Microsoft Windows Help and Support Center buffer overflow
Published:		16.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3184
Type:		client
Level:		7/10
Description:		Buffer overflow on hcp:// protocol handling.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		NGSSoftware Insight Security Research, Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003) (16.10.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-04 (16.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Windows ListBox/ComboBox buffer overflow
Published:		16.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3185
Type:		library
Level:		5/10
Description:		Buffer overflow in Windows components makes it possible to launch shatter attack.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows ME
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		Brett Moore, [Full-Disclosure] Listbox And Combobox Control Buffer Overflow (16.10.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-045 (16.10.2003)

Files:		local ListBox/ComboBox exploit for Win32 (MS03-045)
Discuss:		Read or add your comments to this news (0 comments)

AOL Instant Messanger buffer overflow
Published:		16.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3186
Type:		client
Level:		6/10
Description:		Buffer overflow in screenname parameter during aim: URL parsing.

Affected:

AOL : AOL Instant Messanger 5.2

Original document

DigitalPranksters, Buffer Overflow in AOL Instant Messager (16.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

ColdFusion CrossiteScripting updated since 23.09.2003
Published:		16.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3135
Type:		remote
Level:		5/10
Description:		Crossite scripting on error messages generation.

Affected:

MACROMEDIA : ColdFusion MX

Original document		Lorenzo Hernandez Garcia-Hierro, ColdFusion SQL Error Pages XSS (16.10.2003)
		Takashi Hara, ColdFusion cross-site scripting security vulnerability of an error page (23.09.2003)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Windows Authenticode protection bypass
Published:		16.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3181
Type:		client
Level:		8/10
Description:		There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document

MICROSOFT, Microsoft Security Bulletin MS03-041 (16.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Buffer Overflow in Tshoot.ocx Windows Troubleshooter ActiveX updated since 16.10.2003
Published:		17.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3182
Type:		client
Level:		7/10

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows ME
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		c c, Microsoft Local Troubleshooter ActiveX control buffer overflow (17.10.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-042 (16.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Windows Messenger service buffer overflow updated since 16.10.2003
Published:		20.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3183
Type:		remote
Level:		10/10
Description:		Buffer overflow on message receiving.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		Hanabishi Recca, [Full-Disclosure] Proof of concept for Windows Messenger Service overflow (20.10.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-043 (16.10.2003)

Files:		DoS Proof of Concept for MS03-043
		MS03-043 Messenger Service Scanning Utility
		ms03-043 exploit
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Exchange buffer overflow updated since 16.10.2003
Published:		23.10.2003
Source:		MICROSOFT
SecurityVulns ID:		3180
Type:		remote
Level:		8/10
Description:		Buffer overflow on XEXCH50 SMTP command processing.

Affected:		MICROSOFT : Exchange 5.5
		EXCHANGE : Exchange 2000

Original document		H D Moore, MS03-046 Microsoft Exchange 2000 Heap Overflow (23.10.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-046 (16.10.2003)

Files:		Microsoft Exchange 2000 Heap Overflow exploit
Discuss:		Read or add your comments to this news (0 comments)