새로운 댓글
전체보기 검색 결과, 1097
php local buffer underflow could lead to arbitary code execution
Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf('foo ','$1s',$bar) then it reads an pointer to pointer to zval structure past the end of argument array by one. Php developers were notified and response and patching was quick. php bug tracker thread here: http://bu..Microsoft Windows Kernel Code Execution and Privilege Escalation Vulnerabilities (MS06-051)
Technical Description Two vulnerabilitieshave been identified in Microsoft Windows, which could be exploited byremote attackers to take complete control of an affected system or bymalicious users to obtain elevated privileges. The first issue is due to an error when processing user-supplied pathsvia WinLogon, which could be exploited by malicious users to load aspecially crafted DLL with elevate..Microsoft Visual Basic for Applications Remote Code Execution Vulnerability (MS06-047)
Technical Description A vulnerability has been identified in Visual Basic for Applications(VBA), which could be exploited by remote attackers to take completecontrol of an affected system. This flaw is due to a buffer overflowerror when handling malformed document properties, which could beexploited by remote attackers to execute arbitrary commands by trickinga user into opening a malicious docu..Microsoft Management Console Library Cross Site Scripting Vulnerability (MS06-044)
Technical Description A vulnerability has been identified in Microsoft Windows, which couldbe exploited by remote attackers to execute arbitrary scripting codeand take complete control of the affected system. This flaw is due toan input validation error in the Microsoft Management Console (MMC)where HTML embedded resource files can be directly referenced from theInternet or Intranet zone via Int..Microsoft Internet Explorer Multiple Client-Side Code Execution Vulnerabilities (MS06-042)
Technical Description Multiple vulnerabilitieshave been identified in Microsoft Internet Explorer, which could beexploited by remote attackers to take complete control of an affectedsystem, disclose sensitive information, or conduct cross domainscripting attacks. The first issue is due to an error when handling web redirections,which could be exploited by malicious people to conduct cross domain..