Citrix Provisioning Services 7.x < 7.12 Multiple Vulnerabilities (CTX219580)

The version of Citrix Provisioning Services running on the remote Windows host is either 7.x prior to 7.12 or 7.6 LTSR prior to 7.6.4 LTSR. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to an overflow condition caused by improper...

Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an...

MS17-003: Security Update for Adobe Flash Player (3214628)

The remote Windows host is missing KB3214628. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2925, CVE-2017-2926, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931 -...

HP Performance Center MMS Protocol Buffer Overflow RCE

The version of HP Performance Center installed on the remote Windows host is affected by an unspecified buffer overflow condition in the MMS protocol due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or t...

CVE-2016-7082

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via an EMF file...

CVE-2016-7081

Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors...

Mozilla Firefox ESR 45.x < 45.6 Multiple Vulnerabilities

The version of Mozilla Firefox ESR installed on the remote Windows host is 45.x prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, such as when handling document state changes or HTML5 content, or else due to dereferencing alrea...

ImageMagick 6.x < 6.9.6-6 ReadSGIImage() SGI File Handling DoS

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.6-6. It is, therefore, affected by a denial of service vulnerability due to an out-of-bounds read error in the ReadSGIImage function within file coders/sgi.c when handling iris info dimensions. An unauthenticated,...

Cisco AnyConnect Secure Mobility Client Local Privilege Escalation Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. The vulnerability is due to incorrect...

Wireshark 2.2.x < 2.2.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.2 advisory. - In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion,...

NVIDIA Windows GPU Display Driver 34x.x < 342.00 / 367.x < 369.73 / 367.x < 369.71 (GRID) / 375.x < 375.63 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Windows host is 34x.x prior to 342.00, 367.x prior to 369.73, 367.x prior to 369.71 GRID, or 375.x prior to 375.63. It is, therefore, affected by multiple vulnerabilities : - Multiple privilege escalation vulnerabilities exist i...

Apple iTunes < 12.5.1 Multiple Vulnerabilities (uncredentialed Check)

The version of Apple iTunes running on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...

Apple iTunes < 12.5.2 Multiple Vulnerabilities (Uncredentialed Check)

The version of Apple iTunes running on the remote Windows host is prior to 12.5.2 It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in WebKit when handling the location attribute due to improper validation of user-supplied input. An...

Google Chrome < 54.0.2840.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 54.0.2840.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 201611stable-channel-update-for-desktop9 advisory. - browser/extensions/api/dial/dialregistry.cc in Google Chrome before...

Google Chrome < 54.0.2840.87 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 54.0.2840.87. It is, therefore, affected by a vulnerability as referenced in the 201611stable-channel-update-for-desktop advisory. - V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and...

Adobe Flash Player <= 23.0.0.185 Arbitrary Code Execution (APSB16-36)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.185. It is, therefore, affected by an arbitrary code execution vulnerability due to a use-after-free error. An unauthenticated, remote attacker can exploit this, by convincing a user to visi...

Mozilla Firefox 48.x / 49.x < 49.0.2 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is 48.x or 49.x prior to 49.0.2. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the nsTArraybase::SwapArrayElements function during actor destruction with service workers. An...

MS16-127: Security Update for Adobe Flash Player (3194343)

The remote Windows host is missing KB3194343. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 - Multiple use-after-free errors exist that allow an unauthenticated,...

Microsoft Security Rollup Enumeration

Nessus was able to enumerate the Microsoft security rollups installed on the remote Windows host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid93962; scriptversion"1.185";...

Google Chrome < 53.0.2785.143 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.143. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop29 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143...