000 SP4 Active Directory memory corruption
24889| [44533] Microsoft Windows 2000 mqsvc.exe memory corruption
24890| [3844] Microsoft Excel 2003 REPT memory corruption
24891| [3843] Microsoft Excel up to 2007 BIFF File Heap-based memory corruption
24892| [3842] Microsoft Excel 2003 VBA Performance Cache Stack-based Eingabeung\xC3\xBCltigkeit
24893| [44405] Microsoft Digital Image 2006 ActiveX Control PipPPush.DLL unknown vulnerability
24894| [44047] Microsoft SQL Server 2000 ActiveX Control SQLVDIRLib.SQLVDirControl memory corruption
24895| [43981] Microsoft Organization Chart 2.00 orgchart.exe memory corruption
24896| [43957] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
24897| [43956] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
24898| [43955] Microsoft Office 2003/2007/Xp gdiplus.dll memory corruption
24899| [43952] Microsoft Office 2003/2007/Xp URI memory corruption
24900| [43676] Microsoft Windows XP/Vista/2000/Server 2003 memory corruption
24901| [43675] Microsoft Windows XP/Vista/2000/Server 2003 of memory corruption
24902| [43662] Microsoft Office Powerpoint Viewer up to 2003 memory corruption
24903| [43661] Microsoft Office Powerpoint Viewer 2003 memory corruption
24904| [43660] Microsoft Office Powerpoint Viewer 2003 Integer memory corruption
24905| [43657] Microsoft Office 2000/2003/Xp memory corruption
24906| [43654] Microsoft SharePoint Server 2007 memory corruption
24907| [43653] Microsoft Office 2000/2002/2004/2008 memory corruption
24908| [43652] Microsoft Office 2000/2002/2003/2004/2008 memory corruption
24909| [3797] Microsoft Windows Vista/Server 2008 IPsec Policy Designfehler
24910| [3796] Microsoft Office 2000 WPG memory corruption
24911| [3795] Microsoft Office 2000/2003/Xp BMP Image BMPIMP32.FLT memory corruption
24912| [3794] Microsoft Office 2000/2003/Xp PICT bits_per_pixel memory corruption
24913| [3793] Microsoft Office 2000/2003/Xp PICT memory corruption
24914| [3792] Microsoft Office 2000 EPS File memory corruption
24915| [3783] Microsoft Word 2002 memory corruption
24916| [43103] Microsoft Exchange Srv 2007 Sp1 Outlook Web Access cross site scripting
24917| [43102] Microsoft Windows 2000 SP4/Server 2003 SP2/Server 2008 DNS Cache privilege escalation
24918| [3778] Microsoft Exchange 2003/2007 Outlook Web Access cross site scripting
24919| [3777] Microsoft Windows Vista SP1/Server 2008 Explorer memory corruption
24920| [43087] Microsoft Office Snapshot Viewer ActiveX up to Office 2003 Snapshot Viewer ActiveX Control snapview.ocx memory corruption
24921| [43096] Microsoft Publisher 2003/2007 Crypto API unknown vulnerability
24922| [42816] Microsoft Word 2000/2003 memory corruption
24923| [42732] Microsoft Windows XP/Vista/Server 2003 denial of service
24924| [42731] Microsoft Windows Server 2003 denial of service
24925| [3732] Microsoft Windows 2000/Server 2003 WINS memory corruption
24926| [3701] Microsoft Word 2003 CSS Heap-based memory corruption
24927| [3700] Microsoft Word 2003 RTF Document Heap-based memory corruption
24928| [42065] Microsoft SharePoint Server 2.0 Rich Text Editor cross site scripting
24929| [41881] Microsoft Office 2003/2007/2007 Sp1/Xp memory corruption
24930| [41880] Microsoft Project 2000/2002/2003 memory corruption
24931| [41879] Microsoft Windows 2000/Server 2003/Vista Stack-based memory corruption
24932| [41878] Microsoft Windows 2000/Server 2003/Vista spoofing
24933| [41877] Microsoft Windows Server 2003 vbscript.dll memory corruption
24934| [3671] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 memory corruption
24935| [3670] Microsoft Visio 2002/2003/2003 Sp3/2007/2007 Sp1 Object memory corruption
24936| [41455] Microsoft Office 2000/2003/2004/Xp memory corruption
24937| [41454] Microsoft Excel 2000/2002/2003/2007 memory corruption
24938| [41453] Microsoft Excel 2000/2002/2003 memory corruption
24939| [41452] Microsoft Excel 2000/2002/2003/2007 memory corruption
24940| [41451] Microsoft Excel 2000/2002/2003 memory corruption
24941| [41450] Microsoft Excel 2000 memory corruption
24942| [41449] Microsoft Excel 2000/2002/2003 memory corruption
24943| [41448] Microsoft Office 2000/Xp Office Web Components memory corruption
24944| [3648] Microsoft Excel 2003 memory corruption
24945| [3647] Microsoft Outlook up to 2007 mailto URI memory corruption
24946| [41003] Microsoft Office 2000/2003/2004/Xp memory corruption
24947| [41002] Microsoft Office 2000/2003/Xp memory corruption
24948| [41001] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
24949| [41000] Microsoft Works 2005/8.0 memory corruption
24950| [40998] Microsoft Publisher 2000/2002/2003 memory corruption
24951| [40994] Microsoft Works 2005/8.0 wkcvqd01.dll memory corruption
24952| [40987] Microsoft Windows 2000 denial of service
24953| [40736] Microsoft ActiveX 2.0 ActiveX Control privilege escalation
24954| [3552] Microsoft Excel 2000/2002/2003 File memory corruption
24955| [40242] Microsoft Publisher 2000/2002/2003/2007 Crash denial of service
24956| [40020] Microsoft Office 2007 ZIP Container unknown vulnerability
24957| [39769] Microsoft Windows 2000 cryptgenrandom weak encryption
24958| [39749] Microsoft Windows 2000 msjet40.dll memory corruption
24959| [39655] Microsoft Windows Server 2003 spoofing
24960| [39324] Microsoft Windows Mobile 2005 SMS unknown vulnerability
24961| [3373] Microsoft Word 2000/2002 memory corruption
24962| [38999] Microsoft Windows Server 2003 explorer.exe denial of service
24963| [38899] Microsoft ISA Server 2004 information disclosure
24964| [38728] Microsoft SQL Server 2005 Enterprise Manager sqldmo.dll memory corruption
24965| [38326] Microsoft Windows 2000 attemptwrite memory corruption
24966| [3241] Microsoft Excel 2000/2003/2004/XP SP3 rtWnDesk memory corruption
24967| [3223] Microsoft Windows XP/Server 2003 URI Eingabeung\xC3\xBCltigkeit
24968| [3212] Microsoft DirectX February 2006 RLE Compression Targa Files Heap-based memory corruption
24969| [37739] Microsoft Excel 2000/2002/2003/2004/2007 memory corruption
24970| [37738] Microsoft Office 2002/2003 memory corruption
24971| [3176] Microsoft Excel 2000/2002/2003/2007 File Attribute memory corruption
24972| [3175] Microsoft Excel 2000/2002/2003/2007 Active Worksheet memory corruption
24973| [3174] Microsoft Excel 2000/2002/2003/2007 Version Information memory corruption
24974| [3172] Microsoft Office Publisher 2007 Pointer memory corruption
24975| [37566] Microsoft Excel 2003 unknown vulnerability
24976| [37526] Microsoft Windows 2000/Server 2003 denial of service
24977| [37248] Microsoft Visio 2002 Packaging memory corruption
24978| [37251] Microsoft Windows 2000 memory corruption
24979| [3119] Microsoft Visio 2002 Object memory corruption
24980| [3118] Microsoft Visio 2002 Data memory corruption
24981| [37093] Microsoft Windows Server 2003 Error Message unknown vulnerability
24982| [37010] Microsoft Office 2000 ActiveX Control ouactrl.ocx memory corruption
24983| [36628] Microsoft Word 2000/2002/2003/2004 winword.exe memory corruption
24984| [36616] Microsoft Works 2004/2005/2006 memory corruption
24985| [36621] Microsoft Exchange Server 2000 Integer denial of service
24986| [36620] Microsoft Exchange Server 2000 Outlook Web Access cross site scripting
24987| [36619] Microsoft Exchange Server 2000/2003/2007 memory corruption
24988| [36618] Microsoft Exchange Server 2000 NULL Pointer Dereference denial of service
24989| [36617] Microsoft Excel 2000/2002/2003/2004 memory corruption
24990| [36623] Microsoft BizTalk Server 2004 ActiveX Control capicom.dll memory corruption
24991| [3067] Microsoft Office 2000/2003/2004/2007/Xp Drawing Object memory corruption
24992| [3065] Microsoft Excel 2000/2002/2003/2007 Filter Stack-based memory corruption
24993| [3064] Microsoft Excel 2000/2002/2003/2004/2007 set Font memory corruption
24994| [3063] Microsoft Excel 2000/2002/2003/2007 BIFF Record Stack-based memory corruption
24995| [3012] Microsoft Windows 2000/Server 2003 DNS Service Stack-based memory corruption
24996| [36039] Microsoft Content Management Server 2001 memory corruption
24997| [36052] Microsoft Windows 2000 Heap-based memory corruption
24998| [36051] Microsoft Word 2007 file798-1.doc memory corruption
24999| [36050] Microsoft Word 2007 file789-1.doc memory corruption
25000| [36040] Microsoft Content Management Server 2001 cross site scripting
25001| [3004] Microsoft Windows up to 2003/XP URL Parser memory corruption
25002| [36041] Microsoft .NET Framework 2.0.50727.42 cross site scripting
25003| [2990] Microsoft Windows 2000/XP/Vista Animated Cursor Stack-based memory corruption
25004| [36515] Microsoft Windows 2000/XP/Server 2003 memory corruption
25005| [35846] Microsoft Windows 2000/Server 2003 Default Configuration information disclosure
25006| [35373] Microsoft Excel 2003 denial of service
25007| [35372] Microsoft Office 2003 denial of service
25008| [35206] Microsoft Windows XP/Server 2003 Crash denial of service
25009| [35161] Microsoft ISA Server 2004 unknown vulnerability
25010| [35236] Microsoft Publisher 2007 memory corruption
25011| [2939] Microsoft Word 2000 memory corruption
25012| [34994] Microsoft Windows 2000 OLE Dialog memory corruption
25013| [34993] Microsoft Office 2000/2003/Xp memory corruption
25014| [35001] Microsoft Office 2000/2003/2004/Xp memory corruption
25015| [35000] Microsoft Word 2000/2002/2003 memory corruption
25016| [2933] Microsoft Windows XP SP2/2000 SP4/Server 2003 SP1 OLE Dialog Stack-based memory corruption
25017| [2894] Microsoft Office 2000/2003/2004/Xp Undefined String Format String
25018| [2884] Microsoft Word 2000/2002/2003 memory corruption
25019| [34321] Microsoft Office 2000/2003/2004/Xp Spreadsheet Heap-based memory corruption
25020| [34320] Microsoft Office 2000/2003/2004/Xp memory corruption
25021| [34319] Microsoft Office 2000/2003/2004/Xp memory corruption
25022| [34318] Microsoft Office 2000/2003/2004/Xp memory corruption
25023| [34322] Microsoft Office 2000/2003/Xp memory corruption
25024| [2811] Microsoft Windows 2000/XP/Server 2003 VML Vector Markup Language Integer memory corruption
25025| [2810] Microsoft Outlook 2000/2002/2003 Office Saved Search OSS File memory corruption
25026| [2809] Microsoft Outlook 2000/2002/2003 Header denial of service
25027| [2808] Microsoft Outlook 2000/2002/2003 Meeting VEVENT memory corruption
25028| [2807] Microsoft Excel 2000/2002/2003 XLS File memory corruption
25029| [34126] Microsoft Office 2003 memory corruption
25030| [34122] Microsoft Office Web Components 2000 memory corruption
25031| [2789] Microsoft Windows 2000/XP RPC Request NetrWkstaUserEnum() denial of service
25032| [2765] Microsoft Project Server 2003 pdsrequest.asp weak authentication
25033| [33851] Microsoft Word 2000/2002/2003 12122006-djtest.doc memory corruption
25034| [2739] Microsoft Windows 2000 Remote Installation Service Fehlende Authentifizierung
25035| [2738] Microsoft Windows 2000/XP/Server 2003 SNMP memory corruption
25036| [2737] Microsoft Windows XP/Server 2003 Manifest denial of service
25037| [33766] Microsoft Word 2000/2002/2003 memory corruption
25038| [2718] Microsoft Word 2000/2002/2003 DOC Document memory corruption
25039| [2717] Microsoft Windows 2000 Print Spooler Memory Consumption denial of service
25040| [2689] Microsoft Windows up to 2000 SP4 Active Directory denial of service
25041| [2688] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware denial of service
25042| [2687] Microsoft Windows 2000/XP/Server 2003 Agent ActiveX ACF File Heap-based memory corruption
25043| [2686] Microsoft Windows 2000/XP/Server 2003 Client Service for Netware memory corruption
25044| [2684] Microsoft Windows 2000/XP Workstation Service Stack-based memory corruption
25045| [2659] Microsoft Windows 2000/XP GDI Crash Designfehler
25046| [2655] Microsoft Windows 2000/XP/Server 2003 XML Core Services Designfehler
25047| [33067] Microsoft Visual Studio .net 2005 ActiveX Control wmiscriptutils.dll memory corruption
25048| [2610] Microsoft PowerPoint 2003 PPT Document NULL Pointer Dereference denial of service
25049| [32693] Microsoft Word 2004 memory corruption
25050| [32686] Microsoft Office 2000/2001/2003/2004 Integer memory corruption
25051| [32690] Microsoft Office 2000/2003/2004/Xp memory corruption
25052| [32676] Microsoft Office 2000/2001/2003/2004 memory corruption
25053| [32675] Microsoft Office 2000/2003/2004/Xp memory corruption
25054| [32694] Microsoft Windows 2000 memory corruption
25055| [32689] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25056| [32688] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25057| [32687] Microsoft Word 2000/2002 memory corruption
25058| [32685] Microsoft Office 2000/2001/2003/2004 memory corruption
25059| [2601] Microsoft Windows XP/Server 2003 IPv6 Stack denial of service
25060| [2600] Microsoft Windows XP/Server 2003 IPv6 Stack TCP denial of service
25061| [2599] Microsoft Windows XP/Server 2003 IPv6 Stack ICMP denial of service
25062| [2598] Microsoft Windows XP/Server 2003 Object Packager Designfehler
25063| [2597] Microsoft Office 2003/Xp Smart-Tag Parser memory corruption
25064| [2596] Microsoft Office 2000/2003/2004/Xp Value Read memory corruption
25065| [2595] Microsoft Office 2000/2001/2003/2004 Diagram Value memory corruption
25066| [2594] Microsoft Office 2000/2001/2003/2004 Document memory corruption
25067| [2593] Microsoft ASP.NET 2.0 cross site scripting
25068| [2571] Microsoft PowerPoint up to 2003 Document memory corruption
25069| [2554] Microsoft PowerPoint 2000 memory corruption
25070| [2522] Microsoft Windows 2000/XP/Server 2003 Indexing Service cross site scripting
25071| [2521] Microsoft Publisher 2000/2002/2003 PUB File Stack-based memory corruption
25072| [2508] Microsoft Word 2000 memory corruption
25073| [2478] Microsoft Internet Explorer up to 6 on Win 2000 HTTP 1.1 Compression Heap-based memory corruption
25074| [31692] Microsoft PowerPoint 2000/2001/2002/2003 memory corruption
25075| [2436] Microsoft Windows 2000/XP/Server 2003 Kernel memory corruption
25076| [2435] Microsoft Windows 2000/XP/Server 2003 Exception memory corruption
25077| [2434] Microsoft Windows 2000/XP/Server 2003 Winlogon race condition
25078| [2433] Microsoft Windows 2000 Management Console cross site scripting
25079| [2432] Microsoft Windows 2000/XP/Server 2003 DNS Resolver Heap-based memory corruption
25080| [2431] Microsoft Windows 2000/XP/Server 2003 Winsock API memory corruption
25081| [2430] Microsoft Windows 2000/XP/Server 2003 RPC ELV memory corruption
25082| [2426] Microsoft Windows 2000/XP/Server 2003 WMF File gdi32.dll denial of service
25083| [2415] Microsoft Windows 2000/XP/Server 2003 SMB File srv.sys denial of service
25084| [31527] Microsoft Internet Explorer 6.0 on Win 2000 ActiveX Object Stack-Based denial of service
25085| [31358] Microsoft PowerPoint 2003 powerpnt.exe denial of service
25086| [31354] Microsoft PowerPoint 2003 memory corruption
25087| [31351] Microsoft ISA Server 2004 Filters unknown vulnerability
25088| [2382] Microsoft PowerPoint up to 2003 Presentation Open/Close memory corruption
25089| [2378] Microsoft PowerPoint 2000/2002/2003 Document Parser memory corruption
25090| [31318] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25091| [31317] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25092| [31316] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25093| [31313] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25094| [31312] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25095| [31311] Microsoft Excel 2000/2002/2003/XP memory corruption
25096| [31310] Microsoft Excel 2000/2002/2003/2004/XP memory corruption
25097| [31237] Microsoft Office 2000/2003/Xp memory corruption
25098| [31235] Microsoft Office 2000/2003/Xp memory corruption
25099| [2371] Microsoft NET Framework up to 2.0 URL Validator unknown vulnerability
25100| [2370] Microsoft Windows 2000/XP/Server 2003 Server Protocol Driver Server Message Block Heap-based memory corruption
25101| [2369] Microsoft Windows 2000/XP/Server 2003 Server Service Mailslot Heap-based memory corruption
25102| [2367] Microsoft Office 2000/2003/XP Document String memory corruption
25103| [2366] Microsoft Windows 2000/XP/Server 2003 DHCP Client memory corruption
25104| [2365] Microsoft Office 2000/2003/XP PNG Image memory corruption
25105| [2364] Microsoft Office 2000/2003/XP GIF Image memory corruption
25106| [31233] Microsoft Office 2000/2003/Xp mso.dll lscreateline memory corruption
25107| [31238] Microsoft Internet Explorer 6.0 on Win 2000 Crash denial of service
25108| [2357] Microsoft Excel up to 2003 on Asian System Document Repair Style memory corruption
25109| [31133] Microsoft Windows XP/Server 2003 explorer.exe memory corruption
25110| [2325] Microsoft Excel up to 2003 Hyperlink hlink.dll Long Hyperlink memory corruption
25111| [2324] Microsoft Excel 2000/2002/2003/2004 XLS File memory corruption
25112| [30801] Microsoft Windows up to 2000 Connection Manager Stack-based memory corruption
25113| [2312] Microsoft Exchange 2000 Outlook Web Access cross site scripting
25114| [2311] Microsoft Windows 2000/XP/Server 2003 MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk memory corruption
25115| [2310] Microsoft Windows 2000 RPC spoofing
25116| [2309] Microsoft Windows 2000/XP/Server 2003 Routing and Remote Access Service RPC Request memory corruption
25117| [2308] Microsoft PowerPoint 2000/2002/2003/2004 PPT Document memory corruption
25118| [2307] Microsoft Windows 2000/XP/Server 2003 JScript Object memory corruption
25119| [2306] Microsoft Windows 2000/XP/Server 2003 IP Source Routing memory corruption
25120| [2305] Microsoft Windows XP/Server 2003 ART Image Heap-based memory corruption
25121| [2294] Microsoft Word up to 2003 DOC Document Backdoor Designfehler
25122| [2275] Microsoft Windows XP/Server 2003 mhtml URI inetcomm.dll memory corruption
25123| [2253] Microsoft Word up to 2003 Backdoor memory corruption
25124| [2221] Microsoft Windows 2000/XP CHM Archive itss.dll memory corruption
25125| [30131] Microsoft Windows NT 4.0/XP/2000/Server 2003 Distributed Transaction Coordinator Crash denial of service
25126| [2218] Microsoft Windows 2000/XP/Server 2003 MSDTC Heap-based denial of service
25127| [2217] Microsoft Exchange 2000/2003 Calender Collaboration Data Object memory corruption
25128| [2190] Microsoft Office 2003 mailto URI unknown vulnerability
25129| [2147] Microsoft Windows 2000/XP/Server 2003 COM Object memory corruption
25130| [2135] Microsoft FrontPage Server Extensions 2002 cross site scripting
25131| [29524] Microsoft ISA Server 2004 unknown vulnerability
25132| [134750] Microsoft ASP.NET Core 2.1/2.2 denial of service
25133| [134745] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
25134| [134744] Microsoft Windows up to Server 2019 GDI information disclosure
25135| [134743] Microsoft SharePoint Server 2013 SP1/2016 cross site scripting
25136| [134742] Microsoft SharePoint Enterprise Server 2016/2019 cross site scripting
25137| [134741] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25138| [134740] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
25139| [134739] Microsoft SharePoint Foundation 2010 SP2/2013 SP2 cross site scripting
25140| [134738] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25141| [134737] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25142| [134736] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
25143| [134735] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25144| [134734] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25145| [134733] Microsoft Windows up to Server 2019 Unified Write Filter privilege escalation
25146| [134731] Microsoft Windows up to Server 2019 Symlink privilege escalation
25147| [134729] Microsoft Windows up to Server 2019 Storage Service privilege escalation
25148| [134725] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25149| [134724] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25150| [134723] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25151| [134722] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25152| [134721] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25153| [134720] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25154| [134719] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25155| [134718] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25156| [134717] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25157| [134716] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25158| [134715] Microsoft Windows up to Server 2019 Win32k memory corruption
25159| [134714] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25160| [134713] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25161| [134712] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25162| [134710] Microsoft Windows up to Server 2019 GDI information disclosure
25163| [134709] Microsoft Windows up to Server 2019 Kernel privilege escalation
25164| [134706] Microsoft Windows up to Server 2019 Error Reporting privilege escalation
25165| [134704] Microsoft SQL Server 2017 Analysis Services information disclosure
25166| [134701] Microsoft Windows up to Server 2019 Windows Defender Application Control privilege escalation
25167| [134700] Microsoft Windows up to Server 2019 Diagnostic Hub privilege escalation
25168| [134699] Microsoft Windows up to Server 2019 NDIS ndis.sys memory corruption
25169| [134698] Microsoft Windows up to Server 2019 OLE memory corruption
25170| [134697] Microsoft Office/Word 2016/2019/365 ProPlus memory corruption
25171| [134684] Microsoft Windows up to Server 2019 DHCP Server memory corruption
25172| [134678] Microsoft Windows up to Server 2019 GDI+ memory corruption
25173| [133236] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25174| [133235] Microsoft Azure DevOps Server 2019 privilege escalation
25175| [133234] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25176| [133232] Microsoft Azure DevOps Server 2019 cross site scripting
25177| [133229] Microsoft Azure DevOps Server 2019 cross site scripting
25178| [133224] Microsoft Exchange Server 2013 CU22/2016 CU11/2016 CU12/2019/2019 CU1 Outlook Web Access privilege escalation
25179| [133223] Microsoft Azure DevOps Server 2019 Content Security Policy privilege escalation
25180| [133222] Microsoft Windows up to Server 2019 Remote Registry Service memory corruption
25181| [133221] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25182| [133220] Microsoft Windows up to Server 2019 GDI Memory information disclosure
25183| [133219] Microsoft Windows up to Server 2019 Win32k Memory information disclosure
25184| [133218] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25185| [133217] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25186| [133216] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
25187| [133215] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
25188| [133214] Microsoft Windows up to Server 2019 AppX Deployment Service privilege escalation
25189| [133213] Microsoft Windows up to Server 2019 Kernel Memory information disclosure
25190| [133212] Microsoft Windows up to Server 2019 Terminal Services Memory information disclosure
25191| [133211] Microsoft Windows up to Server 2019 Task Scheduler information disclosure
25192| [133209] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
25193| [133206] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016/2019 cross site scripting
25194| [133205] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
25195| [133204] Microsoft Office/Excel up to 2019 memory corruption
25196| [133203] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25197| [133202] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25198| [133201] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25199| [133200] Microsoft Office up to 2019 Access Connectivity Engine memory corruption
25200| [133199] Microsoft Office 2010 SP2 Access Connectivity Engine memory corruption
25201| [133198] Microsoft Exchange Server up to 2019 CU1 Outlook Web Access cross site scripting
25202| [133197] Microsoft ASP.NET Core 2.2 Request denial of service
25203| [133196] Microsoft Windows up to Server 2019 Win32k information disclosure
25204| [133195] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
25205| [133194] Microsoft Windows up to Server 2019 GDI Memory information disclosure
25206| [133193] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
25207| [133192] Microsoft Windows up to Server 2019 OLE Automation privilege escalation
25208| [133189] Microsoft Windows up to Server 2019 CSRSS memory corruption
25209| [133188] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
25210| [133187] Microsoft Windows up to Server 2019 LUAFV Driver luafv.sys privilege escalation
25211| [133186] Microsoft Windows up to Server 2019 TCP/IP Stack Fragmented IP Packet information disclosure
25212| [133185] Microsoft Windows up to Server 2019 Win32k memory corruption
25213| [133184] Microsoft Office 2016 for Mac/2019/365 ProPlus Graphics Component memory corruption
25214| [133183] Microsoft Windows up to Server 2019 Win32k memory corruption
25215| [133182] Microsoft Windows up to Server 2019 Win32k memory corruption
25216| [133181] Microsoft Office/Excel/PowerPoint up to 2019 URL Document Code Execution
25217| [133180] Microsoft Windows up to Server 2019 MS XML Code Execution
25218| [133179] Microsoft Windows up to Server 2019 MS XML Code Execution
25219| [133177] Microsoft Windows up to Server 2019 Device Guard luafv.sys privilege escalation
25220| [133174] Microsoft Windows up to Server 2019 GDI+ privilege escalation
25221| [133173] Microsoft Windows up to Server 2019 IOleCvt Interface privilege escalation
25222| [133166] Microsoft Windows up to Server 2019 MS XML Code Execution
25223| [133165] Microsoft Windows up to Server 2019 MS XML Code Execution
25224| [133164] Microsoft Windows up to Server 2019 MS XML Code Execution
25225| [133163] Microsoft Windows up to Server 2019 MS XML Code Execution
25226| [133162] Microsoft Windows up to Server 2019 MS XML Code Execution
25227| [131687] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 3.2/2018 Updated 1.2 cross site scripting
25228| [131685] Microsoft Windows up to Server 2019 SMB information disclosure
25229| [131684] Microsoft Visual Studio 2017 Version 15.9 C++ Redistributable Installer privilege escalation
25230| [131681] Microsoft Windows up to Server 2019 Win32k memory corruption
25231| [131679] Microsoft Windows up to Server 2019 Kernel information disclosure
25232| [131675] Microsoft SharePoint 2013 SP1/2016 cross site scripting
25233| [131674] Microsoft Windows up to Server 2019 Win32k information disclosure
25234| [131673] Microsoft Windows up to Server 2019 Kernel information disclosure
25235| [131672] Microsoft Windows up to Server 2019 GDI information disclosure
25236| [131671] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
25237| [131668] Microsoft Windows up to Server 2019 AppX Deployment Server privilege escalation
25238| [131667] Microsoft Windows up to Server 2019 Comctl32.dll memory corruption
25239| [131663] Microsoft Windows up to Server 2019 Print Spooler information disclosure
25240| [131658] Microsoft Windows up to Server 2019 information disclosure
25241| [131657] Microsoft Windows up to Server 2019 denial of service
25242| [131656] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
25243| [131653] Microsoft Windows up to Server 2019 SMB information disclosure
25244| [131652] Microsoft Windows up to Server 2019 SMB information disclosure
25245| [131651] Microsoft Windows up to Server 2019 Kernel information disclosure
25246| [131650] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V denial of service
25247| [131649] Microsoft Windows up to Server 2019 Kernel memory corruption
25248| [131648] Microsoft Windows up to Server 2019 Hyper-V denial of service
25249| [131644] Microsoft Windows up to Server 2019 Hyper-V denial of service
25250| [131638] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25251| [131632] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
25252| [131631] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
25253| [131630] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DHCP Client memory corruption
25254| [131629] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
25255| [131628] Microsoft Windows up to Server 2019 ActiveX memory corruption
25256| [131619] Microsoft Windows up to Server 2019 MS XML privilege escalation
25257| [131334] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
25258| [131333] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
25259| [131330] Microsoft Exchange Server 2010 SP3 UR26/2013 CU22/2016 CU12/2019 CU1 privilege escalation
25260| [131329] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 information disclosure
25261| [131328] Microsoft Windows up to Server 2016 Kernel information disclosure
25262| [130832] Microsoft 2013 SP1 spoofing
25263| [130828] Microsoft Exchange Server 2010 SP3/2013 CU22/2016 CU12/2019 CU1 EWS privilege escalation
25264| [130826] Microsoft Office 2010 SP2 Connectivity Engine memory corruption
25265| [130825] Microsoft Office up to 2019 Connectivity Engine memory corruption
25266| [130824] Microsoft Office up to 2019 Connectivity Engine memory corruption
25267| [130823] Microsoft Office up to 2019 Connectivity Engine privilege escalation
25268| [130822] Microsoft Office up to 2019 Connectivity Engine privilege escalation
25269| [130821] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25270| [130820] Microsoft Windows up to Server 2012 R2 GDI information disclosure
25271| [130818] Microsoft Windows up to Server 2019 GDI information disclosure
25272| [130817] Microsoft Windows up to Server 2019 Storage Service privilege escalation
25273| [130814] Microsoft Windows up to Server 2019 privilege escalation
25274| [130809] Microsoft Windows up to Server 2019 Defender Firewall Security privilege escalation
25275| [130808] Microsoft Windows up to Server 2019 information disclosure
25276| [130807] Microsoft Windows up to Server 2019 Hyper-V information disclosure
25277| [130806] Microsoft Windows up to Server 2019 SMB privilege escalation
25278| [130805] Microsoft Windows up to Server 2019 Device Guard privilege escalation
25279| [130804] Microsoft Windows up to Server 2019 Device Guard privilege escalation
25280| [130803] Microsoft Windows up to Server 2019 SMB privilege escalation
25281| [130802] Microsoft Windows up to Server 2019 Win32k information disclosure
25282| [130801] Microsoft Windows up to Server 2019 Device Guard privilege escalation
25283| [130800] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25284| [130799] Microsoft Windows up to Server 2016 Win32k memory corruption
25285| [130798] Microsoft Windows up to Server 2019 GDI information disclosure
25286| [130797] Microsoft Windows up to Server 2019 GDI information disclosure
25287| [130796] Microsoft Windows up to Server 2019 GDI information disclosure
25288| [130793] Microsoft Windows up to Server 2019 GDI information disclosure
25289| [130792] Microsoft Windows up to Server 2019 HID information disclosure
25290| [130791] Microsoft Windows up to Server 2019 HID information disclosure
25291| [130790] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25292| [130789] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25293| [130788] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25294| [130787] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25295| [130786] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25296| [130785] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus Security Feature Phishing spoofing
25297| [130784] Microsoft Windows up to Server 2019 GDI+ memory corruption
25298| [130782] Microsoft Windows up to Server 2019 DHCP Server memory corruption
25299| [130781] Microsoft Windows up to Server 2019 GDI+ memory corruption
25300| [129847] Microsoft Team Foundation Server 2017 Update 3.1/2018 Update 1.2/2018 Update 3.2 information disclosure
25301| [129846] Microsoft Team Foundation Server 2018 Update 3.2 cross site scripting
25302| [129845] Microsoft Skype for Business 2015 CU 8 Request cross site scripting
25303| [128765] Microsoft Visual Studio 2017 Version 15.9 C++ Construct privilege escalation
25304| [128764] Microsoft Exchange Server 2010 SP3/2013 CU21/2016 CU10/2016 CU11/2019 PowerShell API information disclosure
25305| [128762] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus Word memory corruption
25306| [128761] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25307| [128760] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25308| [128759] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25309| [128758] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25310| [128757] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25311| [128756] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25312| [128755] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25313| [128754] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25314| [128753] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25315| [128752] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25316| [128751] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
25317| [128750] Microsoft Windows up to Server 2019 Runtime privilege escalation
25318| [128749] Microsoft Windows up to Server 2019 Kernel information disclosure
25319| [128747] Microsoft ASP.NET Core 2.1 Web Request denial of service
25320| [128746] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
25321| [128745] Microsoft Office up to 2019 Word Macro information disclosure
25322| [128744] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
25323| [128743] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus information disclosure
25324| [128742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
25325| [128741] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25326| [128740] Microsoft SharePoint Enterprise Server 2013 SP1 cross site scripting
25327| [128739] Microsoft Windows up to Server 2019 Kernel information disclosure
25328| [128738] Microsoft Windows up to Server 2019 Subsystem for Linux information disclosure
25329| [128737] Microsoft Windows up to Server 2019 COM Desktop Broker privilege escalation
25330| [128736] Microsoft Windows up to Server 2019 Kernel information disclosure
25331| [128735] Microsoft ASP.NET Core 2.1/2.2 Web Request denial of service
25332| [128733] Microsoft Windows up to Server 2019 Authentication Request privilege escalation
25333| [128732] Microsoft Office 2010 SP2/2013 SP1/2016/2019/365 ProPlus MSHTML Engine privilege escalation
25334| [128729] Microsoft Visual Studio 2010 SP1/2012 Update 5 vscontent File information disclosure
25335| [128728] Microsoft Windows up to Server 2019 Kernel information disclosure
25336| [128727] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
25337| [128726] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
25338| [128725] Microsoft Windows up to Server 2019 Data Sharing Service privilege escalation
25339| [128718] Microsoft Windows up to Server 2019 Hyper-V memory corruption
25340| [128717] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Hyper-V memory corruption
25341| [127925] Microsoft SharePoint Enterprise Server 2016 Web Request cross site scripting
25342| [127882] Microsoft Dynamics NAV 2016/2017 Web Request cross site scripting
25343| [127881] Microsoft Windows 10 1809/Server 2019 Object denial of service
25344| [127880] Microsoft Windows up to Server 2019 Win32k Object memory corruption
25345| [127828] Microsoft Windows up to Server 2019 Win32k memory corruption
25346| [127827] Microsoft Windows 10 1809/Server 2019 DirectX information disclosure
25347| [127826] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 Win32k ASLR privilege escalation
25348| [127825] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 privilege escalation
25349| [127824] Microsoft Excel up to 2019 Out-of-Bounds memory corruption
25350| [127823] Microsoft Windows up to Server 2012 R2 Kernel information disclosure
25351| [127821] Microsoft Windows up to Server 2019 Connected User Experiences and Telemetry Service denial of service
25352| [127820] Microsoft Windows up to Server 2019 Kernel memory corruption
