Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-2274 1Microsoft 1Internet Explorer Apr 16, 2026 Jul 13, 2005 N/A· v4 N/A· v3 2.6 LOW· v2 Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing att...Show more Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."Show less
CVE-2005-2226 1Microsoft 1Outlook Express Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information.
CVE-2005-2225 1Microsoft 1Msn Messenger Service Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a g...Show more Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.Show less
CVE-2005-2224 1Microsoft 1Asp.net Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.
CVE-2005-1219 1Microsoft 1Image Color Management Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
CVE-2005-0564 1Microsoft 1Word Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
CVE-2005-2150 1Microsoft 2Windows 2000 Windows Nt Apr 16, 2026 Jul 11, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl...Show more Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.Show less
CVE-2005-2143 1Microsoft 1Frontpage Apr 16, 2026 Jul 5, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page.
CVE-2005-2089 1Microsoft 1Internet Information Services Apr 16, 2026 Jul 5, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Con...Show more Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."Show less
CVE-2005-2087 1Microsoft 2Ie Internet Explorer Apr 16, 2026 Jul 5, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary c...Show more Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem.Show less
CVE-2005-0360 1Microsoft 1Log Sink Class Activex Control Apr 16, 2026 Jul 5, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.
CVE-2005-1216 1Microsoft 1Isa Server Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
CVE-2005-1215 1Microsoft 1Isa Server Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
CVE-2005-1214 1Microsoft 7Windows 2000 Windows 2000 Terminal ServicesWindows 2003 Server+4 more Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
CVE-2005-1213 1Microsoft 1Outlook Express Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
CVE-2005-1212 1Microsoft 7Windows 2000 Windows 2000 Terminal ServicesWindows 2003 Server+4 more Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
CVE-2005-1211 1Microsoft 1Internet Explorer Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.
CVE-2005-1208 1Microsoft 4Windows 2000 Windows 2003 ServerWindows 98+1 more Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that t...Show more Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.Show less
CVE-2005-1207 1Microsoft 2Windows 2003 Server Windows Xp Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
CVE-2005-1206 1Microsoft 3Windows 2000 Windows 2003 ServerWindows Xp Apr 16, 2026 Jun 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server M...Show more Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."Show less

Previous 1...834835836...891 Next