Microsoft .NET Framework Multiple Vulnerabilities (2861561)

This host is missing an important security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens Scalance W-7xx Product Family Multiple Vulnerabilities

OVERVIEW Siemens has identified multiple vulnerabilities in the Siemens Scalance W-7xx product family and reported them to ICS-CERT. A software update has been produced by Siemens that mitigates these vulnerabilities. Siemens has tested the software update to validate that it resolves the...

3S CoDeSys Gateway Server Crafted Packet Stack Overflow

Added: 04/29/2013 CVE: CVE-2012-4708 BID: 58032 OSVDB: 90371 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Gateway Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The Gateway Server listens on TCP port 1211. Problem 3S CoDeSys Gatew...

Microsoft .NET Framework CVE-2013-0003 Remote Privilege Escalation Vulnerability

Description Microsoft .NET Framework is prone to a remote privilege-escalation vulnerability. An attackers can exploit this issue to gain escalated privileges within the context of the application; this results in complete control of the affected system. Technologies Affected Microsoft .NET...

PT-2012-3339

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 8.1 and Windows Server 2012 R2 Description A remote code execution issue exists in the way DirectPlay handles specially crafted content. This could allow remote code execution if an attacker convince...

[SECURITY] Fedora 16 Update: libssh-0.5.3-1.fc16

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

Google Updates Chrome for Android, Fixes Several Vulnerabilities

Google has issued a security update for its Chrome operating system on Android devices, resolving seven medium-risk vulnerabilities and paying out a total of $3,500 in rewards to two researchers. On the Google Chrome Blog, software engineer Jay Civelli wrote that the update strengthens Chrome for...

MacControl Trojan Being Used in Targeted Attacks Against OS X Users

Welcome to the age of targeted attacks, Mac users. Perhaps having grown tired of owning Windows machines around the world for the last few years, attackers in China now have taken up the challenge of going after Macs with the same kind of targeted attack tactics that have served them so well in t...

Adobe Acrobat and Reader JPEG DCT Dequantizer Memory Corruption (APSB12-01; CVE-2011-4370)

A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to a buffer overflow while loading specially crafted JPEG image resources from a PDF file. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with...

MS12-003: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2646524)

The Windows Client/Server Run-time Subsystem CSRSS on the remote host has a privilege escalation vulnerability that can be triggered when processing a sequence of specially crafted Unicode characters and trying to access the contents of a memory buffer that has not been properly initialized. If t...

Adobe Flash Player Ambiguous Namespace Memory Corruption (APSB11-28; CVE-2011-2455)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference during type lookup by the AVM2. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Flash Player Malformed ShapeRecords Memory Corruption (APSB11-28; CVE-2011-2452)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference while processing malformed ShapeRecords line segments. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an...

Adobe Flash Player Embedded Flash Object Code Execution (APSB11-28; CVE-2011-2459)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference in the Flash plugin while handling string values. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedd...

Microsoft Active Accessibility DLL Loading Remote Code Execution (MS11-075; CVE-2011-1247)

A remote code execution vulnerability has been reported in Microsoft Windows Active Accessibility component. The vulnerability is due to an error in the way certain applications using OleAut32.dll handle the loading of DLL files. A remote attacker may exploit this vulnerability by enticing a user...

Microsoft Forefront UAG Poisoned Cup of Code Execution (MS11-079; CVE-2011-1969)

The vulnerability is due to a vulnerable Java applet that is installed on a browser by the Forefront Unified Access Gateway UAG server. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page using a Java-enabled Web-browser. Successful exploitation...

Multiple Products .DLL Insecure Library Loading (CVE-2011-0029; CVE-2011-1980)

A remote code execution vulnerability exists in the way that certain products handle the loading of DLL files. Certain applications improperly restrict the path used for loading external libraries. A remote attacker could exploit this vulnerability by manipulating a user to open a legitimate file...

Microsoft Internet Explorer Telnet Handler Remote Code Execution (MS11-057; CVE-2011-1961)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer telnet handler. A remote attacker could trigger this flaw by enticing an unsuspecting user to open a web page containing malicious content. Successful exploitation may enable an attacker to take complete contro...

Microsoft Data Access Components (MDAC) Insecure Library Loading (MS11-059; CVE-2011-1975)

This is a remote code execution vulnerability. The vulnerability is due to the improper way in which the MDAC handles the loading of library files DLL. A remote attacker could trigger this vulnerability by enticing a victim to accept and open an excel related file on a remote folder SMB or Webdav...

Microsoft Windows NDISTAPI Code Execution (MS11-062; CVE-2011-1974)

This is a code execution vulnerability. The vulnerability is due to improper validation of user input by NDISTAPI. A remote attacker could trigger this flaw by convincing an unsuspecting victim to open a malicious file. Successful exploitation of this vulnerability may allow an attacker to gain...

MS11-034: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223)

The remote host is running a version of the Windows kernel that is affected by the following types of vulnerabilities : - Several use-after-free vulnerabilities exist due to the way that Windows kernel-mode drivers manage kernel-mode driver objects. CVE-2011-0662, CVE-2011-0665, CVE-2011-0666,...