25353| [127819] Microsoft Exchange Server 2016 CU10/2016 CU11 Profile Data privilege escalation
25354| [127817] Microsoft Excel up to 2019 information disclosure
25355| [127816] Microsoft Windows up to Server 2019 GDI information disclosure
25356| [127815] Microsoft Windows up to Server 2019 GDI information disclosure
25357| [127814] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 Search cross site request forgery
25358| [127812] Microsoft Windows up to Server 2019 Remote Procedure Call information disclosure
25359| [127809] Microsoft PowerPoint 2010 SP2/2013 RT SP1/2013 SP1/2016/365 ProPlus memory corruption
25360| [127806] Microsoft Outlook up to 2019 memory corruption
25361| [127805] Microsoft Excel up to 2019 memory corruption
25362| [127804] Microsoft Excel up to 2019 memory corruption
25363| [127803] Microsoft Windows up to Server 2019 Text-To-Speech memory corruption
25364| [127801] Microsoft Windows up to Server 2019 DNS Server privilege escalation
25365| [126938] Microsoft Team Foundation Server 2018 Update 1.1/2018 Update 3 Code Execution
25366| [126755] Microsoft .NET Core 2.1 privilege escalation
25367| [126754] Microsoft Skype for Business/Lync Server 2013 SP1/2016 Emoji denial of service
25368| [126750] Microsoft Windows up to Server 2019 ALPC privilege escalation
25369| [126749] Microsoft Exchange Server 2010/2013/2016/2019 privilege escalation
25370| [126748] Microsoft Office 2019/365 ProPlus Outlook Message information disclosure
25371| [126747] Microsoft SharePoint Enterprise Server 2013 SP1 Folder information disclosure
25372| [126746] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
25373| [126745] Microsoft Project 2010 SP2/2013 SP1/2016 memory corruption
25374| [126744] Microsoft Office up to 2019 Word memory corruption
25375| [126743] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
25376| [126742] Microsoft SharePoint Enterprise Server 2013 SP1/2016/2019 cross site scripting
25377| [126739] Microsoft Windows up to Server 2012 R2 Win32k information disclosure
25378| [126737] Microsoft Windows up to Server 2012 R2 DirectX information disclosure
25379| [126736] Microsoft Windows up to Server 2019 Win32k memory corruption
25380| [126735] Microsoft Windows up to Server 2019 DirectX privilege escalation
25381| [126734] Microsoft Office 2019/365 ProPlus information disclosure
25382| [126733] Microsoft Windows 10 1803/10 1809/Server 2019/Server 1803 DirectX memory corruption
25383| [126730] Microsoft Windows up to Server 2019 Active Directory Federation Services cross site scripting
25384| [126728] Microsoft Office/SharePoint 2010 SP2 Word memory corruption
25385| [126727] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
25386| [126726] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
25387| [126725] Microsoft Windows up to Server 2019 DirectX memory corruption
25388| [126722] Microsoft Windows up to Server 2019 PowerShell privilege escalation
25389| [126718] Microsoft Windows up to Server 2016 Search memory corruption
25390| [126717] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2019 memory corruption
25391| [126716] Microsoft Office up to 2019 Excel memory corruption
25392| [126715] Microsoft Office 2016/2019/365 ProPlus Excel memory corruption
25393| [126714] Microsoft Windows up to Server 2019 PowerShell unknown vulnerability
25394| [126713] Microsoft Windows up to Server 2019 VBScript Engine memory corruption
25395| [126712] Microsoft Windows up to Server 2016 Graphics Component memory corruption
25396| [126711] Microsoft Windows up to Server 2019 Deployment Services TFTP Server memory corruption
25397| [125123] Microsoft Windows up to Server 2019 Codecs Library information disclosure
25398| [125122] Microsoft Windows up to Server 2016 TCP/IP information disclosure
25399| [125121] Microsoft Windows up to Server 2019 DirectX memory corruption
25400| [125120] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
25401| [125119] Microsoft Windows up to Server 2019 Windows Media Player information disclosure
25402| [125116] Microsoft Exchange Server 2013 CU21/2016 CU10 privilege escalation
25403| [125115] Microsoft Windows up to Server 2019 Theme API privilege escalation
25404| [125114] Microsoft Windows up to Server 2019 Windows Shell privilege escalation
25405| [125113] Microsoft Windows up to Server 2019 Kernel memory corruption
25406| [125111] Microsoft Windows up to Server 2019 Device Guard Code Integrity Policy privilege escalation
25407| [125110] Microsoft Windows up to Server 2019 DNS Global Blocklist privilege escalation
25408| [125109] Microsoft Windows up to Server 2019 NTFS privilege escalation
25409| [125108] Microsoft Windows up to Server 2019 Filter Manager memory corruption
25410| [125107] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25411| [125106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25412| [125105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25413| [125104] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25414| [125102] Microsoft Office/Word 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
25415| [125100] Microsoft Office/Powerpoint 2010 SP2/2013 RT SP1/2013 SP1/2016/2019 Protected View memory corruption
25416| [125099] Microsoft Office/Excel up to 2019 Protected View memory corruption
25417| [125098] Microsoft Windows up to Server 2019 JET Database Engine privilege escalation
25418| [125097] Microsoft Windows up to Server 2019 DirectX Graphics memory corruption
25419| [125096] Microsoft Windows up to Server 2019 Win32k memory corruption
25420| [125095] Microsoft Exchange Server 2013 CU21/2016 CU10 Outlook Web Access cross site scripting
25421| [125093] Microsoft Windows up to Server 2019 Hyper-V memory corruption
25422| [125092] Microsoft Windows up to Server 2019 Hyper-V memory corruption
25423| [125091] Microsoft Windows up to Server 2019 MS XML privilege escalation
25424| [124371] Microsoft Exchange Server up to 2010 SP3 Outlook Web Access /owa/auth/logon.aspx Parameter Server-Side Request Forgery
25425| [124217] Microsoft Windows Server 2012/Server 2016 Active Directory Federation Services /adfs/ls Server-Side Request Forgery
25426| [123995] Microsoft Lync 2011 on Mac Security Feature Messages Download privilege escalation
25427| [123881] Microsoft Windows up to Server 2016 Sandbox privilege escalation
25428| [123874] Microsoft Windows up to Server 2016 Kernel information disclosure
25429| [123872] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 SMB information disclosure
25430| [123868] Microsoft Windows up to Server 2016 Hyper-V denial of service
25431| [123864] Microsoft Windows up to Server 2016 Hyper-V information disclosure
25432| [123862] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2013 RT SP1/2016 cross site scripting
25433| [123861] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
25434| [123860] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25435| [123859] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
25436| [123851] Microsoft Windows up to Server 2016 ALPC privilege escalation
25437| [123849] Microsoft Windows up to Server 2016 SMB denial of service
25438| [123846] Microsoft Office 2016 on Win/Mac memory corruption
25439| [123844] Microsoft Word 2013 SP1/2013 RT SP1/2016 PDF File memory corruption
25440| [123843] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25441| [123842] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25442| [123830] Microsoft Windows up to Server 2016 Hyper-V memory corruption
25443| [123828] Microsoft Windows up to Server 2016 Win32k Graphics privilege escalation
25444| [123827] Microsoft Windows up to Server 2016 Image memory corruption
25445| [123825] Microsoft Windows up to Server 2016 MSXML Parser privilege escalation
25446| [123823] Microsoft Windows up to Server 2016 Hyper-V privilege escalation
25447| [122887] Microsoft Office 2016 on Mac AutoUpdate memory corruption
25448| [122886] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
25449| [122885] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
25450| [122884] Microsoft Windows up to Server 2016 Win32k memory corruption
25451| [122883] Microsoft Windows up to Server 2016 DirectX Graphics memory corruption
25452| [122875] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
25453| [122874] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25454| [122873] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R information disclosure
25455| [122872] Microsoft SharePoint Enterprise Server 2013 SP1/2016 information disclosure
25456| [122871] Microsoft PowerPoint 2010 SP2 memory corruption
25457| [122870] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016/2016 C2R memory corruption
25458| [122861] Microsoft Windows up to Server 2016 Microsoft COM for Windows privilege escalation
25459| [122850] Microsoft Visual Studio 2015 Update 3/2017/2017 Version 15.8 Diagnostic Hub privilege escalation
25460| [122849] Microsoft Windows up to Server 2016 Diagnostic Hub privilege escalation
25461| [122848] Microsoft Windows Security Feature 2FA weak authentication
25462| [122834] Microsoft Windows up to Server 2016 LNK memory corruption
25463| [122825] Microsoft Windows up to Server 2016 Graphics memory corruption
25464| [122823] Microsoft SQL Server 2016 SP1/2016 SP2/2017 memory corruption
25465| [121208] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R Attachment privilege escalation
25466| [121118] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25467| [121116] Microsoft Windows up to Server 2016 Sandbox privilege escalation
25468| [121114] Microsoft Access 2013 SP1/2016/2016 C2R memory corruption
25469| [121111] Microsoft Windows up to Server 2016 Kernel memory corruption
25470| [121110] Microsoft Windows up to Server 2016 Wordpad privilege escalation
25471| [121107] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll denial of service
25472| [121106] Microsoft SharePoint Enterprise Server 2013 SP1/2016 privilege escalation
25473| [121105] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25474| [121098] Microsoft Office 2016/2016 C2R memory corruption
25475| [121092] Microsoft Windows up to Server 2016 FTP Server denial of service
25476| [121090] Microsoft Visual Studio up to 2017 Version 15.8 Preview privilege escalation
25477| [119479] Microsoft Office 2010 SP2/2013 RT SP1/2013 SP1/2016 memory corruption
25478| [119477] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1/2016 information disclosure
25479| [119476] Microsoft Publisher 2010 SP2 OLE Object PUB File privilege escalation
25480| [119475] Microsoft Outlook 2010 SP2/2013 RT SP1/2013 SP1/2016 Attachment privilege escalation
25481| [119474] Microsoft Windows up to Server 2016 GDI information disclosure
25482| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
25483| [119468] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25484| [119467] Microsoft Windows up to Server 2016 Hypervisor privilege escalation
25485| [119465] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25486| [119464] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25487| [119463] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25488| [119461] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25489| [119460] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25490| [119459] Microsoft Windows up to Server 2016 memory corruption
25491| [119457] Microsoft Windows up to Server 2016 Desktop Bridge privilege escalation
25492| [119456] Microsoft Windows up to Server 2016 Kernel information disclosure
25493| [119455] Microsoft Windows up to Server 2016 denial of service
25494| [119454] Microsoft Windows up to Server 2016 Device Guard Code Integrity Policy privilege escalation
25495| [119452] Microsoft Windows up to Server 2016 HIDParser memory corruption
25496| [119448] Microsoft Windows up to Server 2016 Code Integrity Module denial of service
25497| [119447] Microsoft Windows up to Server 2016 NTFS privilege escalation
25498| [119441] Microsoft Windows up to Server 2016 Media Foundation memory corruption
25499| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
25500| [119436] Microsoft Windows up to Server 2016 memory corruption
25501| [119431] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
25502| [118120] Microsoft Office 2016 on Mac XML Data Code Execution
25503| [117561] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1 Web Request cross site scripting
25504| [117560] Microsoft Exchange Server up to 2016 CU9 Code Execution memory corruption
25505| [117559] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access Web Request cross site scripting
25506| [117558] Microsoft Windows up to Server 2016 Code Execution memory corruption
25507| [117507] Microsoft Infopath 2013 SP1 memory corruption
25508| [117505] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R information disclosure
25509| [117504] Microsoft Office 2010 SP2 information disclosure
25510| [117503] Microsoft Exchange Server 2013 CU19/2013 CU20/2016 CU8/2016 CU9 Outlook Web Access cross site scripting
25511| [117502] Microsoft SharePoint Enterprise Server 2010 SP2/2013 SP1/2016 cross site scripting
25512| [117501] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25513| [117500] Microsoft Exchange Server 2016 CU8/2016 CU9 Outlook Web Access cross site scripting
25514| [117499] Microsoft Exchange Server up to 2016 CU9 information disclosure
25515| [117498] Microsoft Office 2016 C2R Security Feature privilege escalation
25516| [117497] Microsoft SharePoint Enterprise Server 2010/2013 SP1/2016 cross site scripting
25517| [117480] Microsoft Windows up to Server 2016 COM Serialized privilege escalation
25518| [117473] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25519| [117472] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25520| [117471] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25521| [117470] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25522| [117469] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25523| [117468] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25524| [117444] Microsoft Windows up to Server 2016 Hyper-V vSMB memory corruption
25525| [117443] Microsoft Windows up to Server 2016 Hyper-V memory corruption
25526| [117442] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
25527| [116132] Microsoft Office 2016 Memory information disclosure
25528| [116051] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25529| [116050] Microsoft SharePoint Enterprise Server 2010 SP2/2013/2016 cross site scripting
25530| [116049] Microsoft SharePoint Enterprise Server 2013/2016 privilege escalation
25531| [116048] Microsoft Windows up to Server 2016 DirectX Graphics Kernel Subsystem memory corruption
25532| [116047] Microsoft Windows up to Server 2016 OpenType Font Driver atmfd.dll memory corruption
25533| [116046] Microsoft SharePoint Enterprise Server 2013/2016 Share cross site scripting
25534| [116045] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25535| [116039] Microsoft Windows up to Server 2016 Remote Desktop Protocol denial of service
25536| [116031] Microsoft Windows up to Server 2016 Kernel ASLR information disclosure
25537| [116030] Microsoft Windows up to Server 2016 SNMP Service denial of service
25538| [116026] Microsoft Windows up to Server 2016 Kernel information disclosure
25539| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
25540| [116023] Microsoft Office up to 2016 C2R information disclosure
25541| [116022] Microsoft Excel 2010 SP2 memory corruption
25542| [116020] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Active Directory privilege escalation
25543| [116019] Microsoft Windows up to Server 2016 Kernel information disclosure
25544| [116018] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25545| [116017] Microsoft Excel up to 2016 C2R memory corruption
25546| [116016] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Graphics memory corruption
25547| [116014] Microsoft Office 2013 SP1/2013 RT SP1/2016/2016 C2R memory corruption
25548| [116013] Microsoft Excel 2010 SP2/2013 RT SP1/2013 SP1 memory corruption
25549| [116008] Microsoft Windows up to Server 2016 Graphics memory corruption
25550| [116007] Microsoft Windows up to Server 2016 Graphics memory corruption
25551| [116006] Microsoft Windows up to Server 2016 Graphics memory corruption
25552| [116005] Microsoft Windows up to Server 2016 Graphics memory corruption
25553| [116004] Microsoft Windows up to Server 2016 Graphics memory corruption
25554| [116003] Microsoft Windows up to Server 2016 VBScript Engine memory corruption
25555| [115994] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
25556| [115804] Microsoft Windows up to Server 2016 Malware Protection Engine privilege escalation
25557| [114579] Microsoft Exchange Server up to 2017 CU8 Outlook Web Access information disclosure
25558| [114574] Microsoft SharePoint Enterprise Server 2016 privilege escalation
25559| [114573] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25560| [114571] Microsoft Exchange Server 2016 CU7/2016 CU8 Outlook Web Access information disclosure
25561| [114570] Microsoft Exchange Server 2010 SP3/2013 CU18/2013 CU19/2016 CU7/2016 CU8 Outlook Web Access Fake privilege escalation
25562| [114565] Microsoft Windows 10 1607/10 1703/10 1709/Server 2016/Server 1709 Kernel information disclosure
25563| [114564] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25564| [114562] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25565| [114560] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25566| [114559] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25567| [114558] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25568| [114557] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25569| [114556] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25570| [114555] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25571| [114554] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25572| [114553] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25573| [114552] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25574| [114551] Microsoft Excel up to 2016 C2R Security Feature privilege escalation
25575| [114549] Microsoft Access 2010 SP2/2013 SP1/2016 memory corruption
25576| [114548] Microsoft Windows up to Server 2016 CNG Security Feature cng.sys privilege escalation
25577| [114547] Microsoft Windows up to Server 2016 Kernel information disclosure
25578| [114546] Microsoft Windows up to Server 2016 Kernel information disclosure
25579| [114545] Microsoft Windows up to Server 2016 Kernel information disclosure
25580| [114544] Microsoft Windows up to Server 2016 Kernel information disclosure
25581| [114543] Microsoft Windows up to Server 2016 Kernel information disclosure
25582| [114542] Microsoft Windows up to Server 2016 Kernel information disclosure
25583| [114541] Microsoft Windows up to Server 2016 Kernel information disclosure
25584| [114540] Microsoft Windows up to Server 2016 Kernel information disclosure
25585| [114536] Microsoft Windows up to Server 2016 CredSSP privilege escalation
25586| [114535] Microsoft Windows up to Server 2016 Hyper-V denial of service
25587| [114531] Microsoft Windows up to Server 2016 Windows Installer privilege escalation
25588| [114530] Microsoft Windows up to Server 2016 GDI privilege escalation
25589| [114529] Microsoft Windows up to Server 2016 GDI privilege escalation
25590| [114527] Microsoft Windows up to Server 2016 Kernel information disclosure
25591| [114526] Microsoft Windows up to Server 2016 Kernel information disclosure
25592| [114525] Microsoft Windows up to Server 2016 Kernel information disclosure
25593| [114522] Microsoft Windows 10 1607/10 1703/Server 2016 Desktop Bridge privilege escalation
25594| [114521] Microsoft Windows up to Server 2016 Video Control privilege escalation
25595| [114520] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge privilege escalation
25596| [114518] Microsoft Windows up to Server 2016 Remote Assistance information disclosure
25597| [114517] Microsoft Windows 10/Server 2016/Server 1709 Desktop Bridge VFS privilege escalation
25598| [114516] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
25599| [113835] Microsoft Identity Manager 2016 SP1 cross site scripting
25600| [113264] Microsoft Windows 8.1/RT 8.1/Server 2012 R2 SMBv2/SMBv3 denial of service
25601| [113260] Microsoft Windows up to Server 2016 Kernel memory corruption
25602| [113259] Microsoft Windows 10/Server 2016/Server 1709 NTFS privilege escalation
25603| [113254] Microsoft Windows up to Server 2016 Kernel information disclosure
25604| [113253] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
25605| [113252] Microsoft Windows up to Server 2016 Kernel memory corruption
25606| [113250] Microsoft Windows 10/Server 2016/Server 1709 Kernel memory corruption
25607| [113249] Microsoft Windows up to Server 2016 Kernel memory corruption
25608| [113248] Microsoft Windows up to Server 2016 Kernel information disclosure
25609| [113243] Microsoft Windows 10/Server 2016 MultiPoint Management privilege escalation
25610| [113242] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
25611| [113241] Microsoft Windows up to Server 2016 Common Log File System Driver memory corruption
25612| [113240] Microsoft Windows 10/Server 2016/Server 1709 AppContainer privilege escalation
25613| [113237] Microsoft SharePoint Enterprise Server 2016 cross site scripting
25614| [113236] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25615| [113233] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Uninitialized Memory information disclosure
25616| [113232] Microsoft Excel 2016 memory corruption
25617| [113230] Microsoft Windows up to Server 2016 Scripting Engine information disclosure
25618| [113229] Microsoft Windows up to Server 2016 StructuredQuery memory corruption
25619| [111580] Microsoft Office 2016 on Mac Email Attachment spoofing
25620| [111571] Microsoft SharePoint Enterprise Server 2013/2016 Access cross site scripting
25621| [111567] Microsoft Office 2010/2013/2016 memory corruption
25622| [111564] Microsoft Word 2016 memory corruption
25623| [111562] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
25624| [111561] Microsoft SharePoint Server 2010/2013/2016 Web Request cross site scripting
25625| [128730] Microsoft Windows up to Server 2019 JET Database Engine memory corruption
25626| [111358] Microsoft Windows up to Server 2016 IPsec denial of service
25627| [110553] Microsoft Office 2016 C2R information disclosure
25628| [110552] Microsoft SharePoint Enterprise Server 2016 Web Request privilege escalation
25629| [110551] Microsoft Excel 2016 C2R memory corruption
25630| [110550] Microsoft PowerPoint 2013 SP1/2013 RT SP1/2016 information disclosure
25631| [110549] Microsoft Exchange Server 2016 CU6/2016 CU7 Outlook Web Access privilege escalation
25632| [110547] Microsoft Windows up to Server 2016 its:// Protocol information disclosure
25633| [110531] Microsoft Windows 10/Server 2016 Device Guard privilege escalation
25634| [110522] Microsoft Windows up to Server 2016 RRAS privilege escalation
25635| [110350] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
25636| [110318] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
25637| [109391] Microsoft SharePoint Enterprise Server 2016 Project Server cross site request forgery
25638| [109389] Microsoft Excel 2016 Click-to-Run memory corruption
25639| [109360] Microsoft Windows up to Server 2016 Windows Search denial of service
25640| [107759] Microsoft Windows up to Server 2016 SMB denial of service
25641| [107757] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25642| [107756] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25643| [107753] Microsoft Windows 10/Server 2016 SMB privilege escalation
25644| [107744] Microsoft Windows up to Server 2016 DNSAPI DNSAPI.dll DNS Response privilege escalation
25645| [107741] Microsoft Outlook 2016 Secure Connection Mail information disclosure
25646| [107740] Microsoft Windows up to Server 2016 Graphics memory corruption
25647| [107739] Microsoft Windows up to Server 2016 Graphics memory corruption
25648| [107738] Microsoft Windows up to Server 2016 Search information disclosure
25649| [107734] Microsoft Windows 10/Server 2016 SMB privilege escalation
25650| [107732] Microsoft Outlook 2010 SP2/2013 SP1/2013 RT SP1/2016 Bypass privilege escalation
25651| [107730] Microsoft Windows up to Server 2016 Search Remote memory corruption
25652| [107729] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25653| [107728] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25654| [107727] Microsoft SharePoint Enterprise Server 2013 SP1/2016 cross site scripting
25655| [107724] Microsoft Windows up to Server 2016 Text Services Framework memory corruption
25656| [107723] Microsoft Windows up to Server 2016 SMB information disclosure
25657| [107698] Microsoft Office 2016 memory corruption
25658| [107593] InFocus Mondopad 2.2.08 Excel Spreadsheet Microsoft Office Document Credentials information disclosure
25659| [106544] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
25660| [106531] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
25661| [106529] Microsoft PowerPoint 2016 memory corruption
25662| [106523] Microsoft Windows up to Server 2016 PDF Library memory corruption
25663| [106518] Microsoft Edge on Win10/Server 2016 memory corruption
25664| [106516] Microsoft Windows up to Server 2016 PDF Library memory corruption
25665| [106498] Microsoft Windows up to Server 2016 Shell privilege escalation
25666| [106496] Microsoft Windows up to Server 2016 Uniscribe information disclosure
25667| [106495] Microsoft Windows up to Server 2012 R2 Uniscribe memory corruption
25668| [106492] Microsoft Windows Server 2012/Server 2012 R2/Server 2016 DHCP Service memory corruption
25669| [106489] Microsoft Windows up to Server 2016 Graphics Win32k win32k!fsc_CalcGrayRow memory corruption
25670| [106474] Microsoft Office 2016 memory corruption
25671| [106473] Microsoft SharePoint Server 2013 SP1 cross site scripting
25672| [106472] Microsoft Windows up to Server 2016 Bluetooth Driver Object BlueBorne spoofing
25673| [106470] Microsoft Excel 2011 on Mac memory corruption
25674| [106455] Microsoft Exchange Server 2013/2016 information disclosure
25675| [106454] Microsoft Windows up to Server 2016 Windows NetBT Session Services race condition memory corruption
25676| [105048] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
25677| [105047] Microsoft Edge on Win10/Server 2016 Scripting Engine EntryCall memory corruption
25678| [105046] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
25679| [105040] Microsoft Edge on Win10/Server 2016 Scripting Engine memory corruption
25680| [105038] Microsoft Edge on Win10/Server 2016 Javascript Engine Out-of-Bounds memory corruption
25681| [105037] Microsoft Edge on Win10/Server 2016 Javascript Engine PreVisitCatch memory corruption
25682| [105035] Microsoft SharePoint Server 2010 SP2 cross site scripting
25683| [105033] Microsoft Edge 38.14393.1066.0 on Win10/Server 2016 Use-After-Free information disclosure
25684| [105029] Microsoft Edge on Win10/Server 2016 Javascript Engine ProcessLinkFailedAsmJsModule memory corruption
25685| [105027] Microsoft Edge on Win10/Server 2016 _SelectValueInternal information disclosure
25686| [105024] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
25687| [105023] Microsoft Edge on Win10/Server 2016 Javascript Engine memory corruption
25688| [105017] Microsoft Windows up to Server 2016 Error Reporting information disclosure
25689| [105013] Microsoft Windows 10 1607/10 1703/Server 2016 Hyper-V denial of service
25690| [105011] Microsoft Windows up to Server 2016 Windows Search memory corruption
25691| [105010] Microsoft Windows up to Server 2016 Win32k memory corruption
25692| [105009] Microsoft Windows up to Server 2016 Input Method Editor memory corruption
25693| [105008] Microsoft SQL Server 2012/2014/2016 Analysis Services information disclosure
25694| [104990] Microsoft Windows up to Server 2016 JET Database Engine memory corruption
25695| [104989] Microsoft Windows up to Server 2016 NetBIOS denial of service
25696| [104584] Microsoft Outlook up to 2016 C2R Document File privilege escalation
25697| [104583] Microsoft Outlook up to 2016 C2R Email memory corruption
25698| [104582] Microsoft Outlook up to 2016 C2R Object memory corruption
25699| [103468] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 Open Redirect
25700| [103446] Microsoft Windows up to Server 2016 Search Object privilege escalation
25701| [103445] Microsoft Windows up to Server 2016 Wordpad privilege escalation
25702| [103444] Microsoft Windows up to Server 2016 Explorer denial of service
25703| [103442] Microsoft Windows 10/Server 2016 HoloLens WiFi Packet privilege escalation
25704| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
25705| [103431] Microsoft Windows up to Server 2016 PowerShell PSObject Object privilege escalation
25706| [103429] Microsoft Windows up to Server 2016 Kerberos weak authentication
25707| [103426] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
25708| [103425] Microsoft Exchange Server 2010 SP3/2013 SP3/2013 CU16/2016 CU5 OWA Request cross site scripting
25709| [103420] Microsoft Windows up to Server 2016 Kerberos Bypass privilege escalation
25710| [103417] Microsoft Windows up to Server 2016 Windows Shell privilege escalation
25711| [102544] Microsoft Edge on Win10/Server 2016 Fetch API information disclosure
25712| [102543] Microsoft Edge on Win10/Server 2016 Javascript XML DOM Object information disclosure
25713| [102463] Microsoft Project Server 2013 SP1 cross site scripting
25714| [102460] Microsoft Outlook 2016 on Mac HTML spoofing
25715| [102448] Microsoft SharePoint Enterprise Server 2016 Reflected cross site scripting
25716| [102446] Microsoft Office up to 2016 privilege escalation
25717| [102445] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 privilege escalation
25718| [102443] Microsoft Office up to 2016 privilege escalation
25719| [102412] Microsoft Windows up to Server 2016 PDF information disclosure
25720| [102397] Microsoft Outlook 2010 SP1/2013 SP1/2016 DLL Loader privilege escalation
25721| [102396] Microsoft Office 2013 SP1/2016 DLL Loader privilege escalation
25722| [102386] Microsoft Windows up to Server 2012 R2 Uniscribe privilege escalation
25723| [102385] Microsoft Windows up to Server 2016 Font Library privilege escalation
25724| [102376] Microsoft Windows up to Server 2016 CAB File privilege escalation
25725| [102375] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
25726| [102374] Microsoft Windows up to Server 2016 PDF Parser privilege escalation
25727| [102373] Microsoft Windows up to Server 2016 Uniscribe Font USP10!MergeLigRecords memory corruption
25728| [101817] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
25729| [101816] Microsoft Windows up to Server 2016 Malware Protection Engine setCaller memory corruption
25730| [101815] Microsoft Windows up to Server 2016 Malware Protection Engine Use-After-Free memory corruption
25731| [101814] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
25732| [101813] Microsoft Windows up to Server 2016 Malware Protection Engine memory corruption
25733| [101812] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
25734| [101811] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
25735| [101810] Microsoft Windows up to Server 2016 Malware Protection Engine denial of service
25736| [101028] Microsoft Windows 10/Server 2016 Hyper-V vSMB privilege escalation
25737| [101020] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
25738| [101019] Microsoft Skype for Business 2016 memory corruption
25739| [101018] Microsoft SharePoint 2010 SP2/2013 SP1/2016 memory corruption
25740| [101016] Microsoft PowerPoint 2011 on Mac memory corruption
25741| [101015] Microsoft PowerPoint 2011 on Mac memory corruption
25742| [101014] Microsoft Office 2010 SP2/2016 memory corruption
25743| [101013] Microsoft Office 2010 SP2/2016 memory corruption
25744| [101002] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
25745| [101001] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
25746| [101000] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
25747| [100999] Microsoft Windows up to Server 2016 SMBv1 Server memory corruption
25748| [100918] Microsoft Windows 8/8.1/10/Server 2012/Server 2016 Malware Protection Service Type Confusion privilege escalation
25749| [99697] Microsoft SharePoint Server 2010 SP1/2010 SP2 Excel Services cross site scripting
25750| [99683] Microsoft Windows 10 1607/10 1703/Server 2012 R2/Server 2016 Active Directory Lockout privilege escalation
25751| [99682] Microsoft Outlook 2011 on Mac HTML Tag Validator spoofing
25752| [99681] Microsoft Windows up to Server 2016 OLE Integrity-Level Check privilege escalation
25753| [99667] Microsoft Windows 10/Server 2016 Active Directory Service Unresponsive denial of service
25754| [98272] Microsoft Windows up to 10/Server 2016 Local Session privilege escalation
25755| [98096] Microsoft Exchange 2013 SP1 privilege escalation
25756| [98095] Microsoft Lync for Mac 2011 Certificate Validation weak authentication
25757| [98094] Microsoft SharePoint Server 2013 SP1 cross site scripting
25758| [98093] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
25759| [98091] Microsoft SharePoint Server/Office Web Apps 2010 SP2 memory corruption
25760| [98090] Microsoft SharePoint Server 2010 SP2/2013 SP1 information disclosure
25761| [98089] Microsoft Office Web Apps 2013 SP1 memory corruption
25762| [98082] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 denial of service
25763| [98081] Microsoft Excel up to 2016 information disclosure
25764| [98080] Microsoft Excel 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
25765| [98079] Microsoft Word 2016 memory corruption
25766| [98076] Microsoft Lync/Skype for Business 2010/2013/2016 Graphics Component privilege escalation
25767| [98075] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
25768| [98074] Microsoft Lync/Skype for Business 2010/2013/2016 GDI+ information disclosure
25769| [98073] Microsoft Office 2010 SP2/Word Viewer Graphics Component information disclosure
25770| [98069] Microsoft Windows up to Server 2012 R2 Color Management memory corruption
25771| [98056] Microsoft Windows up to Server 2016 DNS Query information disclosure
25772| [98054] Microsoft Windows up to Server 2016 SMBv2/SMBv3 NULL Pointer Dereference memory corruption
25773| [98017] Microsoft Windows up to Server 2016 PDF memory corruption
25774| [98015] Microsoft Windows 10/Server 2016 Hyper-V denial of service
25775| [98013] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
25776| [98007] Microsoft Windows 10/Server 2016 Hyper-V Network Switch denial of service
25777| [98006] Microsoft Windows 10/Server 2016 Hyper-V vSMB memory corruption
25778| [96521] Microsoft Windows 8.1/10/Server 2012/Server 2016 SMB Response mrxsmb20.sys denial of service
25779| [95781] Microsoft PowerPoint 2016 Java Embedded Object privilege escalation
25780| [95125] Microsoft Word/SharePoint Enterprise Server 2016 Document privilege escalation
25781| [94451] Microsoft Office 2011 memory corruption
25782| [94447] Microsoft Office 2010 SP2 memory corruption
25783| [94446] Microsoft Office 2016 memory corruption
25784| [94444] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 OLE DLL Loader memory corruption
25785| [94443] Microsoft Office up to 2016 information disclosure
25786| [94442] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 privilege escalation
25787| [93964] Microsoft Windows 7 Excel Starter 2010 XXE information disclosure
25788| [93543] Microsoft SQL Server 2016 FILESTREAM Path privilege escalation
25789| [93540] Microsoft Excel 2010 SP2/2011/2016 memory corruption
25790| [93416] Microsoft SQL Server up to 2012 SP3/2014 SP2/2016 Server Agent atxcore.dll privilege escalation
25791| [93415] Microsoft SQL Server 2016 MDS API cross site scripting
25792| [93414] Microsoft SQL Server up to 2012 SP3 RDBMS Engine privilege escalation
25793| [93413] Microsoft SQL Server up to 2014 SP2/2016 RDBMS Engine privilege escalation
25794| [93412] Microsoft SQL Server 2016 RDBMS Engine privilege escalation
