새로운 댓글
Vulnerability 검색 결과, 40
Microsoft Windows Vector Markup Language Code Execution Vulnerability (MS07-004)
A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected system. This issue is due to a memory corruption error in the Vector Markup Language (VML) implementation, which could be exploited by attackers to execute arbitrary commands by tricking a user into visiting a malicious Web page. Affected Products Microso..Microsoft Outlook Multiple Code Execution and Denial of Service Vulnerabilities (MS07-003)
which could be exploited by attackers to take complete control of an affected system or cause a denial of service. The first issue is due to a memory corruption error when processing specially crafted ".iCal" meeting requests and parsing malformed VEVENT requests, which could be exploited by attackers to execute arbitrary commands. The second vulnerability is due to an error when processing malf..Microsoft Excel Records and Strings Handling Code Execution Vulnerabilities (MS07-002)
which could be exploited by attackers to take complete control of an affected system. These issues are due to memory corruption errors when processing documents containing malformed records (i.e. IMDATA, Column, or Palette) and strings, which could be exploited by attackers to execute arbitrary commands by tricking a user into opening a specially crafted presentation. Affected Products Microsoft..Apple QuickTime Player "rtsp" URI Handling Remote Command Execution Vulnerability
A vulnerability has been identified in Apple QuickTime, which could be exploited by attackers to take complete control of an affected system. This issue is due to a stack overflow error when handling a malformed "rtsp" URI, which could be exploited by remote attackers to execute arbitrary commands by tricking a user into visiting a specially crafted web page or opening a malicious QTL file. Affe..Microsoft Windows Client Server Run-Time Subsystem Privilege Escalation Vulnerability
A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to obtain elevated privileges. This issue is due to a double-free error within the Windows Server Library (WINSRV.DLL) and the Client Server Run-Time Subsystem (CSRSS) when calling a MessageBox API with malformed parameters and a "MB_SERVICE_NOTIFICATION" flag set, which could allow malicious us..