July 2013 Microsoft Patch Tuesday Security Updates

A critical Windows kernel vulnerability, publicly disclosed in May by a Google security engineer, will be patched tomorrow when Microsoft releases its July Patch Tuesday security updates. Tavis Ormandy, who has controversially disclosed Windows vulnerability details in the past, made a posting to...

MS Security Advisory 2846338: Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution

A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote host. Scanning a maliciously crafted file can result in arbitrary code execution. This plugin checks if a vulnerable version of MMPE is being used by any of the following applications : - Microsoft Forefro...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...

Quest Defender Desktop Login Component Installed

Defender Desktop Login Component, a two-factor authentication application for protecting a login page, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65929; scriptversion"1.8";...

Quest Defender Desktop Login Component Unspecified Vulnerability

The version of Quest Defender Desktop Login Component installed on the remote Windows host is prior to 5.7.0.4278. It is, therefore, potentially affected by an unspecified security vulnerability according to Quest knowledge base article SOL104608. C Tenable Network Security, Inc...

Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)

This host is missing an important security update according to Microsoft Bulletin MS13-034. OpenVAS Vulnerability Test $Id: secpodms13-034.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Antimalware Client Privilege Elevation Vulnerability 2823482 Authors: Veerendra GG Copyright: Copyright c 2013...

Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)

This host is missing an important security update according to Microsoft Bulletin MS13-034. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-0078

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."...

CVE-2013-0078

CVE-2013-0078 affects the Microsoft Antimalware Client on Windows 8 and Windows RT, where MsMpEng.exe is referenced with an incorrect pathname. This improper pathname handling can allow a local user to gain privileges via a crafted application, constituting a local privilege-escalation vulnerabil...

PT-2013-2082

Name of the Vulnerable Software and Affected Versions Windows Defender versions on Windows 8 and Windows RT Description The issue is related to the Microsoft Antimalware Client in Windows Defender, which uses an incorrect pathname for MsMpEng.exe. This allows local users to gain privileges via a...

Microsoft Windows Defender for Windows 8 and Windows RT Local Privilege Escalation Vulnerability

Description Microsoft Windows Defender for Windows 8 and Windows RT is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of...

CVE-2013-0078: Improper Input Validation

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."...

CVE-2010-5165

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

Race condition

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5165

CVE-2010-5165 concerns a race condition in Malware Defender 2.6.0 on Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that signature-based malware detectors would not block, via certain user-space memory changes during hook-handler execution. This is describ...

CVE-2010-5165

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1377 · Unknown · Malware Defender

Name of the Vulnerable Software and Affected Versions: Malware Defender version 2.6.0 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware...

CVE-2010-5165: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1246

Name of the Vulnerable Software and Affected Versions Microsoft Windows Defender affected versions not specified Description The issue is related to insufficient access control in Microsoft Windows Defender, which is part of the Windows operating system. Exploitation of this issue may allow an...

Review : GFI LanGuard - Network Security Scanner & Vulnerability Management Tool

I'm a firm believer in multitasking. I tend to work on several things simultaneously; the more monitors I have connected the more things I can do in parallel, and I can bounce back and forth between tasks, given that no one interrupts me. When I find an application that can do more than one thing...