July 2013 Microsoft Patch Tuesday Security Updates

A critical Windows kernel vulnerability, publicly disclosed in May by a Google security engineer, will be patched tomorrow when Microsoft releases its July Patch Tuesday security updates. Tavis Ormandy, who has controversially disclosed Windows vulnerability details in the past, made a posting to...

Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

VideoLAN VLC Media Player 2.0.7 - '.png' Crash (PoC)

!/usr/bin/python VLC Media Player 2.0.7 PNG Crash PoC Vendor Homepage: http://www.videolan.org/ Version: 2.0.7 Tested on: Windows 7 64-bit Author: Kevin Fujimoto Debug Information: Microsoft R Windows Debugger Version 6.12.0002.633 X86 Copyright c Microsoft Corporation. All rights reserved. wait...

Microsoft Office PNG File Handling Buffer Overflow

Added: 06/18/2013 CVE: CVE-2013-1331 BID: 60408 OSVDB: 94127 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem An error in Microsoft Office 2003 SP3 for Windows when...

Microsoft Windows Print Spooler Service本地权限提升漏洞(CVE-2013-1339)

BUGTRAQ ID: 60407 CVECAN ID: CVE-2013-1339 Microsoft Windows是微软公司推出的一系列操作系统。 打印机被删除时 Microsoft Windows 打印后台处理程序处理内存的方式中存在一个特权提升漏洞。当经过身份验证的攻击者删除打印机连接时，该漏洞可能允许特权提升。攻击者必须拥有有效的登录凭据并能登录才能利用此漏洞。 0 Microsoft Windows Windows Vista 0 Microsoft Windows Windows Server 2012 Microsoft Windows Server 2008...

Microsoft Windows Kernel本地信息泄露漏洞(CVE-2013-3136)(MS13-048)

BUGTRAQ ID: 60357 CVECAN ID: CVE-2013-3136 Microsoft Windows是微软公司推出的一系列操作系统。 如果 Windows 内核不正确地处理内存中的对象，则存在一个信息泄露漏洞。成功利用此漏洞的攻击者可能泄露内核地址中的信息。攻击者必须拥有有效的登录凭据并能本地登录才能利用此漏洞。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft...

CVE-2013-3136

The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory v...

CVE-2013-3138

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service system hang via crafted TCP packets, aka "TCP/IP Integer Overflo...

Information disclosure

The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory v...

Design/Logic Flaw

The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a craft...

CVE-2013-3138

CVE-2013-3138 is a denial-of-service vulnerability arising from an integer overflow in the TCP/IP kernel-mode driver. The affected software set includes Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows Server 2012; Windows RT. An attacker can cause a system...

CVE-2013-1339

Summary (CVE-2013-1339): The Windows Print Spooler component has a memory management flaw during deletion of printer connections across affected Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). This allows remote authenticated users to execu...

Microsoft Windows Print Spooler Components Privilege Escalation Vulnerability (2839894)

This host is missing an important security update according to Microsoft Bulletin MS13-050. OpenVAS Vulnerability Test $Id: secpodms13-050.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Print Spooler Components Privilege Escalation Vulnerability 2839894 Authors: Arun Kallavi Copyright:...

Microsoft Windows Kernel Information Disclosure Vulnerability (2839229)

This host is missing an important security update according to Microsoft Bulletin MS13-048. OpenVAS Vulnerability Test $Id: secpodms13-048.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel Information Disclosure Vulnerability 2839229 Authors: Antu Sanadi Copyright: Copyright c 2013...

Microsoft Internet Explorer Memory Corruption Vulnerability (2755801)

This host is missing a security update according to Microsoft Security Advisory 2755801. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows Kernel-Mode Driver Denial of Service Vulnerability (2845690)

This host is missing an important security update according to Microsoft Bulletin MS13-049. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Print Spooler Components Privilege Escalation Vulnerability (2839894)

This host is missing an important security update according to Microsoft Bulletin MS13-050. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows multiple security vulnerabilities

Kernel information leakage, drivers DoS, print spooler privilege escalation...

Microsoft Windows Kernel-Mode Driver Denial of Service Vulnerability (2845690)

This host is missing an important security update according to Microsoft Bulletin MS13-049. OpenVAS Vulnerability Test $Id: secpodms13-049.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Windows Kernel-Mode Driver Denial of Service Vulnerability 2845690 Authors: Antu Sanadi Copyright: Copyrig...

Microsoft Windows Print Spooler Service CVE-2013-1339 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that affects the Print Spooler Service. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers...