1734 matches found
KB4499158: Windows Server 2012 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
The remote Windows host is missing security update 4499158 or cumulative update 4499171. It is, therefore, affected by multiple vulnerabilities : - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows. An attacker who...
The vulnerability of the OLE Automatization component of the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the OLE Automatization component of the Windows operating system is related to a memory object handling error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the IOleCvt interface in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the IOleCvt interface in Windows operating systems is related to errors in displaying ASP pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Windows Multiple Vulnerabilities (KB4493475)
This host is missing a critical security update according to Microsoft KB4493475 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4493441)
This host is missing a critical security update according to Microsoft KB4493441 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2019-0794
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'...
Remote code execution
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'...
CVE-2019-0794
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'...
CVE-2019-0794
CVE-2019-0794 is described in connected sources as a Windows VBScript Engine remote command execution vulnerability. The Myhack58 article notes exploitation via hosting a crafted website to trigger through a browser, and also via IE rendering engine or Microsoft Office documents to trigger initia...
April 9, 2019—KB4493458 (Security-only update)
None None...
April 9, 2019—KB4493448 (Security-only update)
None None...
OLE Automation Remote Code Execution Vulnerability
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could gain execution on the victim system. To exploit the vulnerability, an attacker could host a specially crafted website designed to...
PT-2019-1801 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to errors when the IOleCvt interface renders ASP webpage content. This allows a remote attacker to execute arbitrary code and affect the system...
KB4493475: Windows 10 April 2019 Security Update
The remote Windows host is missing security update 4493475. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...
KB4493474: Windows 10 Version 1703 April 2019 Security Update
The remote Windows host is missing security update 4493474. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...
KLA11875 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions, spoof user interface. Below is a complete list of...
KB4493470: Windows 10 Version 1607 and Windows Server 2016 April 2019 Security Update
The remote Windows host is missing security update 4493470. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...
DEBIAN-CVE-2019-1788
A vulnerability in the Object Linking & Embedding OLE2 file scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of prope...
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the pointer manipulation during the processing of OLE files. This allows an attacker to trigger a service failure or disclose protected information using a specially created OLE file.
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the assignment of a null pointer during the processing of OLE files. Exploiting this vulnerability could allow an attacker to cause service failures or reveal memory contents using a specially crafted...