CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7730  CVE-2003-0906  Candidate  Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.  Assigned (20031104)  None (candidate not yet proposed)    View
7731  CVE-2003-0907  Candidate  Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.  Assigned (20031104)  None (candidate not yet proposed)    View
7732  CVE-2003-0908  Candidate  The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.  Assigned (20031104)  None (candidate not yet proposed)    View
7733  CVE-2003-0909  Candidate  Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."  Assigned (20031104)  None (candidate not yet proposed)    View
7734  CVE-2003-0910  Candidate  The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.  Assigned (20031104)  None (candidate not yet proposed)    View

Page 20146 of 20943, showing 5 records out of 104715 total, starting on record 100726, ending on 100730

Actions