KB4015383: Security Updates for the libjpeg Information Disclosure Vulnerability (April 2017)

The remote Windows host is missing security updates. It is, therefore, affected by an information disclosure vulnerability in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Microsoft Office Unsupported Channel Version Detection

According to its Channel version, the installation of Microsoft Office and Microsoft Office Retail on the remote Windows host is no longer supported. Refer to links in See Also for details on currently supported versions for each Channel. - Current Channel : Updated once a month, on the second...

Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an...

Adobe Flash Player <= 23.0.0.185 Arbitrary Code Execution (APSB16-36)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.185. It is, therefore, affected by an arbitrary code execution vulnerability due to a use-after-free error. An unauthenticated, remote attacker can exploit this, by convincing a user to visi...

MS16-127: Security Update for Adobe Flash Player (3194343)

The remote Windows host is missing KB3194343. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 - Multiple use-after-free errors exist that allow an unauthenticated,...

Apple iTunes < 12.4.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker can...

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities. - Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic...

The vulnerability of the Linter Bastion database management system allows a malicious individual to control any service on a remote computer.

The RPC call with number 0x0A "0x0040AF25" allows a malicious individual to control any Windows service on a remote computer where linstmgr.exe is running, even though they have no authority to do so. This could enable the malicious individual to interfere with the normal operation of the service...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...

MS16-039: Security Update for Microsoft Graphics Component (3148522)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to a failure to properly handle objects in memory. An attacker can exploit these...

Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)

The version of Adobe AIR installed on the remote Windows host is equal or prior to version 20.0.0.204. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that a remote attacker can exploit to execute arbitrary code. CVE-2015-8644 - An integer overflow conditi...

LibreOffice < 4.4.6 / 5.x < 5.0.1 Document Bookmark Arbitrary Code Execution

The version of LibreOffice installed on the remote Windows host is prior to 4.4.6 or 5.x prior to 5.0.1. It is, therefore, affected by a memory corruption issue in 'filter/ww8/ww8scan.cxx' due to improper validation of user-supplied input when handling bookmark status positions. A remote attacker...

MS15-121: Security Update for Schannel to Address Spoofing (3081320)

The remote Windows host is affected by a spoofing vulnerability due to a weakness in the Secure Channel SChannel TLS protocol implementation. A man-in-the-middle attacker can exploit this vulnerability to impersonate a victim on any other server that uses the same credentials as those used betwee...

MS15-101: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the Microsoft .NET Framework : - An elevation of privilege vulnerability exists due to improper validation of the number of objects in memory before they are copied into an array. A...

HP Version Control Repository Manager < 7.5.0 Multiple Vulnerabilities (HPSBMU03396) (FREAK)

The version of HP Version Control Repository Manager VCRM installed on the remote Windows host is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows...

Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-06)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 17.0.0.144. It is, therefore, affected by multiple vulnerabilities : - Multiple double-free errors exist that allow an attacker to execute arbitrary code. CVE-2015-0346, CVE-2015-0359 - Multipl...

Wireshark 1.10.x < 1.10.13 / 1.12.x < 1.12.4 Multiple DoS Vulnerabilities

The version of Wireshark installed remote Windows host is 1.10.x prior to 1.10.13, or 1.12.x prior to 1.12.4. It is, therefore, affected by denial of service vulnerabilities in the following items : - ATN-CPDLC dissector CVE-2015-2187 - WCP dissector CVE-2015-2188 - pcapng file parser CVE-2015-21...

McAfee ePolicy Orchestrator 4.x < 4.6.9 / 5.x < 5.1.2 Multiple Vulnerabilities (SB10095)

The version of McAfee ePolicy Orchestrator ePO installed on the remote Windows host is 4.x prior to 4.6.9 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities : - An XXE XML External Entity injection vulnerability exists in the Server Task Log due to an incorrectly...

Adobe AIR <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)

According to its version, the Adobe AIR installed on the remote Windows host is equal or prior to 15.0.0.356. It is, therefore, affected by the following vulnerabilities : - An unspecified improper file validation issue. CVE-2015-0301 - An unspecified information disclosure vulnerability, which c...

ImageMagick < 6.8.9-9 Multiple Vulnerabilities

The remote Windows host is running a version of ImageMagick prior to version 6.8.9-9. It is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exist in the function 'CloneImage' within file 'image.c' that can allow application crashes or information disclosure...