microsoft virtual machine 3300 vulnerabilities and exploits

(subscribe to this query)

A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and previous versions, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote malicious users to execute unsafe code via a Java applet, aka "I...

Microsoft Virtual Machine 3300 Microsoft Virtual Machine 3802 Microsoft Virtual Machine 3188 Microsoft Virtual Machine 3200 Microsoft Virtual Machine 3000 Microsoft Virtual Machine 3100 Microsoft Virtual Machine 2000 Microsoft Virtual Machine 3805

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote malicious users to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL ...

Microsoft Virtual Machine 3300 Microsoft Virtual Machine 3802 Microsoft Virtual Machine 3100 Microsoft Virtual Machine 3188 Microsoft Virtual Machine 3200 Microsoft Virtual Machine 2000 Microsoft Virtual Machine 3000 Microsoft Virtual Machine 3805

1 EDB exploit

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote malicious users to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."

Microsoft Virtual Machine 3200 Microsoft Virtual Machine 3300 Microsoft Virtual Machine 3100 Microsoft Virtual Machine 3188 Microsoft Virtual Machine 2000 Microsoft Virtual Machine 3000 Microsoft Virtual Machine 3802 Microsoft Virtual Machine 3805

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote malicious user to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email...

Microsoft Ie 4.x Microsoft Ie 5.x

1 EDB exploit

The TLS protocol 1.2 and previous versions, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle malicious users to conduct cipher-downgrade attacks by rewriting a ClientHello with D...

1 Nmap script4 Github repositories1 Article

The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a does not properly isolate the state information of independent data streams, which allows remote malicious users to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DT...

Openssl Openssl 1.0.2

The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to...

Openssl Openssl 1.0.2

The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote malicious users to defeat cryptographic protection mechanisms by sniffing the network and then...

Openssl Openssl 1.0.2

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook