CVE-2009-2510

The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domai...

EUVD-2009-2506

Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities v...

CVE-2009-2511

CVE-2009-2511 corresponds to a vulnerability in the Windows CryptoAPI: an integer overflow while parsing ASN.1 Object Identifiers (X.509) that can enable spoofing by a certificate issued by a trusted CA. Affected products include Windows 2000 SP4, Windows XP (SP2/SP3), Windows Server 2003 (SP1/SP...

CVE-2009-2511

Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities v...

CVE-2009-2510

Technical details for CVE-2009-2510 are not publicly provided in the connected documents. Please monitor for updates.

CVE-2009-2510: Undefined Security Weakness

The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domai...

CVE-2009-2511: Undefined Security Weakness

Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities v...

Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)

This host is missing a critical security update according to Microsoft Bulletin MS09-056. OpenVAS Vulnerability Test $Id: secpodms09-056.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities 974571 Authors: Sharath S Updated By: Madhuri D on 2010-11-...

Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)

This host is missing a critical security update according to Microsoft Bulletin MS09-056. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft CryptoAPI certificate spoofing

Certificate name spoofing with NULL byte...

MS09-056: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)

The remote Windows host contains a version of the Microsoft Windows CryptoAPI that is affected by multiple vulnerabilities : - A spoofing vulnerability exists in the Microsoft Windows CryptoAPI component when parsing ASN.1 information from X.509 certificates. An attacker who successfully exploite...

Preemptive Protection against Microsoft CryptoAPI Null Truncation in X.509 Common Name Vulnerability (MS09-056)

A spoofing vulnerability has been reported in the Microsoft Windows CryptoAPI component when parsing ASN.1 information from X.509 certificates. The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and...

Microsoft Security Bulletin MS09-056 - Important Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)

Microsoft Security Bulletin MS09-056 - Important Vulnerabilities in Windows CryptoAPI Could Allow Spoofing 974571 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed vulnerabilities in Microsoft Windows. The...

Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056; CVE-2009-2511)

The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...

Microsoft Capicom ActiveX控件远程代码执行漏洞（MS07-028）

CAPICOM.Certificates是一种ActiveX控件，允许脚本程序根据安全的基本Windows CryptoAPI功能加密数据。 CAPICOM.Certificates实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft CAPICOM和BizTalk Server中的加密API组件对象模型证书ActiveX控件（CAPICOM.dll）处理某些用户输入时存在漏洞。如果传递了意外数据，则ActiveX控件可能失败，并允许远程执行代码。 Microsoft CAPICOM Microsoft BizTalk Server 2004 SP2...

Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)

CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...

Microsoft CryptoAPI Version Check

Binary data 3381.prm...

Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)

Hotfix to fix Certificate Validation Flaw Q329115 is not installed. The vulnerability could enable an attacker who had a valid end-entity certificate to issue a subordinate certificate that, although bogus, would nevertheless pass validation. Because CryptoAPI is used by a wide range of...

Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)

Hotfix to fix Certificate Validation Flaw Q329115 is not installed. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)

The remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11145; scriptversion"1.49"; scriptcvsdate"Date: 2018/11/15 20:50:29"...