Windows remote code execution vulnerability: June 13, 2017

None None...

Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files. To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicio...

KB4022725: Windows 10 Version 1703 June 2017 Cumulative Update

The remote Windows 10 version 1703 host is missing security update KB4022725. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker ca...

cabextract: Multiple vulnerabilities

Background cabextract is free software for extracting Microsoft cabinet files. Description Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially-crafted archive ...

DSA-2087-1 cabextract - arbitrary code execution

Bulletin has no description...

PT-2010-2248 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper use of unspecified fields in a file digest by the Authenticode Signature verification functionality, allowing remote attackers to execute...

PT-2010-2247 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, Server 2008 Gold, SP2, and R2, and Windows 7 Description: A remote code execution issue exists in the Windows Authenticode Signature Verification...

EUVD-2008-3146

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2006-2273

The InstallProduct routine in the Verisign VUpdater.Install aka i-Nav ActiveX control does not verify Microsoft Cabinet .CAB files, which allows remote attackers to run an arbitrary executable file...

Microsoft cabarc directory traversal

Description: Cabarc is a command line tool to create and extract cabinet files .cab it is included in the Windows Support Tools package It is subject to a directory traversal bug similar to those found in unzip, unarj etc.. Technical Details: ..file fails ../file defeats the protection...

cabarc.txt

Description: Cabarc is a command line tool to create and extract cabinet files .cab it is included in the Windows Support Tools package It is subject to a directory traversal bug similar to those found in unzip, unarj etc.. Technical Details: ..\file fails ../file defeats the protection...