213 matches found
Microsoft Windows Authenticode 安全漏洞
Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
PT-2021-6307 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the implementation of the Windows Authenticode code signing technology in the Microsoft Windows...
SigFlip - A Tool For Patching Authenticode Signed PE Files (Exe, Dll, Sys ..Etc) Without Invalidating Or Breaking The Existing Signature
SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrity checks or P...
CVE-2021-33782
Windows Authenticode Spoofing Vulnerability...
CVE-2021-33782
Windows Authenticode Spoofing Vulnerability...
Spoofing
Windows Authenticode Spoofing Vulnerability...
CVE-2021-33782
Windows Authenticode Spoofing Vulnerability...
CVE-2021-33782 Windows Authenticode Spoofing Vulnerability
...
CVE-2021-33782
Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.
CVE-2021-33782: Undefined Security Weakness
Windows Authenticode Spoofing Vulnerability...
Windows Authenticode Spoofing Vulnerability
...
Microsoft Windows Authenticode 安全漏洞
Microsoft Windows Authenticode is a code-signing technology from Microsoft Corporation USA that identifies the publisher of Authenticode-signed software. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for...
PT-2021-5052
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in the representation of information by the user interface in the implementation of the Windows Authenticode code signing technology in the Microsoft Windows...
Microsoft Windows UAC Privilege Escalation Vulnerability
Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...
Microsoft Windows UAC Privilege Escalation
Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...
Cisco AnyConnect Secure Mobility Client 4.8.01090 Privilege Escalation Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows version 4.8.01090 suffer from a privilege escalation vulnerability due to insecure handling of path names. ------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges due to insecure handling...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service Exploit
There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've been able to construct an X.509 certificate that triggers the bug. I've found that...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service
There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've been able to construct an X.509 certificate that triggers the bug. I've found that...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've...