Msrc Windows Vista Service Pack 2 vulnerabilities

CVE-2017-0115 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0112 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0101 [HIGH] Windows Transaction Manager Elevation of Privilege Vulnerability Windows Transaction Manager Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted applica

CVE-2017-0045 [MEDIUM] Windows DVD Maker XML External Entity Information Disclosure Vulnerability Windows DVD Maker XML External Entity Information Disclosure Vulnerability Description: An information disclosure vulnerability exists in Windows when Windows DVD Maker fails to properly parse a specially crafted .msdvd file. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system. To exploit the vulnerability, an attacker would have t

CVE-2017-0092 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0123 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0055 [MEDIUM] Microsoft IIS Server XSS Elevation of Privilege Vulnerability Microsoft IIS Server XSS Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when Microsoft IIS Server fails to properly sanitize a specially crafted request. An attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allo

CVE-2017-0128 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0062 [MEDIUM] Windows GDI Information Disclosure Vulnerability Windows GDI Information Disclosure Vulnerability Description: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combina

CVE-2017-0127 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0124 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0063 [MEDIUM] Microsoft Color Management Information Disclosure Vulnerability Microsoft Color Management Information Disclosure Vulnerability Description: An information disclosure vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. This vulnerability allows an attacker to retrieve information to bypass usermode ASLR (Address Space Layout Randomization) on a targeted system. By itself, the information disclosure does not allow arbitra

CVE-2017-0038 [MEDIUM] Windows GDI Information Disclosure Vulnerability Windows GDI Information Disclosure Vulnerability Description: A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafte

CVE-2017-0117 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0116 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0102 [HIGH] Windows Elevation of Privilege Vulnerability Windows Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when Windows fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. To exploit the vulnerability, an attacker would first need access to the target system and have the ability to copy a file to a shared f

CVE-2017-0008 [MEDIUM] Microsoft Browser Information Disclosure Vulnerability Microsoft Browser Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to a

CVE-2017-0121 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0122 [MEDIUM] Windows Uniscribe Information Disclosure Vulnerability Windows Uniscribe Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a spe

CVE-2017-0042 [LOW] Windows DirectShow Information Disclosure Vulnerability Windows DirectShow Information Disclosure Vulnerability Description: An information disclosure vulnerability exists in the way Windows DirectShow handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system. In a web-based attack scenario, an attacker could host a website used to attempt to exploit the vulnerability. Additionally, comp