Snack Attack: Analyzing Flame's Replication Pattern

The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modul...

Microsoft Details Flame Hash-Collision Attack

The details of the collision attack used by the Flame malware authors to create a forged code-signing certificate for Microsoft code are beginning to emerge, and the company said that the attackers used an MD5 hash collision specifically to ensure that their attack would work on machines running...

DHS Issues Joint Warning On Flame's Windows Update Hack

The U.S. Department of Homeland Security is warning IT administrators and operators of industry control systems about the danger posed by the Flame aka sKyWIper malware after Microsoft acknowledged that the malware is able to spoof its Windows Update service to push malicious code onto vulnerable...

Flame Attackers Used Collision Attack to Forge Microsoft Certificate

The attackers behind the Flame malware used a collision attack against a cryptographic algorithm as part of the method for gaining a forged certificate to sign specific components of the attack tool. Microsoft officials said on Tuesday that it’s imperative for customers to install the update issu...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

This host is installed with Cisco Adaptive Security Appliance and is prone to activeX control remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmsvpnactivexcontrolcodeexecvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft VPN ActiveX Control Remote Code Execution Vulnerabili...

Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)

This host is missing a critical security update according to Microsoft Bulletin MS12-035. OpenVAS Vulnerability Test $Id: secpodms12-035.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2693777 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...

Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)

This host is missing an important security update according to Microsoft Bulletin MS12-033. OpenVAS Vulnerability Test $Id: secpodms12-033.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Prtition Manager Privilege Elevation Vulnerability 2690533 Authors: Rachana Shetty Copyright: Copyright...

Windows Authenticode Signature Remote Code Execution Vulnerability (2653956)

This host is missing a critical security update according to Microsoft Bulletin MS12-024. OpenVAS Vulnerability Test $Id: secpodms12-024.nasl 5346 2017-02-19 08:43:11Z cfi $ Windows Authenticode Signature Remote Code Execution Vulnerability 2653956 Authors: Rachana Shetty Copyright: Copyright c...

Microsoft Expression Design Remote Code Execution Vulnerability (2651018)

This host is missing an important security update according to Microsoft Bulletin MS12-022. OpenVAS Vulnerability Test $Id: secpodms12-022.nasl 6520 2017-07-04 14:28:49Z cfischer $ Microsoft Expression Design Remote Code Execution Vulnerability 2651018 Authors: Madhuri D Copyright: Copyright c 20...

Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)

This host is missing an important security update according to Microsoft Bulletin MS12-021. OpenVAS Vulnerability Test $Id: secpodms12-021.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Visual Studio Privilege Elevation Vulnerability 2651019 Authors: Sooraj KS Copyright: Copyright c 2012...

Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)

This host is missing an important security update according to Microsoft Bulletin MS12-015. OpenVAS Vulnerability Test $Id: secpodms12-015.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities 2663510 Authors: Antu Sanadi Copyright: Copyrigh...

MS Windows C Run-Time Library Remote Code Execution Vulnerability (2654428)

This host is missing a critical security update according to Microsoft Bulletin MS12-013. OpenVAS Vulnerability Test $Id: secpodms12-013.nasl 8724 2018-02-08 15:02:56Z cfischer $ MS Windows C Run-Time Library Remote Code Execution Vulnerability 2654428 Authors: Rachana Shetty Copyright: Copyright...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2660465)

This host is missing a critical security update according to Microsoft Bulletin MS12-008. OpenVAS Vulnerability Test $Id: secpodms12-008.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2660465 Authors: Sooraj KS Copyright: Copyright c 20...

MS Windows Ancillary Function Driver Privilege Elevation Vulnerabilities (2645640)

This host is missing an important security update according to Microsoft Bulletin MS12-009. OpenVAS Vulnerability Test $Id: secpodms12-009.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Ancillary Function Driver Privilege Elevation Vulnerabilities 2645640 Authors: Antu Sanadi Copyright: Copyrigh...

Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities (2651026)

This host is missing a critical security update according to Microsoft Bulletin MS12-016. OpenVAS Vulnerability Test $Id: secpodms12-016.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities 2651026 Authors: Sooraj KS...

Microsoft Windows Color Control Panel Privilege Escalation Vulnerability

Microsoft Windows Server 2008 SP2 is prone to privilege escalation vulnerability. This NVT has been replaced by NVT secpodms12-012.nasl OID:1.3.6.1.4.1.25623.1.0.902791. OpenVAS Vulnerability Test $Id: gbmswincolorcontrolpanelprivescalation.nasl 5659 2017-03-21 11:24:51Z cfi $ Microsoft Windows...

Windows ClickOnce Application Installer Remote Code Execution Vulnerability (2584146)

This host is missing an important security update according to Microsoft Bulletin MS12-005. OpenVAS Vulnerability Test $Id: secpodms12-005.nasl 5341 2017-02-18 16:59:12Z cfi $ Windows ClickOnce Application Installer Remote Code Execution Vulnerability 2584146 Authors: Rachana Shetty Copyright:...

Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)

This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...

MS12-001: Vulnerability in Windows Kernel could allow security Feature bypass: January 10, 2012

None None...

Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

This host is missing a critical security update according to Microsoft Bulletin MS11-100. OpenVAS Vulnerability Test $Id: secpodms11-100.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in .NET Framework Could Allow Elevation of Privilege 2638420 Authors: Sooraj KS Copyright: Copyright c 2011...