25795| [93393] Microsoft Office up to 2016 memory corruption
25796| [93392] Microsoft Office up to 2016 memory corruption
25797| [93391] Microsoft Office up to 2016 memory corruption
25798| [93389] Microsoft Windows up to Server 2016 Media Foundation memory corruption
25799| [93388] Microsoft Windows up to Server 2016 Animation Manager Stylesheets memory corruption
25800| [92587] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 Transaction Manager privilege escalation
25801| [92584] Microsoft Office up to 2016 memory corruption
25802| [91571] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
25803| [91570] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library information disclosure
25804| [91556] Microsoft Exchange 2016 Meeting Invation cross site scripting
25805| [91555] Microsoft Exchange 2013/2016 Link spoofing
25806| [91550] Microsoft Office 2016 memory corruption
25807| [91547] Microsoft Office 2010 memory corruption
25808| [91543] Microsoft Office up to 2016 memory corruption
25809| [91541] Microsoft Office 2013/2016 APP-V ASLR privilege escalation
25810| [90711] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF privilege escalation
25811| [90710] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 Netlogon privilege escalation
25812| [90704] Microsoft Office 2013/2013 RT/2016 memory corruption
25813| [89043] Microsoft Office up to 2016 memory corruption
25814| [89041] Microsoft Office up to 2016 memory corruption
25815| [89040] Microsoft Office 2010 SP2/2011/2013 SP1/2013 RT SP1/2016 memory corruption
25816| [89038] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 Security Feature privilege escalation
25817| [89037] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1/2016 memory corruption
25818| [87961] Microsoft Windows up to Server 2012 R2 Search denial of service
25819| [87959] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
25820| [87958] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF memory corruption
25821| [87957] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF information disclosure
25822| [87956] Microsoft Exchange 2013/2016 Oracle Outside In Libraries information disclosure
25823| [87944] Microsoft Windows Server 2012/Server 2012 R2 Virtual PCI Memory information disclosure
25824| [87940] Microsoft Windows Server 2012/Server 2012 R2 DNS Server Use-After-Free memory corruption
25825| [87936] Microsoft Office up to 2016 memory corruption
25826| [87166] Microsoft Windows up to Server 2012 R2 DirectX Graphics Kernel Subsystem privilege escalation
25827| [87156] Microsoft Windows 8.1/RT 8.1/10/Server 2012 R2 Shell memory corruption
25828| [87149] Microsoft Office up to 2016 memory corruption
25829| [87148] Microsoft Office 2010 Graphics memory corruption
25830| [87146] Microsoft Office 2011/2013/2013 RT/2016 memory corruption
25831| [82229] Microsoft Excel 2010 SP2 Office Document memory corruption
25832| [82223] Microsoft Windows 8.1/10/Server 2012 R2 Hyper-V Memory information disclosure
25833| [82222] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Memory information disclosure
25834| [82221] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Hyper-V privilege escalation
25835| [81274] Microsoft Office up to 2016 memory corruption
25836| [81270] Microsoft Windows 8.1/RT 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
25837| [81269] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
25838| [81268] Microsoft Windows up to Server 2012 R2 Media Parser memory corruption
25839| [80886] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
25840| [80885] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP memory corruption
25841| [80878] Microsoft Windows Server 2012 R2 Active Directory Federation Service denial of service
25842| [80874] Microsoft Windows 7 SP1/8.1/10/Server 2012/Server 2012 R2 RDP privilege escalation
25843| [80870] Microsoft Office up to 2016 memory corruption
25844| [80868] Microsoft Office up to 2016 memory corruption
25845| [80867] Microsoft Office up to 2016 memory corruption
25846| [80865] Microsoft Windows 8.1/RT 8.1/Server 2012/Server 2012 R2 DLL Loader memory corruption
25847| [80860] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 Reader memory corruption
25848| [80859] Microsoft Windows 8.1/10/Server 2012/Server 2012 R2 PDF Library memory corruption
25849| [80231] Microsoft Excel up to 2016 Office Document memory corruption
25850| [80229] Microsoft Exchange Server 2013 SP1/2013 CU 10/2013 CU 11/2016 Outlook Web Access cross site scripting
25851| [80228] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
25852| [80227] Microsoft Exchange Server 2013 SP1/2013 CU 10/2016 Outlook Web Access cross site scripting
25853| [80226] Microsoft Exchange Server 2016 Outlook Web Access cross site scripting
25854| [80218] Microsoft Office up to 2016 ASLR privilege escalation
25855| [80217] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
25856| [80216] Microsoft Office up to 2016 Office Document memory corruption
25857| [80206] Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting
25858| [128763] Microsoft Exchange Server 2016 CU10/2016 CU11/2019 memory corruption
25859| [79508] Microsoft Windows up to Server 2012 R2 Library Loader memory corruption
25860| [79500] Microsoft Office 2010/2011/2016 memory corruption
25861| [79183] Microsoft Windows up to Server 2012 R2 IPsec denial of service
25862| [79173] Microsoft Windows up to Server 2012 R2 Graphics information disclosure
25863| [79117] Microsoft Outlook 2011/2016 on Mac HTML spoofing
25864| [78375] Microsoft SharePoint Server/SharePoint Foundation 2013 SP1 cross site scripting
25865| [77645] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
25866| [77644] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting
25867| [77638] Microsoft Lync Server 2013 cross site scripting
25868| [77628] Microsoft SharePoint Foundation 2013 SP1 cross site scripting
25869| [77612] Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access Stack-Based information disclosure
25870| [77050] Microsoft Office up to 2016 memory corruption
25871| [77037] Microsoft Windows Server 2012/Server 2012 R2 System Center Operations Manager cross site scripting
25872| [76461] Microsoft Windows up to Server 2012 R2 Domain-Controller Communication Credentials information disclosure
25873| [76460] Microsoft Windows 7 SP1/8/Server 2012 RDP Server Service memory corruption
25874| [76448] Microsoft Windows 8.1/Server 2012 R2 Hyper-V memory corruption
25875| [75793] Microsoft Exchange Server 2013 CU8 cross site scripting
25876| [75792] Microsoft Exchange Server 2013 SP1 CU8 cross site request forgery
25877| [75791] Microsoft Office 2013 SP1 Office Document Uninitialized Memory memory corruption
25878| [75787] Microsoft Exchange Server 2013 SP1 CU8 Same Origin Policy privilege escalation
25879| [75786] Microsoft Office 2010 SP2/2013 SP1/2013 RT SP1 Office Document memory corruption
25880| [66976] Microsoft Access 2010 VBA Datatype denial of service
25881| [74848] Microsoft SharePoint Foundation/SharePoint Server 2013 SP1 cross site scripting
25882| [74842] Microsoft Windows 8.1/Server 2012 R2 Hyper-V denial of service
25883| [74836] Microsoft Project Server 2010 SP2/2013 SP1 cross site scripting
25884| [74835] Microsoft Office 2011 on Mac Use-After-Free cross site scripting
25885| [74834] Microsoft Windows Server 2012 R2 Active Directory Federation Services 3.0 privilege escalation
25886| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
25887| [74393] Microsoft SharePoint Server 2013 Foundation cross site scripting
25888| [73967] Microsoft Office up to 2013 SP1 Office File memory corruption
25889| [73966] Microsoft Office up to 2013 SP1 RTF File memory corruption
25890| [73965] Microsoft Office up to 2013 SP1 Use-After-Free memory corruption
25891| [73961] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 Remote Desktop Protocol Object Management denial of service
25892| [69162] Microsoft System Center Virtual Machine Manager 2012 privilege escalation
25893| [69160] Microsoft Windows up to Server 2012 Process privilege escalation
25894| [69156] Microsoft Office 2010 Object memory corruption
25895| [68593] Microsoft Windows up to Server 2012 Network Location Awareness Service privilege escalation
25896| [68417] Microsoft Exchange 2013 Outlook Web Access Token spoofing
25897| [68191] Microsoft SharePoint 2010 cross site scripting
25898| [67828] Microsoft ASP.NET MVC 2/3/4/5/5.1 System.Web.Mvc.dll cross site scripting
25899| [67518] Microsoft Lync 2013 denial of service
25900| [67517] Microsoft Lync 2013 Script Reflected cross site scripting
25901| [67516] Microsoft Lync 2010/2013 denial of service
25902| [67362] Microsoft Windows up to Server 2012 R2 Remote Procedure Call privilege escalation
25903| [67360] Microsoft SharePoint 2013 App Permission Management cross site scripting
25904| [13549] Microsoft Windows 7/8/8.1/Server 2012 Remote Desktop Protocol weak encryption
25905| [13547] Microsoft Lync 2010/2013 Meeting cross site scripting
25906| [13228] Microsoft Office 2013 Document privilege escalation
25907| [68577] Microsoft ASP.NET 2014.3.1209 Telerik UI RadAsyncUpload directory traversal
25908| [12267] Microsoft Forefront Security for Exchange Server 2010 Mail memory corruption
25909| [12263] Microsoft Windows up to Server 2012 Direct2D 2D Geometric Figure memory corruption
25910| [12238] Microsoft Windows 8/Server 2012/RT IPv6 denial of service
25911| [12185] Microsoft .NET Framework 2/4 HMAC weak authentication
25912| [12183] Microsoft .NET Framework 2/4 DTD denial of service
25913| [11673] Microsoft Windows Live Movie Maker 2011 WAV File denial of service
25914| [11468] Microsoft Exchange 2010/2013 cross site scripting
25915| [11466] Microsoft Office 2013 File Response information disclosure
25916| [11457] Microsoft SharePoint Server/Office Web Apps 2010 SP1/2010 SP2/2013 W3WP Service Account privilege escalation
25917| [11150] Microsoft Windows 8/Server 2012 Hyper-V Data Structure Value Crash privilege escalation
25918| [11004] Microsoft Windows Server 2012 R2 RDP Restricted Admin Mode weak authentication
25919| [10250] Microsoft SharePoint Server up to 2013 W3WP Process denial of service
25920| [10249] Microsoft SharePoint 2010/2003/2007/2.0/3.0 Workflow memory corruption
25921| [10248] Microsoft SharePoint Server up to 2013 cross site scripting
25922| [9943] Microsoft Windows Server 2012 NAT Driver ICMP Packet denial of service
25923| [8739] Microsoft Windows Essentials up to 2012 Windows Writer Eingabe information disclosure
25924| [8725] Microsoft Lync 2010/2013 Use-After-Free memory corruption
25925| [8722] Microsoft Windows 8/Server 2012/RT HTTP.sys denial of service
25926| [8206] Microsoft SharePoint Server 2010 SP1 HTML Sanitization Component cross site scripting
25927| [8203] Microsoft Windows up to 2012 AD LDAP Query denial of service
25928| [8200] Microsoft SharePoint Server 2013 ACL information disclosure
25929| [7971] Microsoft Office for Mac 2011 up to 14.3.1 on Mac HTML5 Mail Message Parser File information disclosure
25930| [7969] Microsoft OneNote 2010 SP1 ONE File information disclosure
25931| [7968] Microsoft SharePoint Server 2010 SP1 Input Validator Eingabe Crash denial of service
25932| [7967] Microsoft SharePoint Server 2010 SP1 User Account Eingabe Crash information disclosure
25933| [7966] Microsoft SharePoint Server 2010 SP1 Eingabe Crash cross site scripting
25934| [7965] Microsoft SharePoint Server 2010 SP1 User Account Callback URL privilege escalation
25935| [7964] Microsoft Visio 2010 Tree Object Type File memory corruption
25936| [7343] Microsoft Lync 2012 HTTP Format String
25937| [7258] Microsoft Windows up to 8/Server 2012 SSL/TLS race condition
25938| [7230] Microsoft Excel 2010 SP1 on 32-bit XLS File Formatting Information Crash denial of service
25939| [6831] Microsoft Office Picture Manager 2010 File memory corruption
25940| [62720] EMC NetWorker Module for Microsoft Applications up to 2.2.0 memory corruption
25941| [6624] Microsoft SQL Server up to 2012 Report Manager cross site scripting
25942| [62238] Microsoft Visual Studio Team Foundation Server 2010 cross site scripting
25943| [5946] Microsoft Visio/Visio Viewer up to 2010 SP1 File memory corruption
25944| [5644] Microsoft SharePoint 2010 scriptesx.ashx cross site scripting
25945| [5641] Microsoft SharePoint 2010 cross site scripting
25946| [60943] Microsoft Dynamics AX 2012 Enterprise Portal cross site scripting
25947| [12311] Microsoft Lync 2010 Search race condition
25948| [60570] Microsoft Forefront Unified Access Gateway 2010 information disclosure
25949| [60569] Microsoft Forefront Unified Access Gateway 2010 spoofing
25950| [60208] Microsoft Visio Viewer 2010 memory corruption
25951| [60207] Microsoft Visio Viewer 2010 memory corruption
25952| [60206] Microsoft Visio Viewer 2010 memory corruption
25953| [4640] Microsoft SharePoint 2010 inplview.aspx cross site scripting
25954| [4636] Microsoft SharePoint 2010 wizardlist.aspx cross site scripting
25955| [4635] Microsoft SharePoint 2010 themeweb.aspx cross site scripting
25956| [59008] Microsoft Forefront Unified Access Gateway 2010 Crash denial of service
25957| [58995] Microsoft Forefront Unified Access Gateway 2010 memory corruption
25958| [58994] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
25959| [58993] Microsoft Forefront Unified Access Gateway 2010 Reflected cross site scripting
25960| [4424] Microsoft Host Integration Server up to 2010 denial of service
25961| [4420] Microsoft Forefront Unified Access Gateway 2010 memory corruption
25962| [58487] Microsoft SharePoint Foundation 2010 cross site scripting
25963| [58486] Microsoft SharePoint Foundation 2010 Reflected cross site scripting
25964| [58485] Microsoft SharePoint Foundation 2010 EditForm.aspx cross site scripting
25965| [4414] Microsoft SharePoint 2010 cross site scripting
25966| [4413] Microsoft SharePoint 2010/2007/3.0 XML/XLS Designfehler
25967| [91971] Microsoft Skype 2.2.x/5.2.x/5.3.x denial of service
25968| [57693] Microsoft Forefront Threat Management Gateway 2010 NSPLookupServiceNext memory corruption
25969| [4332] Microsoft PowerPoint 2010/2007 memory corruption
25970| [56028] Microsoft Data Access Components 2.8 memory corruption
25971| [55777] Microsoft Windows Movie Maker 2.6 memory corruption
25972| [55424] Microsoft Forefront Unified Access Gateway 2010 Signurl.asp cross site scripting
25973| [55415] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
25974| [55414] Microsoft Forefront Unified Access Gateway 2010 cross site scripting
25975| [55413] Microsoft Forefront Unified Access Gateway 2010 spoofing
25976| [54341] Microsoft Windows Movie Maker 2.1 memory corruption
25977| [54549] Microsoft PowerPoint 2010 pptimpconv.dll memory corruption
25978| [4009] Microsoft NET Framework 2.x/3.x denial of service
25979| [45681] Microsoft Internet Explorer 8 Beta 2 privilege escalation
25980| [45449] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
25981| [45448] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
25982| [45446] Microsoft Internet Explorer 8 Beta 2 XSS Filter cross site scripting
25983| [2927] Microsoft Data Access Components 2.x ADODB.Connection ActiveX Control memory corruption
25984| [32692] Microsoft XML Core Services up to 2.6 memory corruption
25985| [32691] Microsoft XML Core Services up to 2.6 memory corruption
25986| [29608] Microsoft Data Access Components 2.7 memory corruption
25987|
25988| MITRE CVE - https://cve.mitre.org:
25989| [CVE-2013-3661] The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
25990| [CVE-2013-3660] The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
25991| [CVE-2013-3174] DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."
25992| [CVE-2013-3173] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overwrite Vulnerability."
25993| [CVE-2013-3172] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to cause a denial of service (system hang) via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."
25994| [CVE-2013-3171] The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."
25995| [CVE-2013-3167] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."
25996| [CVE-2013-3154] The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."
25997| [CVE-2013-3138] Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
25998| [CVE-2013-3136] The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
25999| [CVE-2013-3134] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."
26000| [CVE-2013-3133] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
26001| [CVE-2013-3132] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Delegate Reflection Bypass Vulnerability."
26002| [CVE-2013-3131] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
26003| [CVE-2013-1345] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Vulnerability."
26004| [CVE-2013-1340] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."
26005| [CVE-2013-1339] The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
26006| [CVE-2013-1336] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."
26007| [CVE-2013-1335] Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
26008| [CVE-2013-1334] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."
26009| [CVE-2013-1332] dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."
26010| [CVE-2013-1331] Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
26011| [CVE-2013-1329] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
26012| [CVE-2013-1328] Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
26013| [CVE-2013-1327] Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
26014| [CVE-2013-1323] Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
26015| [CVE-2013-1322] Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
26016| [CVE-2013-1321] Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
26017| [CVE-2013-1320] Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
26018| [CVE-2013-1319] Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
26019| [CVE-2013-1318] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
26020| [CVE-2013-1317] Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."
26021| [CVE-2013-1316] Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."
26022| [CVE-2013-1302] Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
26023| [CVE-2013-1301] Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
26024| [CVE-2013-1300] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."
26025| [CVE-2013-1295] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "CSRSS Memory Corruption Vulnerability."
26026| [CVE-2013-1294] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
26027| [CVE-2013-1293] The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application that leverages improper handling of objects in memory, aka "NTFS NULL Pointer Dereference Vulnerability."
26028| [CVE-2013-1292] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
26029| [CVE-2013-1291] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 Gold and SP1, and Windows 8 allows local users to cause a denial of service (reboot) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability" or "Win32k Font Parsing Vulnerability."
26030| [CVE-2013-1287] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1286.
26031| [CVE-2013-1286] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.
26032| [CVE-2013-1285] The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1286 and CVE-2013-1287.
26033| [CVE-2013-1283] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
26034| [CVE-2013-1281] The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
26035| [CVE-2013-1280] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Reference Count Vulnerability."
26036| [CVE-2013-1279] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1278.
26037| [CVE-2013-1278] Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1279.
26038| [CVE-2013-1277] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26039| [CVE-2013-1276] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26040| [CVE-2013-1275] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26041| [CVE-2013-1274] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26042| [CVE-2013-1273] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26043| [CVE-2013-1272] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26044| [CVE-2013-1271] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26045| [CVE-2013-1270] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26046| [CVE-2013-1269] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26047| [CVE-2013-1268] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26048| [CVE-2013-1267] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26049| [CVE-2013-1266] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26050| [CVE-2013-1265] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26051| [CVE-2013-1264] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26052| [CVE-2013-1263] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26053| [CVE-2013-1262] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26054| [CVE-2013-1261] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26055| [CVE-2013-1260] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26056| [CVE-2013-1259] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26057| [CVE-2013-1258] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26058| [CVE-2013-1257] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26059| [CVE-2013-1256] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26060| [CVE-2013-1255] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26061| [CVE-2013-1254] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26062| [CVE-2013-1253] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26063| [CVE-2013-1252] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26064| [CVE-2013-1251] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26065| [CVE-2013-1250] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26066| [CVE-2013-1249] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26067| [CVE-2013-1248] Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
26068| [CVE-2013-0095] Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability."
26069| [CVE-2013-0077] Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
26070| [CVE-2013-0076] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."
26071| [CVE-2013-0075] The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
26072| [CVE-2013-0073] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."
26073| [CVE-2013-0013] The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability."
26074| [CVE-2013-0011] The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulnerability."
26075| [CVE-2013-0010] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
26076| [CVE-2013-0009] Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.
26077| [CVE-2013-0008] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."
26078| [CVE-2013-0004] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability."
26079| [CVE-2013-0003] Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."
26080| [CVE-2013-0002] Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."
26081| [CVE-2013-0001] The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka "System Drawing Information Disclosure Vulnerability."
26082| [CVE-2012-5672] Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
26083| [CVE-2012-4791] Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
26084| [CVE-2012-4786] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
26085| [CVE-2012-4776] The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."
26086| [CVE-2012-4774] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted (1) file name or (2) subfolder name that triggers use of unallocated memory as the destination of a copy operation, aka "Windows Filename Parsing Vulnerability."
26087| [CVE-2012-2897] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."
26088| [CVE-2012-2556] The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."
26089| [CVE-2012-2553] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
26090| [CVE-2012-2552] Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
26091| [CVE-2012-2551] The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."
26092| [CVE-2012-2543] Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1
26093| [CVE-2012-2539] Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
26094| [CVE-2012-2536] Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
26095| [CVE-2012-2530] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
26096| [CVE-2012-2529] Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Windows Kernel Integer Overflow Vulnerability."
26097| [CVE-2012-2528] Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
26098| [CVE-2012-2527] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
26099| [CVE-2012-2524] Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
26100| [CVE-2012-2520] Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
26101| [CVE-2012-2519] Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
26102| [CVE-2012-1896] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
26103| [CVE-2012-1895] The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
26104| [CVE-2012-1893] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability."
26105| [CVE-2012-1890] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability."
26106| [CVE-2012-1887] Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
26107| [CVE-2012-1886] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
26108| [CVE-2012-1885] Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1
26109| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
26110| [CVE-2012-1867] Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."
26111| [CVE-2012-1866] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability."
26112| [CVE-2012-1865] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864.
26113| [CVE-2012-1864] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865.
26114| [CVE-2012-1863] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
26115| [CVE-2012-1862] Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."
26116| [CVE-2012-1860] Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."
26117| [CVE-2012-1858] The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
26118| [CVE-2012-1856] The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
26119| [CVE-2012-1855] Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."
26120| [CVE-2012-1854] Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26121| [CVE-2012-1851] Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
26122| [CVE-2012-1850] The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability."
26123| [CVE-2012-1848] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."
26124| [CVE-2012-1847] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26125| [CVE-2012-1537] Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
26126| [CVE-2012-1528] Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability."
26127| [CVE-2012-1527] Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability."
26128| [CVE-2012-1459] The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
26129| [CVE-2012-1457] The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
26130| [CVE-2012-1453] The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
26131| [CVE-2012-1443] The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
26132| [CVE-2012-1420] The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
26133| [CVE-2012-1194] The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
26134| [CVE-2012-0185] Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
26135| [CVE-2012-0184] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26136| [CVE-2012-0183] Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
26137| [CVE-2012-0182] Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
26138| [CVE-2012-0181] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."
26139| [CVE-2012-0180] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."
26140| [CVE-2012-0179] Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."
26141| [CVE-2012-0178] Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."
26142| [CVE-2012-0177] Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."
26143| [CVE-2012-0175] The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."
26144| [CVE-2012-0174] Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."
26145| [CVE-2012-0173] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.
26146| [CVE-2012-0167] Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
26147| [CVE-2012-0165] GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."
26148| [CVE-2012-0163] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
26149| [CVE-2012-0161] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
26150| [CVE-2012-0160] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
26151| [CVE-2012-0159] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview
26152| [CVE-2012-0158] The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26153| [CVE-2012-0157] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."
26154| [CVE-2012-0156] DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability."
26155| [CVE-2012-0154] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."
26156| [CVE-2012-0152] The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
26157| [CVE-2012-0151] The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
26158| [CVE-2012-0150] Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."
26159| [CVE-2012-0149] afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
26160| [CVE-2012-0148] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
26161| [CVE-2012-0143] Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
26162| [CVE-2012-0142] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26163| [CVE-2012-0141] Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1
26164| [CVE-2012-0015] Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
26165| [CVE-2012-0014] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."
26166| [CVE-2012-0013] Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."
26167| [CVE-2012-0009] Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
26168| [CVE-2012-0008] Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
26169| [CVE-2012-0006] The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability."
26170| [CVE-2012-0005] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."
26171| [CVE-2012-0004] Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
26172| [CVE-2012-0003] Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."
26173| [CVE-2012-0002] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."
26174| [CVE-2012-0001] The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
26175| [CVE-2011-5046] The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."
26176| [CVE-2011-4434] Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
26177| [CVE-2011-3417] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
26178| [CVE-2011-3416] The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
26179| [CVE-2011-3415] Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
26180| [CVE-2011-3414] The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
26181| [CVE-2011-3413] Microsoft PowerPoint 2007 SP2
26182| [CVE-2011-3412] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."
26183| [CVE-2011-3411] Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."
26184| [CVE-2011-3410] Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."
26185| [CVE-2011-3408] Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability."
26186| [CVE-2011-3406] Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability."
26187| [CVE-2011-3403] Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."
26188| [CVE-2011-3402] Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."
26189| [CVE-2011-3400] Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
26190| [CVE-2011-3397] The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."
26191| [CVE-2011-3396] Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."
26192| [CVE-2011-2019] Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
26193| [CVE-2011-2018] The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
26194| [CVE-2011-2016] Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
26195| [CVE-2011-2014] The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability."
26196| [CVE-2011-2013] Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."
26197| [CVE-2011-2011] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
26198| [CVE-2011-2008] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
26199| [CVE-2011-2007] Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
26200| [CVE-2011-2005] afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
26201| [CVE-2011-2004] Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.
26202| [CVE-2011-2003] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."
26203| [CVE-2011-2002] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka "Win32k TrueType Font Type Translation Vulnerability."
26204| [CVE-2011-1991] Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability."
26205| [CVE-2011-1990] Microsoft Excel 2007 SP2
26206| [CVE-2011-1989] Microsoft Excel 2003 SP3 and 2007 SP2
26207| [CVE-2011-1988] Microsoft Excel 2003 SP3 and 2007 SP2
26208| [CVE-2011-1987] Array index error in Microsoft Excel 2003 SP3 and 2007 SP2
26209| [CVE-2011-1986] Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
26210| [CVE-2011-1985] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability."
26211| [CVE-2011-1984] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
26212| [CVE-2011-1983] Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."
26213| [CVE-2011-1982] Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
26214| [CVE-2011-1980] Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability."
26215| [CVE-2011-1979] Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
26216| [CVE-2011-1978] Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."
26217| [CVE-2011-1976] Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
26218| [CVE-2011-1975] Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
26219| [CVE-2011-1974] NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
26220| [CVE-2011-1972] Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
26221| [CVE-2011-1971] The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."
26222| [CVE-2011-1970] The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
26223| [CVE-2011-1968] The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability."
26224| [CVE-2011-1967] Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."
26225| [CVE-2011-1966] The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
26226| [CVE-2011-1965] Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."
26227| [CVE-2011-1894] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
26228| [CVE-2011-1893] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
26229| [CVE-2011-1892] Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
26230| [CVE-2011-1888] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
26231| [CVE-2011-1887] win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
26232| [CVE-2011-1885] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
26233| [CVE-2011-1884] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26234| [CVE-2011-1883] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26235| [CVE-2011-1882] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26236| [CVE-2011-1881] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
26237| [CVE-2011-1880] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability."
26238| [CVE-2011-1879] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26239| [CVE-2011-1878] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26240| [CVE-2011-1877] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability."
26241| [CVE-2011-1876] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26242| [CVE-2011-1875] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26243| [CVE-2011-1874] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability."
