Wayne Low

An information disclosure and spoofing issue exists in Windows File Explorer that allows an unauthorized network attacker to obtain sensitive information. Specifically, the flaw enables the theft of NTLM hashed passwords. Exploitation can occur when a user is convinced to extract a malicious archive containing a `.library-ms` file; upon extraction, Windows Explorer automatically initiates an SMB authentication request to an attacker-controlled server, leaking the user's NTLM hash. This process can happen without direct user interaction with the file itself. NTLM (New Technology Local Security Authority) hashes are used by Windows for authentication and can be cracked to recover plain-text passwords or used in Pass-the-Hash attacks to impersonate users.

A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to a specific Cisco Secure Client process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker must have valid user credentials on the Windows system.

The issue is related to insufficient input validation in Microsoft Message Queuing (MSMQ) for Windows operating systems. It allows a remote attacker to execute arbitrary code.

The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. This can affect the system, potentially leading to data leaks or other security breaches. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue is related to insufficient input validation in Microsoft Message Queuing (MSMQ) for Windows operating systems. It allows a remote attacker to perform a denial-of-service (DoS) attack.

The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can be exploited to cause a denial of service. This allows an attacker to affect the system.

The issue is related to incorrect code generation management in the Raw Image Extension plugin. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the Raw Image Extension plugin for viewing RAW images. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability. It involves incorrect code generation management in the Raw Image Extension plugin for viewing RAW images. Exploitation of this issue could allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the Raw Image Extension plugin for Microsoft Windows operating systems. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can affect the system.

The issue is related to incorrect code generation management in the Web Media Extensions package, allowing an attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: Microsoft Raw Image Extension (affected versions not specified) Description: The issue is related to a buffer overflow in the MSRawImage Store Raw2Image plugin of the Raw Image Extension. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Raw Image Extension (affected versions not specified) Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. It can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows command injection by an authenticated user.

A buffer overflow issue affects certain NETGEAR devices, allowing an authenticated user to potentially exploit this issue.

The issue is related to stored XSS, which affects certain NETGEAR devices.

The issue is related to stored XSS, which affects certain NETGEAR devices.

The issue affects certain NETGEAR devices, causing a denial of service.

A stack-based buffer overflow issue affects certain NETGEAR devices, allowing an authenticated user to potentially exploit this issue.

The issue is a buffer overflow that can be triggered by an authenticated user.