921 matches found
CVE-2013-3154
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...
Improper access control
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...
CVE-2013-3154
CVE-2013-3154 affects Windows Defender on Windows 7 and Windows Server 2008 R2. The issue is caused by an incorrect pathname used by the signature-update functionality, enabling local users to gain privileges via a Trojan horse in the %SYSTEMDRIVE% top-level directory. A successful exploit allows...
CVE-2013-3154
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...
Microsoft Windows Defender Privilege Elevation Vulnerability (2847927)
This host is missing an important security update according to Microsoft Bulletin MS13-058. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-058: Vulnerability in Windows Defender Could Allow Elevation of Privilege (2847927)
The remote host has a version of Windows Defender installed that is affected by a privilege escalation vulnerability. An attacker with valid login credentials who successfully exploits this vulnerability can execute arbitrary code with SYSTEM privileges. C Tenable Network Security, Inc...
Microsoft Windows Defender本地权限提升漏洞(CVE-2013-3154)(MS13-058)
BUGTRAQ ID: 60981 CVECAN ID: CVE-2013-3154 Windows Defender内置于Windows 8 和Windows RT 中，可以帮助实时保护电脑不受病毒、间谍软件和其它恶意软件的侵害。 Microsoft Windows 7 Defender在处理不正确的路径名称时存在安全漏洞，成功利用此漏洞的攻击者可以在 LocalSystem 帐户的安全上下文中执行任意代码并完全控制系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。攻击者必须拥有有效的登录凭据才能利用此漏洞。匿名用户无法利用此漏洞。 0 Microso...
Microsoft Windows Defender Privilege Elevation Vulnerability (2847927)
This host is missing an important security update according to Microsoft Bulletin MS13-058. OpenVAS Vulnerability Test $Id: secpodms13-058.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Windows Defender Privilege Elevation Vulnerability 2847927 Authors: Antu Sanadi Copyright: Copyright c 2013...
Microsoft Windows Defender CVE-2013-3154 Local Privilege Escalation Vulnerability
Description Microsoft Windows Defender is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the LocalSystem account. Successfully exploiting this issue will result in the complete compromise of affected computer...
MS13-058: Vulnerability in Windows Defender could allow elevation of privilege: July 9, 2013
None None...
July 2013 Microsoft Patch Tuesday Security Updates
A critical Windows kernel vulnerability, publicly disclosed in May by a Google security engineer, will be patched tomorrow when Microsoft releases its July Patch Tuesday security updates. Tavis Ormandy, who has controversially disclosed Windows vulnerability details in the past, made a posting to...
MS Security Advisory 2846338: Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution
A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote host. Scanning a maliciously crafted file can result in arbitrary code execution. This plugin checks if a vulnerable version of MMPE is being used by any of the following applications : - Microsoft Forefro...
Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
This host is missing an important security update according to Microsoft Bulletin MS13-034. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
This host is missing an important security update according to Microsoft Bulletin MS13-034. OpenVAS Vulnerability Test $Id: secpodms13-034.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Antimalware Client Privilege Elevation Vulnerability 2823482 Authors: Veerendra GG Copyright: Copyright c 2013...
CVE-2013-0078
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."...
CVE-2013-0078
CVE-2013-0078 affects the Microsoft Antimalware Client on Windows 8 and Windows RT, where MsMpEng.exe is referenced with an incorrect pathname. This improper pathname handling can allow a local user to gain privileges via a crafted application, constituting a local privilege-escalation vulnerabil...
Microsoft Windows Defender for Windows 8 and Windows RT Local Privilege Escalation Vulnerability
Description Microsoft Windows Defender for Windows 8 and Windows RT is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of...
PT-2012-1246
Name of the Vulnerable Software and Affected Versions Microsoft Windows Defender affected versions not specified Description The issue is related to insufficient access control in Microsoft Windows Defender, which is part of the Windows operating system. Exploitation of this issue may allow an...
Review : GFI LanGuard - Network Security Scanner & Vulnerability Management Tool
I'm a firm believer in multitasking. I tend to work on several things simultaneously; the more monitors I have connected the more things I can do in parallel, and I can bounce back and forth between tasks, given that no one interrupts me. When I find an application that can do more than one thing...
Microsoft Unveils New Windows Defender Offline Tool
Microsoft has released a beta version of a new tool that can help victims of malware attacks recover from ugly infections, even if they don’t have the ability to reach the Internet. The Windows Defender Offline tool enables users to clean their systems of malware from a CD or other removable medi...