Vulnerabilities > Microsoft > Windows

DATE CVE VULNERABILITY TITLE RISK
2010-08-27 CVE-2010-3139 Unspecified vulnerability in Microsoft Windows
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.
network
microsoft
critical
9.3
2010-08-25 CVE-2010-2935 Numeric Errors vulnerability in Openoffice Openoffice.Org 3.2.1
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
network
openoffice microsoft CWE-189
critical
9.3
2010-08-16 CVE-2010-1799 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
network
apple microsoft CWE-119
critical
9.3
2010-08-11 CVE-2010-2220 Unspecified vulnerability in Adobe Flash Media Server and Flash Media Server 2
Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."
network
low complexity
adobe linux microsoft
5.0
2010-08-11 CVE-2010-2219 Resource Management Errors vulnerability in Adobe Flash Media Server and Flash Media Server 2
Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.
network
low complexity
adobe linux microsoft CWE-399
5.0
2010-08-11 CVE-2010-2218 Unspecified vulnerability in Adobe Flash Media Server and Flash Media Server 2
Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."
network
low complexity
adobe linux microsoft
5.0
2010-08-11 CVE-2010-2217 Code Injection vulnerability in Adobe Flash Media Server and Flash Media Server 2
Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
network
low complexity
adobe linux microsoft CWE-94
critical
10.0
2010-08-11 CVE-2010-1898 Code Injection vulnerability in Microsoft .Net Framework and Silverlight
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
network
microsoft apple CWE-94
critical
9.3
2010-08-11 CVE-2010-0019 Code Injection vulnerability in Microsoft Silverlight 3.0.40624.00/3.0.40723.0/3.0.40818.0
Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."
network
microsoft apple CWE-94
critical
9.3
2010-07-28 CVE-2010-2703 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in HP Openview Network Node Manager 7.51/7.53
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.
network
low complexity
hp microsoft CWE-119
critical
10.0