26244| [CVE-2011-1873] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."
26245| [CVE-2011-1872] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
26246| [CVE-2011-1871] Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."
26247| [CVE-2011-1870] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability."
26248| [CVE-2011-1869] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
26249| [CVE-2011-1868] The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
26250| [CVE-2011-1508] Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."
26251| [CVE-2011-1284] Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability."
26252| [CVE-2011-1283] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability."
26253| [CVE-2011-1282] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability."
26254| [CVE-2011-1281] The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability."
26255| [CVE-2011-1280] The XML Editor in Microsoft InfoPath 2007 SP2 and 2010
26256| [CVE-2011-1279] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."
26257| [CVE-2011-1278] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."
26258| [CVE-2011-1277] Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
26259| [CVE-2011-1276] Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
26260| [CVE-2011-1275] Microsoft Excel 2002 SP3
26261| [CVE-2011-1274] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
26262| [CVE-2011-1273] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26263| [CVE-2011-1272] Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
26264| [CVE-2011-1270] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
26265| [CVE-2011-1269] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
26266| [CVE-2011-1268] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
26267| [CVE-2011-1267] The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
26268| [CVE-2011-1264] Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
26269| [CVE-2011-1263] Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
26270| [CVE-2011-1253] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Class Inheritance Vulnerability."
26271| [CVE-2011-1252] Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
26272| [CVE-2011-1249] The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
26273| [CVE-2011-1248] WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."
26274| [CVE-2011-1247] Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Active Accessibility Insecure Library Loading Vulnerability."
26275| [CVE-2011-1242] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26276| [CVE-2011-1241] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26277| [CVE-2011-1240] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26278| [CVE-2011-1239] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26279| [CVE-2011-1238] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26280| [CVE-2011-1237] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26281| [CVE-2011-1236] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26282| [CVE-2011-1235] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26283| [CVE-2011-1234] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26284| [CVE-2011-1233] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26285| [CVE-2011-1232] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26286| [CVE-2011-1231] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26287| [CVE-2011-1230] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26288| [CVE-2011-1229] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26289| [CVE-2011-1228] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26290| [CVE-2011-1227] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26291| [CVE-2011-1226] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26292| [CVE-2011-1225] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26293| [CVE-2011-0980] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."
26294| [CVE-2011-0979] Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26295| [CVE-2011-0978] Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2
26296| [CVE-2011-0977] Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
26297| [CVE-2011-0976] Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2
26298| [CVE-2011-0677] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26299| [CVE-2011-0676] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
26300| [CVE-2011-0675] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26301| [CVE-2011-0674] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26302| [CVE-2011-0672] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26303| [CVE-2011-0671] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26304| [CVE-2011-0670] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26305| [CVE-2011-0667] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26306| [CVE-2011-0666] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26307| [CVE-2011-0665] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26308| [CVE-2011-0664] Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
26309| [CVE-2011-0662] Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
26310| [CVE-2011-0661] The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
26311| [CVE-2011-0660] The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
26312| [CVE-2011-0658] Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."
26313| [CVE-2011-0657] DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
26314| [CVE-2011-0656] Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26315| [CVE-2011-0655] Microsoft PowerPoint 2007 SP2 and 2010
26316| [CVE-2011-0654] Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.
26317| [CVE-2011-0107] Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
26318| [CVE-2011-0105] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
26319| [CVE-2011-0104] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
26320| [CVE-2011-0103] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."
26321| [CVE-2011-0101] Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, doubly-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
26322| [CVE-2011-0098] Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26323| [CVE-2011-0097] Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26324| [CVE-2011-0096] The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
26325| [CVE-2011-0093] ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
26326| [CVE-2011-0092] The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
26327| [CVE-2011-0091] Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
26328| [CVE-2011-0090] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
26329| [CVE-2011-0089] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
26330| [CVE-2011-0088] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability."
26331| [CVE-2011-0087] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."
26332| [CVE-2011-0086] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability."
26333| [CVE-2011-0043] Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
26334| [CVE-2011-0042] SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
26335| [CVE-2011-0041] Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
26336| [CVE-2011-0040] The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
26337| [CVE-2011-0039] The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
26338| [CVE-2011-0034] Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted parameter values in an OpenType font, aka "OpenType Font Stack Overflow Vulnerability."
26339| [CVE-2011-0033] The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
26340| [CVE-2011-0032] Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
26341| [CVE-2011-0031] The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
26342| [CVE-2011-0030] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
26343| [CVE-2011-0028] WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."
26344| [CVE-2010-5082] Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."
26345| [CVE-2010-4701] Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
26346| [CVE-2010-4669] The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
26347| [CVE-2010-4562] Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
26348| [CVE-2010-4398] Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
26349| [CVE-2010-4182] Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown
26350| [CVE-2010-3974] fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."
26351| [CVE-2010-3970] Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."
26352| [CVE-2010-3966] Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."
26353| [CVE-2010-3965] Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
26354| [CVE-2010-3964] Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
26355| [CVE-2010-3963] Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability."
26356| [CVE-2010-3961] The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."
26357| [CVE-2010-3960] Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."
26358| [CVE-2010-3959] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."
26359| [CVE-2010-3958] The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."
26360| [CVE-2010-3957] Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."
26361| [CVE-2010-3956] The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."
26362| [CVE-2010-3955] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."
26363| [CVE-2010-3954] Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."
26364| [CVE-2010-3946] Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."
26365| [CVE-2010-3945] Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
26366| [CVE-2010-3944] win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
26367| [CVE-2010-3943] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."
26368| [CVE-2010-3942] win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."
26369| [CVE-2010-3941] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."
26370| [CVE-2010-3940] Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."
26371| [CVE-2010-3939] Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."
26372| [CVE-2010-3937] Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."
26373| [CVE-2010-3338] The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
26374| [CVE-2010-3337] Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.
26375| [CVE-2010-3336] Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."
26376| [CVE-2010-3335] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."
26377| [CVE-2010-3334] Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
26378| [CVE-2010-3333] Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
26379| [CVE-2010-3332] Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."
26380| [CVE-2010-3324] The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
26381| [CVE-2010-3243] Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."
26382| [CVE-2010-3242] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
26383| [CVE-2010-3241] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
26384| [CVE-2010-3240] Microsoft Excel 2002 SP3 and 2007 SP2
26385| [CVE-2010-3239] Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
26386| [CVE-2010-3238] Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
26387| [CVE-2010-3237] Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
26388| [CVE-2010-3236] Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
26389| [CVE-2010-3235] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
26390| [CVE-2010-3234] Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
26391| [CVE-2010-3233] Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
26392| [CVE-2010-3232] Microsoft Excel 2003 SP3 and 2007 SP2
26393| [CVE-2010-3231] Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
26394| [CVE-2010-3230] Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
26395| [CVE-2010-3229] The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
26396| [CVE-2010-3227] Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."
26397| [CVE-2010-3223] The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
26398| [CVE-2010-3222] Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability."
26399| [CVE-2010-3221] Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
26400| [CVE-2010-3220] Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
26401| [CVE-2010-3219] Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
26402| [CVE-2010-3218] Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."
26403| [CVE-2010-3217] Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
26404| [CVE-2010-3216] Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."
26405| [CVE-2010-3215] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."
26406| [CVE-2010-3214] Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010
26407| [CVE-2010-3213] Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
26408| [CVE-2010-3200] MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc.
26409| [CVE-2010-3190] Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1
26410| [CVE-2010-3148] Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
26411| [CVE-2010-3147] Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
26412| [CVE-2010-3146] Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability."
26413| [CVE-2010-3144] Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or INS file, aka "Internet Connection Signup Wizard Insecure Library Loading Vulnerability."
26414| [CVE-2010-3142] Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
26415| [CVE-2010-2750] Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."
26416| [CVE-2010-2748] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."
26417| [CVE-2010-2747] Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
26418| [CVE-2010-2746] Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
26419| [CVE-2010-2744] The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."
26420| [CVE-2010-2742] The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."
26421| [CVE-2010-2741] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
26422| [CVE-2010-2740] The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."
26423| [CVE-2010-2739] Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.
26424| [CVE-2010-2738] The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
26425| [CVE-2010-2729] The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability."
26426| [CVE-2010-2728] Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."
26427| [CVE-2010-2573] Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."
26428| [CVE-2010-2572] Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
26429| [CVE-2010-2571] Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."
26430| [CVE-2010-2570] Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."
26431| [CVE-2010-2569] pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."
26432| [CVE-2010-2568] Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
26433| [CVE-2010-2567] The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the-middle attackers to execute arbitrary code via a malformed response, aka "RPC Memory Corruption Vulnerability."
26434| [CVE-2010-2566] The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."
26435| [CVE-2010-2563] The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter, aka "WordPad Word 97 Text Converter Memory Corruption Vulnerability."
26436| [CVE-2010-2562] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."
26437| [CVE-2010-2555] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."
26438| [CVE-2010-2554] The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
26439| [CVE-2010-2552] Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (system hang) via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."
26440| [CVE-2010-2551] The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 packet, aka "SMB Variable Validation Vulnerability."
26441| [CVE-2010-2550] The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."
26442| [CVE-2010-2549] Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
26443| [CVE-2010-2265] Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.
26444| [CVE-2010-2091] Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
26445| [CVE-2010-2084] Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.
26446| [CVE-2010-1903] Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability."
26447| [CVE-2010-1902] Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
26448| [CVE-2010-1901] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
26449| [CVE-2010-1900] Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2
26450| [CVE-2010-1898] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
26451| [CVE-2010-1897] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
26452| [CVE-2010-1896] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability."
26453| [CVE-2010-1895] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."
26454| [CVE-2010-1894] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
26455| [CVE-2010-1893] Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."
26456| [CVE-2010-1892] The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability."
26457| [CVE-2010-1891] The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability."
26458| [CVE-2010-1890] The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability."
26459| [CVE-2010-1889] Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."
26460| [CVE-2010-1887] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability."
26461| [CVE-2010-1886] Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
26462| [CVE-2010-1885] The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."
26463| [CVE-2010-1883] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."
26464| [CVE-2010-1882] Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
26465| [CVE-2010-1881] The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
26466| [CVE-2010-1880] Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
26467| [CVE-2010-1735] The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
26468| [CVE-2010-1734] The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
26469| [CVE-2010-1690] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
26470| [CVE-2010-1689] The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025.
26471| [CVE-2010-1263] Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
26472| [CVE-2010-1257] Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2
26473| [CVE-2010-1255] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."
26474| [CVE-2010-1253] Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2
26475| [CVE-2010-1252] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
26476| [CVE-2010-1251] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
26477| [CVE-2010-1250] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
26478| [CVE-2010-1249] Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.
26479| [CVE-2010-1248] Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
26480| [CVE-2010-1247] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.
26481| [CVE-2010-1246] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."
26482| [CVE-2010-1245] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
26483| [CVE-2010-1225] The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."
26484| [CVE-2010-1175] Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."
26485| [CVE-2010-0917] Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution when the F1 key is pressed, a different vulnerability than CVE-2010-0483.
26486| [CVE-2010-0824] Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and CVE-2010-1245.
26487| [CVE-2010-0823] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
26488| [CVE-2010-0822] Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."
26489| [CVE-2010-0821] Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2
26490| [CVE-2010-0820] Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2
26491| [CVE-2010-0819] Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability."
26492| [CVE-2010-0818] The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability."
26493| [CVE-2010-0817] Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.
26494| [CVE-2010-0815] VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."
26495| [CVE-2010-0814] The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."
26496| [CVE-2010-0812] Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
26497| [CVE-2010-0811] Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability."
26498| [CVE-2010-0810] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
26499| [CVE-2010-0719] An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
26500| [CVE-2010-0487] The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."
26501| [CVE-2010-0486] The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."
26502| [CVE-2010-0485] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."
26503| [CVE-2010-0484] The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."
26504| [CVE-2010-0483] vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
26505| [CVE-2010-0482] The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."
26506| [CVE-2010-0481] The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
26507| [CVE-2010-0480] Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."
26508| [CVE-2010-0479] Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."
26509| [CVE-2010-0478] Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
26510| [CVE-2010-0477] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
26511| [CVE-2010-0476] The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."
26512| [CVE-2010-0278] A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
26513| [CVE-2010-0270] The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
26514| [CVE-2010-0269] The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."
26515| [CVE-2010-0268] Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
26516| [CVE-2010-0266] Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
26517| [CVE-2010-0265] Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
26518| [CVE-2010-0264] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."
26519| [CVE-2010-0263] Microsoft Office Excel 2007 SP1 and SP2
26520| [CVE-2010-0262] Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
26521| [CVE-2010-0261] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
26522| [CVE-2010-0260] Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2
26523| [CVE-2010-0258] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26524| [CVE-2010-0257] Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."
26525| [CVE-2010-0256] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
26526| [CVE-2010-0254] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
26527| [CVE-2010-0252] The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
26528| [CVE-2010-0250] Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."
26529| [CVE-2010-0249] Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4
26530| [CVE-2010-0243] Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
26531| [CVE-2010-0242] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
26532| [CVE-2010-0241] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."
26533| [CVE-2010-0240] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."
26534| [CVE-2010-0239] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
26535| [CVE-2010-0238] Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."
26536| [CVE-2010-0237] The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
26537| [CVE-2010-0236] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."
26538| [CVE-2010-0235] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."
26539| [CVE-2010-0234] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."
26540| [CVE-2010-0233] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."
26541| [CVE-2010-0232] The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
26542| [CVE-2010-0231] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
26543| [CVE-2010-0035] The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."
26544| [CVE-2010-0034] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
26545| [CVE-2010-0033] Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
26546| [CVE-2010-0032] Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
26547| [CVE-2010-0031] Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
26548| [CVE-2010-0030] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
26549| [CVE-2010-0029] Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
26550| [CVE-2010-0028] Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
26551| [CVE-2010-0027] The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
26552| [CVE-2010-0026] The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."
26553| [CVE-2010-0025] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
26554| [CVE-2010-0024] The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."
26555| [CVE-2010-0023] The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
26556| [CVE-2010-0022] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
26557| [CVE-2010-0021] Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
26558| [CVE-2010-0020] The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
26559| [CVE-2010-0018] Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4
26560| [CVE-2010-0017] Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
26561| [CVE-2010-0016] The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
26562| [CVE-2009-4313] ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.
26563| [CVE-2009-4312] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe.
26564| [CVE-2009-4311] Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.
26565| [CVE-2009-4310] Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file.
26566| [CVE-2009-4309] Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.
26567| [CVE-2009-4210] The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.
26568| [CVE-2009-3830] The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
26569| [CVE-2009-3678] Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."
26570| [CVE-2009-3677] The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka "MS-CHAP Authentication Bypass Vulnerability."
26571| [CVE-2009-3676] The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
26572| [CVE-2009-3675] LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."
26573| [CVE-2009-3450] Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.
26574| [CVE-2009-3135] Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."
26575| [CVE-2009-3134] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26576| [CVE-2009-3133] Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability."
26577| [CVE-2009-3132] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26578| [CVE-2009-3131] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26579| [CVE-2009-3130] Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability."
26580| [CVE-2009-3129] Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26581| [CVE-2009-3128] Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."
26582| [CVE-2009-3127] Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability."
26583| [CVE-2009-3126] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability."
26584| [CVE-2009-3103] Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
26585| [CVE-2009-3020] win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232. NOTE: some of these details are obtained from third party information.
26586| [CVE-2009-2653] ** DISPUTED ** The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend.'
26587| [CVE-2009-2532] Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."
26588| [CVE-2009-2526] Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."
26589| [CVE-2009-2524] Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability."
26590| [CVE-2009-2523] The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."
26591| [CVE-2009-2519] The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."
26592| [CVE-2009-2517] The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
26593| [CVE-2009-2516] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."
26594| [CVE-2009-2515] Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka "Windows Kernel Integer Underflow Vulnerability."
26595| [CVE-2009-2514] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability."
26596| [CVE-2009-2513] The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability."
26597| [CVE-2009-2511] Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability."
26598| [CVE-2009-2510] The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncation in X.509 Common Name Vulnerability," a related issue to CVE-2009-2408.
26599| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
26600| [CVE-2009-2508] The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability."
26601| [CVE-2009-2507] A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory Corruption in Indexing Service Vulnerability."
26602| [CVE-2009-2506] Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3
26603| [CVE-2009-2505] The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."
26604| [CVE-2009-2504] Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "GDI+ .NET API Vulnerability."
26605| [CVE-2009-2503] GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability."
26606| [CVE-2009-2502] Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
26607| [CVE-2009-2501] Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."
26608| [CVE-2009-2500] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability."
26609| [CVE-2009-2498] Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
26610| [CVE-2009-2497] The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."
26611| [CVE-2009-2496] Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
26612| [CVE-2009-2495] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
26613| [CVE-2009-2494] The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability."
26614| [CVE-2009-2493] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1
26615| [CVE-2009-1930] The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.
26616| [CVE-2009-1929] Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2
26617| [CVE-2009-1928] Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2
26618| [CVE-2009-1926] Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."
26619| [CVE-2009-1925] The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."
26620| [CVE-2009-1924] Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."
26621| [CVE-2009-1923] Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
26622| [CVE-2009-1922] The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."
26623| [CVE-2009-1546] Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability."
26624| [CVE-2009-1545] Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka "Malformed AVI Header Vulnerability."
26625| [CVE-2009-1544] Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability."
26626| [CVE-2009-1542] The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."
26627| [CVE-2009-1539] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability."
26628| [CVE-2009-1538] The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
26629| [CVE-2009-1537] Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
26630| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
26631| [CVE-2009-1534] Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
26632| [CVE-2009-1533] Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
26633| [CVE-2009-1491] McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
26634| [CVE-2009-1216] Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA)
26635| [CVE-2009-1141] Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
26636| [CVE-2009-1139] Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
26637| [CVE-2009-1138] The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.
26638| [CVE-2009-1137] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.
26639| [CVE-2009-1136] The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."
26640| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
26641| [CVE-2009-1134] Excel in 2007 Microsoft Office System SP1 and SP2
26642| [CVE-2009-1133] Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
26643| [CVE-2009-1132] Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
26644| [CVE-2009-1131] Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability."
26645| [CVE-2009-1130] Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
26646| [CVE-2009-1129] Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
26647| [CVE-2009-1128] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
26648| [CVE-2009-1127] win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability."
26649| [CVE-2009-1126] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
26650| [CVE-2009-1125] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability."
26651| [CVE-2009-1124] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."
26652| [CVE-2009-1123] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
26653| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
26654| [CVE-2009-1043] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
26655| [CVE-2009-1011] Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow.
26656| [CVE-2009-0901] The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1
26657| [CVE-2009-0568] The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."
26658| [CVE-2009-0566] Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
26659| [CVE-2009-0565] Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2
26660| [CVE-2009-0563] Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26661| [CVE-2009-0562] The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."
26662| [CVE-2009-0561] Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
26663| [CVE-2009-0560] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
26664| [CVE-2009-0559] Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."
26665| [CVE-2009-0558] Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."
26666| [CVE-2009-0557] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
26667| [CVE-2009-0556] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
26668| [CVE-2009-0554] Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
26669| [CVE-2009-0553] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
26670| [CVE-2009-0552] Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
26671| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
26672| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
26673| [CVE-2009-0549] Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac
26674| [CVE-2009-0320] Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack."
26675| [CVE-2009-0239] Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."
26676| [CVE-2009-0238] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
26677| [CVE-2009-0235] Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."
26678| [CVE-2009-0234] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger "unnecessary lookups," aka "DNS Server Response Validation Vulnerability."
26679| [CVE-2009-0233] The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka "DNS Server Query Validation Vulnerability."
26680| [CVE-2009-0232] Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow Vulnerability."
26681| [CVE-2009-0231] The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."
26682| [CVE-2009-0230] The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
26683| [CVE-2009-0229] The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
26684| [CVE-2009-0228] Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a a crafted ShareName in a response to an RPC request, related to "printing data structures," aka "Buffer Overflow in Print Spooler Vulnerability."
26685| [CVE-2009-0227] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137.
26686| [CVE-2009-0226] Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.
26687| [CVE-2009-0225] Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
26688| [CVE-2009-0224] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2
26689| [CVE-2009-0223] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
26690| [CVE-2009-0222] Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
26691| [CVE-2009-0221] Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."
26692| [CVE-2009-0220] Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
26693| [CVE-2009-0202] Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
26694| [CVE-2009-0102] Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
26695| [CVE-2009-0100] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1
26696| [CVE-2009-0099] The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."
26697| [CVE-2009-0098] Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."
26698| [CVE-2009-0097] Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
26699| [CVE-2009-0096] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
26700| [CVE-2009-0095] Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
26701| [CVE-2009-0094] The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.
26702| [CVE-2009-0093] Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.
26703| [CVE-2009-0091] Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
26704| [CVE-2009-0090] Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."
26705| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
26706| [CVE-2009-0088] The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."
26707| [CVE-2009-0087] Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2
26708| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
26709| [CVE-2009-0085] The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."
26710| [CVE-2009-0083] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."
26711| [CVE-2009-0082] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability."
26712| [CVE-2009-0081] The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."
26713| [CVE-2009-0079] The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
26714| [CVE-2009-0078] The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability."
26715| [CVE-2008-7217] Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
26716| [CVE-2008-6819] win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.
26717| [CVE-2008-6219] nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.
26718| [CVE-2008-6063] Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.
26719| [CVE-2008-5912] An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
26720| [CVE-2008-5823] An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.
26721| [CVE-2008-5416] Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier
26722| [CVE-2008-5232] Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown
26723| [CVE-2008-5112] The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.
26724| [CVE-2008-5100] The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.
26725| [CVE-2008-5044] Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
26726| [CVE-2008-4844] Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
26727| [CVE-2008-4841] The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.
26728| [CVE-2008-4837] Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26729| [CVE-2008-4835] SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."
26730| [CVE-2008-4834] Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."
26731| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
26732| [CVE-2008-4295] Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
26733| [CVE-2008-4269] The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."
26734| [CVE-2008-4268] The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
26735| [CVE-2008-4266] Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3
26736| [CVE-2008-4265] Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."
26737| [CVE-2008-4264] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26738| [CVE-2008-4261] Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
26739| [CVE-2008-4256] The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability."
26740| [CVE-2008-4255] Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability."
26741| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
26742| [CVE-2008-4250] The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
26743| [CVE-2008-4114] srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
26744| [CVE-2008-4110] Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
26745| [CVE-2008-4038] Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."
26746| [CVE-2008-4037] Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
26747| [CVE-2008-4036] Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."
26748| [CVE-2008-4032] Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
26749| [CVE-2008-4031] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26750| [CVE-2008-4030] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26751| [CVE-2008-4028] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26752| [CVE-2008-4027] Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26753| [CVE-2008-4026] Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26754| [CVE-2008-4025] Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
26755| [CVE-2008-4024] Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
26756| [CVE-2008-4023] Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."
26757| [CVE-2008-4019] Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
26758| [CVE-2008-3956] orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
26759| [CVE-2008-3704] Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."
26760| [CVE-2008-3648] nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
26761| [CVE-2008-3636] Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.
26762| [CVE-2008-3479] Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
26763| [CVE-2008-3477] Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability."
26764| [CVE-2008-3471] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
26765| [CVE-2008-3466] Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
26766| [CVE-2008-3465] Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
26767| [CVE-2008-3464] afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."
26768| [CVE-2008-3460] WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
26769| [CVE-2008-3068] Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
26770| [CVE-2008-3021] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
26771| [CVE-2008-3020] Microsoft Office 2000 SP3 and XP SP3
26772| [CVE-2008-3019] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
26773| [CVE-2008-3018] Microsoft Office 2000 SP3, XP SP3, and 2003 SP2
26774| [CVE-2008-3015] Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."
26775| [CVE-2008-3014] Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability."
26776| [CVE-2008-3013] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
26777| [CVE-2008-3012] gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability."
26778| [CVE-2008-3009] Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
26779| [CVE-2008-3007] Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
26780| [CVE-2008-3006] Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1
26781| [CVE-2008-3005] Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
26782| [CVE-2008-3004] Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3
26783| [CVE-2008-3003] Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
26784| [CVE-2008-2752] Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.
26785| [CVE-2008-2540] Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
26786| [CVE-2008-2463] The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
26787| [CVE-2008-2252] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."
26788| [CVE-2008-2251] Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled Exception Vulnerability." NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510.
26789| [CVE-2008-2250] The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
26790| [CVE-2008-2249] Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow Vulnerability."
26791| [CVE-2008-2246] Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
26792| [CVE-2008-2245] Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file.
26793| [CVE-2008-2244] Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
26794| [CVE-2008-1898] A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
26795| [CVE-2008-1888] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
26796| [CVE-2008-1547] Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.
26797| [CVE-2008-1457] The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
26798| [CVE-2008-1456] Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.
26799| [CVE-2008-1455] A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1
26800| [CVE-2008-1454] Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
26801| [CVE-2008-1451] The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
26802| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
26803| [CVE-2008-1445] Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.
26804| [CVE-2008-1444] Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
26805| [CVE-2008-1441] Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
26806| [CVE-2008-1440] Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."
26807| [CVE-2008-1436] Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
26808| [CVE-2008-1435] Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."
26809| [CVE-2008-1434] Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
26810| [CVE-2008-1092] Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
26811| [CVE-2008-1091] Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."
26812| [CVE-2008-1090] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."
26813| [CVE-2008-1089] Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."
26814| [CVE-2008-1088] Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."
26815| [CVE-2008-1087] Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
26816| [CVE-2008-1086] The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.
26817| [CVE-2008-1084] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
26818| [CVE-2008-1083] Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
26819| [CVE-2008-0121] A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."
26820| [CVE-2008-0120] Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
26821| [CVE-2008-0119] Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."
26822| [CVE-2008-0118] Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
26823| [CVE-2008-0117] Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
26824| [CVE-2008-0116] Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
26825| [CVE-2008-0115] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
26826| [CVE-2008-0114] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
26827| [CVE-2008-0113] Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
26828| [CVE-2008-0112] Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
26829| [CVE-2008-0111] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
26830| [CVE-2008-0110] Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
26831| [CVE-2008-0109] Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
26832| [CVE-2008-0108] Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."
26833| [CVE-2008-0106] Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
26834| [CVE-2008-0105] Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."
26835| [CVE-2008-0104] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."
26836| [CVE-2008-0103] Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."
26837| [CVE-2008-0102] Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."
26838| [CVE-2008-0088] Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
26839| [CVE-2008-0087] The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.
26840| [CVE-2008-0086] Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
26841| [CVE-2008-0083] The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
26842| [CVE-2008-0081] Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
26843| [CVE-2008-0080] Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.
26844| [CVE-2008-0020] Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015.
26845| [CVE-2008-0015] Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
26846| [CVE-2008-0011] Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."
26847| [CVE-2007-6753] Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
26848| [CVE-2007-6357] Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
26849| [CVE-2007-6329] Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
26850| [CVE-2007-6043] The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
26851| [CVE-2007-6026] Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
26852| [CVE-2007-5587] Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
26853| [CVE-2007-5352] Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
26854| [CVE-2007-5348] Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."
26855| [CVE-2007-4991] The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
26856| [CVE-2007-4916] Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
26857| [CVE-2007-4814] Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
26858| [CVE-2007-3930] Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.
26859| [CVE-2007-3924] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape
26860| [CVE-2007-3899] Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."
26861| [CVE-2007-3898] The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
26862| [CVE-2007-3896] The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
26863| [CVE-2007-3890] Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
26864| [CVE-2007-3670] Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
26865| [CVE-2007-3490] Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
26866| [CVE-2007-3300] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.
26867| [CVE-2007-3040] Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
26868| [CVE-2007-3039] Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
26869| [CVE-2007-3036] Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
26870| [CVE-2007-3034] Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
26871| [CVE-2007-3030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
26872| [CVE-2007-3029] Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
26873| [CVE-2007-3028] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.
26874| [CVE-2007-2999] Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
26875| [CVE-2007-2967] Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.
26876| [CVE-2007-2966] Buffer overflow in the LHA decompresion component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
26877| [CVE-2007-2903] Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
26878| [CVE-2007-2593] The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
26879| [CVE-2007-2581] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
26880| [CVE-2007-2374] Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
26881| [CVE-2007-2228] rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
26882| [CVE-2007-2224] Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
26883| [CVE-2007-2221] Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
26884| [CVE-2007-2219] Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.
26885| [CVE-2007-2218] Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
26886| [CVE-2007-2217] Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.
26887| [CVE-2007-1911] Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow.
26888| [CVE-2007-1910] Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.
26889| [CVE-2007-1765] Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038
26890| [CVE-2007-1756] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".
26891| [CVE-2007-1754] PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
26892| [CVE-2007-1748] Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
26893| [CVE-2007-1747] Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.
26894| [CVE-2007-1645] Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812.
26895| [CVE-2007-1537] \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
26896| [CVE-2007-1512] Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
26897| [CVE-2007-1347] Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
26898| [CVE-2007-1239] Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
26899| [CVE-2007-1238] Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file.
26900| [CVE-2007-1215] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
26901| [CVE-2007-1214] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
26902| [CVE-2007-1213] The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
26903| [CVE-2007-1212] Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4
26904| [CVE-2007-1211] Unspecified kernel GDI functions in Microsoft Windows 2000 SP4
26905| [CVE-2007-1205] Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
26906| [CVE-2007-1203] Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.
26907| [CVE-2007-1202] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
26908| [CVE-2007-1201] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
26909| [CVE-2007-1117] Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
26910| [CVE-2007-1090] Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.
26911| [CVE-2007-1083] Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
26912| [CVE-2007-0948] Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
26913| [CVE-2007-0947] Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
26914| [CVE-2007-0946] Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.
26915| [CVE-2007-0945] Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4
26916| [CVE-2007-0944] Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
26917| [CVE-2007-0942] Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4
26918| [CVE-2007-0940] Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
26919| [CVE-2007-0939] Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."
26920| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
26921| [CVE-2007-0936] Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."
26922| [CVE-2007-0934] Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption.
26923| [CVE-2007-0913] Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues.
26924| [CVE-2007-0870] Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.
26925| [CVE-2007-0843] The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
26926| [CVE-2007-0811] Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.
26927| [CVE-2007-0671] Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
26928| [CVE-2007-0612] Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll
26929| [CVE-2007-0515] Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.
26930| [CVE-2007-0351] Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
26931| [CVE-2007-0221] Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
26932| [CVE-2007-0220] Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
26933| [CVE-2007-0216] wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."
26934| [CVE-2007-0215] Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.
26935| [CVE-2007-0214] The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
26936| [CVE-2007-0213] Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
26937| [CVE-2007-0211] The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
26938| [CVE-2007-0209] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.
26939| [CVE-2007-0208] Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
26940| [CVE-2007-0069] Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."
26941| [CVE-2007-0066] The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
26942| [CVE-2007-0065] Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.
26943| [CVE-2007-0064] Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
26944| [CVE-2007-0043] The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
26945| [CVE-2007-0042] Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
26946| [CVE-2007-0041] The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
26947| [CVE-2007-0040] The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
26948| [CVE-2007-0039] The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.
26949| [CVE-2007-0038] Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765
26950| [CVE-2007-0035] Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."
26951| [CVE-2007-0034] Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
26952| [CVE-2007-0033] Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
26953| [CVE-2007-0031] Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.
26954| [CVE-2007-0030] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
26955| [CVE-2007-0029] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability."
26956| [CVE-2007-0028] Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.
26957| [CVE-2007-0027] Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
26958| [CVE-2007-0026] The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
26959| [CVE-2007-0025] The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
26960| [CVE-2007-0024] Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."
26961| [CVE-2006-7210] Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
26962| [CVE-2006-7192] Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.
26963| [CVE-2006-7027] Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.
26964| [CVE-2006-6723] The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.
26965| [CVE-2006-6696] Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
26966| [CVE-2006-6617] projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
26967| [CVE-2006-6561] Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.
26968| [CVE-2006-6456] Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
26969| [CVE-2006-6296] The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.
26970| [CVE-2006-6134] Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
26971| [CVE-2006-6133] Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
26972| [CVE-2006-5994] Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
26973| [CVE-2006-5758] The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
26974| [CVE-2006-5586] The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."
26975| [CVE-2006-5585] The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."
26976| [CVE-2006-5584] The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
26977| [CVE-2006-5583] Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."
