Debian: Security Advisory (DLA-2366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-3988 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: An information disclosure issue exists due to Microsoft Excel's improper handling of its memory contents. This could allow an attacker to compromise a user's computer or data by...

PT-2020-4028 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: A remote code execution issue exists in Microsoft Visual Studio due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the...

PT-2020-4032 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain information that could be use...

PT-2020-3911 · Microsoft · Windows Rsop Service Application +1

Name of the Vulnerable Software and Affected Versions: Windows RSoP Service Application affected versions not specified Description: An elevation of privilege issue exists due to improper memory handling by the Windows RSoP Service Application. To exploit this, an attacker must first gain executi...

PT-2020-4044 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the win32k component of Windows operating systems. This could allow an attacker to elevate their privileges using a specially...

PT-2020-4156 · Microsoft · Edge +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Microsoft Edge affected versions not specified Description: A remote code execution issue exists due to the way the IEToEdge Browser Helper Object BHO plugin handles objects in memory,...

PT-2020-4083 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Graphics Device Interface GDI. This can allow a remote attacker to execute arbitrary code, potentially giving...

PT-2020-3897 · Microsoft · Windows Camera Codec Pack +1

Name of the Vulnerable Software and Affected Versions: Windows Camera Codec Pack affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by the Windows Camera Codec Pack. This could allow an attacker to run arbitrary code in...

PT-2020-4086 · Microsoft · Store Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Store Runtime affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Microsoft Store Runtime improperly handles memory. To exploit this, an attacker would...

Debian DLA-2366-1 : imagemagick security update

Debian Bug : 870020 870019 876105 869727 886281 873059 870504 870530 870107 872609 875338 875339 875341 873871 873131 875352 878506 875503 875502 876105 876099 878546 878545 877354 877355 878524 878547 878548 878555 878554 878548 878555 878554 878579 885942 886584 928206 941670 931447 932079...

PT-2020-3915 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to errors in handling objects in memory by the dnsrslvr.dll library in the Windows operating system. Exploitation of this issue could allow an attacker to elevate...

PT-2020-3909 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows InstallService improperly handles memory. To exploit this, an attacker would first need to gain...

PT-2020-3987 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: A remote code execution issue exists in Microsoft Word software due to its failure to properly handle objects in memory. This could allow an attacker to execute arbitrary code using ...

PT-2020-4033 · Microsoft · Office +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office affected versions not specified Microsoft SharePoint Server affected versions not specified Description: A remote...

PT-2020-3986 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by Windows. To exploit this, an attacker must convince a user to run a specially crafted application...

PT-2020-4088 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This could allow an attacker to execute...

PT-2020-3902 · Microsoft · Com +1

Name of the Vulnerable Software and Affected Versions: Microsoft COM for Windows affected versions not specified Description: The issue is related to how Microsoft COM for Windows handles objects in memory, specifically due to a buffer overflow. This could allow an attacker to gain elevated...

PT-2020-3914 · Microsoft · Windows State Repository Service +1

Name of the Vulnerable Software and Affected Versions: Windows State Repository Service affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Windows State Repository Service. This could allow an attacker to...

PT-2020-4042 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the DirectX component of the Windows operating system. This could allow an attacker to elevate their privileges using a...