136 matches found
MS09-056: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)
The remote Windows host contains a version of the Microsoft Windows CryptoAPI that is affected by multiple vulnerabilities : - A spoofing vulnerability exists in the Microsoft Windows CryptoAPI component when parsing ASN.1 information from X.509 certificates. An attacker who successfully exploite...
Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056; CVE-2009-2511)
The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...
Microsoft Security Bulletin MS09-056 - Important Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)
Microsoft Security Bulletin MS09-056 - Important Vulnerabilities in Windows CryptoAPI Could Allow Spoofing 974571 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed vulnerabilities in Microsoft Windows. The...
Preemptive Protection against Microsoft CryptoAPI Null Truncation in X.509 Common Name Vulnerability (MS09-056)
A spoofing vulnerability has been reported in the Microsoft Windows CryptoAPI component when parsing ASN.1 information from X.509 certificates. The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and...
Microsoft Capicom ActiveX控件远程代码执行漏洞（MS07-028）
CAPICOM.Certificates是一种ActiveX控件，允许脚本程序根据安全的基本Windows CryptoAPI功能加密数据。 CAPICOM.Certificates实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft CAPICOM和BizTalk Server中的加密API组件对象模型证书ActiveX控件（CAPICOM.dll）处理某些用户输入时存在漏洞。如果传递了意外数据，则ActiveX控件可能失败，并允许远程执行代码。 Microsoft CAPICOM Microsoft BizTalk Server 2004 SP2...
Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)
CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...
Microsoft CryptoAPI Version Check
Binary data 3381.prm...
Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)
Hotfix to fix Certificate Validation Flaw Q329115 is not installed. The vulnerability could enable an attacker who had a valid end-entity certificate to issue a subordinate certificate that, although bogus, would nevertheless pass validation. Because CryptoAPI is used by a wide range of...
Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)
Hotfix to fix Certificate Validation Flaw Q329115 is not installed. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)
The remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11145; scriptversion"1.49"; scriptcvsdate"Date: 2018/11/15 20:50:29"...
CVE-2002-0862
The 1 CertGetCertificateChain, 2 CertVerifyCertificateChainPolicy, and 3 WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints ...
CVE-2002-0862
CVE-2002-0862 concerns the CryptoAPI in Microsoft products (Windows 98 through XP; Office for Mac; IE for Mac; Outlook Express for Mac). The issue: the CertGetCertificateChain, CertVerifyCertificateChainPolicy, and WinVerifyTrust APIs fail to properly verify the Basic Constraints of intermediate ...
CVE-2002-0862
The 1 CertGetCertificateChain, 2 CertVerifyCertificateChainPolicy, and 3 WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints ...
Security Bulletin MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)
---------------------------------------------------------------------- Title: Certificate Validation Flaw Could Enable Identity Spoofing Q328145 Date: September 04, 2002 Software: Microsoft Windows, Microsoft Office for Mac, Microsoft Internet Explorer for Mac, or Microsoft Outlook Express for...