26978| [CVE-2006-5574] Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.
26979| [CVE-2006-5296] PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.
26980| [CVE-2006-4854] ** REJECT ** Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E. NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009.
26981| [CVE-2006-4704] Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
26982| [CVE-2006-4702] Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
26983| [CVE-2006-4696] Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
26984| [CVE-2006-4695] Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."
26985| [CVE-2006-4694] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow.
26986| [CVE-2006-4693] Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651.
26987| [CVE-2006-4692] Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
26988| [CVE-2006-4691] Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
26989| [CVE-2006-4689] Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
26990| [CVE-2006-4688] Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
26991| [CVE-2006-4534] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
26992| [CVE-2006-4495] Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
26993| [CVE-2006-4274] ** REJECT ** Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJ_MDROPPER.BH. NOTE: on 20060822, it was determined that TROJ_MDROPPER.BH was exploiting CVE-2006-0009, so this is not a new vulnerability.
26994| [CVE-2006-4219] The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.
26995| [CVE-2006-4183] Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
26996| [CVE-2006-4071] Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
26997| [CVE-2006-3992] Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
26998| [CVE-2006-3942] The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research
26999| [CVE-2006-3897] Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
27000| [CVE-2006-3880] ** DISPUTED ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
27001| [CVE-2006-3877] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
27002| [CVE-2006-3876] Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.
27003| [CVE-2006-3875] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.
27004| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
27005| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
27006| [CVE-2006-3868] Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.
27007| [CVE-2006-3867] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875.
27008| [CVE-2006-3864] Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.
27009| [CVE-2006-3841] Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
27010| [CVE-2006-3660] Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
27011| [CVE-2006-3656] Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
27012| [CVE-2006-3655] Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
27013| [CVE-2006-3652] Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. NOTE: as of 20060715, this could not be reproduced by third parties.
27014| [CVE-2006-3651] Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
27015| [CVE-2006-3650] Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
27016| [CVE-2006-3649] Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
27017| [CVE-2006-3648] Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
27018| [CVE-2006-3647] Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
27019| [CVE-2006-3643] Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability."
27020| [CVE-2006-3590] mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
27021| [CVE-2006-3510] The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
27022| [CVE-2006-3493] Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.
27023| [CVE-2006-3449] Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."
27024| [CVE-2006-3448] Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
27025| [CVE-2006-3445] Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
27026| [CVE-2006-3444] Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
27027| [CVE-2006-3443] Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."
27028| [CVE-2006-3441] Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
27029| [CVE-2006-3440] Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
27030| [CVE-2006-3439] Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
27031| [CVE-2006-3436] Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
27032| [CVE-2006-3435] PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
27033| [CVE-2006-3434] Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
27034| [CVE-2006-3431] Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.
27035| [CVE-2006-3059] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
27036| [CVE-2006-2492] Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
27037| [CVE-2006-2389] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
27038| [CVE-2006-2388] Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
27039| [CVE-2006-2387] Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
27040| [CVE-2006-2380] Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
27041| [CVE-2006-2379] Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
27042| [CVE-2006-2378] Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
27043| [CVE-2006-2374] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
27044| [CVE-2006-2373] The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
27045| [CVE-2006-2372] Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.
27046| [CVE-2006-2371] Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
27047| [CVE-2006-2370] Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
27048| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
27049| [CVE-2006-2094] Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.
27050| [CVE-2006-2055] Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
27051| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
27052| [CVE-2006-1651] ** DISPUTED ** Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."
27053| [CVE-2006-1540] MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll
27054| [CVE-2006-1316] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.
27055| [CVE-2006-1315] The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability."
27056| [CVE-2006-1314] Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
27057| [CVE-2006-1313] Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
27058| [CVE-2006-1311] The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1
27059| [CVE-2006-1309] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
27060| [CVE-2006-1308] Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.
27061| [CVE-2006-1306] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
27062| [CVE-2006-1305] Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
27063| [CVE-2006-1304] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
27064| [CVE-2006-1302] Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."
27065| [CVE-2006-1301] Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.
27066| [CVE-2006-1300] Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
27067| [CVE-2006-1257] The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
27068| [CVE-2006-1193] Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
27069| [CVE-2006-1184] Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
27070| [CVE-2006-0988] The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
27071| [CVE-2006-0935] Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
27072| [CVE-2006-0187] By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.
27073| [CVE-2006-0034] Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
27074| [CVE-2006-0033] Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
27075| [CVE-2006-0032] Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
27076| [CVE-2006-0031] Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
27077| [CVE-2006-0030] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
27078| [CVE-2006-0029] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
27079| [CVE-2006-0028] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
27080| [CVE-2006-0023] Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
27081| [CVE-2006-0022] Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
27082| [CVE-2006-0021] Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
27083| [CVE-2006-0020] An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
27084| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
27085| [CVE-2006-0013] Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
27086| [CVE-2006-0012] Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
27087| [CVE-2006-0010] Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
27088| [CVE-2006-0009] Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
27089| [CVE-2006-0008] The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
27090| [CVE-2006-0007] Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
27091| [CVE-2006-0006] Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
27092| [CVE-2006-0004] Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
27093| [CVE-2006-0002] Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
27094| [CVE-2006-0001] Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
27095| [CVE-2005-4717] Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
27096| [CVE-2005-4269] mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.
27097| [CVE-2005-4131] Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
27098| [CVE-2005-3981] ** DISPUTED ** NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE.
27099| [CVE-2005-3945] The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
27100| [CVE-2005-3644] PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
27101| [CVE-2005-3177] CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
27102| [CVE-2005-3176] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
27103| [CVE-2005-3175] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
27104| [CVE-2005-3174] Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
27105| [CVE-2005-3173] Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
27106| [CVE-2005-3172] The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
27107| [CVE-2005-3171] Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
27108| [CVE-2005-3170] The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
27109| [CVE-2005-3169] Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
27110| [CVE-2005-3168] The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
27111| [CVE-2005-2122] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
27112| [CVE-2005-2120] Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
27113| [CVE-2005-2118] Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
27114| [CVE-2005-2117] Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
27115| [CVE-2005-1985] The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
27116| [CVE-2005-1984] Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
27117| [CVE-2005-1983] Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
27118| [CVE-2005-1982] Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
27119| [CVE-2005-1981] Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
27120| [CVE-2005-1907] The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
27121| [CVE-2005-1683] Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
27122| [CVE-2005-1218] The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
27123| [CVE-2005-1216] Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
27124| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
27125| [CVE-2005-1208] Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
27126| [CVE-2005-1207] Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
27127| [CVE-2005-1206] Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
27128| [CVE-2005-1205] The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
27129| [CVE-2005-1052] Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
27130| [CVE-2005-0921] Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
27131| [CVE-2005-0820] Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
27132| [CVE-2005-0738] Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
27133| [CVE-2005-0564] Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
27134| [CVE-2005-0558] Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.
27135| [CVE-2005-0551] Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
27136| [CVE-2005-0550] Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
27137| [CVE-2005-0545] Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.
27138| [CVE-2005-0063] The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
27139| [CVE-2005-0061] The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
27140| [CVE-2005-0060] Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
27141| [CVE-2005-0059] Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
27142| [CVE-2005-0058] Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.
27143| [CVE-2005-0048] Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
27144| [CVE-2004-2527] The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
27145| [CVE-2004-2482] Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
27146| [CVE-2004-2365] Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
27147| [CVE-2004-2339] ** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
27148| [CVE-2004-1080] The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
27149| [CVE-2004-0963] Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
27150| [CVE-2004-0897] The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
27151| [CVE-2004-0892] Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
27152| [CVE-2004-0846] Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
27153| [CVE-2004-0840] The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
27154| [CVE-2004-0728] The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
27155| [CVE-2004-0726] The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.
27156| [CVE-2004-0575] Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
27157| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
27158| [CVE-2004-0573] Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
27159| [CVE-2004-0540] Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
27160| [CVE-2004-0503] Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
27161| [CVE-2004-0379] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
27162| [CVE-2004-0284] Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
27163| [CVE-2004-0214] Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
27164| [CVE-2004-0211] The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
27165| [CVE-2004-0210] The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
27166| [CVE-2004-0209] Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
27167| [CVE-2004-0208] The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
27168| [CVE-2004-0207] "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
27169| [CVE-2004-0206] Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
27170| [CVE-2004-0204] Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
27171| [CVE-2004-0202] IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
27172| [CVE-2004-0201] Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
27173| [CVE-2004-0199] Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
27174| [CVE-2004-0124] The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
27175| [CVE-2004-0121] Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
27176| [CVE-2004-0120] The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
27177| [CVE-2004-0116] An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
27178| [CVE-2003-1378] Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
27179| [CVE-2003-1106] The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
27180| [CVE-2003-0908] The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
27181| [CVE-2003-0906] Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
27182| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
27183| [CVE-2003-0839] Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
27184| [CVE-2003-0825] The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
27185| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
27186| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
27187| [CVE-2003-0821] Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
27188| [CVE-2003-0820] Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
27189| [CVE-2003-0819] Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
27190| [CVE-2003-0818] Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
27191| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
27192| [CVE-2003-0806] Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
27193| [CVE-2003-0719] Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
27194| [CVE-2003-0665] Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
27195| [CVE-2003-0664] Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
27196| [CVE-2003-0662] Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
27197| [CVE-2003-0660] The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval.
27198| [CVE-2003-0533] Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
27199| [CVE-2003-0526] Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
27200| [CVE-2003-0506] Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
27201| [CVE-2003-0505] Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
27202| [CVE-2003-0496] Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
27203| [CVE-2003-0352] Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
27204| [CVE-2003-0345] Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
27205| [CVE-2003-0232] Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
27206| [CVE-2003-0231] Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
27207| [CVE-2003-0230] Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
27208| [CVE-2003-0227] The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
27209| [CVE-2003-0118] SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
27210| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
27211| [CVE-2003-0110] The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
27212| [CVE-2003-0109] Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
27213| [CVE-2003-0011] Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
27214| [CVE-2003-0007] Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
27215| [CVE-2003-0003] Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
27216| [CVE-2003-0002] Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
27217| [CVE-2002-2101] Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
27218| [CVE-2002-2100] Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
27219| [CVE-2002-1984] Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
27220| [CVE-2002-1981] Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.
27221| [CVE-2002-1933] The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
27222| [CVE-2002-1932] Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
27223| [CVE-2002-1876] Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
27224| [CVE-2002-1873] Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
27225| [CVE-2002-1872] Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
27226| [CVE-2002-1776] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
27227| [CVE-2002-1712] Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
27228| [CVE-2002-1256] The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
27229| [CVE-2002-1255] Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
27230| [CVE-2002-1214] Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
27231| [CVE-2002-1184] The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
27232| [CVE-2002-1145] The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
27233| [CVE-2002-1141] An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."
27234| [CVE-2002-1140] The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
27235| [CVE-2002-1138] Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
27236| [CVE-2002-1137] Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
27237| [CVE-2002-1123] Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
27238| [CVE-2002-1117] Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
27239| [CVE-2002-1056] Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
27240| [CVE-2002-0982] Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
27241| [CVE-2002-0975] Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.
27242| [CVE-2002-0863] Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
27243| [CVE-2002-0861] Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
27244| [CVE-2002-0860] The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
27245| [CVE-2002-0859] Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
27246| [CVE-2002-0729] Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
27247| [CVE-2002-0727] The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
27248| [CVE-2002-0724] Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".
27249| [CVE-2002-0721] Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
27250| [CVE-2002-0719] SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
27251| [CVE-2002-0718] Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
27252| [CVE-2002-0700] Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
27253| [CVE-2002-0699] Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
27254| [CVE-2002-0695] Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
27255| [CVE-2002-0694] The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
27256| [CVE-2002-0693] Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
27257| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
27258| [CVE-2002-0650] The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
27259| [CVE-2002-0649] Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
27260| [CVE-2002-0645] SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
27261| [CVE-2002-0644] Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
27262| [CVE-2002-0643] The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
27263| [CVE-2002-0642] The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
27264| [CVE-2002-0641] Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
27265| [CVE-2002-0624] Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
27266| [CVE-2002-0623] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
27267| [CVE-2002-0622] The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
27268| [CVE-2002-0621] Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
27269| [CVE-2002-0620] Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
27270| [CVE-2002-0619] The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
27271| [CVE-2002-0618] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
27272| [CVE-2002-0617] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
27273| [CVE-2002-0616] The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."
27274| [CVE-2002-0597] LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
27275| [CVE-2002-0444] Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
27276| [CVE-2002-0443] Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
27277| [CVE-2002-0373] The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
27278| [CVE-2002-0371] Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
27279| [CVE-2002-0368] The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
27280| [CVE-2002-0224] The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
27281| [CVE-2002-0187] Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
27282| [CVE-2002-0186] Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
27283| [CVE-2002-0154] Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
27284| [CVE-2002-0152] Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
27285| [CVE-2002-0055] SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
27286| [CVE-2002-0054] SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
27287| [CVE-2002-0050] Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
27288| [CVE-2002-0049] Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
27289| [CVE-2002-0034] The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
27290| [CVE-2002-0018] In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
27291| [CVE-2001-1533] ** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE.
27292| [CVE-2001-1451] Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
27293| [CVE-2001-1319] Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
27294| [CVE-2001-1099] The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
27295| [CVE-2001-0986] SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
27296| [CVE-2001-0718] Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
27297| [CVE-2001-0666] Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
27298| [CVE-2001-0658] Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
27299| [CVE-2001-0628] Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
27300| [CVE-2001-0547] Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
27301| [CVE-2001-0546] Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
27302| [CVE-2001-0542] Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
27303| [CVE-2001-0538] Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
27304| [CVE-2001-0509] Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
27305| [CVE-2001-0505] Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
27306| [CVE-2001-0504] Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activites such as mail relaying.
27307| [CVE-2001-0501] Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
27308| [CVE-2001-0351] Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.
27309| [CVE-2001-0350] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
27310| [CVE-2001-0349] Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
27311| [CVE-2001-0348] Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.
27312| [CVE-2001-0347] Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
27313| [CVE-2001-0346] Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.
27314| [CVE-2001-0345] Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
27315| [CVE-2001-0344] An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
27316| [CVE-2001-0340] An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
27317| [CVE-2001-0261] Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
27318| [CVE-2001-0245] Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
27319| [CVE-2001-0244] Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
27320| [CVE-2001-0240] Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
27321| [CVE-2001-0239] Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
27322| [CVE-2001-0237] Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
27323| [CVE-2001-0146] IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
27324| [CVE-2001-0048] The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.
27325| [CVE-2001-0005] Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
27326| [CVE-2001-0003] Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
27327| [CVE-2000-1218] The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
27328| [CVE-2000-1217] Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
27329| [CVE-2000-1209] The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
27330| [CVE-2000-1139] The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
27331| [CVE-2000-1088] The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
27332| [CVE-2000-1087] The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
27333| [CVE-2000-1086] The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
27334| [CVE-2000-1085] The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
27335| [CVE-2000-1079] Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
27336| [CVE-2000-0942] The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
27337| [CVE-2000-0854] When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
27338| [CVE-2000-0771] Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
27339| [CVE-2000-0765] Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
27340| [CVE-2000-0756] Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
27341| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
27342| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
27343| [CVE-2000-0637] Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
27344| [CVE-2000-0621] Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
27345| [CVE-2000-0597] Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
27346| [CVE-2000-0331] Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
27347| [CVE-2000-0277] Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
27348| [CVE-2013-2557] The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
27349| [CVE-2013-2556] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
27350| [CVE-2013-2554] Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787.
27351| [CVE-2013-2553] Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0912.
27352| [CVE-2013-2552] Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
27353| [CVE-2013-2551] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
27354| [CVE-2013-1347] Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
27355| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
27356| [CVE-2013-1290] Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."
27357| [CVE-2013-1289] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
27358| [CVE-2013-1284] Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
27359| [CVE-2013-0096] Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
27360| [CVE-2013-0086] Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."
27361| [CVE-2013-0085] Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."
27362| [CVE-2013-0084] Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."
27363| [CVE-2013-0083] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
27364| [CVE-2013-0080] Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."
27365| [CVE-2013-0079] Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
27366| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
27367| [CVE-2012-4969] Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
27368| [CVE-2012-4792] Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
27369| [CVE-2012-3456] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
27370| [CVE-2012-3455] Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
27371| [CVE-2012-2290] The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel.
27372| [CVE-2012-2284] The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
27373| [CVE-2012-1945] Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
27374| [CVE-2012-1894] Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability."
27375| [CVE-2012-1892] Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
27376| [CVE-2012-1891] Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
27377| [CVE-2012-1888] Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
27378| [CVE-2012-1876] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
27379| [CVE-2012-1861] Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
27380| [CVE-2012-1859] Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."
27381| [CVE-2012-1857] Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."
27382| [CVE-2012-1849] Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."
27383| [CVE-2012-1545] Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.
27384| [CVE-2012-1436] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
27385| [CVE-2012-1435] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \50\4B\4C\49\54\45 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
27386| [CVE-2012-1434] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
27387| [CVE-2012-1433] The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.
27388| [CVE-2012-0447] Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
27389| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
27390| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
27391| [CVE-2012-0145] Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
27392| [CVE-2012-0144] Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
27393| [CVE-2012-0138] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
27394| [CVE-2012-0137] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
27395| [CVE-2012-0136] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
27396| [CVE-2012-0020] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
27397| [CVE-2012-0019] Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
27398| [CVE-2012-0018] Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."
27399| [CVE-2012-0017] Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."
27400| [CVE-2011-4695] Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
27401| [CVE-2011-2012] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
27402| [CVE-2011-2010] The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
27403| [CVE-2011-1969] Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
27404| [CVE-2011-1897] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
27405| [CVE-2011-1896] Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
27406| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
27407| [CVE-2011-1891] Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
27408| [CVE-2011-1890] Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."
27409| [CVE-2011-1889] The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
27410| [CVE-2011-1417] Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
27411| [CVE-2011-1347] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
27412| [CVE-2011-1346] Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
27413| [CVE-2011-1345] Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
27414| [CVE-2011-1265] The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."
27415| [CVE-2011-0653] Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
27416| [CVE-2011-0647] The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
27417| [CVE-2011-0627] Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
27418| [CVE-2011-0037] Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
27419| [CVE-2011-0027] Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
27420| [CVE-2011-0026] Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."
27421| [CVE-2010-4643] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
27422| [CVE-2010-4253] Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
27423| [CVE-2010-4121] ** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only."
27424| [CVE-2010-3967] Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."
27425| [CVE-2010-3962] Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.
27426| [CVE-2010-3936] Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."
27427| [CVE-2010-3889] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
27428| [CVE-2010-3888] Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
27429| [CVE-2010-3497] Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)."
27430| [CVE-2010-3454] Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
27431| [CVE-2010-3453] The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.
27432| [CVE-2010-3141] Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
27433| [CVE-2010-2743] The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.
27434| [CVE-2010-2734] Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."
27435| [CVE-2010-2733] Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."
27436| [CVE-2010-2732] Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
27437| [CVE-2010-2564] Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."
27438| [CVE-2010-1184] The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.
27439| [CVE-2010-1118] Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
27440| [CVE-2010-1117] Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
27441| [CVE-2010-0806] Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
27442| [CVE-2010-0716] _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.
27443| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
27444| [CVE-2008-5750] Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
27445| [CVE-2008-5556] ** DISPUTED ** The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design."
27446| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
