Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018 Summary Microsoft is aware of a new publicly disclosed class of vulnerabilities referred to as "speculative execution side-channel attacks" that affect many modern...

Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009

Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009 Summary An update is available to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 Service Pack 2 SP2, Windows Embedded POSReady 2009, and Windows...

Microsoft Malware Protection Engine on Windows Defender RCE Vulnerability (Apr 2018)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Malware Protection Engine dated 03-04-2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)

According to the version number obtained by NTLM the remote host has Windows Server 2008 installed. The host may be vulnerable to a number of vulnerabilities including remote unauthenticated code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108811;...

CVE-2018-1038

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...

CVE-2018-1038

The CVE-2018-1038 entry affects Windows 7 SP1 and Windows Server 2008 R2 SP1. Root cause: a mis-set bit in a page-table entry allowed userspace to overwrite page tables, enabling local privilege escalation. Documented impact is elevation of privilege with full confidentiality/integrity/availabili...

Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

A “Patch for the Meltdown Patch” released out of band Thursday night

The Meltdown/Spectre saga continues… Late Thursday, Microsoft released a patch for Windows 7 and Server 2008 R2 operating systems to resolve CVE-2018-1038. Apparently, this vulnerability was actually introduced by the patches released in January to mitigate the effects of Meltdown. Microsoft did...

Microsoft Fixes Bad Patch That Left Win7, Server 2008 Open to Attack

Microsoft released an out-of-band fix on Thursday for a Windows vulnerability introduced earlier this year as a patch. If exploited, the bug could allow an authenticated attacker to install programs, access stored data or create new accounts with full user rights on Windows 7 and Server 2008 R2...

Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Advantech WebAccess webvrpcs Buffer Overflow

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

KLA11219 PE vulnerability in Microsoft Products (ESU)

PE vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2018-1038 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

Stop error 0xAB when you log off a Windows Server 2008 session

Stop error 0xAB when you log off a Windows Server 2008 session Symptoms After you install security update KB 4089344, you receive a Stop error 0xAB error message that resembles the following when you log off the computer: SESSIONHASVALIDPOOLONEXIT ab Important If you install a language pack after...

Microsoft Release Patch for Windows 7 and Windows Server 2008 R2 Systems

Microsoft has released security updates to address a vulnerability in Windows 7 x64 and Windows Server 2008 R2 x64 systems. Exploitation of this vulnerability may allow an attacker to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review Vulnerability Not...

Stop error 0xAB when you log off a Windows 7 SP1 or Windows Server 2008 R2 SP1 session

Stop error 0xAB when you log off a Windows 7 SP1 or Windows Server 2008 R2 SP1 session Symptoms After you install Monthly Rollup KB4088875 or Security-only update KB 4088878, you receive a Stop error 0xAB error message that resembles the following when you log off the computer:...

Bad Microsoft Meltdown Patch Made Some Windows Systems Less Secure

UPDATE Researcher Ulf Frisk has created a proof-of-concept exploit demonstrating that Microsoft’s January Patch Tuesday update made security matters worse when it comes to memory vulnerabilities associated with Intel’s CPU bug Meltdown. Frisk, a Swedish IT security expert, reported on Tuesday tha...

CPU usage at 100% when you move files in Windows Server 2008

CPU usage at 100% when you move files in Windows Server 2008 Symptoms After installing security update 4041995 or any other recent update that includes srv2.sys, CPU usage may spike up to 100% when you perform any type of SMB activity, such as copying files over the network. The problem is...

SUSE SLED12 Security Update : libid3tag (SUSE-SU-2018:0722-1)

This update for libid3tag fixes the following issues : - CVE-2004-2779 CVE-2017-11551: Fixed id3utf16deserialize in utf16.c, which previously misparsed ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until OOM leading to DoS. bsc1081959...

New Microsoft Bug Bounty Program Looks To Squash The Next Spectre, Meltdown

In the wake of the Meltdown and Spectre flaws, Microsoft has rolled out a new bug bounty program targeting speculative execution side channel vulnerabilities. The limited time program is open until December 31, and offers up to $250,000 for identifying new categories of speculative execution...

Microsoft Video Control Elevation of Privilege Vulnerability

Microsoft Windows Server 2008 R2 SP1 and others are a series of operating systems released by Microsoft Corporation in the U.S. Video Control is one of the video control components. A privilege vulnerability exists in Microsoft Video Control, which stems from the program's failure to properly...