161 matches found
IT threat evolution Q2 2021
Targeted attacks The leap of a Cycldek-related threat actor It is quite common for Chinese-speaking threat actors to share tools and methodologies: one such example is the infamous "DLL side-loading triad": a legitimate executable, a malicious DLL to be side-loaded by it and an encoded payload,...
CVE-2013-0802
This CVE-2013-0802 entry is rejected/not used and does not represent an active vulnerability.
CVE-2013-0802
...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0804, CVE-2020-0845...
CVE-2020-0802
Technical details for CVE-2020-0802 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or fixes are described here.
KB4540694: Windows Server 2012 March 2020 Security Update
The remote Windows host is missing security update 4540694 or cumulative update 4541510. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully...
Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-0802)
An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...
Mozilla Firefox ESR < 31.6 Multiple Vulnerabilities
Binary data 701254.prm...
Information disclosure
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0802...
CVE-2019-0802
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849...
CVE-2019-0802
CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...
Microsoft Windows GDI Component CVE-2019-0802 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary An information disclosure vulnerability exists when the Windows GDI component incorrectly discloses the contents of its memory. To learn more about the...
A use cve-2017-11882 and cve-2018-0802 combination of vulnerability a malicious document analysis-vulnerability warning-the black bar safety net
! Recently intercepted an extension doc word document to attack the samples, which format is actually RTF format. By analyzing the document composition the use of a cve-2017-11882 and cve-2018-0802 vulnerability, and use the embedded excel object is used to trigger the vulnerability. The release ...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018
None None...
Description of the security update for Office 2016: January 9, 2018
None None...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
It is an exploit module for Apache HTTP Server. The target pr...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
PoC exploit for CVE-2018-0802 and CVE-2017-11882. The target pro...
Exploit for Out-of-bounds Write in Microsoft
PoC exploit for CVE-2018-0802, an arbitrary code execution vulne...
Exploit for Out-of-bounds Write in Microsoft
CVE-2018-0802POC usage: cv...