182 matches found
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
The Authenticode Signature Verification function in Microsoft Windows WinVerifyTrust does not properly validate the digest of a signed portable executable PE file, which allows user-assisted remote attackers to execute code...
The vulnerability of the WinVerifyTrust function in the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the WinVerifyTrust function in the Windows operating system is related to improper validation of PE files during the verification of Authenticode signatures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created signed PE...
The vulnerability in the implementation of the Windows Authenticode signature technology of the Microsoft Windows operating system allows attackers to perform spoofing attacks.
The vulnerability of the Authenticode signature technology implemented in Microsoft Windows operating systems is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
Microsoft WinVerifyTrust function Remote Code Execution
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files...
‘Malsmoke’ Exploits Microsoft’s E-Signature Verification
Threat actors are exploiting Microsoft’s digital signature verification to steal user credentials and other sensitive information by delivering the ZLoader malware, which previously has been used to distribute Ryuk and Conti ransomware, researchers have found. Researchers at Check Point Research...
The vulnerability in the implementation of the Windows Authenticode signature technology of the Microsoft Windows operating system allows attackers to perform spoofing attacks.
The vulnerability of the Authenticode signature technology implemented in Microsoft Windows operating systems is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
VulnCheck KEV: CVE-2012-0151
The Authenticode Signature Verification function in Microsoft Windows WinVerifyTrust does not properly validate the digest of a signed portable executable PE file, which allows user-assisted remote attackers to execute code...
CVE-2021-36959
Windows Authenticode Spoofing Vulnerability...
CVE-2021-36959
Windows Authenticode Spoofing Vulnerability...
Spoofing
Windows Authenticode Spoofing Vulnerability...
CVE-2021-36959 Windows Authenticode Spoofing Vulnerability
...
CVE-2021-36959 Windows Authenticode Spoofing Vulnerability
...
CVE-2021-36959
Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.
Microsoft Windows Multiple Vulnerabilities (KB5005573)
This host is missing a critical security update according to Microsoft KB5005573 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows Authenticode Spoofing Vulnerability
...
Microsoft Windows Authenticode 安全漏洞
Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
PT-2021-6307 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the implementation of the Windows Authenticode code signing technology in the Microsoft Windows...
SigFlip - A Tool For Patching Authenticode Signed PE Files (Exe, Dll, Sys ..Etc) Without Invalidating Or Breaking The Existing Signature
SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrity checks or P...