27447| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
27448| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
27449| [CVE-2008-5552] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
27450| [CVE-2008-5551] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
27451| [CVE-2008-5180] Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
27452| [CVE-2008-4211] Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."
27453| [CVE-2007-5351] Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."
27454| [CVE-2007-2729] Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
27455| [CVE-2007-1534] DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.
27456| [CVE-2007-0341] Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
27457| [CVE-2006-5559] The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.
27458| [CVE-2006-4686] Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
27459| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
27460| [CVE-2006-1359] Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
27461| [CVE-2006-0761] Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.
27462| [CVE-2006-0753] Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
27463| [CVE-2006-0544] urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.
27464| [CVE-2006-0003] Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
27465| [CVE-2005-1929] Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product.
27466| [CVE-2005-0852] Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.
27467| [CVE-2004-1322] Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
27468| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
27469| [CVE-2003-0903] Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
27470| [CVE-2003-0353] Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
27471| [CVE-2002-1918] Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
27472| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
27473| [CVE-2002-1015] RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
27474| [CVE-2002-0697] Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
27475| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
27476| [CVE-2001-1218] Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
27477| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
27478| [CVE-1999-1097] Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
27479|
27480| SecurityFocus - https://www.securityfocus.com/bid/:
27481| [83154] Microsoft Windows 2000 Server CVE-2004-0540 Remote Security Vulnerability
27482| [45297] Microsoft Exchange Server 2007 Infinite Loop Remote Denial of Service Vulnerability
27483| [43419] Microsoft Excel 2002 Memory Corruption Vulnerability
27484| [43189] Microsoft Visual C++ 2008 Redistributable Package DLL Loading Arbitrary Code Execution Vulnerability
27485| [42742] Microsoft PowerPoint 2007 Multiple DLL Loading Arbitrary Code Execution Vulnerability
27486| [42695] Microsoft Groove 2007 'mso.dll' DLL Loading Arbitrary Code Execution Vulnerability
27487| [42681] Microsoft Visio 2003 'mfc71enu.dll' DLL Loading Arbitrary Code Execution Vulnerability
27488| [41843] Microsoft Outlook Web Access for Exchange Server 2003 Cross Site Request Forgery Vulnerability
27489| [39776] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
27490| [37196] RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities
27491| [36940] RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
27492| [36633] RETIRED: Microsoft October 2009 Advance Notification Multiple Vulnerabilities
27493| [36239] RETIRED: Microsoft September 2009 Advance Notification Multiple Vulnerabilities
27494| [35974] RETIRED: Microsoft August 2009 Advance Notification Multiple Vulnerabilities
27495| [35617] RETIRED: Microsoft July 2009 Advance Notification Multiple Vulnerabilities
27496| [35213] RETIRED: Microsoft June 2009 Advance Notification Multiple Vulnerabilities
27497| [34867] RETIRED: Microsoft May 2009 Advance Notification Multiple Vulnerabilities
27498| [34532] Microsoft IAG 2007 ActiveX Control Multiple Stack Based Buffer Overflow Vulnerabilities
27499| [34469] Microsoft Word 2000 WordPerfect Converter Remote Code Execution Vulnerability
27500| [34450] RETIRED: Microsoft April 2009 Advance Notification Multiple Vulnerabilities
27501| [34005] RETIRED: Microsoft March 2009 Advance Notification Multiple Vulnerabilities
27502| [33639] RETIRED: Microsoft February 2009 Advance Notification Multiple Vulnerabilities
27503| [33170] RETIRED: Microsoft January 2009 Advance Notification Multiple Vulnerabilities
27504| [32632] RETIRED: Microsoft December 2008 Advance Notification Multiple Vulnerabilities
27505| [32153] Retired: Microsoft November 2008 Advance Notification Multiple Vulnerabilities
27506| [31667] Retired: Microsoft October 2008 Advance Notification Multiple Vulnerabilities
27507| [31129] RETIRED: Microsoft SQL Server 2000 'sqlvdir.dll' ActiveX Buffer Overflow Vulnerability
27508| [31014] RETIRED: Microsoft September 2008 Advance Notification Multiple Vulnerabilities
27509| [30593] RETIRED: Microsoft August 2008 Advance Notification Multiple Vulnerabilities
27510| [30075] RETIRED: Microsoft July 2008 Advance Notification Multiple Vulnerabilities
27511| [29576] RETIRED: Microsoft June 2008 Advance Notification Multiple Vulnerabilities
27512| [29108] RETIRED: Microsoft May 2008 Advance Notification Multiple Vulnerabilities
27513| [28598] RETIRED: Microsoft April 2008 Advance Notification Multiple Vulnerabilities
27514| [28124] Retired: Microsoft March 2008 Advance Notification Multiple Vulnerabilities
27515| [27674] RETIRED: Microsoft February 2008 Advance Notification Multiple Vulnerabilities
27516| [27119] RETIRED: Microsoft January 2008 Advance Notification Multiple Vulnerabilities
27517| [26739] RETIRED: Microsoft December 2007 Advance Notification Multiple Vulnerabilities
27518| [26414] Microsoft Forms 2.0 ActiveX Control Memory Access Violation Denial of Service Vulnerabilities
27519| [26380] Retired: Microsoft November 2007 Advance Notification Multiple Vulnerabilities
27520| [25991] RETIRED: Microsoft Office 2000 and XP Unspecified Word Document Handling DoS Vulnerability
27521| [25922] RETIRED: Microsoft October 2007 Advance Notification Multiple Vulnerabilities
27522| [25573] RETIRED: Microsoft September 2007 Advance Notification Multiple Vulnerabilities
27523| [25247] Retired: Microsoft August 2007 Advance Notification Multiple Vulnerabilities
27524| [24771] Retired: Microsoft July 2007 Advance Notification Multiple Vulnerabilities
27525| [24366] RETIRED: Microsoft June 2007 Advance Notification Multiple Vulnerabilities
27526| [24118] Microsoft Office 2000 UA OUACTRL.OCX ActiveX Control Buffer Overflow Vulnerability
27527| [23800] RETIRED: Microsoft May 2007 Advance Notification Multiple Vulnerabilities
27528| [23380] Microsoft Word 2007 WWLib.DLL Unspecified Document File Buffer Overflow Vulnerability
27529| [23335] RETIRED: Microsoft April 2007 Advance Notification Multiple Vulnerabilities
27530| [22716] Microsoft Office 2003 Denial of Service Vulnerability
27531| [22567] Microsoft Word 2000/2002 Document Stream Remote Code Execution Vulnerability
27532| [22328] RETIRED: Microsoft Word 2003 Unspecified Code Execution Vulnerability
27533| [22225] Microsoft Word 2000 Malformed Function Code Execution Vulnerability
27534| [21611] Microsoft Project Server 2003 PDSRequest.ASP XML Request Information Disclosure Vulnerability
27535| [21495] Microsoft Windows 2000 Remote Installation Service Remote Code Execution Vulnerability
27536| [20843] Microsoft Visual Studio 2005 WMI Object Broker Remote Code Execution Vulnerability
27537| [19636] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
27538| [19388] Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
27539| [17134] Microsoft Commerce Server 2002 Authentication Bypass Vulnerability
27540| [16634] Microsoft PowerPoint 2000 Remote Information Disclosure Vulnerability
27541| [14772] Microsoft Exchange Server 2003 Exchange Information Store Denial Of Service Vulnerability
27542| [14093] Microsoft Update Rollup 1 for Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
27543| [13564] Microsoft SQL Server 2000 Multiple Vulnerabilities
27544| [13008] Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability
27545| [12972] Microsoft Windows Server 2003 Service Pack 1 Released - Multiple Vulnerabilities Fixed
27546| [12913] Microsoft Outlook 2002 Connector For IBM Lotus Domino Policy Bypass Vulnerability
27547| [12824] Microsoft InfoPath 2003 Insecure Information Storage Vulnerability
27548| [12641] Microsoft Windows 2000 Group Policy Bypass Vulnerability
27549| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
27550| [11820] Microsoft Windows 2000 Resource Kit W3Who.DLL Multiple Remote Vulnerabilities
27551| [11446] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
27552| [11387] Microsoft Windows 2003 Services Default SACL Access Right Weakness
27553| [10901] Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
27554| [10693] Microsoft Windows 2000 Media Player Control Media Preview Script Execution Vulnerability
27555| [10484] Microsoft ISA Server 2000 FTP Bounce Filtering Vulnerability
27556| [10480] Microsoft ISA Server 2000 Site And Content Rule Bypass Vulnerability
27557| [10440] Microsoft Windows 2000 Domain Expired Account Security Policy Violation Weakness
27558| [10369] Microsoft Outlook 2003 Media File Script Execution Vulnerability
27559| [10307] Microsoft Outlook 2003 Predictable File Location Weakness
27560| [10114] Microsoft Windows 2000 Domain Controller LDAP Denial Of Service Vulnerability
27561| [9409] Microsoft Exchange Server 2003 Outlook Web Access Random Mailbox Access Vulnerability
27562| [9408] Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability
27563| [9118] Microsoft Exchange Server 2003 Outlook Web Access Lowered Security Settings Weakness
27564| [8833] Microsoft Windows 2000 TroubleShooter ActiveX Control Buffer Overflow Vulnerability
27565| [8522] Multiple Microsoft Windows 2003 Stack Protection Implementation Weaknesses
27566| [8397] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
27567| [8104] Microsoft Windows 2000 Unauthorized RPC Connection Weakness
27568| [8098] Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
27569| [8093] Microsoft Windows 2000 Active Directory Forest Origin Validation Vulnerability
27570| [8090] Microsoft Windows 2000 ShellExecute() Buffer Overflow Vulnerability
27571| [8089] Microsoft Windows 2000 Unspecified Cryptnet.DLL Memory Leakage Vulnerability
27572| [8086] Microsoft Windows 2000 Port Name Buffers Potential Buffer Overflow Vulnerability
27573| [8085] Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
27574| [8083] Microsoft Windows 2000 Domain Controller Spoofing Vulnerability
27575| [8081] Microsoft Windows 2000 USBH_IoctlGetNodeConnectionDriverKeyName Information Disclosure Vulnerability
27576| [8063] Microsoft Commerce Server 2002 Weak Registry Key Permissions Weakness
27577| [8045] Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed
27578| [7930] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
27579| [7788] Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability
27580| [7469] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
27581| [7360] Microsoft Windows 2000/XP Registry Editor Custom Permissions Weakness
27582| [7102] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
27583| [6769] Microsoft Windows 2000 RPC Service Privilege Escalation Vulnerability
27584| [6766] Microsoft Windows 2000 NetBIOS Continuation Packets Kernel Memory Leak Vulnerability
27585| [6667] Microsoft Outlook 2002 V1 Exchange Server Security Certificate Information Leakage Vulnerability
27586| [6319] Microsoft Outlook 2002 Email Header Processing Denial of Service Vulnerability
27587| [6030] Microsoft Windows 2000 SNMP Printer Query Denial of Service Vulnerability
27588| [5972] Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness
27589| [5922] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
27590| [5480] Microsoft Windows 2000 Network Connection Manager Privilege Elevation Vulnerability
27591| [5422] Microsoft Content Management Server 2001 SQL Injection Vulnerability
27592| [5421] Microsoft Content Management Server 2001 Arbitrary Upload Location Vulnerability
27593| [5420] Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
27594| [5415] Microsoft Windows 2000 Insecure Default File Permissions Vulnerability
27595| [5413] Microsoft Exchange 2000 Post Authorization License Exhaustion Denial Of Service Vulnerability
27596| [5412] Microsoft Exchange 2000 Multiple MSRPC Denial Of Service Vulnerabilities
27597| [5312] Microsoft SQL Server 2000 Resolution Service Denial of Service Vulnerability
27598| [5311] Microsoft SQL Server 2000 Resolution Service Stack Overflow Vulnerability
27599| [5310] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
27600| [5309] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
27601| [5307] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
27602| [5253] Microsoft Windows 2000 Narrator Password Disclosure Vulnerability
27603| [5205] Microsoft SQL Server 2000 Incorrect Registry Key Permissions Vulnerability
27604| [5111] Microsoft Commerce Server 2000 OWC Package Installer Local Command Execution Vulnerability
27605| [5014] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
27606| [4881] Microsoft Exchange 2000 Malformed Mail Attribute DoS Vulnerability
27607| [4853] Microsoft Commerce Server 2000 Profile Service Buffer Overflow Vulnerability
27608| [4852] Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability
27609| [4847] Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability
27610| [4797] Microsoft MSDE/SQL Server 2000 Desktop Engine Default Configuration Vulnerability
27611| [4683] Microsoft Windows 2000 / NT Path Precedence Vulnerability
27612| [4532] Microsoft Windows 2000 Lanman Denial of Service Vulnerability
27613| [4438] Microsoft Windows 2000 Group Policy Evasion Vulnerability
27614| [4426] Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
27615| [4287] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
27616| [4256] Microsoft Windows 2000 Password Policy Bypass Vulnerability
27617| [4157] Microsoft Commerce Server 2000 ISAPI Buffer Overflow Vulnerability
27618| [4095] Microsoft Windows 2000 Server Terminal Services Failure To Lock Terminal Vulnerability
27619| [3652] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability
27620| [3481] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
27621| [3479] Microsoft Windows 2000 NTFS With Macintosh Client Directory Permission Vulnerability
27622| [3445] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
27623| [3339] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
27624| [3305] Norton AntiVirus for Microsoft Exchange 2000 Information Disclosure Vulnerability
27625| [3291] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
27626| [3215] Microsoft Windows 2000 IrDA Buffer Overflow Denial of Service Vulnerability
27627| [3185] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
27628| [3184] Microsoft Windows 2000 RunAs User Credentials Exposure Vulnerability
27629| [3146] Microsoft Windows 2000 System File Replacement Vulnerability
27630| [3115] Microsoft Windows NT and 2000 Command Prompt Reboot Vulnerability
27631| [3063] Microsoft Windows 2000 Unauthorized Password Change Vulnerability
27632| [3033] Microsoft Windows 2000 Task Manager Process Termination Vulnerability
27633| [2988] Microsoft Windows 2000 SMTP Improper Authentication Vulnerability
27634| [2929] Microsoft Windows 2000 LDAP SSL Password Modification Vulnerability
27635| [2849] Microsoft Windows 2000 Telnet Privilege Escalation Vulnerability
27636| [2846] Microsoft Windows 2000 Telnet System Call DoS Vulnerability
27637| [2844] Microsoft Windows 2000 Telnet Service DoS Vulnerability
27638| [2843] Microsoft Windows 2000 Telnet Multiple Sessions DoS Vulnerability
27639| [2838] Microsoft Windows 2000 Telnet Username DoS Vulnerability
27640| [2460] Microsoft Windows 2000 Event Viewer Buffer Overflow Vulnerability
27641| [2441] Microsoft Exchange 2000 / IIS 5.0 Multiple Invalid URL Request DoS Vulnerability
27642| [2394] Microsoft Windows 2000 Domain Controller DoS Vulnerability
27643| [2341] Microsoft Windows 2000 Network DDE Escalated Privileges Vulnerability
27644| [2326] Microsoft Windows 2000 RDP DoS Vulnerability
27645| [2133] Microsoft Windows 2000 Directory Services Restore Mode Blank Password Vulnerability
27646| [2066] Microsoft Windows NT 4.0 / 2000 SNMP Registry Key Modification Vulnerability
27647| [2018] Microsoft Windows 2000 Telnet Session Timeout DoS Vulnerability
27648| [2007] Microsoft Windows 2000 DNS Memory Leak Vulnerability
27649| [1973] Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
27650| [1958] Microsoft Exchange 2000 Server EUSR_EXSTOREEVENT Account Vulnerability
27651| [1933] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
27652| [1899] Microsoft Windows 2000 ActiveX Control Buffer Overflow Vulnerability
27653| [1811] Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability
27654| [1758] Microsoft Windows 2000 Unattended Install OEMPreinstall Vulnerability
27655| [1753] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
27656| [1748] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
27657| [1745] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
27658| [1729] Microsoft Windows 2000 Simplified Chinese IME Vulnerability
27659| [1695] Microsoft Proxy 2.0 FTP Permissions Bypass Vulnerability
27660| [1692] Microsoft Proxy 2.0 Internal Network Access Vulnerability
27661| [1683] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
27662| [1673] Microsoft Windows 2000 Malformed RPC Packet DoS Vulnerability
27663| [1651] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
27664| [1632] Microsoft Windows 98 / NT 4.0 / 2000 File Extension Validation Vulnerability
27665| [1620] Microsoft Windows 9x / NT 4.0 / 2000 NetBIOS Cache Corruption Vulnerability
27666| [1613] Microsoft Windows 2000 Local Security Policy Corruption Vulnerability
27667| [1566] Microsoft Word 97 / 2000 Mail Merge Code Execution Vulnerability
27668| [1561] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow Vulnerability
27669| [1535] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
27670| [1507] Microsoft Windows NT 4.0 / 2000 Unspecified Executable Path Vulnerability
27671| [1451] Microsoft Excel 97 / 2000 Register.ID Vulnerability
27672| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
27673| [1415] Microsoft Windows 2000 Remote CPU-overload Vulnerability
27674| [1414] Microsoft Windows 2000 Telnet Server DoS Vulnerability
27675| [1399] Microsoft Internet Explorer 5.01 and Excel/Powerpoint 2000 ActiveX Object Execution Vulnerability
27676| [1398] Microsoft Internet Explorer 5.01 and Access 2000 / 97 VBA Code Execution Vulnerability
27677| [1350] Microsoft Windows 2000 Windows Station Access Vulnerability
27678| [1304] Microsoft Windows NT 4.0 / 2000 SMB Write Request DoS Vulnerability
27679| [1301] Microsoft Windows NT 4.0 / 2000 Ignored SMB Response DoS Vulnerability
27680| [1295] Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
27681| [1198] Microsoft Windows 2000 Default SYSKEY Configuration Vulnerability
27682| [1197] Microsoft Office 2000 UA Control Vulnerability
27683| [990] Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
27684| [945] Microsoft SMS 2.0 Default Permissions Vulnerability
27685| [539] Microsoft Windows 2000 EFS Vulnerability
27686| [180] Microsoft Windows April Fools 2001 Vulnerability
27687| [71487] Microsoft December 2014 Advance Notification Multiple Vulnerabilities
27688| [70966] RETIRED: Microsoft November 2014 Advance Notification Multiple Vulnerabilities
27689| [70367] RETIRED: Microsoft October 2014 Advance Notification Multiple Vulnerabilities
27690| [69636] RETIRED: Microsoft September 2014 Advance Notification Multiple Vulnerabilities
27691| [69108] Microsoft August 2014 Advance Notification Multiple Vulnerabilities
27692| [68367] Microsoft July 2014 Advance Notification Multiple Vulnerabilities
27693| [67905] Microsoft June 2014 Advance Notification Multiple Vulnerabilities
27694| [67298] Microsoft May 2014 Advance Notification Multiple Vulnerabilities
27695| [66639] RETIRED: Microsoft April 2014 Advance Notification Multiple Vulnerabilities
27696| [66016] Microsoft March 2014 Notification Multiple Vulnerabilities
27697| [65426] Microsoft February 2014 Notification Multiple Vulnerabilities
27698| [64757] RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
27699| [64083] RETIRED: Microsoft December 2013 Advance Notification Multiple Vulnerabilities
27700| [63604] RETIRED: Microsoft November 2013 Advance Notification Multiple Vulnerabilities
27701| [62797] RETIRED: Microsoft October 2013 Advance Notification Multiple Vulnerabilities
27702| [62228] RETIRED: Microsoft September 2013 Advance Notification Multiple Vulnerabilities
27703| [62181] Microsoft Office Pinyin IME 2010 CVE-2013-3859 Local Privilege Escalation Vulnerability
27704| [61686] Microsoft August 2013 Advance Notification Multiple Vulnerabilities
27705| [60960] RETIRED: Microsoft July 2013 Advance Notification Multiple Vulnerabilities
27706| [60394] Microsoft June 2013 Advance Notification Multiple Vulnerabilities
27707| [59785] RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities
27708| [58881] RETIRED: Microsoft April 2013 Advance Notification Multiple Vulnerabilities
27709| [58380] RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities
27710| [57846] RETIRED: Microsoft February 2013 Advance Notification Multiple Vulnerabilities
27711| [57137] RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities
27712| [56838] RETIRED: Microsoft December 2012 Advance Notification Multiple Vulnerabilities
27713| [56450] RETIRED: Microsoft November 2012 Advance Notification Multiple Vulnerabilities
27714| [56304] Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability
27715| [55794] RETIRED: Microsoft October 2012 Advance Notification Multiple Vulnerabilities
27716| [55472] RETIRED: Microsoft September 2012 Advance Notification Multiple Vulnerabilities
27717| [54944] RETIRED: Microsoft August 2012 Advance Notification Multiple Vulnerabilities
27718| [54318] RETIRED: Microsoft July 2012 Advance Notification Multiple Vulnerabilities
27719| [53862] RETIRED: Microsoft June 2012 Advance Notification Multiple Vulnerabilities
27720| [53372] RETIRED: Microsoft May 2012 Advance Notification Multiple Vulnerabilities
27721| [52910] RETIRED: Microsoft April 2012 Advance Notification Multiple Vulnerabilities
27722| [52366] RETIRED: Microsoft March 2012 Advance Notification Multiple Vulnerabilities
27723| [51944] RETIRED: Microsoft February 2012 Advance Notification Multiple Vulnerabilities
27724| [51289] RETIRED: Microsoft January 2012 Advance Notification Multiple Vulnerabilities
27725| [50980] RETIRED: Microsoft December 2011 Advance Notification Multiple Vulnerabilities
27726| [50513] RETIRED: Microsoft November 2011 Advance Notification Multiple Vulnerabilities
27727| [49994] RETIRED: Microsoft October 2011 Advance Notification Multiple Vulnerabilities
27728| [49515] RETIRED: Microsoft September 2011 Advance Notification Multiple Vulnerabilities
27729| [49017] RETIRED: Microsoft August 2011 Advance Notification Multiple Vulnerabilities
27730| [48616] RETIRED: Microsoft July 2011 Advance Notification Multiple Vulnerabilities
27731| [48235] Microsoft Lync Server 2010 'ReachJoin.aspx' Remote Command Injection Vulnerability
27732| [48193] RETIRED: Microsoft June 2011 Advance Notification Multiple Vulnerabilities
27733| [47725] RETIRED: Microsoft May 2011 Advance Notification Multiple Vulnerabilities
27734| [47255] RETIRED: Microsoft April 2011 Advance Notification Multiple Vulnerabilities
27735| [46675] RETIRED: Microsoft March 2011 Advance Notification Multiple Vulnerabilities
27736| [46132] RETIRED: Microsoft February 2011 Advance Notification Multiple Vulnerabilities
27737| [45696] RETIRED: Microsoft January 2011 Advance Notification Multiple Vulnerabilities
27738| [45307] RETIRED: Microsoft December 2010 Advance Notification Multiple Vulnerabilities
27739| [44649] RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities
27740| [43831] RETIRED: Microsoft October 2010 Advance Notification Multiple Vulnerabilities
27741| [43115] RETIRED: Microsoft September 2010 Advance Notification Multiple Vulnerabilities
27742| [42234] RETIRED: Microsoft August 2010 Advance Notification Multiple Vulnerabilities
27743| [41474] RETIRED: Microsoft July 2010 Advance Notification Multiple Vulnerabilities
27744| [40548] RETIRED: Microsoft June 2010 Advance Notification Multiple Vulnerabilities
27745| [39961] RETIRED: Microsoft May 2010 Advance Notification Multiple Vulnerabilities
27746| [39313] RETIRED: Microsoft April 2010 Advance Notification Multiple Vulnerabilities
27747| [38540] RETIRED: Microsoft March 2010 Advance Notification Multiple Vulnerabilities
27748| [38096] RETIRED: Microsoft February 2010 Advance Notification Multiple Vulnerabilities
27749| [37887] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
27750| [37664] RETIRED: Microsoft January 2010 Advance Notification Multiple Vulnerabilities
27751| [32642] Microsoft Word RTF Malformed Control Word Variant 2 Remote Code Execution Vulnerability
27752|
27753| IBM X-Force - https://exchange.xforce.ibmcloud.com:
27754| [82417] Microsoft Windows Knowledge Base Article 2801261 update is not installed
27755| [82415] Microsoft Windows Knowledge Base Article 2807986 update is not installed
27756| [82410] Microsoft Windows Knowledge Base Article 2809289 update is not installed
27757| [81859] Microsoft Windows Knowledge Base Article 2802968 update is not installed
27758| [81857] Microsoft Windows Knowledge Base Article 2809279 update is not installed
27759| [81668] Microsoft Windows Knowledge Base Article 2800277 update is not installed
27760| [77323] Microsoft Windows Knowledge Base Article 2706045 update is not installed
27761| [75949] Microsoft Windows Knowledge Base Article 2707960 update is not installed
27762| [75942] Microsoft Windows Knowledge Base Article 2706726 update is not installed
27763| [75934] Microsoft Windows Knowledge Base Article 2709162 update is not installed
27764| [75926] Microsoft Windows Knowledge Base Article 2709100 update is not installed
27765| [75905] Microsoft Windows Knowledge Base Article 2707956 update is not installed
27766| [71991] Microsoft Windows Knowledge Base Article 2607664 update is not installed
27767| [71542] Microsoft Windows Knowledge Base Article 2607702 update is not installed
27768| [70945] Microsoft Windows Knowledge Base Article 2603381 update is not installed
27769| [70150] Microsoft Windows Knowledge Base Article 2607670 update is not installed
27770| [67755] Microsoft Windows Knowledge Base Article 2503665 update is not installed
27771| [67749] Microsoft Windows Knowledge Base Article 2507938 update is not installed
27772| [66845] Microsoft Windows Knowledge Base Article 2506014 update is not installed
27773| [66844] Microsoft Windows Knowledge Base Article 2501584 update is not installed
27774| [66448] Microsoft Windows Knowledge Base Article 2508272 update is not installed
27775| [66442] Microsoft Windows Knowledge Base Article 2509553 update is not installed
27776| [66440] Microsoft Windows Knowledge Base Article 2508429 update is not installed
27777| [66438] Microsoft Windows Knowledge Base Article 2507618 update is not installed
27778| [66430] Microsoft Windows Knowledge Base Article 2503658 update is not installed
27779| [66425] Microsoft Windows Knowledge Base Article 2506223 update is not installed
27780| [65570] Microsoft Windows Knowledge Base Article 2500212 update is not installed
27781| [65568] Microsoft Windows Knowledge Base Article 2508062 update is not installed
27782| [63840] Microsoft Visual C++ 2008 Redistributable Package dynamic-linked library (DLL) code execution
27783| [63780] Microsoft PowerPoint 2007 dynamic-linked library (rpawinet.dll) code execution
27784| [63775] Microsoft Visio 2003 dynamic-linked library (mfc71enu.dll) code execution
27785| [63586] Microsoft Windows Knowledge Base Article 2207559 update is not installed
27786| [63573] Microsoft Windows Knowledge Base Article 2407132 update is not installed
27787| [62797] Microsoft Windows Knowledge Base Article 2305420 update is not installed
27788| [62149] Microsoft Windows Knowledge Base Article 2207566 update is not installed
27789| [62133] Microsoft Windows Knowledge Base Article 2405882 update is not installed
27790| [53980] Microsoft Windows 2000 License Logging Server buffer overflow
27791| [53601] Microsoft Office 2008 for Mac user ID 502 security bypass
27792| [50973] Microsoft Windows Server 2003 and Vista win32k.sys denial of service
27793| [50759] Microsoft Windows 2000 Active Directory LDAP code execution
27794| [48595] Microsoft Word 2007 Email as PDF information disclosure
27795| [46102] Microsoft Windows 2003 SP2 is not installed on the system
27796| [46101] Microsoft Windows 2003 SP1 is not installed on the system
27797| [45186] Microsoft SQL Server 2000 SQLVDIRLib.SQLVDirControl ActiveX control buffer overflow
27798| [37200] Microsoft SQL Server 2000 Service Pack 1 update is not installed
27799| [37198] Microsoft SQL Server 2000 Service Pack 3 update is not installed
27800| [34634] Microsoft Windows Server 2003 Active Directory information disclosure
27801| [34599] Microsoft Windows Server 2003 terminal server security bypass
27802| [34473] Microsoft Office 2000 ActiveX control buffer overflow
27803| [33713] Microsoft Word 2007 multiple unspecified denial of service
27804| [33712] Microsoft Word 2007 wwlib.dll buffer overflow
27805| [32631] Microsoft SQL Server 2000 Service Pack 2 update is not installed
27806| [31821] Microsoft Windows time zone update for year 2007
27807| [31196] Microsoft Office 2003 Brazilian Grammar Checker buffer overflow
27808| [30905] Microsoft Project Server 2003 pdsrequest.asp information disclosure
27809| [29546] Microsoft Windows 2000/2003 user logoff initiated
27810| [29545] Microsoft Windows 2000/2003 system time changed
27811| [29544] Microsoft Windows 2000/2003 system security access removed
27812| [29543] Microsoft Windows 2000/2003 security access granted
27813| [29542] Microsoft Windows 2000/2003 SAM notification package loaded
27814| [29541] Microsoft Windows 2000/2003 primary security token issued
27815| [29540] Microsoft Windows 2000/2003 user password reset successful
27816| [29539] Microsoft Windows 2000/2003 object indirectly accessed
27817| [29538] Microsoft Windows 2000/2003 object handle duplicated
27818| [29537] Microsoft Windows 2000/2003 logon with explicit credentials success
27819| [29536] Microsoft Windows 2000/2003 logon attempt using explicit credentials unsuccessful
27820| [29535] Microsoft Windows 2000/2003 IPSEC policy agent failed
27821| [29534] Microsoft Windows 2000/2003 IPSEC policy agent disabled
27822| [29533] Microsoft Windows 2000/2003 IPSEC policy agent changed
27823| [29532] Microsoft Windows 2000/2003 IKE security association established
27824| [29531] Microsoft Windows 2000/2003 IKE quick mode association ended
27825| [29530] Microsoft Windows 2000/2003 IKE main mode association ended
27826| [29529] Microsoft Windows 2000/2003 IKE association negotiation failed
27827| [29528] Microsoft Windows 2000/2003 IKE association peer authentication failed
27828| [29527] Microsoft Windows 2000/2003 IKE association failed invalid proposal
27829| [29526] Microsoft Windows 2000/2003 IKE association failed authentication parameters
27830| [29525] Microsoft Windows 2000/2003 DPAPI master key backup attempted
27831| [29524] Microsoft Windows 2000/2003 DPAPI key recovery attempted
27832| [29523] Microsoft Windows 2000/2003 DPAPI auditable data unprotected
27833| [29522] Microsoft Windows 2000/2003 administrative group security descriptor set
27834| [29521] Microsoft Windows 2000/2003 account name changed
27835| [29507] Microsoft Office 2003 unspecified PowerPoint NULL pointer dereference denial of service
27836| [28512] Microsoft Internet Explorer multiple Windows 2000 COM object denial of service
27837| [28005] Microsoft Windows 2000 Management Console (MMC) resource file cross-site scripting
27838| [26118] Microsoft Office 2003 mailto: information disclosure
27839| [25330] Microsoft Commerce Server 2002 authfiles/login.asp authentication bypass
27840| [24474] Microsoft Windows 2000 LDAP client accepts untrusted CA
27841| [24473] Microsoft Windows 2000 event ID 565 not logged
27842| [24472] Microsoft Windows 2000 Event ID 1704 records incorrect group policy settings
27843| [24407] Microsoft Windows 2000 SECEDIT command fails to set ACLs correctly
27844| [24405] Microsoft Windows 2000 UPN credentials with trailing dot group policy bypass
27845| [24403] Microsoft Windows 2000 WideCharToMultiByte() incorrect Japanese character conversion
27846| [24402] Microsoft Windows 2000 Terminal Service client IP not logged
27847| [24400] Microsoft Windows 2000 domain authentication can be bypassed by a local administrator
27848| [23066] Microsoft Windows XP and 2000 Server MSRPC memory allocation denial of service
27849| [22318] Microsoft SQL Server 2000 Service Pack 4 update is not installed
27850| [22183] Microsoft Exchange Server 2003 public folder denial of service
27851| [21345] Microsoft Windows 2000 Update Rollup 1 for Service Pack 4 has not been installed
27852| [21315] Microsoft Outlook 2002 connector for Domino bypass restrictions
27853| [19969] Multiple Microsoft Windows Server 2003 Edition printer driver denial of service
27854| [19965] Multiple Microsoft Windows Server 2003 Editions SMB redirector denial of service
27855| [19727] Microsoft Windows 2000 GDI32.DLL denial of service
27856| [19629] Microsoft Exchange Server 2003 folder denial of service
27857| [17826] Microsoft Outlook 2003 CID security bypass
27858| [17624] Microsoft Windows XP and Windows Server 2003 Compressed Folders buffer overflow
27859| [17621] Microsoft Windows 2003 SMTP service code execution
27860| [17560] Microsoft Windows 2000 and XP GDI library denial of service
27861| [17521] Microsoft Windows 2000 Service Pack 4 is not installed
27862| [16913] Microsoft Windows 2003 users with Synchronize directory service data privilege
27863| [16912] Microsoft Windows 2003 groups with Synchronize directory service data privilege
27864| [16909] Microsoft Windows 2003 groups with Remove computer from docking station privilege
27865| [16907] Microsoft Windows 2003 users with Create global objects privilege
27866| [16905] Microsoft Windows 2003 users or groups with Create global objects privilege
27867| [16851] Microsoft Windows 2003 and XP WinKey and U key denial of service
27868| [16704] Microsoft Windows 2000 Media Player control code execution
27869| [16582] Microsoft Windows Server 2003 kernel CPU denial of service
27870| [16572] Microsoft Windows 2003 Users with Impersonate a client after authentication privilege
27871| [16570] Microsoft Windows 2003 Users with Create global objects privilege
27872| [16564] Microsoft Windows 2003 Groups with Create global objects privilege
27873| [16562] Microsoft Windows 2003 Groups with "
27874| [16522] Microsoft Windows 2003 Impersonate a client after authentication privilege
27875| [16521] Microsoft Windows 2003 Deny Logon Through Terminal Services privilege
27876| [16520] Microsoft Windows 2003 Create global objects privilege
27877| [16276] Microsoft Windows 2000 Advanced Server fully qualified domain name security bypass
27878| [16173] Microsoft Outlook 2003 OLE object bypass restricted security zone
27879| [16119] Microsoft Outlook 2000 URL spoofing
27880| [16104] Microsoft Outlook 2003 predictable file location could allow code execution
27881| [16095] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
27882| [15704] Microsoft Windows XP and Windows Server 2003 HCP URL code execution
27883| [15700] Microsoft Windows 2000 Domain Controller LSASS LDAP message denial of service
27884| [15632] Microsoft Windows 2000 Utility Manger allows privilege escalation
27885| [15414] Microsoft Outlook 2002 mailto URL allows execution of code
27886| [15263] Microsoft Windows XP and 2000 Server kernel allows elevated privileges
