Microsoft Windows WebClient service buffer overflow
Published:		15.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5772
Type:		local
Level:		6/10
Description:		Buffer overflow on RPC based service allows code execution with LocalSystem privileges.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document

MICROSOFT, Microsoft Security Bulletin MS06-008 Vulnerability in Web Client Service Could Allow Remote Code Execution (911927) (15.02.2006)

Files:		Microsoft Security Bulletin MS06-008 Vulnerability in Web Client Service Could Allow Remote Code Execution (911927)
Discuss:		Read or add your comments to this news (0 comments)

Internet Explorer for Windows 2000 WMF files memory corruption
Published:		15.02.2006
Source:		MICROSOFT
SecurityVulns ID:		5770
Type:		client
Level:		6/10
Description:		Memory corruption on Windows MetaFiles parsing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional

Original document

MICROSOFT, Microsoft Security Bulletin MS06-004 Cumulative Security Update for Internet Explorer (910620) (15.02.2006)

Files:		Microsoft Security Bulletin MS06-004 Cumulative Security Update for Internet Explorer (910620)
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		15.02.2006
Source:
SecurityVulns ID:		5775
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPNUKE : phpNuke 7.8
		MANTIS : Mantis 1.0
		WORDPRESS : WordPress 2.0
		DELTASCRIPTS : PHP Classifieds 6.20
		DOTPROJECT : dotProject 2.0
		MYBB : MyBB 1.03

Original document		Thomas Waldegger, [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4 (15.02.2006)
		imei, [myimei]WordPress2.0.0~autorswebsite~XSS attack (15.02.2006)
		s2b_(at)_hotmail.com, MyBB 1.03 Multible xss and sql injections (15.02.2006)
		Alexander Hristov, XSS bugs and SQL injection in sNews (15.02.2006)
		r.verton_(at)_gmail.com, dotproject <= 2.0.1 remote code execution (15.02.2006)
		Janek Vind, [waraxe-2006-SA#044] - XSS in phpNuke 7.8 and older versions (15.02.2006)
		audun.larsen_(at)_lkonsult.no, SQL injection in PHP Classifieds 6.20 (15.02.2006)

Files:		MyBB Forum SQL Injection Exploit
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Power Point Temporary Internet Files folder access
Published:		15.02.2006
Source:		MICROSOFT
SecurityVulns ID:		5774
Type:		client
Level:		4/10
Description:		Script within HTML can access Temporary Internet Files folder directly.

Affected:

MICROSOFT : Office 2000

Original document

MICROSOFT, Microsoft Security Bulletin MS06-010 Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167) (15.02.2006)

Files:		Microsoft Security Bulletin MS06-010 Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167)
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Windows Korean IME privilege escalation updated since 15.02.2006
Published:		16.02.2006
Source:		MICROSOFT
SecurityVulns ID:		5773
Type:		local
Level:		5/10
Description:		Help subsystem is executed with LocalSystem privileges.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Office 2003

Original document		SECURITEAM, [NT] ShellAbout() API Elevation of Privilege (MS06-009) (16.02.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-009 Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege (901190) (15.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Microsoft Windows Media Player vulnerabilities updated since 15.02.2006
Published:		22.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5769
Type:		client
Level:		8/10
Description:		Buffer overflow on BMP files playing. Buffer overflow on oversized SRC for HTML page with EMBED'ded WMP. May be used for client machine trojaning.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		MICROSOFT, Microsoft Security Bulletin MS06-006 Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564) (15.02.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-005 Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565) (15.02.2006)
		CERT, US-CERT Technical Cyber Security Alert TA06-045A -- Microsoft Windows, Windows Media Player, and Internet Explorer Vulnerabilities (15.02.2006)
		EEYE, [EEYEB-20051017] Windows Media Player BMP Heap Overflow (15.02.2006)
		IDEFENSE, iDefense Security Advisory 02.14.06: Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability (15.02.2006)

Files:		Exploits Windows Media Player BMP Heap Overflow (MS06-005)
		Exploits Bulletin MS06-005 Vulnerability in Windows Media Player Could Allow Remote Code Execution
		Windows Media Player Plug-in for Non-Microsoft Browsers Code Execution (MS06-006) - Exploit II
		Windows Media Player Plug-in for Non-Microsoft Browsers Code Execution (MS06-006)
		Exploiting 'Non-Critical' Media Player Vulnerabilities for Fun and Profit
		Microsoft Security Bulletin MS06-005 Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565)
		Microsoft Security Bulletin MS06-006 Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564)
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Windows TCP/IP stack IGMP DoS updated since 15.02.2006
Published:		24.10.2007
Source:		MICROSOFT
SecurityVulns ID:		5771
Type:		remote
Level:		6/10
Description:		System hangs on malformed IGMPv3 packet.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : WIndows Mobile 5.0
		MICROSOFT : Windows CE 5.01
CVE:		CVE-2006-0021 (Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via certain malformed IGMP packets, aka the "IGMP v3 DoS Vulnerability.")

Original document		SYMANTEC, SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service (24.10.2007)
		Алексей Синцов, igmp v3 dos (18.03.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service (913446) (15.02.2006)

Files:		MS06-007 Denial of Service POC exploit (for Linux)
		IGMP v3 DoS Exploit (MS06-007) by Alexey Sintsov
		Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service (913446)
Discuss:		Read or add your comments to this news (0 comments)