Microsoft : Security Vulnerabilities (CVSS score between 2 and 2.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2013-2566	310			2013-03-15	2013-04-19	2.6	None	Remote	High	Not required	Partial	None	None
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
2	CVE-2012-2993	310			2012-09-17	2013-03-21	2.6	None	Remote	High	Not required	Partial	None	None
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate.
3	CVE-2012-2531	200		+Info	2012-11-13	2013-03-05	2.1	None	Local	Low	Not required	Partial	None	None
Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
4	CVE-2011-1886				2011-07-13	2011-10-04	2.1	None	Local	Low	Not required	Partial	None	None
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference, aka "Win32k Incorrect Parameter Validation Allows Information Disclosure Vulnerability."
5	CVE-2011-1068	20		+Info	2011-02-23	2011-04-21	2.6	None	Remote	High	Not required	Partial	None	None
Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by reading an encrypted cookie and performing unspecified other steps.
6	CVE-2010-0808	200		+Info	2010-10-13	2011-07-18	2.6	None	Remote	High	Not required	Partial	None	None
Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."
7	CVE-2009-2521	399		DoS	2009-09-04	2011-06-24	2.6	None	Remote	High	Not required	None	None	Partial
Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability."
8	CVE-2009-1536	20		DoS	2009-08-12	2010-08-21	2.6	None	Remote	High	Not required	None	None	Partial
ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
9	CVE-2008-5912				2009-01-20	2009-01-29	2.1	None	Remote	High	Single system	None	Partial	None
An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
10	CVE-2008-4540	255		Bypass	2008-10-13	2009-01-29	2.1	None	Local	Low	Not required	Partial	None	None
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
11	CVE-2008-2159	200		+Info	2008-05-12	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, which might allow local users to obtain sensitive information.
12	CVE-2007-5470	310		+Info	2007-10-15	2008-11-15	2.1	None	Local	Low	Not required	Partial	None	None
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
13	CVE-2007-3724			DoS	2007-07-12	2008-11-15	2.1	None	Local	Low	Not required	None	None	Partial
The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel, performs scheduling based on CPU billing gathered from periodic process sampling ticks, and gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
14	CVE-2007-0685			DoS Overflow	2007-02-02	2008-11-13	2.6	None	Remote	High	Not required	None	None	Partial
Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified vectors, possibly related to a buffer overflow.
15	CVE-2006-5614			DoS	2006-10-30	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.
16	CVE-2006-5578			+Info	2006-12-12	2008-09-05	2.6	None	Remote	High	Not required	Partial	None	None
Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5577.
17	CVE-2006-4685				2006-10-10	2008-09-05	2.6	None	Remote	High	Not required	Partial	None	None
The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
18	CVE-2006-4071			DoS	2006-08-09	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
19	CVE-2006-4066			DoS	2006-08-09	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
The Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2 allows context-dependent attackers to cause a denial of service (application crash) via certain images that trigger a divide-by-zero error, as demonstrated by a (1) .ico file, (2) .png file that crashes MSN Messenger, and (3) .jpg file that crashes Internet Explorer. NOTE: another researcher has not been able to reproduce this issue.
20	CVE-2006-3943			DoS Overflow	2006-07-31	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1) RGBExtraColor, (2) RGBForeColor, and (3) RGBBackColor properties.
21	CVE-2006-3729			DoS Overflow	2006-07-21	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference.
22	CVE-2006-3656		1	Mem. Corr.	2006-07-18	2011-04-12	2.6	None	Remote	High	Not required	None	Partial	None
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
23	CVE-2006-3654			DoS Overflow	2006-07-18	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted Excel files.
24	CVE-2006-3653			DoS	2006-07-18	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files.
25	CVE-2006-3510			DoS	2006-07-11	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
26	CVE-2006-3227			Bypass	2006-06-26	2008-09-05	2.6	None	Remote	High	Not required	None	Partial	None
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, which could be stripped by Internet Explorer to render legible text, but not when using other browsers. NOTE: there has been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this issue lies, although it might be due to vagueness within the associated standards. NOTE: this might only be exploitable with certain encodings.
27	CVE-2006-2766			DoS Overflow	2006-06-02	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.
28	CVE-2006-2374	399		DoS	2006-06-13	2010-12-14	2.1	None	Local	Low	Not required	None	None	Partial
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
29	CVE-2006-2334				2006-05-11	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
30	CVE-2006-1992	399		DoS Exec Code	2006-04-24	2011-09-20	2.6	None	Remote	High	Not required	None	None	Partial
mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.
31	CVE-2006-1476				2006-03-28	2008-09-05	2.6	None	Remote	High	Not required	None	Partial	None
Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no characters before the "."), which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious ".exe" program in a folder named "Internet Explorer," which triggers a question about whether to unblock the "Internet Explorer" program.
32	CVE-2006-1475				2006-03-28	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file.
33	CVE-2006-1193			XSS	2006-06-13	2008-09-05	2.6	None	Remote	High	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
34	CVE-2006-1192	20			2006-04-11	2011-10-03	2.6	None	Remote	High	Not required	None	Partial	None
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
35	CVE-2006-0935			DoS	2006-02-28	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
36	CVE-2006-0753			DoS	2006-02-17	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
37	CVE-2006-0488			+Info	2006-01-31	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.
38	CVE-2006-0363				2006-01-22	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program. NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort. Perhaps this issue should not be included in CVE.
39	CVE-2005-4697				2005-12-31	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll.
40	CVE-2005-4696				2005-12-31	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network.
41	CVE-2005-2765				2005-09-01	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability. CVE has not yet formally decided if such "information hiding" issues should be included.
42	CVE-2005-2274				2005-07-13	2008-09-05	2.6	None	Remote	High	Not required	None	Partial	None
Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
43	CVE-2005-2126				2005-10-21	2008-09-10	2.6	None	Remote	High	Not required	None	Partial	None
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.
44	CVE-2005-1981			DoS	2005-08-10	2008-09-10	2.1	None	Local	Low	Not required	None	None	Partial
Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
45	CVE-2005-1793			DoS	2005-06-01	2008-09-10	2.6	None	Remote	High	Not required	None	None	Partial
User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.
46	CVE-2005-1791				2005-05-28	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this behavior, then perhaps this issue should not be included in CVE.
47	CVE-2005-1790	399		DoS Exec Code Mem. Corr.	2005-06-01	2011-09-27	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."
48	CVE-2005-1683			DoS Exec Code Overflow	2005-05-20	2008-09-05	2.6	None	Remote	High	Not required	None	None	Partial
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
49	CVE-2005-0904	20			2005-05-02	2012-03-22	2.1	None	Local	Low	Not required	None	None	Partial
Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
50	CVE-2005-0852			DoS	2005-05-02	2008-09-05	2.1	None	Local	Low	Not required	None	None	Partial
Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.

Total number of vulnerabilities : 142 Page : 1 (This Page)2 3