387 matches found
MS13-045: Vulnerability in Windows Essentials Could Allow Information Disclosure (2813707)
The version of Windows Essentials 2011 or 2012 installed on the remote host has an information disclosure vulnerability. Windows Writer, part of Windows Essentials, fails to properly handle specially crafted URLs. A remote attacker could exploit this by tricking a user into opening a maliciously...
Microsoft Malware Protection Engine CVE-2013-1346 Remote Code Execution Vulnerability
Description Microsoft Malware Protection Engine is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code with LocalSystem account privileges. Failed exploit attempts will result in a denial-of-service condition. Microsoft Malware Protection...
Windows Live Essentials Improper URI Handling Vulnerability (MS13-045; CVE-2013-0096)
An information disclosure vulnerability exists when Windows Live Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited this vulnerability could perform various actions on behalf of the logged-on user. These actions include the ability to overwrite files a...
Microsoft Security Essentials < v4.2 Local Privilege Escalation Vulnerability
Binary data 6818.prm...
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
Description Microsoft Windows Essentials is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Essentials 2011 Microsoft Windows Essentials 2012 Recommendations...
Microsoft Security Essentials本地权限提升漏洞
BUGTRAQ ID: 59645 Microsoft Security Essential（微软安全软件），是微软安全中心推出的一款用于您的计算机的全新、免费的反恶意软件。 Microsoft Security Essentials 存在本地权限提升漏洞，攻击者可利用此漏洞在LocalSystem账户的上下文中执行任意代码。此漏洞源于解析特制文件时，对路径名的验证不足。 0 Microsoft Security Essentials 厂商补丁： Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Vulnerability in Microsoft Security Essentials <v4.2
Hi @ll, versions of Microsoft Security Essentials before the current v4.2 see https://support.microsoft.com/kb/2805304 have a vulnerability that could lead to execution of arbitrary code in the security context of the LocalSystem account almost like https://support.microsoft.com/kb/2781197 alias...
Microsoft Security Essentials Code Execution
Hi @ll, versions of Microsoft Security Essentials before the current v4.2 see have a vulnerability that could lead to execution of arbitrary code in the security context of the LocalSystem account almost like alias . The "UninstallString" written to...
PT-2013-1931
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Desk...
CVE-2012-6357: Undefined Security Weakness
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors...
CVE-2013-0457: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid...
PT-2013-1933
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to gain privileges and bypass intended restrictions on...
CVE-2012-6356: Undefined Security Weakness
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation...
PT-2013-1594
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Des...
PT-2013-1598
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 IBM Tivoli Asset Management for IT versions 6.2 through 7.2 IBM Tivoli Service Request Manager versions 7.1 and 7.2 IBM Maximo...
Why I decided to uninstall Microsoft Security Essentials Antivirus?
Today I decided to remove Microsoft Security Essentials Antivirus from my system because Security Essentials failed another certification test by independent testing lab, AV-Test Institute. Microsoft's Security Essentials antivirus for Windows XP, Vista, and Windows 7 is a free add-on to Windows...
Why I decided to uninstall Microsoft Security Essentials Antivirus?
Today I decided to remove Microsoft Security Essentials Antivirus from my system because Security Essentials failed another certification test by independent testing lab, AV-Test Institute. Microsoft's Security Essentials antivirus for Windows XP, Vista, and Windows 7 is a free add-on to Windows...
CVE-2010-5183: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...
CVE-2012-1443
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....
CVE-2012-1420
The CVE-2012-1420 entry concerns multiple antivirus products (Quick Heal/Cat QuickHeal 11.00; Command Antivirus 5.2.11.5; F-Prot 4.6.2.117; Fortinet 4.2.254.0; K7 9.77.3565; Kaspersky 7.0.0.125; Antimalware Engine 1.1.6402.0; Microsoft Security Essentials 2.0; NOD32 5795; Norman 6.06.12; Panda 10...