CVE-2017-12819

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...

Design/Logic Flaw

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...

CVE-2017-12819: Improper Authentication

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...

CVE-2017-11497

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters...

CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...

PT-2017-12709

Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue allows remote manipulations with the language pack updater, leading to an NTLM-relay attack for the system user. Thi...

CVE-2017-11498: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...

PT-2017-12052

Name of the Vulnerable Software and Affected Versions Gemalto ACC Admin Control Center versions HASP SRM 2.10 through Sentinel LDK 7.50 Description The issue allows remote attackers to shut down the remote process, resulting in a denial of service. This can be achieved via a language pack ZIP fil...

Description of the Security Only update for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and for the .NET Framework 4.6 for Windows Server 2008 SP2: September 12, 2017

None None...

Security update for the Windows Performance Monitor information disclosure vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Performance Monitor information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists in the Windows Performance Monitor Console when it improperly parses XML input containing a reference to an externa...

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017 Summary A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the...

Security update for Windows Server 2008: July 11, 2017

Security update for Windows Server 2008: July 11, 2017 Summary This security update resolves vulnerabilities in Windows Server 2008 that could allow elevation of privilege or information disclosure. To learn more about the vulnerabilities, go to the Security Update Guide. More Information Importa...

Security update for the Windows Explorer remote code execution vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Explorer remote code execution vulnerability in Windows Server 2008: July 11, 2017 Summary A remote code execution vulnerability exists when Windows Explorer improperly handles executable files and shares during rename operations. An attacker who successfully...

Security Update for Microsoft Office Products (July 2017)

The Microsoft Office application, Microsoft Office Compatibility Pack, or Microsoft Excel Viewer installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An...

Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022010)

None None...

Windows TDX elevation of privilege vulnerability: June 13, 2017

None None...

Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022013)

None None...

Windows Uniscribe remote code execution vulnerability: June 13, 2017

None None...

Hypervisor code integrity elevation of privilege vulnerability: June 13, 2017

None None...

Security Update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Security Update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017 Summary An information disclosure vulnerability exists when the Windows kernel handles objects in memory incorrectly. An attacker who successfully exploits this vulnerability could obta...