Microsoft Update to Improve Cryptography and Digital Certificate Handling (2854544)

This host is missing an important security update according to Microsoft Security Advisory 2854544. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

JVN#63901692: Internet Explorer vulnerable to information disclosure

Internet Explorer contains an issue in handling XML files, which may result in information disclosure. Impact If a user opens a specially crafted XML file as a local file, other local files may be disclosed. Solution Upgrade the software Users of Windows 7 and later, Windows Server 2008 R2 and...

Top Server OPC Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the Software Toolbox TOP Server DNP Master OPC product. Software Toolbox has produced a new version that mitigates this vulnerability. The researchers have test...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2820197)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmswindowsactivexcontrolmultvulnmay13.nasl 7172 2017-09-18 11:07:34Z cfischer $ Microsoft Windows ActiveX Control Multiple Vulnerabilities...

CVE-2013-1302: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."...

PT-2013-3060

Name of the Vulnerable Software and Affected Versions Lync Server 2013 Lync 2010 Lync 2010 Attendee Microsoft Communicator 2007 R2 Description The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code. This can be achieved by sending an...

Microsoft Lync Remote Code Execution Vulnerability (2834695)

This host is missing an important security update according to Microsoft Bulletin MS13-041. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Internet Explorer zero-day exploit targets U.S. nuke researchers

Security researchers revealed that series of "Watering Hole" has been conducted exploiting a IE8 zero-day vulnerability to target U.S. Government experts working on nuclear weapons research. The news is not surprising but it is very concerning, the principal targets of the attacks are various...

SAP ConfigServlet Remote Code Execution Vulnerability

This Metasploit module allows remote code execution via operating system commands through the SAP ConfigServlet without any authentication. This Metasploit module has been tested successfully with SAP NetWeaver 7.00 and 7.01 on Windows Server 2008 R2. This file is part of the Metasploit Framework...

SAP ConfigServlet Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SAP ConfigServlet Remote Code...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2829996)

This host is missing an important security update according to Microsoft Bulletin MS13-036. OpenVAS Vulnerability Test $Id: secpodms13-036.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2829996 Authors: Arun Kallavi Copyright:...

MS13-032: Vulnerability in Active Directory Could Lead to Denial of Service (2830914)

The version of Active Directory installed on the remote host is is affected by a denial of service vulnerability. A remote, authenticated attacker can exploit this flaw by sending a specially crafted query to the LDAP service that could cause the LDAP service to stop responding. C Tenable Network...

MS13-036: Description of the security update for the Windows file system kernel-mode driver (ntfs.sys): April 9, 2013 (KB2840149)

None None...

CVE-2013-1286

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2807986)

This host is missing an important security update according to Microsoft Bulletin MS13-027. OpenVAS Vulnerability Test $Id: secpodms13-027.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2807986 Authors: Arun Kallavi Copyright:...

CVE-2013-2556: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 through SP1 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013...

CVE-2013-1281

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

CVE-2013-0076

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."...

CVE-2013-0076

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."...

CVE-2013-0076

The CVE-2013-0076 entry refers to a local privilege-escalation vulnerability in the Client/Server Run-time Subsystem (CSRSS) on affected Windows versions. Specifically, CSRSS in Windows 7 (Gold/SP1) and Windows Server 2008 R2 (SP1) mishandles in-memory objects, enabling a local attacker to gain e...