Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)

This host is installed with Microsoft Windows operating system and is prone to Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmsunauthdigitalcertspoofingvuln.nasl 8323 2018-01-08 14:50:05Z gveerendra $ Microsoft Unauthorized Digital Certificates Spoofing Vulnerability 2728973 Authors:...

Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)

This host is missing a critical security update according to Microsoft Bulletin MS12-045. OpenVAS Vulnerability Test $Id: secpodms12-045.nasl 9122 2018-03-17 14:01:04Z cfischer $ Microsoft Windows Data Access Components Remote Code Execution Vulnerability 2698365 Authors: Rachana Shetty Copyright...

Microsoft Windows File/Directory Names Handling Arbitrary Command Injection Vulnerability

Description Microsoft Windows is prone to a remote command-injection that affects the Windows Shell component vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary shell commands with user-level privileges. This may...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

Microsoft Windows CVE-2012-1865 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

Double free

Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."...

Windows Authenticode Signature Remote Code Execution Vulnerability (2653956)

This host is missing a critical security update according to Microsoft Bulletin MS12-024. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmswindowsactivexcontrolmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Microsoft Windows ActiveX Control Multiple Vulnerabilities 2647518...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2660465)

This host is missing a critical security update according to Microsoft Bulletin MS12-008. OpenVAS Vulnerability Test $Id: secpodms12-008.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2660465 Authors: Sooraj KS Copyright: Copyright c 20...

Design/Logic Flaw

Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a...

CVE-2010-5082

CVE-2010-5082 affects the Windows Color Control Panel (colorcpl.exe) on Windows Server 2008 SP2, R2, and R2 SP1. The vulnerability stems from insecure library loading where sti.dll can be loaded from the current working directory, enabling privilege escalation when a malicious directory also cont...

MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2646524)

This host is missing an important security update according to Microsoft Bulletin MS12-003. OpenVAS Vulnerability Test $Id: secpodms12-003.nasl 5366 2017-02-20 13:55:38Z cfi $ MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2646524 Authors: Antu Sanadi Updated By:...

Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)

This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...

Microsoft DirectX DirectShow Filters Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability. Successful exploits allow remote attackers to execute arbitrary code in the context of the user running an application that uses DirectX. Failed exploit attempts will result in a denial-of-service condition...

Microsoft Windows CSRSS本地权限提升漏洞(MS11-097)

BUGTRAQ ID: 50972 CVE ID: CVE-2011-3408 csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。 Microsoft Windows CSRSS在实现上存在本地权限提升漏洞，成功利用后可允许本地攻击者以管理员权限执行任意代码。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 7 厂商补丁： Microsoft...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. OpenVAS Vulnerability Test $Id: secpodms11-097.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2620712 Authors: Rachana Shetty Copyright:...

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. OpenVAS Vulnerability Test $Id: secpodms11-090.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Time Component Remote Code Execution Vulnerability 2618451 Authors: Sooraj KS Copyright: Copyright c...

Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability (2620704)

This host is missing an important security update according to Microsoft Bulletin MS11-085. OpenVAS Vulnerability Test $Id: secpodms11-085.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability 2620704 Authors: Antu Sanadi Copyright:...

Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)

This host is missing a critical security update according to Microsoft Bulletin MS11-063. OpenVAS Vulnerability Test $Id: secpodms11-063.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2567680 Authors: Antu Sanadi...

CVE-2011-1263

Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...