windows_server_2008 vulnerabilities and exploits

(subscribe to this query)

NA

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remot...

Microsoft Remote Desktop Connection Client 5.2 Microsoft Remote Desktop Connection Client 6.0 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp -Microsoft Remote Desktop Connection Client 7.0 Microsoft Windows 7 -Microsoft Windows Server 2008 R2 Microsoft Remote Desktop Connection Client 6.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Windows Xp

NA

Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote malicious users to execute arbitrary code by accessing a deleted object, leading to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."

Microsoft Internet Explorer 7 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Windows Vista -

NA

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windo...

Microsoft Windows Defender Microsoft Windows 7 -Microsoft Windows Server 2008

NA

Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote malicious users to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitiali...

Microsoft Internet Explorer 7 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Internet Explorer 6 Microsoft Windows 2000

NA

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote malicious users to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in ...

Microsoft Internet Explorer 7 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Internet Explorer 6 Microsoft Windows 2000

2 EDB exploits12 Articles

NA

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan h...

Microsoft Outlook Express 6.00.2900.5512 Microsoft Windows 2003 Server Microsoft Windows 7 Microsoft Windows 7 -Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Windows Vista -Microsoft Windows Xp Microsoft Windows Xp -

3 EDB exploits

NA

Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote malicious users to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condition Memory Corruption Vulnerability."

Microsoft Internet Explorer 7 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Internet Explorer 6 Microsoft Internet Explorer 5.01 Microsoft Windows 2000

NA

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote malicious users to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Informati...

Microsoft Internet Explorer 7 Microsoft Windows 2003 Server Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Internet Explorer 6 Microsoft Internet Explorer 5.01 Microsoft Windows 2000

NA

Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to...

Microsoft Internet Explorer 6 Microsoft Windows Server 2003 Microsoft Windows Xp Microsoft Windows Xp -Microsoft Internet Explorer 7 Microsoft Windows Server 2008 -Microsoft Windows Vista Microsoft Windows Vista -Microsoft Internet Explorer 5.01 Microsoft Windows 2000 Microsoft Internet Explorer 8 Microsoft Windows Server 2008

NA

Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote malicious users to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application,...

Microsoft Windows 2000 Microsoft .net Framework 1.1 Microsoft .net Framework 2.0 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 -Microsoft .net Framework 3.5 Microsoft Windows Vista Microsoft Windows 7 -Microsoft .net Framework 1.0 Microsoft Windows Xp Microsoft Windows Xp -

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook