Microsoft Releases Two Critical Patches; Promises Update for IE Watering Hole Zero Day

It’s Microsoft Patch Tuesday, and while there were two critical security updates released today, the concern among IT managers is likely over the patch that isn’t there. Microsoft’s monthly security bulletins do not address a zero-day vulnerability in Internet Explorer that has been actively...

Microsoft Windows Print Spooler Service CVE-2013-0011 Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler Service. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems Microsoft Windows 7 for...

MS13-001: Vulnerability in Windows print spooler components could allow remote code execution: January 8, 2013

Resolves a vulnerability in Microsoft Windows that could allow remote code execution if a print server received a specially crafted print job.INTRODUCTIONMicrosoft has released security bulletin MS13-001. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Novell iPrint nipplib.dll client-file-name Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the nipplib componen...

Microsoft Windows multiple security vulnerabilities

RDP user-after-free, Remote Administration Protocol multiple security vulnerabilities, Print Spooler Service format string vulnerability, user-after-free in win32k.sys...

Microsoft Windows Print Spooler 远程代码执行漏洞(CVE-2012-1851)

Bugtraq ID:54928 CVE ID:CVE-2012-1851 Microsoft Windows是一款流行的操作系统。 Microsoft Windows的Print Spooler服务存在格式串漏洞，允许攻击者通过构建特制的应答触发典型的格式串漏洞，可以服务进程上下文执行任意代码。 0 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows vista Microsoft Windows Server 2008 Microsoft Windows 7 厂商解决方案...

CVE-2012-1851

Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spoole...

CVE-2012-1851

CVE-2012-1851 is a format string vulnerability in the Windows Print Spooler service that allows remote code execution. Affected: Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. Root cause: Print Spooler mishandles crafted response...

CVE-2012-1851

Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spoole...

Microsoft Windows Networking Components Remote Code Execution Vulnerabilities (2733594)

This host is missing a critical security update according to Microsoft Bulletin MS12-054. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2012-3595 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

MS12-054: Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594)

The remote Windows host is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists in Windows networking components. The vulnerability is due to the service not properly handling specially crafted RAP requests. CVE-2012-1850 - A remote code execution...

Microsoft Patches Critical MS12-060 Office Flaw Being Used in Targeted Attacks

Microsoft on Tuesday fixed a critical vulnerability in a component of Office, SQL Server and other widely deployed applications that attackers already are using in targeted attacks. The flaw in the Microsoft Common Controls component, which was one of the 26 vulnerabilities fixed in nine bulletin...

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler service. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the complete compromise of affected computers. Technologies Affected...

Microsoft Windows Print Spooler Format String Code Execution (MS12-054; CVE-2012-1851)

A remote code execution vulnerability has been reported in the Windows Print Spooler service...

MS12-054: Vulnerabilities in Windows networking components could allow remote code execution: August 14, 2012

Resolves vulnerabilities in Microsoft Windows that could allow remote code execution if an attacker sends a specially crafted response to a Windows print spooler request.INTRODUCTIONMicrosoft has released security bulletin MS12-054. To view the complete security bulletin, go to one of the followi...

smb-print-text NSE Script

Attempts to print text on a shared printer by calling Print Spooler Service RPC functions. In order to use the script, at least one printer needs to be shared over SMB. If no printer is specified, script tries to enumerate existing ones by calling LANMAN API which might not be always available...

smb-vuln-ms10-061 NSE Script

Tests whether target machines are vulnerable to ms10-061 Printer Spooler impersonation vulnerability. This vulnerability was used in Stuxnet worm. The script checks for the vuln in a safe way without a possibility of crashing the remote system as this is not a memory corruption vulnerability. In...

Fedora Update for foomatic FEDORA-2011-9575

Check for the Version of foomatic OpenVAS Vulnerability Test Fedora Update for foomatic FEDORA-2011-9575 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: foomatic-4.0.7-3.fc15

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...