1782 matches found
NTP Local Denial of Service Vulnerability (CNVD-2017-04411)
NTP is Network Time Protocol NTP, which is a protocol used to synchronize the time of individual computers on a network. A local denial of service vulnerability exists in NTP, where the Windows installer of NTP enables a local user to cause a denial of service via a route related to a parameter...
MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015
MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...
MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015
MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET...
MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012
MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...
MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012
MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...
MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013
MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework that coul...
CVE-2016-7086
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory...
CVE-2016-7292
The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a...
CVE-2016-7292: Undefined Security Weakness
The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a...
Microsoft Windows Installer DLL Load Local Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Installer. A local attacker could exploit this vulnerability to obtain elevation of privilege and execute arbitrary code...
MS16-149: Security Update for Microsoft Windows (3205655)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...
KLA10924 Privilege escalation and information disclosure vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities: 1. An improper handling of objects in memory while running a Windows Crypto...
7-Zip for Windows Denial of Service Vulnerability
7-Zip for Windows is a set of free, open source compression/decompression software for Windows-based platforms. A security vulnerability exists in the installer of 7-Zip for Windows 16.02 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code with the privileges...
On the Dyn DDoS Attack, Keen Team, and a Phony Windows Installer
Mike Mimoso and Chris Brook recap the news of the week, including the storylines around last week’s Dyn DDoS attack, Keen Team winning big again at Pwn2Own, and a fake Windows installer. Download: ThreatpostNewsWrapOctober282016.mp3 Music by Chris Gonsalves...
Apache OpenOffice 4.1.2 Privilege Escalation Vulnerability
Exploit for multiple platform in category local exploits CVE-2016-6804 Apache OpenOffice Advisory Title: Windows Installer Execution of Arbitrary Code with Elevated Privileges Version 1.0 Announced October 11, 2016 Description The Apache OpenOffice installer for Windows contained a defective...
September 13, 2016 — KB3185614 (OS Build 10586.589)
None None...
Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries
Overview PhishWall Client Internet Explorer Version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer Version contains an issue with the DLL search path, which may lead to insecurely loading dynamic linking...
Windows Privilege Escalation
A vulnerability that allows for increased privileges exists in the Windows installer. This vulnerability is related to incorrect restoration of previously installed applications. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the...
CVE-2016-4157
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...