Microsoft Windows ClientCopyImage Improper Object Handling Exploit

This Metasploit module exploits improper object handling in the win32k.sys kernel mode driver. This Metasploit module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64. This module requires Metasploit: http://metasploit.com/download Current source:...

Security update for xen (important)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

CVE-2015-4136: SSH Authorisation permitted for a user with hard-coded credentials in Windows Stock Image (Windows Server 2012 R2) AMI

In Bamboo 5.8.0 and 5.8.1 the Windows Stock Image Windows Server 2012 R2 AMI contain a 'bamboo' user which is configured with a publicly known password. While the 'bamboo' user is not allowed RDP access it was permitted to login through SSH on instances using the affected AMI. In the event that a...

CVE-2015-4136: SSH Authorisation permitted for a user with hard-coded credentials in Windows Stock Image (Windows Server 2012 R2) AMI

In Bamboo 5.8.0 and 5.8.1 the Windows Stock Image Windows Server 2012 R2 AMI contain a 'bamboo' user which is configured with a publicly known password. While the 'bamboo' user is not allowed RDP access it was permitted to login through SSH on instances using the affected AMI. In the event that a...

CVE-2015-1719

The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory...

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerabilities (3057839)

This host is missing an important security update according to Microsoft Bulletin MS15-061. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Privilege Elevation Vulnerability (3063858)

This host is missing an important security update according to Microsoft Bulletin MS15-063. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2015-1602

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT Description The issue is related to an untrusted search path vulnerability ...

PT-2015-1310

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 and R2 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows...

MS15-062: Vulnerability in Active Directory federation services could allow elevation of privilege: June 9, 2015

None None...

Microsoft security advisory: Update for vulnerability in Juniper Networks Windows In-Box Junos Pulse client: June 9, 2015

None None...

PT-2015-1364

Name of the Vulnerable Software and Affected Versions Windows Server 2003 SP2 and R2 SP2 Description The issue is caused by a buffer overflow in the dynamic memory of the win32k.sys component in the Windows operating system. This allows a local attacker to gain privileges or cause a denial of...

MS15-057: Vulnerability in Windows Media Player Could Allow Remote Code Execution (3033890)

The version of Microsoft Windows Media Player installed on the remote host is affected by a remote code execution vulnerability due to improper handling of crafted DataObjects. A remote, unauthenticated attacker can exploit this by tricking a user into opening a specially crafted DataObject,...

MS15-060: Vulnerability in Microsoft Common Controls Could Allow Remote Code Execution (3059317)

The remote Windows host is affected by a remote code execution vulnerability due to a user-after-free error in Microsoft Common Controls. A remote attacker can exploit this vulnerability by convincing a user to click a specially crafted link, resulting in the execution of arbitrary code in the...

CVE-2015-1675

The connected CNVD entries corroborate CVE-2015-1675 family: Microsoft Windows Journal file handling vulnerabilities allow remote code execution via specially crafted Journal files (.jnt). Affected products/versions from the CVE scope include Windows Vista through Windows 8.1/Server editions, wit...

CVE-2015-1696

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution...

Microsoft Windows Journal Remote Code Execution Vulnerability (3046002)

This host is missing an important security update according to Microsoft Bulletin MS15-045. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2015-5417

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8 through 8.1 Microsoft Windows Server versions 2012 Gold and R2 Microsoft Windows RT versions Gold and 8.1 Description A security feature bypass issue exists due to the Windows kernel's failure to properly validate ...

Microsoft Windows Kernel CVE-2015-1674 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 8 for 32-bit Systems Microsoft Windows 8 for 64-bit Systems...

KLA10577 Arbitrary code execution vulnerabilities in Windows Journal

An unspecified vulnerabilities were found in Windows products. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed Journal file. Original advisories Microsoft Advisory CVE-2015-1697 CVE-2015-1696...