Free execution software for windows

Buffer Overrun in MDAC Function Could Allow Code Execution (832483) 1.0 is an advanced program which satisfies you with a collection of components that provides the underlying functionality for a number of database operations, such as connecting to remote databases and returning data to a client.

When a client system on a network tries to see a list of computers that are running SQL Server and that reside on the network, it sends a broadcast request to all the devices that are on the network. Because of a vulnerability in a specific MDAC component, an attacker could respond to this request with a specially-crafted packet that could cause a buffer overflow.

An attacker who successfully exploited this vulnerability could gain the same level of privileges over the system as the program that initiated the broadcast request. The actions an attacker could carry out would be dependent on the permissions under which the program using MDAC ran. If the program ran with limited privileges, an attacker would be limited accordingly; however, if the program ran under the local system context, the attacker would have the same level of permissions.

Since the original version of MDAC on your system may have changed from updates available on the Microsoft Web site, recommend using the following tool to determine the version of MDAC you have on your system: Microsoft Knowledge Base article 301202 "HOW TO: Check for MDAC Version" discusses this tool and explains how to use it. Also, Microsoft Knowledge Base article 231943 discusses the release history of the different versions of MDAC.

Mitigating factors:

1. For an attack to be successful an attacker would have to simulate a SQL server that is on the same IP subnet as the target system.
2. When a client system on a network tries to see a list of computers that are running SQL Server and that reside on the network, it sends a broadcast request to all the devices that are on the network. A target system must initiate such a broadcast request to be vulnerable to an attack. An attacker would have no way of launching this first step but would have to wait for anyone to enumerate computers that are running SQL Server on the same subnet. Also, a system is not vulnerable by having these SQL management tools installed.
3. Code executed on the client system would only run under the privileges of the client program that made the broadcast request.

Microsoft Chat Unchecked Buffer in MSN Chat Control Can Lead to Code Execution 4.2 is regarded as a convenient as well as useful tool which is available for direct download and ships with MSN Messenger and Exchange Instant Messenger.

• Impact of vulnerability: Run Code of Attacker's Choice
• Maximum Severity Rating: Critical
• Recommendation: Customers who did not install the updates when they were originally released should install the upgraded updates immediately; customers who installed the original updates should consider installing the upgraded updates.

Affected Software:

• Microsoft MSN Chat Control
• Microsoft MSN Messenger 4.5 and 4.6, which includes the MSN Chat control
• Microsoft Exchange Instant Messenger 4.5 and 4.6, which includes the MSN Chat control

Requirements:

• Windows NT 4 SP 6
• Windows 2003 SP 1
• Windows XP AMD 64-bit
• Windows XP 64-bit SP 1
• Windows NT 4 SP 2
• Windows 2000 SP 1
• Windows 2003 64-bit
• Windows 2003 AMD 64-bit
• Windows XP 64-bit SP 2
• Windows NT 4 SP 3
• Windows 2000 SP 2
• Windows Server 2003 x64 R2
• Windows 2000
• Windows 2003 64-bit SP 1
• Windows Vista AMD 64-bit
• Windows XP Itanium 64-bit
• Windows NT 4 SP 4
• Windows 2000 SP 3
• Windows NT 4
• Windows XP 32-bit
• Windows XP SP 1
• Windows Server 2003 x86 R2
• Windows ME
• Windows 2003 Itanium 64-bit
• Windows NT 4 SP 5
• Windows 2000 SP 4
• Windows Vista 32-bit
• Windows XP 64-bit
• Windows NT 4 SP 1
• Windows Server 2008 x64
• Windows NT 3
• Windows Server 2008 x86
• Windows XP
• Windows Server 2008
• Windows 2003
• Windows Vista Itanium 64-bit
• Windows XP Itanium 64-bit SP 1
• Windows 2003 32-bit
• Windows XP Itanium 64-bit SP 2
• Windows XP SP 2
• Windows 95
• Windows 98
• Windows Vista
• Windows NT
• Windows 2003 Itanium 64-bit SP 1
• Windows XP Pro

Vulnerability in Microsoft Internet Security and Acceleration Server 2000 H.323 Filter Could Allow Remote Code Execution (816458) 1.0 is created to allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. An attacker who successfully exploited this vulnerability could try to run code of their choice in the security context of the Microsoft Firewall Service. This would give the attacker complete control over the system.

The H.323 filter is enabled by default on servers running ISA Server 2000 computers that are installed in integrated or firewall mode.

Mitigating factors:

• ISA Servers running in cache mode are not vulnerable because the Microsoft Firewall Service is disabled by default
• Users can prevent the risk of attack by disabling the H.323 filter