Vulnerabilidades exploradas (CISA KEV)

CVE-2008-2992 Alta · 7.8 KEV Urgente · 86 Exploit público Ransomware CWE-787 04/11/2008

Adobe Reader and Acrobat Input Validation Vulnerability

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

CVE-2008-4250 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 23/10/2008

Microsoft Windows Buffer Overflow Vulnerability

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

CVE-2008-4128 Alta · 8.1 KEV Alta · 64 Exploit público CWE-352 18/09/2008

Cisco IOS Cross-Site Request Forgery Vulnerability

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

CVE-2008-3431 Alta · 8.8 KEV Alta · 63 Exploit público 05/08/2008

Oracle VirtualBox Insufficient Input Validation Vulnerability

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

CVE-2007-5659 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-120 12/02/2008

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

CVE-2008-0655 Alta · 8.8 KEV Alta · 56 CWE-200 07/02/2008

Adobe Acrobat and Reader Unspecified Vulnerability

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

CVE-2007-3010 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 18/09/2007

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

CVE-2007-0671 Alta · 8.8 KEV Alta · 56 02/02/2007

Microsoft Office Excel Remote Code Execution Vulnerability

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

CVE-2006-2492 Alta · 8.8 KEV Alta · 56 CWE-120 19/05/2006

Microsoft Word Malformed Object Pointer Vulnerability

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

CVE-2006-1547 Alta · 7.5 KEV Alta · 59 CWE-749 30/03/2006

Negação de Serviço no ActionForm do Apache Struts (CVE-2006-1547)

ActionForm no Apache Software Foundation (ASF) Struts anterior à 1.2.9 com BeanUtils 1.7 permite que atacantes remotos causem negação de serviço por meio de um formulário codificado em multipart/form-data com um nome de parâmetro que referencia o método público getMultipartRequestHandler, o que fornece acesso adicional a elementos da implementação CommonsMultipartRequestHandler e do BeanUtils.

CVE-2005-2773 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 02/09/2005

HP OpenView Network Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

CVE-2004-1464 Média · 5.9 KEV Alta · 52 CWE-400 31/12/2004

Cisco IOS Denial-of-Service Vulnerability

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

CVE-2004-0210 Alta · 7.8 KEV Alta · 63 Exploit público CWE-120 06/08/2004

Microsoft Windows Privilege Escalation Vulnerability

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

CVE-2002-0367 Alta · 7.8 KEV Alta · 63 Exploit público CWE-269 25/06/2002

Microsoft Windows Privilege Escalation Vulnerability

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.