MS Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. OpenVAS Vulnerability Test $Id: secpodms12-080.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2784126 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod...

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)

This host is missing a critical security update according to Microsoft Bulletin MS12-078. OpenVAS Vulnerability Test $Id: secpodms12-078.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2783534 Authors: Antu Sanadi Copyright: Copyrig...

Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076macosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities - 2720184 Mac OS X Authors: Antu Sanadi Copyright:...

Microsoft Office Remote Code Execution Vulnerabilities (2720184)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office Remote Code Execution Vulnerabilities 2720184 Authors: Antu Sanadi Copyright: Copyright c 2012...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. OpenVAS Vulnerability Test $Id: secpodms12-073.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IIS FTP Service Information Disclosure Vulnerability 2761226 Authors: Rachana Shetty Copyright: Copyright...

Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities (2761451)

This host is missing a critical security update according to Microsoft Bulletin MS12-071. OpenVAS Vulnerability Test $Id: secpodms12-071.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities 2761451 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)

This host is missing a critical security update according to Microsoft Bulletin MS12-075. OpenVAS Vulnerability Test $Id: secpodms12-075.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2761226 Authors: Rachana Shetty Copyright:...

MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. OpenVAS Vulnerability Test $Id: secpodms11-079.nasl 5958 2017-04-17 09:02:19Z teissa $ MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities 2544641 Authors: Madhuri D Copyright:...

Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)

This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. OpenVAS Vulnerability Test $Id: secpodms12-059.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Visio/Viewer Remote Code Execution Vulnerability 2733918 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. OpenVAS Vulnerability Test $Id: secpodms12-055.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability 2731847 Authors: Madhuri D Copyright: Copyright c...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. OpenVAS Vulnerability Test $Id: secpodms12-057.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2731879 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod,...

Analysis Reveals Flame Malware's Process Injection Tricks

As researchers continue to pull apart the Gauss malware code, looking for spreading mechanisms and infection vectors, there is still some work being done on Gauss’s cousin Flame, as well. New research from CERT Polska reveals how deeply Flame burrows itself into infected systems, showing that the...

Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)

This host is missing an important security update according to Microsoft Bulletin MS12-048. OpenVAS Vulnerability Test $Id: secpodms12-048.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Shell Remote Code Execution Vulnerability 2691442 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod...

Microsoft Plans To Fix 16 Vulnerabilities With July Patch Release

Microsoft has announced it will issue nine bulletins for its July Patch Tuesday release next week. Included in the update are three critical patches for security holes that, if left unaddressed, could result in remote code execution on vulnerable systems. In all, the Redmond, Washington company...

Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2685939)

This host is missing a critical security update according to Microsoft Bulletin MS12-036. OpenVAS Vulnerability Test $Id: secpodms12-036.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability 2685939 Authors: Rachana Shetty Copyright: Copyright ...

Microsoft Internet Explorer Multiple Vulnerabilities (2699988)

This host is missing a critical security update according to Microsoft Bulletin MS12-037. OpenVAS Vulnerability Test $Id: secpodms12-037.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2699988 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPo...

How The Flame Malware Stayed Hidden For So Long

The past week has brought to light more revelations about the mysterious Flame or sKyWIper worm that was first identified at the end of May. Among them: the eye-popping admission from Microsoft that the malware’s authors found a way to use that company’s Windows Update feature to distribute the...

Snack Attack: Analyzing Flame's Replication Pattern

The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modul...

Microsoft Details Flame Hash-Collision Attack

The details of the collision attack used by the Flame malware authors to create a forged code-signing certificate for Microsoft code are beginning to emerge, and the company said that the attackers used an MD5 hash collision specifically to ensure that their attack would work on machines running...