Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)

This host is missing a critical security update according to Microsoft Bulletin MS12-075. OpenVAS Vulnerability Test $Id: secpodms12-075.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2761226 Authors: Rachana Shetty Copyright:...

Microsoft Office Remote Code Execution Vulnerabilities (2720184)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office Remote Code Execution Vulnerabilities 2720184 Authors: Antu Sanadi Copyright: Copyright c 2012...

MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. OpenVAS Vulnerability Test $Id: secpodms11-079.nasl 5958 2017-04-17 09:02:19Z teissa $ MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities 2544641 Authors: Madhuri D Copyright:...

Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)

This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. OpenVAS Vulnerability Test $Id: secpodms12-057.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2731879 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod,...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. OpenVAS Vulnerability Test $Id: secpodms12-055.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability 2731847 Authors: Madhuri D Copyright: Copyright c...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. OpenVAS Vulnerability Test $Id: secpodms12-059.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Visio/Viewer Remote Code Execution Vulnerability 2733918 Authors: Antu Sanadi Copyright: Copyright c...

Analysis Reveals Flame Malware's Process Injection Tricks

As researchers continue to pull apart the Gauss malware code, looking for spreading mechanisms and infection vectors, there is still some work being done on Gauss’s cousin Flame, as well. New research from CERT Polska reveals how deeply Flame burrows itself into infected systems, showing that the...

Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)

This host is missing an important security update according to Microsoft Bulletin MS12-048. OpenVAS Vulnerability Test $Id: secpodms12-048.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Shell Remote Code Execution Vulnerability 2691442 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod...

Microsoft Plans To Fix 16 Vulnerabilities With July Patch Release

Microsoft has announced it will issue nine bulletins for its July Patch Tuesday release next week. Included in the update are three critical patches for security holes that, if left unaddressed, could result in remote code execution on vulnerable systems. In all, the Redmond, Washington company...

Microsoft Internet Explorer Multiple Vulnerabilities (2699988)

This host is missing a critical security update according to Microsoft Bulletin MS12-037. OpenVAS Vulnerability Test $Id: secpodms12-037.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2699988 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPo...

Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability (2685939)

This host is missing a critical security update according to Microsoft Bulletin MS12-036. OpenVAS Vulnerability Test $Id: secpodms12-036.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Remote Desktop Protocol Remote Code Execution Vulnerability 2685939 Authors: Rachana Shetty Copyright: Copyright ...

How The Flame Malware Stayed Hidden For So Long

The past week has brought to light more revelations about the mysterious Flame or sKyWIper worm that was first identified at the end of May. Among them: the eye-popping admission from Microsoft that the malware’s authors found a way to use that company’s Windows Update feature to distribute the...

Snack Attack: Analyzing Flame's Replication Pattern

The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modul...

Microsoft Details Flame Hash-Collision Attack

The details of the collision attack used by the Flame malware authors to create a forged code-signing certificate for Microsoft code are beginning to emerge, and the company said that the attackers used an MD5 hash collision specifically to ensure that their attack would work on machines running...

DHS Issues Joint Warning On Flame's Windows Update Hack

The U.S. Department of Homeland Security is warning IT administrators and operators of industry control systems about the danger posed by the Flame aka sKyWIper malware after Microsoft acknowledged that the malware is able to spoof its Windows Update service to push malicious code onto vulnerable...

Flame Attackers Used Collision Attack to Forge Microsoft Certificate

The attackers behind the Flame malware used a collision attack against a cryptographic algorithm as part of the method for gaining a forged certificate to sign specific components of the attack tool. Microsoft officials said on Tuesday that it’s imperative for customers to install the update issu...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

This host is installed with Cisco Adaptive Security Appliance and is prone to activeX control remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmsvpnactivexcontrolcodeexecvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft VPN ActiveX Control Remote Code Execution Vulnerabili...

Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)

This host is missing a critical security update according to Microsoft Bulletin MS12-035. OpenVAS Vulnerability Test $Id: secpodms12-035.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2693777 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...

Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)

This host is missing an important security update according to Microsoft Bulletin MS12-033. OpenVAS Vulnerability Test $Id: secpodms12-033.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Prtition Manager Privilege Elevation Vulnerability 2690533 Authors: Rachana Shetty Copyright: Copyright...