27887| [15057] Microsoft Windows XP and Windows Server 2003 smbmount Linux client denial of service
27888| [15038] Microsoft Windows 2000 Server Windows Media Services denial of service
27889| [15037] Microsoft Windows Server 2003 WINS /GS flag denial of service
27890| [14178] Microsoft ISA Exchange Server 2003 MS04-002 patch is not installed
27891| [14167] Microsoft ISA Server 2000 H.323 filter buffer overflow
27892| [13426] Microsoft Windows 2000 and XP RPC race condition
27893| [13423] Microsoft Windows 2000 Local Troubleshooter ActiveX control buffer overflow
27894| [13407] Microsoft Windows 2000 Server mqsvc.exe MQLocateBegin packet buffer overflow
27895| [13385] Microsoft Windows Server 2003 "
27896| [13211] Microsoft Windows 2000 and XP URG memory leak
27897| [13171] Microsoft Windows Server 2003 can allow attacker to bypass mechanism used to detect buffer overflows
27898| [13131] Microsoft Windows 2000 Message Queue Manager buffer overflow
27899| [12684] Microsoft Exchange Server OWA Outlook 2003 denial of service
27900| [12652] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension POST request buffer overflow
27901| [12620] Microsoft Windows 2000 Server SMTP FILETIME denial of service
27902| [12543] Microsoft Windows 2000 Accessibility Utility Manager could allow an attacker to gain privileges
27903| [12493] Microsoft Windows Shell32.dll 2000 ShellExecute function buffer overflow
27904| [12489] Microsoft Windows 2000 Server Active Directory buffer overflow
27905| [12128] Microsoft Windows 2000 and Windows NT MS03-019 patch is not installed
27906| [12092] Microsoft Windows 2000 and NT 4.0 Server IIS ISAPI nsiislog.dll extension buffer overflow
27907| [12048] Microsoft Windows 2000 and Windows Server 2003 LAN Manager hash creation enabled
27908| [11901] Microsoft BizTalk Server 2002 SQL injection
27909| [11900] Microsoft BizTalk Server 2002 HTTP Receiver function buffer overflow
27910| [11816] Microsoft Windows 2000 Terminal Services MSGINA.DLL insecure access permissions
27911| [11696] Microsoft Windows 2000 Terminal Services man-in-the-middle attack
27912| [11617] Microsoft Windows 2000 MS03-007 patch is not installed on the system
27913| [11546] Microsoft Windows 2000 Windows Help Facility .cnt file buffer overflow
27914| [11329] Microsoft Windows NT and 2000 cmd.exe CD path name buffer overflow
27915| [11274] Microsoft Windows 2000 NetBIOS continuation packets denial of service
27916| [11273] Microsoft Windows 2000 RPC service could allow an attacker to gain elevated privileges
27917| [11216] Microsoft Windows NT and 2000 command prompt denial of service
27918| [11141] Microsoft Windows 2000 Terminal Services MSGINA.DLL denial of service
27919| [11133] Microsoft Outlook 2002 using V1 Exchange Server Security certificates transmits plaintext emails
27920| [10843] Microsoft Windows 2000 and XP SMB signing group policy modification
27921| [10431] Microsoft Windows 2000 SNMP LANMAN Extension memory leak denial of service
27922| [10400] Microsoft Windows 2000 RPC TCP port 135 denial of service
27923| [10377] Microsoft Windows XP and 2000 administrative alerts fail when security event log is full
27924| [10199] Microsoft Windows 2000/XP PPTP packet buffer overflow
27925| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
27926| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
27927| [9946] Microsoft Windows 2000 Terminal Services session screensaver fails to lock the console
27928| [9856] Microsoft Windows 2000 NCM handler routine could allow elevated privileges
27929| [9779] Microsoft Windows 2000 weak system partition permissions
27930| [9752] Microsoft Windows 2000 Service Pack 3 is not installed
27931| [9746] Microsoft Windows 2000 HTML Help item parameter buffer overflow
27932| [9625] Microsoft Windows 2000 Narrator allows login information to be audible
27933| [9154] Microsoft Data Engine (MSDE) and Microsoft SQL Server 2000 Desktop Engine have a default blank "
27934| [8867] Microsoft Windows 2000 LanMan denial of service
27935| [8813] Microsoft Windows 2000 Terminal Services allows attacker to bypass group policy settings
27936| [8759] Microsoft Windows 2000 could allow an attacker to block the application of Group Policy settings
27937| [8752] Microsoft Windows NT, 2000, and XP MUP buffer overflow
27938| [8739] Microsoft Windows 2000 DCOM memory leak
27939| [8708] Microsoft Outlook 2000 and 2002 executes embedded script in object tag when replying or forwarding HTML mail
27940| [8402] Microsoft Windows 2000 allows an attacker to bypass password policy
27941| [8307] Microsoft Windows 2000, Windows XP, and Exchange 2000 SMTP data transfer command denial of service
27942| [8304] Microsoft Windows 2000 and Exchange 5.5 SMTP service unauthorized mail privileges
27943| [8254] Microsoft Commerce Server 2000 AuthFilter ISAPI filter buffer overflow
27944| [8199] Microsoft Windows 2000 Terminal Services unlocked client
27945| [8094] Microsoft Windows 2000 and Interix 2.2 Telnet protocol option buffer overflow
27946| [8092] Microsoft Exchange 2000 System Attendant sets incorrect registry permissions
27947| [8043] Microsoft Windows NT, 2000, and XP using NTFS could allow files to be hidden
27948| [8037] Microsoft Windows 2000 empty TCP packet denial of service
27949| [8023] Microsoft Windows NT and Windows 2000 SIDs could allow an attacker to gain elevated privileges in another domain
27950| [7919] Microsoft IIS 4.0 and Norton Internet Security 2001 default permissions could allow an attacker to modify log files
27951| [7667] Microsoft Windows 2000 IKE UDP packet flood denial of service
27952| [7566] Microsoft IIS 2.0 and 3.0 upgraded to Microsoft IIS 4.0 fails to remove the ism.dll file
27953| [7538] Microsoft Windows 2000 and XP Terminal services allow an attacker to spoof IP addresses
27954| [7533] Microsoft Windows 2000 RunAs service denial of service
27955| [7532] Microsoft Windows 2000 RunAs service allows local attacker to bypass pipe authentication
27956| [7531] Microsoft Windows 2000 RunAs service reveals sensitive information
27957| [7528] Microsoft Windows NT and Windows 2000 malformed RPC request denial of service
27958| [7409] Microsoft Windows 2000 and Windows XP GDI denial of service
27959| [7302] Microsoft Windows NT and 2000 Terminal Server malformed RDP packet series denial of service
27960| [7008] Microsoft Windows 2000 IrDA device denial of service
27961| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
27962| [6931] Microsoft Windows 2000 without Service Pack 2
27963| [6919] Microsoft Windows 2000 Task Manager does not terminate malicious files with the same name as a system process
27964| [6912] Microsoft Windows NT and 2000 Terminal Server RDP memory leak denial of service
27965| [6876] Microsoft Windows 2000 could allow an attacker to change network passwords
27966| [6803] Microsoft Windows 2000 SMTP service allows mail relaying
27967| [6745] Microsoft Windows 2000 LDAP function could allow domain user password change
27968| [6669] Microsoft Windows 2000 Telnet system call denial of service
27969| [6668] Microsoft Windows 2000 Telnet handle leak denial of service
27970| [6667] Microsoft Windows 2000 Telnet multiple idle sessions denial of service
27971| [6666] Microsoft Windows 2000 Telnet username denial of service
27972| [6665] Microsoft Windows 2000 Telnet service weak domain authentication
27973| [6664] Microsoft Windows 2000 Telnet service predictable pipe names could allow elevation of privileges
27974| [6652] Microsoft Exchange 2000 OWA script execution
27975| [6590] Microsoft Windows 2000 debug registers allow attacker to gain elevated privileges
27976| [6506] Microsoft Windows 2000 Server Kerberos denial of service
27977| [6443] Microsoft Windows 2000 catalog file could remove installed hotfixes
27978| [6160] Microsoft Windows 2000 event viewer buffer overflow
27979| [6136] Microsoft Windows 2000 domain controller denial of service
27980| [6035] Microsoft Windows 2000 Server RDP denial of service
27981| [5973] Microsoft Windows 2000 EFS allows local user to recover sensitive data
27982| [5936] Microsoft Windows 2000 Server Directory Service Restore Mode allows user to login with blank password
27983| [5800] Microsoft Windows 2000 Index Service ActiveX controls allow unauthorized access to file information
27984| [5623] Microsoft Windows NT and 2000 Phone Book service buffer overflow
27985| [5598] Microsoft Windows 2000 Telnet daemon could allow a denial of service
27986| [5585] Microsoft Windows 2000 brute force attack
27987| [5502] Microsoft Windows 2000 Indexing Services ixsso.query
27988| [5467] Microsoft Windows 2000 System Monitor ActiveX control buffer overflow
27989| [5399] Microsoft Windows NT and 2000 Network Monitor buffer overflow
27990| [5301] Microsoft Windows 2000 Simplified Chinese IME State Recognition
27991| [5263] Microsoft Office 2000 executes .dll without users knowledge
27992| [5242] Microsoft Windows 2000 Telnet client NTLM authentication weakness
27993| [5222] Microsoft Windows 2000 malformed RPC packet denial of service
27994| [5203] Microsoft Windows 2000 still image service
27995| [5171] Microsoft Windows 2000 Local Security Policy corruption
27996| [5080] Microsoft Office 2000 HTML object tag buffer overflow
27997| [5033] Microsoft Windows 2000 without Service Pack 1
27998| [5031] Microsoft Windows 2000 Service Control Manager named pipe could allow a unauthorized user to gain privileges
27999| [5015] Microsoft Windows NT and 2000 executable path
28000| [4887] Microsoft Windows 2000 Kerberos ticket renewed
28001| [4886] Microsoft Windows 2000 logon session reconnected
28002| [4885] Microsoft Windows 2000 logon session disconnected
28003| [4882] Microsoft Windows 2000 Kerberos pre-authentication failed
28004| [4873] Microsoft Windows 2000 user account mapped for logon
28005| [4872] Microsoft Windows 2000 account logon failed
28006| [4871] Microsoft Windows 2000 account used for logon
28007| [4855] Microsoft Windows 2000 group type change
28008| [4842] Microsoft Internet Explorer and Microsoft Powerpoint 2000 ActiveX object execution
28009| [4841] Microsoft Internet Explorer and Microsoft Access 2000 VBA code execution
28010| [4823] Microsoft Windows 2000 Telnet server binary stream denial of service
28011| [4819] Microsoft Windows 2000 default SYSKEY configuration
28012| [4787] Microsoft Windows 2000 user account locked out
28013| [4786] Microsoft Windows 2000 computer account created
28014| [4785] Microsoft Windows 2000 computer account changed
28015| [4784] Microsoft Windows 2000 computer account deleted
28016| [4714] Microsoft Windows 2000 "
28017| [4589] Microsoft Windows 2000 protected store can be compromised by brute force attack
28018| [4278] Microsoft Windows 2000 unattended install does not secure All Users profile
28019| [4138] Microsoft Windows 2000 system file integrity feature is disabled
28020| [4086] Microsoft Windows 2000 may not start Jaz drives correctly
28021| [4085] Microsoft Windows 2000 non-Gregorial calendar error
28022| [4084] Microsoft Windows 2000 may prevent Adobe FrameMaker files from being saved in some formats
28023| [4083] Microsoft Windows 2000 Terminal Services may damage Office files saved as HTML
28024| [4082] Microsoft Windows 2000 and Iomega parallel port drives display error
28025| [4080] Microsoft Windows 2000 AOL image support
28026| [4079] Microsoft Windows 2000 High Encryption Pack
28027| [3854] Microsoft Office 2000 security setting
28028| [1376] Microsoft Proxy 2.0 denial of service
28029| [86256] Microsoft Windows Knowledge Base Article 2876063 update is not installed
28030| [86097] Microsoft Windows Knowledge Base Article 2859537 update is not installed
28031| [86091] Microsoft Windows Knowledge Base Article 2868623 update is not installed
28032| [86089] Microsoft Windows Knowledge Base Article 2862772 update is not installed
28033| [86075] Microsoft Windows Knowledge Base Article 2850869 update is not installed
28034| [86073] Microsoft Windows Knowledge Base Article 2873872 update is not installed
28035| [86070] Microsoft Windows Knowledge Base Article 2849568 update is not installed
28036| [85245] Microsoft Windows Knowledge Base Article 2848295 update is not installed
28037| [85244] Microsoft Windows Knowledge Base Article 2847927 update is not installed
28038| [85243] Microsoft Windows Knowledge Base Article 2861561 update is not installed
28039| [85236] Microsoft Windows Knowledge Base Article 2850851 update is not installed
28040| [85227] Microsoft Windows Knowledge Base Article 2847883 update is not installed
28041| [85223] Microsoft Windows Knowledge Base Article 2846071 update is not installed
28042| [85205] Microsoft Windows Knowledge Base Article 2845187 update is not installed
28043| [84621] Microsoft Windows Knowledge Base Article 2845690 update is not installed
28044| [84619] Microsoft Windows Knowledge Base Article 2839894 update is not installed
28045| [84617] Microsoft Windows Knowledge Base Article 2839571 update is not installed
28046| [84615] Microsoft Windows Knowledge Base Article 2839229 update is not installed
28047| [84613] Microsoft Windows Knowledge Base Article 2838727 update is not installed
28048| [84156] Microsoft Windows Knowledge Base Article 2847204 update is not installed
28049| [83912] Microsoft Windows Knowledge Base Article 2829254 update is not installed
28050| [83910] Microsoft Windows Knowledge Base Article 2829530 update is not installed
28051| [83898] Microsoft Windows Knowledge Base Article 2830397 update is not installed
28052| [83886] Microsoft Windows Knowledge Base Article 2830399 update is not installed
28053| [83884] Microsoft Windows Knowledge Base Article 2834692 update is not installed
28054| [83882] Microsoft Windows Knowledge Base Article 2834695 update is not installed
28055| [83880] Microsoft Windows Knowledge Base Article 2836440 update is not installed
28056| [83876] Microsoft Windows Knowledge Base Article 2840221 update is not installed
28057| [83192] Microsoft Windows Knowledge Base Article 2817183 update is not installed
28058| [83100] Microsoft Windows Knowledge Base Article 2830914 update is not installed
28059| [83098] Microsoft Windows Knowledge Base Article 2829996 update is not installed
28060| [83093] Microsoft Windows Knowledge Base Article 2828223 update is not installed
28061| [83091] Microsoft Windows Knowledge Base Article 2813170 update is not installed
28062| [83088] Microsoft Windows Knowledge Base Article 2827663 update is not installed
28063| [83086] Microsoft Windows Knowledge Base Article 2823482 update is not installed
28064| [83084] Microsoft Windows Knowledge Base Article 2821818 update is not installed
28065| [83082] Microsoft Windows Knowledge Base Article 2820917 update is not installed
28066| [82600] Microsoft Windows Knowledge Base Article 2813707 update is not installed
28067| [82424] Microsoft Windows Knowledge Base Article 2814124 update is not installed
28068| [82422] Microsoft Windows Knowledge Base Article 2780176 update is not installed
28069| [82401] Microsoft Windows Knowledge Base Article 2813682 update is not installed
28070| [82399] Microsoft Windows Knowledge Base Article 2816264 update is not installed
28071| [81683] Microsoft Windows Knowledge Base Article 2780091 update is not installed
28072| [81681] Microsoft Windows Knowledge Base Article 2784242 update is not installed
28073| [81680] Microsoft Windows Knowledge Base Article 2790113 update is not installed
28074| [81678] Microsoft Windows Knowledge Base Article 2790655 update is not installed
28075| [81676] Microsoft Windows Knowledge Base Article 2790978 update is not installed
28076| [81674] Microsoft Windows Knowledge Base Article 2797052 update is not installed
28077| [81672] Microsoft Windows Knowledge Base Article 2799494 update is not installed
28078| [81666] Microsoft Windows Knowledge Base Article 2778344 update is not installed
28079| [81634] Microsoft Windows Knowledge Base Article 2792100 update is not installed
28080| [81339] Microsoft Windows Knowledge Base Article 2799329 update is not installed
28081| [80875] Microsoft Windows Knowledge Base Article 2756145 update is not installed
28082| [80872] Microsoft Windows Knowledge Base Article 2769324 update is not installed
28083| [80867] Microsoft Windows Knowledge Base Article 2769327 update is not installed
28084| [80865] Microsoft Windows Knowledge Base Article 2769369 update is not installed
28085| [80863] Microsoft Windows Knowledge Base Article 2778930 update is not installed
28086| [80861] Microsoft Windows Knowledge Base Article 2785220 update is not installed
28087| [80365] Microsoft Windows Knowledge Base Article 2761465 update is not installed
28088| [80360] Microsoft Windows Knowledge Base Article 2765809 update is not installed
28089| [80358] Microsoft Windows Knowledge Base Article 2770660 update is not installed
28090| [80356] Microsoft Windows Knowledge Base Article 2780642 update is not installed
28091| [80352] Microsoft Windows Knowledge Base Article 2783534 update is not installed
28092| [80349] Microsoft Windows Knowledge Base Article 2784126 update is not installed
28093| [79693] Microsoft Windows Knowledge Base Article 2745030 update is not installed
28094| [79687] Microsoft Windows Knowledge Base Article 2761451 update is not installed
28095| [79683] Microsoft Windows Knowledge Base Article 2761226 update is not installed
28096| [79679] Microsoft Windows Knowledge Base Article 2758857 update is not installed
28097| [79677] Microsoft Windows Knowledge Base Article 2727528 update is not installed
28098| [78864] Microsoft Windows Knowledge Base Article 2754670 update is not installed
28099| [78862] Microsoft Windows Knowledge Base Article 2743555 update is not installed
28100| [78858] Microsoft Windows Knowledge Base Article 2754849 update is not installed
28101| [78856] Microsoft Windows Knowledge Base Article 2724197 update is not installed
28102| [78853] Microsoft Windows Knowledge Base Article 2741517 update is not installed
28103| [78851] Microsoft Windows Knowledge Base Article 2742319 update is not installed
28104| [78848] Microsoft Windows Knowledge Base Article 2742321 update is not installed
28105| [78760] Microsoft Windows Knowledge Base Article 2744842 update is not installed
28106| [78077] Microsoft Windows Knowledge Base Article 2741528 update is not installed
28107| [78075] Microsoft Windows Knowledge Base Article 2720184 update is not installed
28108| [78071] Microsoft Windows Knowledge Base Article 2748552 update is not installed
28109| [77512] Microsoft Windows Knowledge Base Article 2740358 update is not installed
28110| [77362] Microsoft Windows Knowledge Base Article 2733918 update is not installed
28111| [77360] Microsoft Windows Knowledge Base Article 2733829 update is not installed
28112| [77357] Microsoft Windows Knowledge Base Article 2733594 update is not installed
28113| [77352] Microsoft Windows Knowledge Base Article 2731879 update is not installed
28114| [77350] Microsoft Windows Knowledge Base Article 2731847 update is not installed
28115| [77348] Microsoft Windows Knowledge Base Article 2723135 update is not installed
28116| [77346] Microsoft Windows Knowledge Base Article 2722913 update is not installed
28117| [77342] Microsoft Windows Knowledge Base Article 2720573 update is not installed
28118| [77325] Microsoft Windows Knowledge Base Article 2719584 update is not installed
28119| [76808] Microsoft Windows Knowledge Base Article 2721015 update is not installed
28120| [76725] Microsoft Windows Knowledge Base Article 2722479 update is not installed
28121| [76724] Microsoft Windows Knowledge Base Article 2719177 update is not installed
28122| [76721] Microsoft Windows Knowledge Base Article 2718523 update is not installed
28123| [76718] Microsoft Windows Knowledge Base Article 2698365 update is not installed
28124| [76711] Microsoft Windows Knowledge Base Article 2695502 update is not installed
28125| [76704] Microsoft Windows Knowledge Base Article 2691442 update is not installed
28126| [76702] Microsoft Windows Knowledge Base Article 2655992 update is not installed
28127| [75963] Microsoft Windows Knowledge Base Article 2699988 update is not installed
28128| [75939] Microsoft Windows Knowledge Base Article 2685939 update is not installed
28129| [75928] Microsoft Windows Knowledge Base Article 2711167 update is not installed
28130| [75136] Microsoft Windows Knowledge Base Article 2693777 update is not installed
28131| [75132] Microsoft Windows Knowledge Base Article 2690533 update is not installed
28132| [75130] Microsoft Windows Knowledge Base Article 2688338 update is not installed
28133| [75127] Microsoft Windows Knowledge Base Article 2681578 update is not installed
28134| [75123] Microsoft Windows Knowledge Base Article 2680352 update is not installed
28135| [75116] Microsoft Windows Knowledge Base Article 2597981 update is not installed
28136| [74556] Microsoft Windows Knowledge Base Article 2639185 update is not installed
28137| [74384] Microsoft Windows Knowledge Base Article 2675157 update is not installed
28138| [74378] Microsoft Windows Knowledge Base Article 2671605 update is not installed
28139| [74373] Microsoft Windows Knowledge Base Article 2664258 update is not installed
28140| [74369] Microsoft Windows Knowledge Base Article 2663860 update is not installed
28141| [73543] Microsoft Windows Knowledge Base Article 2671387 update is not installed
28142| [73540] Microsoft Windows Knowledge Base Article 2665364 update is not installed
28143| [73538] Microsoft Windows Knowledge Base Article 2651019 update is not installed
28144| [73536] Microsoft Windows Knowledge Base Article 2651018 update is not installed
28145| [73533] Microsoft Windows Knowledge Base Article 2647170 update is not installed
28146| [73530] Microsoft Windows Knowledge Base Article 2641653 update is not installed
28147| [72887] Microsoft Windows Knowledge Base Article 2663841 update is not installed
28148| [72873] Microsoft Windows Knowledge Base Article 2663830 update is not installed
28149| [72867] Microsoft Windows Knowledge Base Article 2663510 update is not installed
28150| [72857] Microsoft Windows Knowledge Base Article 2661637 update is not installed
28151| [72855] Microsoft Windows Knowledge Base Article 2660465 update is not installed
28152| [72853] Microsoft Windows Knowledge Base Article 2653956 update is not installed
28153| [72851] Microsoft Windows Knowledge Base Article 2654428 update is not installed
28154| [72849] Microsoft Windows Knowledge Base Article 2651026 update is not installed
28155| [72846] Microsoft Windows Knowledge Base Article 2647516 update is not installed
28156| [72841] Microsoft Windows Knowledge Base Article 2645640 update is not installed
28157| [72838] Microsoft Windows Knowledge Base Article 2643719 update is not installed
28158| [72029] Microsoft Windows Knowledge Base Article 2638420 update is not installed
28159| [72003] Microsoft Windows Knowledge Base Article 2646524 update is not installed
28160| [71998] Microsoft Windows Knowledge Base Article 2644615 update is not installed
28161| [71995] Microsoft Windows Knowledge Base Article 2643584 update is not installed
28162| [71994] Microsoft Windows Knowledge Base Article 2636391 update is not installed
28163| [71565] Microsoft Windows Knowledge Base Article 2648048 update is not installed
28164| [71562] Microsoft Windows Knowledge Base Article 2640241 update is not installed
28165| [71560] Microsoft Windows Knowledge Base Article 2640045 update is not installed
28166| [71558] Microsoft Windows Knowledge Base Article 2639417 update is not installed
28167| [71557] Microsoft Windows Knowledge Base Article 2639142 update is not installed
28168| [71554] Microsoft Windows Knowledge Base Article 2633171 update is not installed
28169| [71552] Microsoft Windows Knowledge Base Article 2624667 update is not installed
28170| [71550] Microsoft Windows Knowledge Base Article 2620712 update is not installed
28171| [71548] Microsoft Windows Knowledge Base Article 2618451 update is not installed
28172| [71546] Microsoft Windows Knowledge Base Article 2618444 update is not installed
28173| [71538] Microsoft Windows Knowledge Base Article 2590602 update is not installed
28174| [70951] Microsoft Windows Knowledge Base Article 2630837 update is not installed
28175| [70949] Microsoft Windows Knowledge Base Article 2620704 update is not installed
28176| [70947] Microsoft Windows Knowledge Base Article 2617657 update is not installed
28177| [70943] Microsoft Windows Knowledge Base Article 2588516 update is not installed
28178| [70152] Microsoft Windows Knowledge Base Article 2623699 update is not installed
28179| [70140] Microsoft Windows Knowledge Base Article 2652016 update is not installed
28180| [70130] Microsoft Windows Knowledge Base Article 2586448 update is not installed
28181| [70115] Microsoft Windows Knowledge Base Article 2567053 update is not installed
28182| [69501] Microsoft Windows Knowledge Base Article 2587634 update is not installed
28183| [69498] Microsoft Windows Knowledge Base Article 2587505 update is not installed
28184| [69492] Microsoft Windows Knowledge Base Article 2571621 update is not installed
28185| [69490] Microsoft Windows Knowledge Base Article 2570947 update is not installed
28186| [68840] Microsoft Windows Knowledge Base Article 2451858 update is not installed
28187| [68833] Microsoft Windows Knowledge Base Article 2567943 update is not installed
28188| [68831] Microsoft Windows Knowledge Base Article 2570222 update is not installed
28189| [68829] Microsoft Windows Knowledge Base Article 2567951 update is not installed
28190| [68827] Microsoft Windows Knowledge Base Article 2578230 update is not installed
28191| [68825] Microsoft Windows Knowledge Base Article 2546250 update is not installed
28192| [68823] Microsoft Windows Knowledge Base Article 2559049 update is not installed
28193| [68816] Microsoft Windows Knowledge Base Article 2556532 update is not installed
28194| [68814] Microsoft Windows Knowledge Base Article 2560656 update is not installed
28195| [68812] Microsoft Windows Knowledge Base Article 2560978 update is not installed
28196| [68809] Microsoft Windows Knowledge Base Article 2562485 update is not installed
28197| [68806] Microsoft Windows Knowledge Base Article 2566454 update is not installed
28198| [68804] Microsoft Windows Knowledge Base Article 2563894 update is not installed
28199| [68801] Microsoft Windows Knowledge Base Article 2567680 update is not installed
28200| [68315] Microsoft Windows Knowledge Base Article 2555917 update is not installed
28201| [68299] Microsoft Windows Knowledge Base Article 2566220 update is not installed
28202| [68283] Microsoft Windows Knowledge Base Article 2560847 update is not installed
28203| [67955] Microsoft Windows Knowledge Base Article 2530548 update is not installed
28204| [67943] Microsoft Windows Knowledge Base Article 2544521 update is not installed
28205| [67762] Microsoft Windows Knowledge Base Article 2543893 update is not installed
28206| [67759] Microsoft Windows Knowledge Base Article 2544893 update is not installed
28207| [67757] Microsoft Windows Knowledge Base Article 2476490 update is not installed
28208| [67753] Microsoft Windows Knowledge Base Article 2514842 update is not installed
28209| [67751] Microsoft Windows Knowledge Base Article 2518295 update is not installed
28210| [67737] Microsoft Windows Knowledge Base Article 2520426 update is not installed
28211| [67733] Microsoft Windows Knowledge Base Article 2525694 update is not installed
28212| [67731] Microsoft Windows Knowledge Base Article 2525835 update is not installed
28213| [67728] Microsoft Windows Knowledge Base Article 2535512 update is not installed
28214| [67725] Microsoft Windows Knowledge Base Article 2536275 update is not installed
28215| [67722] Microsoft Windows Knowledge Base Article 2536276 update is not installed
28216| [67718] Microsoft Windows Knowledge Base Article 2537146 update is not installed
28217| [67709] Microsoft Windows Knowledge Base Article 2538814 update is not installed
28218| [67302] Microsoft Windows Knowledge Base Article 2545814 update is not installed
28219| [67101] Microsoft Windows Knowledge Base Article 2524426 update is not installed
28220| [66446] Microsoft Windows Knowledge Base Article 2514666 update is not installed
28221| [66444] Microsoft Windows Knowledge Base Article 2511455 update is not installed
28222| [66436] Microsoft Windows Knowledge Base Article 2497640 update is not installed
28223| [66432] Microsoft Windows Knowledge Base Article 2527308 update is not installed
28224| [66428] Microsoft Windows Knowledge Base Article 2489979 update is not installed
28225| [66423] Microsoft Windows kernel-mode driver (win32k.sys) variant 29 privilege escalation
28226| [66422] Microsoft Windows kernel-mode driver (win32k.sys) variant 28 privilege escalation
28227| [66421] Microsoft Windows kernel-mode driver (win32k.sys) variant 27 privilege escalation
28228| [66420] Microsoft Windows kernel-mode driver (win32k.sys) variant 26 privilege escalation
28229| [66419] Microsoft Windows kernel-mode driver (win32k.sys) variant 25 privilege escalation
28230| [66418] Microsoft Windows kernel-mode driver (win32k.sys) variant 24 privilege escalation
28231| [66417] Microsoft Windows kernel-mode driver (win32k.sys) variant 23 privilege escalation
28232| [66416] Microsoft Windows kernel-mode driver (win32k.sys) variant 22 privilege escalation
28233| [66415] Microsoft Windows kernel-mode driver (win32k.sys) variant 21 privilege escalation
28234| [66414] Microsoft Windows kernel-mode driver (win32k.sys) variant 20 privilege escalation
28235| [66396] Microsoft Windows kernel-mode driver (win32k.sys) variant 2 privilege escalation
28236| [66394] Microsoft Windows Knowledge Base Article 2485663 update is not installed
28237| [65588] Microsoft Windows Knowledge Base Article 2489279 update is not installed
28238| [65581] Microsoft Windows Knowledge Base Article 2510030 update is not installed
28239| [65580] Microsoft Windows Knowledge Base Article 2489283 update is not installed
28240| [65575] Microsoft Windows Knowledge Base Article 2489293 update is not installed
28241| [65573] Microsoft Windows Knowledge Base Article 2494047 update is not installed
28242| [64973] Microsoft Windows Knowledge Base Article 2478960 update is not installed
28243| [64971] Microsoft Windows Knowledge Base Article 2479628 update is not installed
28244| [64927] Microsoft Windows Knowledge Base Article 2393802 update is not installed
28245| [64925] Microsoft Windows Knowledge Base Article 2451879 update is not installed
28246| [64920] Microsoft Windows Knowledge Base Article 2475792 update is not installed
28247| [64918] Microsoft Windows Knowledge Base Article 2476687 update is not installed
28248| [64916] Microsoft Windows Knowledge Base Article 2478953 update is not installed
28249| [64914] Microsoft Windows Knowledge Base Article 2482017 update is not installed
28250| [64910] Microsoft Windows Knowledge Base Article 2483185 update is not installed
28251| [64909] Microsoft Windows Knowledge Base Article 2484015 update is not installed
28252| [64907] Microsoft Windows Knowledge Base Article 2485376 update is not installed
28253| [64905] Microsoft Windows Knowledge Base Article 2489256 update is not installed
28254| [64902] Microsoft Windows Knowledge Base Article 2496930 update is not installed
28255| [64342] Microsoft Windows Knowledge Base Article 2451910 update is not installed
28256| [64339] Microsoft Windows Knowledge Base Article 2478935 update is not installed
28257| [63584] Microsoft Windows Knowledge Base Article 2424434 update is not installed
28258| [63582] Microsoft Windows Knowledge Base Article 2423089 update is not installed
28259| [63580] Microsoft Windows Knowledge Base Article 2436673 update is not installed
28260| [63571] Microsoft Windows Knowledge Base Article 2440591 update is not installed
28261| [63569] Microsoft Windows Knowledge Base Article 2385678 update is not installed
28262| [63566] Microsoft Windows Knowledge Base Article 2442962 update is not installed
28263| [63564] Microsoft Windows Knowledge Base Article 2345316 update is not installed
28264| [63562] Microsoft Windows Knowledge Base Article 2296199 update is not installed
28265| [63558] Microsoft Windows Knowledge Base Article 2416400 update is not installed
28266| [63550] Microsoft Windows Knowledge Base Article 2447961 update is not installed
28267| [63548] Microsoft Windows Knowledge Base Article 2443105 update is not installed
28268| [63546] Microsoft Windows Knowledge Base Article 2455005 update is not installed
28269| [63544] Microsoft Windows Knowledge Base Article 2292970 update is not installed
28270| [62805] Microsoft Windows Knowledge Base Article 2316074 update is not installed
28271| [62793] Microsoft Windows Knowledge Base Article 2293386 update is not installed
28272| [62789] Microsoft Windows Knowledge Base Article 2423930 update is not installed
28273| [62170] Microsoft Windows Knowledge Base Article 2296011 update is not installed
28274| [62166] Microsoft Windows Knowledge Base Article 2294255 update is not installed
28275| [62163] Microsoft Windows Knowledge Base Article 2281679 update is not installed
28276| [62154] Microsoft Windows Knowledge Base Article 2279986 update is not installed
28277| [62147] Microsoft Windows Knowledge Base Article 2160841 update is not installed
28278| [62134] Microsoft Windows Knowledge Base Article 2412048 update is not installed
28279| [62129] Microsoft Windows Knowledge Base Article 2387149 update is not installed
28280| [62126] Microsoft Windows Knowledge Base Article 2378111 update is not installed
28281| [62123] Microsoft Windows Knowledge Base Article 2360937 update is not installed
28282| [62118] Microsoft Windows Knowledge Base Article 2293211 update is not installed
28283| [62104] Microsoft Windows Knowledge Base Article 2360131 update is not installed
28284| [62098] Microsoft Windows Knowledge Base Article 2293194 update is not installed
28285| [62069] Microsoft Windows Knowledge Base Article 2418042 update is not installed
28286| [61519] Microsoft Windows Knowledge Base Article 2121546 update is not installed
28287| [61517] Microsoft Windows Knowledge Base Article 2259922 update is not installed
28288| [61514] Microsoft Windows Knowledge Base Article 2267960 update is not installed
28289| [61510] Microsoft Windows Knowledge Base Article 2315011 update is not installed
28290| [61507] Microsoft Windows Knowledge Base Article 2320113 update is not installed
28291| [61504] Microsoft Windows Knowledge Base Article 2347290 update is not installed
28292| [60736] Microsoft Windows Knowledge Base Article 2265906 update is not installed
28293| [60734] Microsoft Windows Knowledge Base Article 2269638 update is not installed
28294| [60728] Microsoft Windows Knowledge Base Article 2269707 update is not installed
28295| [60724] Microsoft Windows Knowledge Base Article 2286198 update is not installed
28296| [60713] Microsoft Windows Knowledge Base Article 2183461 update is not installed
28297| [60698] Microsoft Windows Knowledge Base Article 2160329 update is not installed
28298| [60686] Microsoft Windows Knowledge Base Article 2115168 update is not installed
28299| [60684] Microsoft Windows Knowledge Base Article 2079403 update is not installed
28300| [60680] Microsoft Windows Knowledge Base Article 2264072 update is not installed
28301| [59901] Microsoft Windows Knowledge Base Article 2229593 update is not installed
28302| [59898] Microsoft Windows Knowledge Base Article 2229593 update is not installed
28303| [58913] Microsoft Windows Knowledge Base Article 2027452 update is not installed
28304| [58891] Microsoft Windows Knowledge Base Article 2028554 update is not installed
28305| [17004] Microsoft Windows XP Service Pack 2 is not installed on the system
28306| [9187] Microsoft Passport SDK 2.1 Component Configuration Document (CCD) permission
28307| [9146] Microsoft Passport SDK 2.1 events reporting disabled
28308| [9068] Microsoft Passport SDK 2.1 registry default permission exposure
28309| [9067] Microsoft Passport SDK 2.1 default test site exposure
