Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2444 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37764/ - http://www.securitytracker.com/id/1033237 - http://www.securityfocus.com/bid/76194 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2445 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2446 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2447. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2447 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2446. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2448 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76191 - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2449 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2450 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2451. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079 - http://www.securityfocus.com/bid/76190
CVE ID: CVE-2015-2451 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2450. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079 - http://www.securityfocus.com/bid/76189
CVE ID: CVE-2015-2452 State: PUBLISHED Published: 2015-08-14T10:00:00 Last Updated: 2024-08-06T05:17:26.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2441. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033237 - http://www.securityfocus.com/bid/76188 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE ID: CVE-2015-2453 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information via a crafted application that continues to execute during a subsequent user's login session, aka "Windows CSRSS Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/s
y." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238
CVE ID: CVE-2015-2454 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows KMD Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.sec
tainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238
CVE ID: CVE-2015-2455 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different v
ttackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2456. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - https://www.exploit-db.com/exploits/37919/ - http://www.securitytracker.com/id/1033238 - http://www.securityfocus.com/bid/76216
CVE ID: CVE-2015-2456 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different v
ttackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2455. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - http://www.securityfocus.com/bid/76241 - https://www.exploit-db.com/exploits/37918/
CVE ID: CVE-2015-2457 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2458 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2459 and CVE-2015-2461. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates
2461. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - https://www.exploit-db.com/exploits/37923/
CVE ID: CVE-2015-2459 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2458 and CVE-2015-2461. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates
2461. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - https://www.exploit-db.com/exploits/37922/
CVE ID: CVE-2015-2460 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/security
itional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - https://www.exploit-db.com/exploits/37921/
CVE ID: CVE-2015-2461 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2458 and CVE-2015-2459. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates
2459. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - http://www.securityfocus.com/bid/76209 - https://www.exploit-db.com/exploits/37917/
CVE ID: CVE-2015-2462 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-upda
bility." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - https://www.exploit-db.com/exploits/37916/ - http://www.securityfocus.com/bid/76215
CVE ID: CVE-2015-2463 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability
execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2464. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - http://www.securityfocus.com/bid/76239 - https://www.exploit-db.com/exploits/37915/
CVE ID: CVE-2015-2464 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability
execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2463. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238 - http://www.securityfocus.com/bid/76240 - https://www.exploit-db.com/exploits/37914/
CVE ID: CVE-2015-2465 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Shell Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http:
ogram Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 - http://www.securitytracker.com/id/1033238
CVE ID: CVE-2015-2466 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - http://www.securitytracker.com/id/1033239
CVE ID: CVE-2015-2467 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - https://www.exploit-db.com/exploits/37913/ - http://www.securitytracker.com/id/1033239
CVE ID: CVE-2015-2468 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/
ption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - https://www.exploit-db.com/exploits/37912/ - http://www.securitytracker.com/id/1033239
CVE ID: CVE-2015-2469 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37910/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - http://www.securitytracker.com/id/1033239
CVE ID: CVE-2015-2470 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37924/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - http://www.securitytracker.com/id/1033239
CVE ID: CVE-2015-2471 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:26.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033241 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084
CVE ID: CVE-2015-2472 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Desktop Session Host (RDSH) in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows man-in-the-middle attackers to spoof clients via a crafted certificate with valid Issuer and Serial Number fields, aka "Remote Desktop Session Host Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: Referenc
s, aka "Remote Desktop Session Host Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-082 - http://www.securitytracker.com/id/1033242
CVE ID: CVE-2015-2473 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Protocol DLL Planting Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-082
- CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-082 - http://www.securitytracker.com/id/1033242
CVE ID: CVE-2015-2474 State: PUBLISHED Published: 2015-08-15T00:00:00 Last Updated: 2024-08-06T05:17:27.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block (SMB) server error-logging action, aka "Server Message Block Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033243 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-083