PT-2015-4438 · Microsoft · Office Compatibility Pack +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 SP3 through 2013 Gold, SP1, and RT Excel Viewer Office Compatibility Pack SP3 Office 2010 SP2 Description: A remote code execution issue exists due to improper handling of objects in memory while parsing speciall...

SUMo - Software Update Monitor

SUMo S oftware U pdate Mo nitor keeps your PC up-to-date & safe by using the most recent version of your favorite software ! Unlike built-in auto update features, SUMo tells you if updates are available before you need to use your software. Features Automatic detection of installed software Detec...

Debian DSA-3140-1 : xen - security update

Multiple security issues have been discovered in the Xen virtualisation solution which may result in denial of service, information disclosure or privilege escalation. - CVE-2014-8594 Roger Pau Monne and Jan Beulich discovered that incomplete restrictions on MMU update hypercalls may result in...

Debian Security Advisory DSA 3140-1 (xen - security update)

Multiple security issues have been discovered in the Xen virtualisation solution which may result in denial of service, information disclosure or privilege escalation. CVE-2014-8594 Roger Pau Monne and Jan Beulich discovered that incomplete restrictions on MMU update hypercalls may result in...

DSA-3140-1 xen - security update

Bulletin has no description...

java-1.6.0-openjdk security update

1:1.6.0.33-1.13.6.1.0.1.el511 - Add oracle-enterprise.patch 1:1.6.0.34-1.13.6.1 - Update to latest 1.13.6 release candidate tarball - Fixes a number of issues found with b34: - OJ51, PR2187: Sync patch for 4873188 with 7 version - OJ52, PR2185: Application of 6786276 introduces compatibility issu...

Drop SSlv3 retry and copied CustomSSLProtocolSocketFactory.java from SAL

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-36250. panel The fix for CONF-24035 introduced a retry with SSLv3 if a connection fails. However, like workaround implemented i...

Password Sniffer Console - Command-line Tool to Sniff and Capture HTTP/FTP/POP3/SMTP/IMAP Passwords

Password Sniffer Console is the all-in-one command-line based Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network. It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of...

Microsoft Windows Application Compatibility Cache Privilege Escalation (3023266)

This host is missing an important security update according to Microsoft Bulletin MS15-001. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Privilege escalation

The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with ...

CVE-2015-0002

The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with ...

CVE-2015-0002

CVE-2015-0002 (AppCompat Cache Elevation of Privilege) affects Windows via AhcVerifyAdminContext in ahcache.sys, introduced with Windows 8/8.1 era. The root cause is improper validation of the caller’s impersonation token: the code retrieves the token and checks for LocalSystem or Administrators,...

PT-2015-4385

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to the improper verification of an impersonation token's association with an administrative account by the AhcVerifyAdminContext function in the Application...

MS15-001: Vulnerability in Windows Application Compatibility cache could allow elevation of privilege: January 13, 2015

None None...

Fedora 20 : ca-certificates-2014.2.2-1.0.fc20 (2014-17272)

This is an update to the set of CA certificates released with NSS version 3.17.3 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla,...

Microsoft Application Compatibility Infrastructure Elevation of Privilege (MS15-001; CVE-2015-0002)

A privilege escalation vulnerability exists in Microsoft Windows Application Compatibility Cache. The vulnerability is due to a lack of validation of administrator privileges while running a specially crafted application. An authenticated attacker can exploit this issue by sending a specially...

CVE-2015-0002: Undefined Security Weakness

The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with ...

Instant PDF Password Protector - Password Protect PDF file

Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...

In-depth understanding of Google and Microsoft's controversial vulnerability: NtApphelpCacheControl vulnerability analysis-vulnerability warning-the black bar safety net

Causes:the The Google Project Zero team of budding member James Forshaw in 9 month 3 day 0 to Microsoft submitted the name“Windows: Elevation of Privilege inahcache. sys/NtApphelpCacheControl”security issues, and in Google's vulnerability disclosure period 9 0 days after, that is, 2 0 1 4 years 1...

NtApphelpCacheControl vulnerability detailed in-depth analysis-vulnerability warning-the black bar safety net

Causes: a Google Project Zero team of budding member James Forshaw in 9 month 3 day 0 to Microsoft submitted the name“Windows: Elevation of Privilege in ahcache. sys/NtApphelpCacheControl”security issues, and in Google's vulnerability disclosure period 9 0 days after, that is, 2 0 1 4 years 1 2...