Vulnerabilities > Microsoft > Windows Live Onecare

DATE CVE VULNERABILITY TITLE RISK
2011-02-25 CVE-2011-0037 Improper Input Validation vulnerability in Microsoft products
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
local
low complexity
microsoft CWE-20
7.2
2008-05-13 CVE-2008-1438 Resource Management Errors vulnerability in Microsoft products
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
network
low complexity
microsoft CWE-399
5.0
2008-05-13 CVE-2008-1437 Resource Management Errors vulnerability in Microsoft products
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.
network
low complexity
microsoft CWE-399
5.0
2007-02-13 CVE-2006-5270 Integer Overflow vulnerability in Microsoft Antivirus Engine
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.
network
microsoft
critical
9.3