28310| [9066] Microsoft Passport SDK 2.1 Adventure Works Sample Site exposure
28311| [9065] Microsoft Passport SDK 2.1 Adventure Works Sample Site global.asa file default permission exposure
28312| [9064] Microsoft Passport SDK 2.1 default time window exposure
28313| [1271] Microsoft IIS version 2 installed
28314| [621] Microsoft IIS 3.0 script source revealed by appending 2E to requests
28315|
28316| Exploit-DB - https://www.exploit-db.com:
28317| [30756] Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilities
28318| [30749] Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability
28319| [30636] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (2)
28320| [30635] Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (1)
28321| [30281] Microsoft .Net Framework <= 2.0 - Multiple Null Byte Injection Vulnerabilities
28322| [29664] Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability
28323| [29660] Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
28324| [29630] Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability
28325| [29524] Microsoft Word 2000 - Malformed Function Code Execution Vulnerability
28326| [28420] Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
28327| [28357] Microsoft Windows Explorer 2000/2003/XP Drag and Drop Remote Code Execution Vulnerability
28328| [28227] Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability
28329| [28226] Microsoft PowerPoint 2003 PPT File Closure Memory Corruption
28330| [28225] Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
28331| [28224] Microsoft PowerPoint 2003 mso.dll PPT Processing Unspecified Code Execution
28332| [28198] Microsoft Office 2000/2002 Property Code Execution Vulnerability
28333| [28189] Microsoft Excel 2000-2004 Style Handling and Repair Remote Code Execution Vulnerability
28334| [28087] Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
28335| [28005] Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability
28336| [26690] Microsoft Windows 2000/2003/XP CreateRemoteThread Local Denial of Service Vulnerability
28337| [26517] Microsoft Office PowerPoint 2007 - Crash PoC
28338| [26341] Microsoft Windows 2000/2003/XP MSDTC TIP Denial of Service Vulnerability
28339| [26222] Microsoft Windows 2000/2003/XP Keyboard Event Privilege Escalation Weakness
28340| [25384] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (2)
28341| [25383] Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (1)
28342| [25231] Microsoft Windows 2000/2003/XP Graphical Device Interface Library Denial of Service Vulnerability
28343| [25085] Microsoft Office XP 2000/2002 HTML Link Processing Remote Buffer Overflow Vulnerability
28344| [25084] Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability
28345| [25050] Microsoft Windows 2000/2003/XP winhlp32 Phrase Heap Overflow Vulnerability
28346| [25049] Microsoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability
28347| [24686] Microsoft Outlook 2003 Security Policy Bypass Vulnerability
28348| [24277] Microsoft Windows 2000/NT 4 POSIX Subsystem Buffer Overflow Local Privilege Escalation Vulnerability
28349| [24114] Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
28350| [24101] Microsoft Outlook 2003 Predictable File Location Weakness
28351| [23989] Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability
28352| [23796] Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
28353| [23019] Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
28354| [22919] Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities
28355| [22883] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (2)
28356| [22882] Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)
28357| [22837] Microsoft Windows 2000/NT 4 Media Services NSIISlog.DLL Remote Buffer Overflow
28358| [22782] Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
28359| [22591] Microsoft Office Excel 2007 - WriteAV Crash PoC
28360| [22555] Microsoft BizTalk Server 2000/2002 DTA RawCustomSearchField.asp SQL Injection
28361| [22554] Microsoft BizTalk Server 2000/2002 DTA rawdocdata.asp SQL Injection Vulnerability
28362| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
28363| [22528] Microsoft Windows 2000 RegEdit.EXE Registry Key Value Buffer Overflow Vulnerability
28364| [22354] Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
28365| [21920] Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
28366| [21718] Microsoft SQL 2000/7.0 Agent Jobs Privilege Elevation Vulnerability
28367| [21693] Microsoft SQL Server 2000 User Authentication Remote Buffer Overflow Vulnerability
28368| [21652] Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
28369| [21651] Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
28370| [21650] Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
28371| [21549] Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability
28372| [21541] Microsoft SQL Server 2000 SQLXML Script Injection Vulnerability
28373| [21540] Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability
28374| [21389] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (2)
28375| [21388] Microsoft Windows 2000 Lanman Denial of Service Vulnerability (1)
28376| [21344] Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability
28377| [21258] Microsoft Windows 2000/NT 4 NTFS File Hiding Vulnerability
28378| [21246] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (2)
28379| [21245] Microsoft Windows 2000/NT 4 TCP Stack DoS Vulnerability (1)
28380| [21172] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (2)
28381| [21171] Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)
28382| [21131] Microsoft Windows 2000/XP GDI Denial of Service Vulnerability
28383| [21123] Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability
28384| [21113] Microsoft Index Server 2.0 File Information and Path Disclosure Vulnerability
28385| [21099] Microsoft Windows 2000 RunAs Service Denial of Services Vulnerability
28386| [21069] Microsoft Windows 2000 RunAs Service Named Pipe Hijacking Vulnerability
28387| [20907] Microsoft Windows 2000 Telnet Username DoS Vulnerability
28388| [20802] Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
28389| [20763] Microsoft ISA Server 2000 Web Proxy DoS Vulnerability
28390| [20571] Microsoft Outlook 2000 0/98 0/Express 5.5 Concealed Attachment Vulnerability
28391| [20481] Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability
28392| [20399] Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
28393| [20335] Microsoft Indexing Services for Windows 2000/NT 4.0 .htw Cross-Site Scripting Vulnerability
28394| [20305] Microsoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability
28395| [20265] Microsoft Windows NT 4.0 / 2000 Spoofed LPC Request Vulnerability
28396| [20257] Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
28397| [20255] Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
28398| [20222] Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
28399| [20209] Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
28400| [20133] Microsoft Windows 2000 Named Pipes Predictability Vulnerability
28401| [20122] Microsoft Office SharePoint Server 2007 Remote Code Execution
28402| [20096] Microsoft IIS 2.0/3.0/4.0/5.0/5.1 Internal IP Address Disclosure Vulnerability
28403| [20048] Microsoft Windows 2000 Remote CPU-overload Vulnerability
28404| [20047] Microsoft Windows 2000 Telnet Server DoS Vulnerability
28405| [19830] Microsoft Index Server 2.0 '%20' ASP Source Disclosure Vulnerability
28406| [19742] microsoft iis 3.0/4.0,microsoft index server 2.0 - Directory Traversal
28407| [19734] Microsoft Virtual Machine 2000 Series/3000 Series getSystemResource Vulnerability
28408| [19731] microsoft index server 2.0/indexing services for windows 2000 - Directory Traversal
28409| [19728] Microsoft Systems Management Server 2.0 Default Permissions Vulnerability
28410| [19425] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (2)
28411| [19424] Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (1)
28412| [19376] Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
28413| [19143] "Microsoft Windows ""April Fools 2001"" Vulnerability"
28414| [19118] Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability
28415| [18334] Microsoft Office 2003 Home/Pro 0day
28416| [18087] MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
28417| [18078] Microsoft Excel 2003 11.8335.8333 Use After Free
28418| [18067] Microsoft Excel 2007 SP2 Buffer Overwrite Exploit
28419| [17305] "Microsoft Windows Vista/Server 2008 ""nsiproxy.sys"" Local Kernel DoS Exploit"
28420| [14971] MOAUB #11 - Microsoft Office Word 2007 sprmCMajority Buffer Overflow
28421| [14782] Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)
28422| [14746] Microsoft Office Groove 2007 DLL Hijacking Exploit (mso.dll)
28423| [14744] Microsoft Visio 2003 DLL Hijacking Exploit (mfc71enu.dll)
28424| [12450] Microsoft SharePoint Server 2007 XSS Vulnerability
28425| [10068] Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution
28426| [4121] Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC
28427| [3973] Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote DoS Exploit
28428| [3690] microsoft office word 2007 - Multiple Vulnerabilities
28429| [3260] Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
28430| [2523] Microsoft Office 2003 PPT Local Buffer Overflow PoC
28431| [2091] Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)
28432| [2001] Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
28433| [1999] Microsoft Word 2000/2003 Hlink Local Buffer Overflow Exploit PoC
28434| [1988] Microsoft Excel 2003 Hlink Local Buffer Overflow Exploit (italian)
28435| [1986] Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit (french)
28436| [1958] Microsoft Excel 2003 Hlink Stack/SEH Buffer Overflow Exploit
28437| [28238] Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Vulnerability MS13-067
28438| [23034] Microsoft URLScan 2.5/ RSA Security SecurID 5.0 Configuration Enumeration Weakness
28439| [22850] Microsoft Office OneNote 2010 Crash PoC
28440| [22679] Microsoft Visio 2010 Crash PoC
28441| [22655] Microsoft Publisher 2013 Crash PoC
28442| [22621] Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability
28443| [22330] Microsoft Office Excel 2010 Crash PoC
28444| [22310] Microsoft Office Publisher 2010 Crash PoC
28445| [22237] Microsoft Office Picture Manager 2010 Crash PoC
28446| [22215] Microsoft Office Word 2010 Crash PoC
28447| [19451] Microsoft Windows 98 a/98 b/98SE,Solaris 2.6 IRDP Vulnerability
28448| [19440] Microsoft Windows NT 4.0/SP 1/SP 2/Sp 3/SP 4/SP 5 Malformed Dialer Entry Vulnerability
28449| [19372] Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability
28450| [17164] Microsoft Reader <= 2.1.1.3143 NULL Byte Write
28451| [17163] Microsoft Reader <= 2.1.1.3143 Array Overflow
28452| [17162] Microsoft Reader <= 2.1.1.3143 Integer Overflow
28453| [17161] Microsoft Reader <= 2.1.1.3143 Heap Overflow
28454| [17160] Microsoft Reader <= 2.1.1.3143 Integer Overflow
28455| [14731] Microsoft Windows Movie Maker <= 2.6.4038.0 DLL Hijacking Exploit (hhctrl.ocx)
28456| [14723] Microsoft Power Point 2010 DLL Hijacking Exploit (pptimpconv.dll)
28457|
28458| OpenVAS (Nessus) - http://www.openvas.org:
28459| [902250] Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
28460| [900125] Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability
28461| [801597] Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
28462| [801596] Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
28463| [801594] Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability
28464| [800687] Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
28465| [800577] Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
28466| [800343] Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
28467| [103254] Microsoft SharePoint Server 2007 '_layouts/help.aspx' Cross Site Scripting Vulnerability
28468| [11992] Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)
28469| [902931] Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)
28470| [902678] Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)
28471| [901210] Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)
28472|
28473| SecurityTracker - https://www.securitytracker.com:
28474| [1015347] Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges
28475| [1013454] Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users
28476| [1013284] Microsoft Windows 2000 and XP Group Policy Can Be Bypassed By Microsoft Office Applications and By Flash Drives
28477| [1010687] Microsoft Windows 2000/NT POSIX Subsystem Buffer Overflow Lets Local Users Gain Elevated Privileges
28478| [1010352] Microsoft Windows 2000 Domains With Eight Characters May Let Remote Users With Expired Passwords Login
28479| [1010189] Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
28480| [1010125] Microsoft Outlook 2003 Lets Remote Users Send E-mail to Cause the Recipient's Client to Contact a Remote Server
28481| [1009767] Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service
28482| [1008324] Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users
28483| [1007905] Microsoft Windows Server 2003 Shell Folders Can Be Referenced Using Directory Traversal Characters
28484| [1007238] Microsoft Outlook Web Access Can Be Crashed By Remote Authenticated Users With an Outlook 2003 Client
28485| [1007152] Microsoft Windows 2000 Accessibility Utility Manager Lets Local Users Gain Elevated Privileges
28486| [1007099] Microsoft Windows 2000 ShellExecute() Buffer Overflow May Let Users Execute Arbitrary Code
28487| [1007093] Microsoft Active Directory Stack Overflow in 'Lsaas.exe' Lets Remote Users Crash the Windows 2000 Server
28488| [1006959] Microsoft Windows Server 2003 Drivers May Leak Information From Memory Via Ethernet Packets Containing TCP Streams
28489| [1006580] Microsoft Windows 2003 'win2k.sys' Printing Bug Lets Users Crash the System
28490| [1006534] Microsoft Proxy Service in Proxy Server 2.0 Has Unspecified Flaw That Lets Remote Users Stop Traffic
28491| [1006286] Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes
28492| [1006280] Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code
28493| [1005254] Microsoft NT, 2000, and XP Operating Systems May Execute a 16-bit Application Even When The File Has No Execute Permissions
28494| [1005068] Microsoft NTFS Filesystem in Windows NT and Windows 2000 Has Auditing Hole That Lets Local Users Access Files Without the File Access Being Audited
28495| [1004587] Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server
28496| [1004528] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks
28497| [1004527] Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System
28498| [1004407] Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server
28499| [1004357] Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges
28500| [1004083] Microsoft Windows 2000 'microsoft-ds' Service Flaw Allows Remote Users to Create Denial of Service Conditions By Sending Malformed Packets
28501| [1004022] Microsoft Windows 2000 Group Policy Object Enforcement Can Be Circumvented if User License Limits are Exceeded
28502| [1003975] Microsoft Windows NT, 2000, and XP Kernel Buffer Overflow in Processing Multiple UNC Provider (MUP) Requests May Let Local Users Obtain System Level Privileges
28503| [1003949] Microsoft Windows 2000 DCOM Implementation Flaw May Disclose Memory Contents to Remote Users
28504| [1003816] Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress
28505| [1003688] Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
28506| [1003687] Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash
28507| [1003634] Microsoft XML Core Services in SQL Server 2000 Lets Remote Scripts Access and Send Local Files
28508| [1003629] Microsoft Commerce Server 2000 AuthFilter Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server With LocalSystem Privileges to Gain Full Control of the Server
28509| [1003472] Microsoft Telnet Server for Windows 2000 and for Interix Has a Buffer Overflow That May Let Remote Users Execute Code on the Server with System Level Privileges
28510| [1003469] Microsoft Exchange 2000 Server Allows Remote Users to View and Possibly Modify Registry Settings
28511| [1003402] Microsoft Windows NT 4.0 and Windows 2000 Domain Controllers May Give Elevated Privileges to Remote Users Who Are Valid Administrators on Other Trusted Domains
28512| [1002922] Microsoft Windows 2000 Internet Key Exchange (IKE) Service Can Be Crashed By Remote Users
28513| [1002754] Terminal Services on Microsoft Windows 2000 and XP Allow Remote Users to Log Bogus IP Addresses Instead of the User's Genuine Address
28514| [1002731] Microsoft Windows 2000 RunAs Service May Disclose Authentication Credentials to Local Users
28515| [1002730] Microsoft Windows 2000 RunAs Utility May Disclose Sensitive Information to Local Users
28516| [1002729] Microsoft Windows 2000 RunAs Service Allows Local Users to Disable the Service
28517| [1002356] Microsoft Outlook 2000 Animated Assistant Prevents the Screen Saver from Activating, Allowing Physically Local Users to Access the System
28518| [1002206] Microsoft Internet Security and Acceleration (ISA) Server 2000 Can Be Disrupted By Remote Users Due to Memory Leaks and Also Allows Cross-Site Scripting Attacks
28519| [1002106] Microsoft Windows 2000 and Windows NT 4.0 RPC Input Validation Failure Lets Remote Users Destabilize the Operating System
28520| [1002099] Microsoft Windows 2000 Telnet Service Can Be Crashed By Remote Users
28521| [1002098] Windows Terminal Services in Microsoft Windows 2000 and NT 4.0 Can Be Crashed By Remote Users Due to a Memory Leak
28522| [1001993] Microsoft Windows 2000, Linux 2.4, NetBSD, FreeBSD, and OpenBSD May Let Remote Users Affect TCP Performance
28523| [1001931] Microsoft Windows 2000 SMTP Service May Allow Unauthorized Remote Users to Relay E-mail via the Service
28524| [1001832] Microsoft Windows 2000 LDAP Server Lets Remote Users Gain Administrator Access to the Domain Controller When Configured to Support LDAP over SSL
28525| [1001701] Microsoft Windows 2000 Telnet Server Allows Local Users to Gain System-Level Privileges and Lets Remote Users Crash the Server
28526| [1001605] Microsoft Windows 2000 Allows Local Users to Elevate Privileges
28527| [1001565] Microsoft IIS Web Server on Windows 2000 Allows Remote Users to Cause the Server to Consume All Available Memory Due to Memory Leak in WebDAV Lock Method
28528| [1001513] Microsoft Windows 2000 Indexing Service Allows Remote Users to View Include Programming Files
28529| [1001501] Microsoft Windows 2000 Domain Controllers Can Be Effectively Halted By Remote Users
28530| [1001464] Microsoft Internet Information Server IIS 5.0 for Windows 2000 Lets Remote Users Execute Arbitrary Code on the Server and Gain Control of the Server
28531| [1001240] Microsoft FTP Client for Windows 2000 Still Vulnerable to Executing Arbitrary Code in Limited Situations
28532| [1001088] Microsoft Internet Explorer with Services for Unix 2.0 Can Create Malicious Files on the User's Host
28533|
28534| OSVDB - http://www.osvdb.org:
28535| [90257] Microsoft Windows Server 2003 ICACLS.EXE Permission Inheritance Weakness
28536| [86790] Microsoft Virtual PC 2007 Crafted x86 Instruction Sequence Handling Local DoS
28537| [86061] Microsoft Windows Server 2008 R1 CSRSS ReadConsole / CloseHandle Local DoS
28538| [79442] Microsoft Windows Server 2008 DNS Server Service Cache Update Policy Deleted Domain Name Resolving Weakness
28539| [72670] Microsoft Windows Server 2003 ActiveDirectory BROWSER ELECTION Remote Overflow
28540| [68554] Microsoft Windows Server 2008 Shared Cluster Disks Addition Default Permission Weakness
28541| [62251] Microsoft Windows Server 2008 Hyper-V Crafted Instruction Sequence DoS
28542| [60329] Microsoft Windows 2000 NetBIOS Continuation Packet Remote DoS
28543| [59733] Microsoft Windows 2000 Terminal Services Screensaver Screen Minimization Locking Weakness
28544| [59731] Microsoft Windows 2000 DCOM Client Alter Context Request Remote Information Disclosure
28545| [59730] Microsoft Windows 2000 Terminal Services Disconnect Feature Local Privilege Escalation
28546| [59514] Microsoft Windows 2000 Task Manager Uppercase Process Name Termination Weakness
28547| [59509] Microsoft Windows 2000 Encrypted File System Cleartext Backup File Local Disclosure
28548| [59346] Microsoft Windows 2000 Crafted TCP/UDP Traffic CPU Consumption Remote DoS
28549| [55836] Microsoft ISA Server 2006 Radius OTP Security Bypass
28550| [53663] Microsoft Office Word 2000 WordPerfect 6.x Converter Document Handling Stack Corruption
28551| [50589] Microsoft SQL Server 2000 sp_replwritetovarbin() Stored Procedure Overflow
28552| [37629] Microsoft Windows 2000 RPC Authentication Unspecified Information Disclosure
28553| [37628] Microsoft Windows 2000 RPC Authentication Crafted Request Remote DoS
28554| [36034] Microsoft Office 2000 Controllo ActiveX (OUACTRL.OCX) HelpPopup Method Overflow
28555| [34489] Microsoft Office 2003 Malformed WMF File Handling DoS
28556| [34488] Microsoft Excel 2003 XLS Handling Corrupt Format DoS
28557| [31251] Microsoft Office 2003 Brazilian Portuguese Grammar Checker Arbitrary Code Execution
28558| [29529] Microsoft Windows 2000 creator.dll ActiveX COM Object Memory Corruption
28559| [29528] Microsoft Windows 2000 msdxm.ocx ActiveX COM Object Memory Corruption
28560| [29527] Microsoft Windows 2000 myinfo.dll ActiveX COM Object Memory Corruption
28561| [29526] Microsoft Windows 2000 ciodm.dll ActiveX COM Object Memory Corruption
28562| [28539] Microsoft Word 2000 Unspecified Code Execution
28563| [24121] Microsoft Commerce Server 2002 authfiles/login.asp Authentication Bypass
28564| [24081] Microsoft Outlook 2003 Unspecified Malformed Word Attachment DoS
28565| [23484] Microsoft SQLServer 2000 sp_addalias Procedure Privileged Alias Creation
28566| [23234] Microsoft SQLServer 2000 Unspecified Invalid Client Buffer DoS
28567| [23231] Microsoft SQL Server 2000 SQL Profiler Multiple Method DoS
28568| [23205] Microsoft SQLServer 2000 Crafted Sort Command User Mode Scheduler (UMS) Bypass DoS
28569| [23203] Microsoft SQL Server 2000 Database Name Transact-SQL Statement Privilege Escalation
28570| [23202] Microsoft SQLServer 2000 sysmembers Virtual Table Query Overflow
28571| [23201] Microsoft SQL Server 2000 Dynamic Transact-SQL Statement Disclosure
28572| [23200] Microsoft SQLServer 2000 Encrypted Stored Procedure Dynamic Query Disclosure
28573| [21907] Microsoft Office InfoPath 2003 Mshtml.dll Form Handling DoS
28574| [21598] Microsoft Windows 2000 NetBIOS Port Malformed TCP Packet Parsing Remote DoS
28575| [20256] Microsoft Windows 2000 NTFS Volume Macintosh Client Directory Permission Modification
28576| [20222] Microsoft Windows 2000 runas.exe Named Pipe Spoofing Information Disclosure
28577| [20221] Microsoft Windows 2000 runas.exe Named Pipe Single Thread DoS
28578| [20220] Microsoft Windows 2000 runas.exe Cleartext Authentication Information Disclosure
28579| [20002] Microsoft Windows 2000 CHKDSK Fix Mode File ACL Failure
28580| [20001] Microsoft Windows 2000 Terminal Service Client Connection IP Logging Failure
28581| [20000] Microsoft Windows 2000 Domain Administrator Computer Lock Bypass
28582| [19999] Microsoft Windows 2000 FQDN Domain Login Password Expiry Bypass
28583| [19998] Microsoft Windows 2000 UPN Credentialed Login Group Policy Failure
28584| [19997] Microsoft Windows 2000 WideCharToMultiByte Function String Termination Issue
28585| [19996] Microsoft Windows 2000 Event ID 1704 Group Policy Failure
28586| [19995] Microsoft Windows 2000 SECEDIT Long Folder ACL Set Issue
28587| [19994] Microsoft Windows 2000 audit directory service access 565 Event Logging Failure
28588| [19993] Microsoft Windows 2000 LDAPS CA Trust Issue
28589| [19264] Microsoft Exchange Server 2003 Crafted IMAP4 Folder Listing Request DoS
28590| [17031] Microsoft ISA Server 2000 SecureNAT Traffic Saturation DoS
28591| [15343] Microsoft Windows Server 2003 Malformed HTTP Cookie Header CGI DoS
28592| [15341] Microsoft Windows Server 2003 SMB Redirector Processing DoS
28593| [15340] Microsoft Windows Server 2003 Terminal Service Client Print DoS
28594| [15338] Microsoft Windows Server 2003 Terminal Session Close DoS
28595| [15337] Microsoft Windows Server 2003 CreateProcessWithLogonW() Function Process Disclosure
28596| [15336] Microsoft Windows Server 2003 Shutdown.exe Shut Down Failure
28597| [15335] Microsoft Windows Server 2003 MIT Kerberos Realm Authentication Group Policy Failure
28598| [15334] Microsoft Windows Server 2003 Shared Folder Permission Weakness
28599| [15333] Microsoft Windows Server 2003 EFS File Copy LDAP Connection DoS
28600| [15332] Microsoft Windows Server 2003 Citrix Metaframe Encryption Policy Failure
28601| [15331] Microsoft Windows Server 2003 Home Folder Path Permission Inheritance Failure
28602| [14617] Microsoft Exchange Server 2003 Folder Handling DoS
28603| [14430] Microsoft Commerce Server 2000 Profile Service Affected API Overflow
28604| [13996] Microsoft Windows 2000 IKE Malformed Packet Saturation Remote DoS
28605| [13762] Microsoft 2000 Domain Controller Directory Service Restore Mode Blank Password
28606| [13761] Microsoft Exchange 2000 Malformed URL Request DoS
28607| [13475] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution Variant
28608| [13474] Microsoft Windows 2000 Telnet Service Predictable Named Pipe Arbitrary Command Execution
28609| [13441] Microsoft Windows 2000 Security Interface Change Password Option Account Enumeration
28610| [13437] Microsoft Windows 2000 Debug Register Local Privilege Escalation
28611| [13424] Microsoft Windows 2000 Current Password Change Policy Bypass
28612| [13423] Microsoft Windows 2000 Terminal Server SYSVOL Share Connection Saturation Restriction Bypass
28613| [13415] Microsoft Windows 2000 System Root Folder Search Path Permission Weakness
28614| [13410] Microsoft Windows 2000 Accessibility Utility Manager Arbitrary Code Execution
28615| [11958] Microsoft Outlook 2003 Image Rendering Security Policy Bypass
28616| [11945] Microsoft Outlook 2002 IFRAME Tag Embedded URL
28617| [11944] Microsoft Outlook 2002 HREF Tag Embedded JavaScript Execution
28618| [11750] Microsoft Windows 2000 Message Queue Manager Queue Registration Request Overflow DoS
28619| [11712] Microsoft ISA Server 2000 H.323 Filter Overflow
28620| [10633] Microsoft Windows 2000 Protected Store Weak Encryption Default
28621| [9386] Microsoft Windows 2000 msinfo32.exe msinfo_file Variable Overflow
28622| [8243] Microsoft SMS Port 2702 DoS
28623| [7202] Microsoft PowerPoint 2000 File Loader Overflow
28624| [7179] Microsoft Windows 2000 Event Viewer Snap-in Overflow
28625| [6971] Microsoft ISA Server 2000 ICMP Rule Bypass During Startup
28626| [6970] Microsoft ISA Server 2000 Web Publishing Unencrypted Credentials Disclosure
28627| [6969] Microsoft ISA Server 2000 Invalid DNS Request DoS
28628| [6968] Microsoft ISA Server 2000 FTP Port Scan Bounce Weakness
28629| [6967] Microsoft ISA Server 2000 UDP Packet Winsock DoS
28630| [6965] Microsoft ISA Server 2000 SSL Packet DoS
28631| [6964] Microsoft ISA Server 2000 DNS Intrusion Detection Filter DoS
28632| [6515] Microsoft Windows 2000 Domain Expired Account Authentication
28633| [5179] Microsoft Windows 2000 microsoft-ds DoS
28634| [5171] Microsoft Word 2002 Mail Merge Tool Execute Arbitrary Script
28635| [4779] Microsoft Desktop Engine (MSDE) 2000 Stored Procedure SQL Injection
28636| [4778] Microsoft SQL Server 2000 Stored Procedure SQL Injection
28637| [4777] Microsoft Desktop Engine (MSDE) 2000 Database Consistency Checkers (DBCCs) Overflow
28638| [4776] Microsoft SQL Server 2000 Database Consistency Checkers (DBCCs) 2000 Overflow
28639| [4170] Microsoft Windows 2000 Server Media Services TCP Packet Handling Remote DoS
28640| [4168] Microsoft Outlook 2002 mailto URI Script Injection
28641| [3490] Microsoft Exchange 2003 OWA Mailbox Access Information Disclosure
28642| [2705] Microsoft Windows 2000 Windows Troubleshooter ActiveX Overflow
28643| [2655] Microsoft Windows Server 2003 Shell Folders Arbitrary File Access
28644| [2540] Microsoft Windows 2003 Server Buffer Overflow Protection Mechanism Bypass
28645| [2244] Microsoft Windows 2000 ShellExecute() API Let
28646| [2237] Microsoft Windows 2000 Active Directory Lsass.exe Overflow
28647| [1949] Symantec Norton Anti-Virus for Microsoft Exchange 2000 INBOX Path Information Disclosure
28648| [1764] Microsoft Windows 2000 Domain Controller DoS
28649| [1758] Microsoft Windows 2000 Network DDE Escalated Privileges
28650| [1755] Microsoft Windows 2000 RDP Malformed Packet Handling Remote DoS
28651| [1672] Microsoft Windows 2000 Telnet Session Timeout DoS
28652| [1633] Microsoft Windows 2000 System Monitor ActiveX LogFileName Parameter Validation Overflow
28653| [1621] Microsoft Indexing Services for Windows 2000 .htw XSS
28654| [1591] Microsoft Windows 2000 OEMPreinstall Installation Permission Weakness
28655| [1578] Microsoft Windows 2000 Simplified Chinese IME Local Privilege Escalation
28656| [1500] Microsoft Word / Excel / Powerpoint 2000 Object Tag Buffer Overflow
28657| [1437] Microsoft Windows 2000 Telnet Server Binary Zero Parsing Remote DoS
28658| [1399] Microsoft Windows 2000 Windows Station Access
28659| [1328] Microsoft Office 2000 UA Control ActiveX (Ouactrl.ocx) Show Me Function Remote Code Execution
28660| [1297] Microsoft Windows 2000 Active Directory Object Attribute
28661| [1292] Microsoft Windows NT 4.0 / 2000 cmd.exe Buffer Overflow
28662| [773] Microsoft Windows 2000 Group Policy File Lock DoS
28663| [515] Microsoft Windows 2000 LDAP Server Arbitrary User Password Modification
28664| [454] Microsoft Windows 2000 NTLM Domain Account Lockout Policy Bypass
28665| [403] Microsoft Windows 2000 Still Image Service WM_USER Message Local Overflow
28666| [398] Microsoft Windows 2000 Malformed RPC Traffic Local Security Policy Corruption DoS
28667| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
28668| [69085] Microsoft Office 2010 RTF File Handling pFragments Buffer Overflow Arbitrary Code Execution
28669|_
28670Device type: general purpose|WAP|router
28671Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 2008|7|Vista (85%), MikroTik RouterOS 6.X (85%)
28672OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_7::sp1 cpe:/o:mikrotik:routeros:6.15 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1
28673OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
28674Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (90%), Tomato 1.27 - 1.28 (Linux 2.4.20) (86%), Microsoft Windows Server 2008 R2 SP1 (85%), Microsoft Windows Server 2008 (85%), Microsoft Windows Server 2008 R2 (85%), Microsoft Windows 7 SP1 (85%), MikroTik RouterOS 6.15 (Linux 3.3.5) (85%), Microsoft Windows 7 or Windows Server 2008 R2 (85%), Microsoft Windows Server 2008 or 2008 Beta 3 (85%), Microsoft Windows 7 (85%)
28675No exact OS matches for host (test conditions non-ideal).
28676TCP/IP fingerprint:
28677SCAN(V=7.70%E=4%D=8/7%OT=80%CT=25%CU=%PV=N%G=N%TM=5D4AAB58%P=x86_64-pc-linux-gnu)
28678SEQ(SP=102%GCD=1%ISR=107%CI=Z%TS=7)
28679OPS(O1=M44FNW8ST11%O2=M44FNW8ST11%O3=M44FNW8NNT11%O4=M44FNW8ST11%O5=M44FNW8ST11%O6=M44FST11)
28680WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
28681ECN(R=Y%DF=Y%TG=80%W=2000%O=M44FNW8NNS%CC=N%Q=)
28682T1(R=Y%DF=Y%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
28683T2(R=N)
28684T3(R=N)
28685T4(R=N)
28686T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
28687T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
28688T7(R=N)
28689U1(R=N)
28690IE(R=N)
28691
28692Uptime guess: 11.455 days (since Fri Jul 26 19:48:27 2019)
28693TCP Sequence Prediction: Difficulty=258 (Good luck!)
28694IP ID Sequence Generation: Busy server or unknown class
28695Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
28696
28697TRACEROUTE (using proto 1/icmp)
28698HOP RTT ADDRESS
286991 184.10 ms 10.247.200.1
287002 185.05 ms 213.184.122.97
287013 184.19 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
287024 184.50 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
287035 251.12 ms bzq-179-124-30.cust.bezeqint.net (212.179.124.30)
287046 250.31 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
287057 249.74 ms ge-2-1-0.mpr1.lhr2.uk.above.net (195.66.224.76)
287068 247.55 ms ae11.mpr2.lhr2.uk.zip.zayo.com (64.125.30.52)
287079 250.71 ms ae10.mpr1.lhr1.uk.zip.zayo.com (64.125.31.193)
2870810 248.00 ms 94.31.38.66.T01810-01.above.net (94.31.38.66)
2870911 245.33 ms s13-49.stratogen.net (109.233.49.13)
2871012 ... 30
28711
28712NSE: Script Post-scanning.
28713NSE: Starting runlevel 1 (of 2) scan.
28714Initiating NSE at 06:43
28715Completed NSE at 06:43, 0.00s elapsed
28716NSE: Starting runlevel 2 (of 2) scan.
28717Initiating NSE at 06:43
28718Completed NSE at 06:43, 0.00s elapsed
28719Read data files from: /usr/bin/../share/nmap
28720#######################################################################################################################################
28721Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-07 06:43 EDT
28722NSE: Loaded 45 scripts for scanning.
28723NSE: Script Pre-scanning.
28724Initiating NSE at 06:43
28725Completed NSE at 06:43, 0.00s elapsed
28726Initiating NSE at 06:43
28727Completed NSE at 06:43, 0.00s elapsed
28728Initiating Parallel DNS resolution of 1 host. at 06:43
28729Completed Parallel DNS resolution of 1 host. at 06:43, 0.02s elapsed
28730Initiating UDP Scan at 06:43
28731Scanning s10-140-54-212.cust.stratogen.net (212.54.140.10) [14 ports]
28732Completed UDP Scan at 06:43, 3.65s elapsed (14 total ports)
28733Initiating Service scan at 06:43
28734Scanning 12 services on s10-140-54-212.cust.stratogen.net (212.54.140.10)
28735Service scan Timing: About 8.33% done; ETC: 07:03 (0:17:58 remaining)
28736Completed Service scan at 06:45, 102.59s elapsed (12 services on 1 host)
28737Initiating OS detection (try #1) against s10-140-54-212.cust.stratogen.net (212.54.140.10)
28738Retrying OS detection (try #2) against s10-140-54-212.cust.stratogen.net (212.54.140.10)
28739Initiating Traceroute at 06:45
28740Completed Traceroute at 06:45, 7.20s elapsed
28741Initiating Parallel DNS resolution of 1 host. at 06:45
28742Completed Parallel DNS resolution of 1 host. at 06:45, 0.00s elapsed
28743NSE: Script scanning 212.54.140.10.
28744Initiating NSE at 06:45
28745Completed NSE at 06:45, 7.38s elapsed
28746Initiating NSE at 06:45
28747Completed NSE at 06:45, 1.43s elapsed
28748Nmap scan report for s10-140-54-212.cust.stratogen.net (212.54.140.10)
28749Host is up (0.19s latency).
28750
28751PORT STATE SERVICE VERSION
2875253/udp open|filtered domain
2875367/udp open|filtered dhcps
2875468/udp open|filtered dhcpc
2875569/udp open|filtered tftp
2875688/udp open|filtered kerberos-sec
28757123/udp open|filtered ntp
28758137/udp filtered netbios-ns
28759138/udp filtered netbios-dgm
28760139/udp open|filtered netbios-ssn
28761161/udp open|filtered snmp
28762162/udp open|filtered snmptrap
28763389/udp open|filtered ldap
28764520/udp open|filtered route
287652049/udp open|filtered nfs
28766Too many fingerprints match this host to give specific OS details
28767
28768TRACEROUTE (using port 138/udp)
28769HOP RTT ADDRESS
287701 178.28 ms 10.247.200.1
287712 ... 3
287724 178.90 ms 10.247.200.1
287735 179.76 ms 10.247.200.1
287746 179.75 ms 10.247.200.1
287757 179.73 ms 10.247.200.1
287768 179.72 ms 10.247.200.1
287779 179.72 ms 10.247.200.1
2877810 179.73 ms 10.247.200.1
2877911 ... 18
2878019 178.94 ms 10.247.200.1
2878120 178.47 ms 10.247.200.1
2878221 ... 28
2878329 184.07 ms 10.247.200.1
2878430 178.89 ms 10.247.200.1
28785
28786NSE: Script Post-scanning.
28787Initiating NSE at 06:45
28788Completed NSE at 06:45, 0.00s elapsed
28789Initiating NSE at 06:45
28790Completed NSE at 06:45, 0.00s elapsed
28791Read data files from: /usr/bin/../share/nmap
28792OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
28793Nmap done: 1 IP address (1 host up) scanned in 129.26 seconds
28794 Raw packets sent: 147 (9.964KB) | Rcvd: 199 (46.430KB)
28795#######################################################################################################################################
28796 Anonymous JTSEC Op#callcentres Full Recon #1