RSS   Vulnerabilities for 'Windows 95'   RSS

2008-10-20
 
CVE-2008-4609

CWE-noinfo
 
 
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

 
2005-07-27
 
CVE-2005-2388

CWE-Other
 
 
Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.

 
2002-12-31
 
CVE-2002-1692

 
 
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up.

 
2002-12-23
 
CVE-2002-1325

CWE-Other
 
 
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."

 
 
CVE-2002-1260

CWE-Other
 
 
The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

 
 
CVE-2002-1258

CWE-Other
 
 
Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.

 
 
CVE-2002-1257

CWE-Other
 
 
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.

 
2002-03-08
 
CVE-2002-0053

CWE-119
 
 
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.

 
2001-07-02
 
CVE-2001-0238

CWE-Other
 
 
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.

 
2000-08-29
 
CVE-2000-1079

CWE-Other
 
 
Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.

 

Copyright 2024, cxsecurity.com

 

Back to Top