Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cunia.com/advisories/56796 - http://www.securityfocus.com/bid/65382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90773 - http://osvdb.org/103181
CVE ID: CVE-2014-0284 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90774 - http://osvdb.org/103182 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796
lities/90774 - http://osvdb.org/103182 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.com/bid/65383
CVE ID: CVE-2014-0285 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0275 and CVE-2014-0286. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90775 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securityfocus.com/bid/6538
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securityfocus.com/bid/65384 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://osvdb.org/103183
CVE ID: CVE-2014-0286 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0275 and CVE-2014-0285. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90776 - http://osvdb.org/103184 - http://www.
etins/2014/ms14-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90776 - http://osvdb.org/103184 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.com/bid/65385
CVE ID: CVE-2014-0287 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0281. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://osvdb.org/103185 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - https://
0 - http://osvdb.org/103185 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90777 - http://www.securityfocus.com/bid/65386
CVE ID: CVE-2014-0288 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0270, CVE-2014-0273, and CVE-2014-0274. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 -
tes/securitybulletins/2014/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.com/bid/65388 - http://osvdb.org/103186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90778
CVE ID: CVE-2014-0289 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0267 and CVE-2014-0290. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.c
/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.com/bid/65389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90779 - http://osvdb.org/103187
CVE ID: CVE-2014-0290 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0267 and CVE-2014-0289. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.c
/ms14-010 - http://www.securitytracker.com/id/1029741 - http://secunia.com/advisories/56796 - http://www.securityfocus.com/bid/65390 - http://osvdb.org/103188
CVE ID: CVE-2014-0291 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0292 State: REJECTED Published: 2016-02-23T02:00:00 Last Updated: 2016-02-23T04:57:01 Description: No description available.
CVE ID: CVE-2014-0293 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010 - http://www.securitytracker.com/id/1029741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90758 - http://secunia.com/advisories/56796 - http://osvdb.org/103
https://exchange.xforce.ibmcloud.com/vulnerabilities/90758 - http://secunia.com/advisories/56796 - http://osvdb.org/103167 - http://www.securityfocus.com/bid/65394
CVE ID: CVE-2014-0294 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/103161 - http://www.securityfocus.com/bid/65397 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-008 - http://www.securitytracker.com/id/1029744 - http://secunia.com/advisories/56788
CVE ID: CVE-2014-0295 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka "VSAVB7RT ASLR Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029745 - http://osvdb.org/103164 - http://www.securityfocus.com/bid/65418 - http://www.greyhathacker.net/?p=585 - http://secunia.com/advisories/56793 -
- http://www.securityfocus.com/bid/65418 - http://www.greyhathacker.net/?p=585 - http://secunia.com/advisories/56793 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-009
CVE ID: CVE-2014-0296 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:13:10.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly encrypt sessions, which makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify session content by sending crafted RDP packets, aka "RDP MAC Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-030 - http://secuni
ntainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-030 - http://secunia.com/advisories/58524 - http://www.securityfocus.com/bid/67865 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx
CVE ID: CVE-2014-0297 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0308, CVE-2014-0312, and CVE-2014-0324. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0298 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0299 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0305 and CVE-2014-0311. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0300 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-015
CVE ID: CVE-2014-0301 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via a crafted JPEG image, aka "DirectShow Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-013
CVE ID: CVE-2014-0302 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0303. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0303 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0302. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0304 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0305 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0299 and CVE-2014-0311. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0306 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0307 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32438 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0308 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0297, CVE-2014-0312, and CVE-2014-0324. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0309 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0310 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:13:09.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1815. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-029
CVE ID: CVE-2014-0311 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0299 and CVE-2014-0305. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0312 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0297, CVE-2014-0308, and CVE-2014-0324. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0313 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0321. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0314 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:10.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE ID: CVE-2014-0315 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:13:09.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse cmd.exe file in the current working directory, as demonstrated by a directory that contains a .bat or .cmd file, aka "Windows File Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - h
.cmd file, aka "Windows File Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/srd/archive/2014/04/08/ms14-019-fixing-a-binary-hijacking-via-cmd-or-bat-file.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-019 - http://seclists.org/fulldisclosure/2020/Jul/33
CVE ID: CVE-2014-0316 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T09:13:10.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (memory consumption) and bypass the ASLR protection mechanism via a crafted client that sends messages with an invalid data view, aka "LRPC ASLR Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030722 - htt
ility." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030722 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-047
CVE ID: CVE-2014-0317 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:13:09.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for remote attackers to bypass the account lockout policy and obtain access via a brute-force attack, aka "SAMR Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsof
ty Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-016
CVE ID: CVE-2014-0318 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T09:13:09.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly control access to thread-owned objects, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69142 - http://secunia.