Remote code execution

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-16968 Windows Camera Codec Pack Remote Code Execution Vulnerability

...

EUVD-2020-8925

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-16968

CVE-2020-16968 describes a remote code execution vulnerability in the Windows Camera Codec Pack caused by improper handling of objects in memory. An attacker who can entice a user to open a specially crafted file could execute arbitrary code in the user’s context; if the user runs with administra...

CVE-2020-16967 Windows Camera Codec Pack Remote Code Execution Vulnerability

...

CVE-2020-16967

CVE-2020-16967 affects the Windows Camera Codec Pack. The vulnerability is a remote code execution due to improper handling of objects in memory, allowing arbitrary code to run in the context of the currently logged-in user. Exploitation requires the user to open a specially crafted file (deliver...

EUVD-2020-8926

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-16968 Windows Camera Codec Pack Remote Code Execution Vulnerability

...

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Authentication Bypass (CVE-2020-4493)

Summary IBM Maximo Asset Management is vulnerable to Authentication Bypass. Vulnerability Details CVEID: CVE-2020-4493 DESCRIPTION: IBM Maximo Asset Management could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. CVSS Base score: 9.8 CVSS...

Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with IBM Operations Analytics Predictive Insights

Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of IBM Operations Analytics Predictive Insights. Information about possible 'input validation' security vulnerability was reported to affect multiple Web GUI pages. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with IBM Operations Analytics Predictive Insights

Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of IBM Operations Analytics Predictive Insights. Information about possible 'path traversal' security vulnerability was reported to affect multiple Web GUI pages. Vulnerability Details Refer to the security bulletins listed in the...

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB486700)

This host is missing an important security update according to Microsoft KB486700 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

Microsoft Outlook 2013 Service Pack 1 Denial of Service Vulnerability (KB4484524)

This host is missing an important security update according to Microsoft KB4484524 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Word 2010 Service Pack 2 Security Feature Bypass Vulnerability (KB4486703)

This host is missing an important security update according to Microsoft KB4486703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Word 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB4486692)

This host is missing an important security update according to Microsoft KB4486692 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB4578961)

Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 KB4578961 Applies to: Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET...

Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4580468)

Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4580468 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...

Description of the security update for Office 2013: October 13, 2020

Description of the security update for Office 2013: October 13, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerability, see Microsoft Common...