KB4524570: Windows 10 Version 1903 and Windows 10 Version 1909 November 2019 Security Update

The remote Windows host is missing security update 4524570. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

KB4525236: Windows 10 Version 1607 and Windows Server 2016 November 2019 Security Update

The remote Windows host is missing security update 4525236. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating...

ASUS ZenFone 3 Max has an unspecified vulnerability

ASUS ZenFone 3 Max is an Android-based smartphone from ASUS. Pre-installation in ASUS ZenFone 3 Max Build fingerprint used is asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys A security vulnerability exists in the com.asus.dm.installer.DMInstallerService service ...

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read Exploit

Exploit for windows platform in category local exploits The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while...

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done...

Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Read

The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while impersonating, but using junctions there is still a TOCT...

Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Copy/Read

The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while impersonating, but using junctions there is still a TOCT...

September 29, 2016 — KB3194496 (OS Builds 14393.222)

None None...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408: Undefined Security Weakness

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

PT-2016-5159

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop versions prior to 5.2R2 Pulse Secure Installer Service versions prior to 8.2R2 Description The issue allows restricted users to gain privileges via unspecified vectors. Recommendations For Pulse Secure Desktop versions pri...

RPC function call failed. Function name: [GetSvcVersion]

Challenge Veeam Backup & Replication fails to communicate with the Veeam Installer Service service on a managed remote machine with the error: Error: The RPC server is unavailable. RPC function call failed. Function name: GetSvcVersion. Target machine: remotemachine.domain.tld:6160. This article ...

Microsoft Windows Installer Service Privilege Escalation Vulnerability (3072630)

This host is missing an important security update according to Microsoft Bulletin MS15-074. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2015-5731

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 and R2 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows...

MS15-074: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)

The version of Windows Installer Service installed on the remote Windows host is missing Cumulative Security Update 3072630. It is, therefore, affected by an elevation of privilege vulnerability in the Windows Installer service due to improperly running customized action scripts. A local attacker...

CVE-2014-3811

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...

Input validation

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...

CVE-2014-3811

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...

PT-2014-5518

Name of the Vulnerable Software and Affected Versions Juniper Installer Service JIS Client versions prior to 7.4R6 Junos Pulse Client versions prior to 4.0R6 Description The issue allows local users to gain privileges via unspecified vectors. Recommendations For Juniper Installer Service JIS Clie...

CVE-2014-3811: Undefined Security Weakness

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...