MS14-080: Description of the security update for VBScript 5.8: January 13, 2015

Describes an update package that contains VBScript 5.8 updates for Internet Explorer 10. Apply this update package after you install the December cumulative security update for Internet Explorer.SummaryThis package contains the VBScript 5.8 updates that are intended for Internet Explorer 10 in a...

MS15-004: Description of the security update for Windows: January 13, 2015

None None...

CVE-2014-6355

CVE-2014-6355 concerns a vulnerability in the Microsoft Graphics Component where JPEG decoding in memory is mishandled, enabling information disclosure when a user visits a crafted web site. Affected products include Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...

Microsoft Windows 8.1 Server 2012 - Win32k.sys Local Privilege Escalation (MS14-058)

Microsoft Windows 8.1 Server 2012 - Win32k.sys Local Privilege Escalation MS14-058 include "hd.h" // EDB Note Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/46945.rar byte scode= 0x48 ,0x8B ,0xC4 ,0x48 ,0x89 ,0x58 ,0x08 ,0x48 ,0x89 ,0x68 ,0x20 ,0x56...

Microsoft Windows 8.1/ Server 2012 - 'Win32k.sys' Local Privilege Escalation (MS14-058)

include "hd.h" // EDB Note Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46945.rar byte scode= 0x48 ,0x8B ,0xC4 ,0x48 ,0x89 ,0x58 ,0x08 ,0x48 ,0x89 ,0x68 ,0x20 ,0x56 ,0x57 ,0x41 ,0x56 ,0x48 , 0x81 ,0xEC ,0xE0 ,0x00 ,0x00 ,0x00 ,0x45 ,0x33 ,0xF6 ,0x49...

MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python", 'Description' = %q This module exploits a vulnerabilit...

Microsoft Windows - OLE Package Manager Code Execution (MS14-064) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution", 'Description' = %q This module exploits a vulnerability found in...

Microsoft Windows - OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python", 'Description' = %q This module exploits a vulnerabilit...

Microsoft Secure Channel (Schannel) vulnerable to remote code execution via specially crafted packets

Overview A critical vulnerability in Microsoft Windows systems could allow a remote attacker to execute arbitrary code via specially crafted network packets. Description Microsoft Secure Channel Schannel is a security package that provides SSL and TLS on Microsoft Windows platforms. Due to a flaw...

openSUSE Security Update : sssd (openSUSE-SU-2014:1407-1)

sssd was updated to new upstream release 1.12.2 bugfix release, bnc900159 Changes : - Fixed a regression where the IPA provider did not fetch User Private Groups correctly - An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. - Several new options...

Microsoft Windows Kernel-Mode Driver TrueType Font DoS Vulnerability (3002885)

This host is missing a moderate security update according to Microsoft Bulletin MS14-079. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secure Channel Remote Code Execution Vulnerability (2992611)

This host is missing a critical security update according to Microsoft Bulletin MS14-066. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution (2992611)

The remote Windows host is affected by a remote code execution vulnerability due to improper processing of packets by the Secure Channel Schannel security package. An attacker can exploit this issue by sending specially crafted packets to a Windows server. C Tenable Network Security, Inc...

MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python

This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, bypassing the patch MS14-060, for the vulnerability publicly known as "Sandworm", on systems with Python for Windows installed. Windows Vista SP2 all the way to Windows 8,...

Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)

This host is missing a critical security update according to Microsoft Bulletin MS14-064. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Window Audio Service Privilege Escalation Vulnerability (3005607)

This host is missing an important security update according to Microsoft Bulletin MS14-071. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Remote Desktop Protocol Security Feature Bypass Vulnerability (3003743)

This host is missing an important security update according to Microsoft Bulletin MS14-074. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-4118

XML Core Services aka MSXML 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2014-6317

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of...

CVE-2014-6332

CVE-2014-6332 is discussed in connected sources as being exploited by the Neptune Exploit Kit to deliver a Monero-mining payload via Internet Explorer exploits. The Neptune Campaign uses CVE-2014-6332 alongside other IE and Flash exploits to identify vulnerable targets and chain exploits in a sin...