* SP2 Tablet Pc * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2010-1735	20	DoS	2010-05-06	2019-04-30	4.9	None	Local	Low	Not required	None	None	Complete
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
2	CVE-2010-1734	20	DoS	2010-05-06	2021-07-07	4.9	None	Local	Low	Not required	None	None	Complete
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
3	CVE-2008-4609	16	DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
4	CVE-2007-5133	189	DoS Overflow	2007-09-27	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
5	CVE-2007-2374		Exec Code	2007-04-30	2019-04-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.
6	CVE-2007-2237		DoS	2007-06-06	2018-10-16	7.1	None	Remote	Medium	Not required	None	None	Complete
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.
7	CVE-2007-1492		DoS	2007-03-16	2008-11-13	7.1	None	Remote	Medium	Not required	None	None	Complete
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file.
8	CVE-2007-0843	264	Bypass	2007-02-23	2021-08-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
9	CVE-2007-0211		+Priv	2007-02-13	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
10	CVE-2007-0210		Overflow +Priv	2007-02-13	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow.
11	CVE-2007-0026		Exec Code Mem. Corr.	2007-02-13	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
12	CVE-2006-6696	119	Overflow +Priv	2006-12-22	2019-04-30	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
13	CVE-2006-6659		DoS	2006-12-20	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML.
14	CVE-2006-6602		DoS	2006-12-15	2018-10-17	4.3	None	Remote	Medium	Not required	None	None	Partial
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file.
15	CVE-2006-5614		DoS	2006-10-31	2017-10-19	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.
16	CVE-2006-5585	264	+Priv	2006-12-13	2018-10-17	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."
17	CVE-2006-4702		Exec Code Overflow	2006-12-13	2018-10-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
18	CVE-2006-4696	94	Exec Code	2006-10-10	2018-10-17	9.0	None	Remote	Low	???	Complete	Complete	Complete
Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
19	CVE-2006-4692	94	Exec Code	2006-10-10	2018-10-17	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
20	CVE-2006-4691		Exec Code Overflow	2006-11-14	2018-10-17	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
21	CVE-2006-4689		DoS	2006-11-14	2018-10-17	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
22	CVE-2006-4688		Exec Code Overflow Mem. Corr.	2006-11-14	2018-10-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
23	CVE-2006-4071		DoS	2006-08-10	2018-10-17	2.6	None	Remote	High	Not required	None	None	Partial
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
24	CVE-2006-4066		DoS	2006-08-10	2018-10-17	2.6	None	Remote	High	Not required	None	None	Partial
The Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2 allows context-dependent attackers to cause a denial of service (application crash) via certain images that trigger a divide-by-zero error, as demonstrated by a (1) .ico file, (2) .png file that crashes MSN Messenger, and (3) .jpg file that crashes Internet Explorer. NOTE: another researcher has not been able to reproduce this issue.
25	CVE-2006-3942	20	DoS	2006-07-31	2018-10-17	7.8	None	Remote	Low	Not required	None	None	Complete
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot.
26	CVE-2006-3880		DoS	2006-07-27	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
DISPUTED Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
27	CVE-2006-3873		DoS Exec Code Overflow	2006-09-12	2018-10-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
28	CVE-2006-3648		Exec Code	2006-08-09	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
29	CVE-2006-3445	189	Exec Code Overflow	2006-11-14	2018-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
30	CVE-2006-3442	94	Exec Code	2006-09-12	2018-10-18	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message.
31	CVE-2006-3441		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
32	CVE-2006-3440		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
33	CVE-2006-3439		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
34	CVE-2006-3351		DoS Exec Code Overflow	2006-07-06	2018-10-18	5.4	None	Remote	High	Not required	None	None	Complete
Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
35	CVE-2006-2379	119	Exec Code Overflow	2006-06-13	2019-04-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
36	CVE-2006-2378		Exec Code Overflow	2006-06-13	2021-07-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
37	CVE-2006-2371		Exec Code Overflow	2006-06-13	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
38	CVE-2006-2370		Exec Code Overflow Mem. Corr.	2006-06-13	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
39	CVE-2006-2334			2006-05-12	2018-10-18	2.1	None	Local	Low	Not required	None	Partial	None
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
40	CVE-2006-1591		Exec Code Overflow	2006-04-03	2019-04-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
41	CVE-2006-1476			2006-03-29	2018-10-18	2.6	None	Remote	High	Not required	None	Partial	None
Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no characters before the "."), which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious ".exe" program in a folder named "Internet Explorer," which triggers a question about whether to unblock the "Internet Explorer" program.
42	CVE-2006-1475			2006-03-29	2018-10-18	2.1	None	Local	Low	Not required	None	Partial	None
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file.
43	CVE-2006-1314		Exec Code Overflow Mem. Corr. Bypass	2006-07-11	2018-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
44	CVE-2006-1313		Exec Code Mem. Corr.	2006-06-13	2019-04-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
45	CVE-2006-1311		Exec Code Mem. Corr.	2007-02-13	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.
46	CVE-2006-1184		DoS	2006-05-10	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
47	CVE-2006-0488		+Info	2006-02-01	2018-10-19	2.1	None	Local	Low	Not required	Partial	None	None
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.
48	CVE-2006-0143	399	DoS	2006-01-09	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
49	CVE-2006-0034	119	Exec Code Overflow	2006-05-10	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
50	CVE-2006-0032	79	XSS	2006-09-12	2019-04-30	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.

Total number of vulnerabilities : 104 Page : 1 (This Page)2 3