Microsoft Windows Media Player multiple security vulnerabilities

NTLM credentials leak and relaying...

Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

This host is missing a critical security update according to Microsoft Bulletin MS08-076. OpenVAS Vulnerability Test $Id: secpodms08-076.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in Windows Media Components Could Allow Remote Code Execution 959807 Authors: Chandan S Updated By:...

Microsoft Windows SMB凭据反射漏洞（MS08-068）

BUGTRAQ ID: 7385 CVECAN ID: CVE-2008-4037 Windows是微软发布的非常流行的操作系统。 当用户连接到攻击者的SMB服务器时，Microsoft服务器消息块（SMB）协议处理NTLM凭据的方式存在远程代码执行漏洞，允许攻击者重放用户凭据，并在登录用户的下文中执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Windows XP S...

SMB Could Allow Remote Code Execution Vulnerability (957097)

This host is missing a critical security update according to Microsoft Bulletin MS08-068. OpenVAS Vulnerability Test $Id: secpodms08-068900057.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: SMB Could Allow Remote Code Execution Vulnerability 957097 Authors: Chandan S Copyright: Copyright C...

Microsoft Windows SMB Credential Reflection Remote Code Execution (MS08-068; CVE-2008-4037)

SMB reflection attacks is a type of "Man-in-the-Middle" MITM attack in which an attacker reflects the clients SMB challenge back to the client and by that bypass security, allowing the attacker to execute code in the context of the logged-on user. A remote code execution vulnerability has been...