WinVerifyTrust 签名验证漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900
• https://nvd.nist.gov/vuln/detail/CVE-2013-3900
• https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2013/ms13-098
• https://www.hkcert.org/tc/security-bulletin/microsoft-windows-winverifytrust-signature-validation-vulnerability
• https://www.tenable.com/plugins/nessus/166555
• http://www.wavecn.com/content.php?id=362
• https://nvd.nist.gov/vuln/detail/cve-2013-3900
• https://www.reddit.com/r/sysadmin/comments/sq1kq5/winverifytrust_signature_validation_vulnerability/
• https://cloud.tencent.com.cn/developer/article/1929871
• https://avd.aliyun.com/detail?id=AVD-2013-3900

Related Vulnerabilities

• Microsoft Windows Support Diagnostic Tool 安全漏洞
• Microsoft多个产品条件竞争漏洞(CVE-2022-38047)
• Microsoft多个产品条件竞争漏洞(CVE-2022-38029)
• Microsoft多个产品安全漏洞(CVE-2022-37989)
• Microsoft多个产品安全漏洞(CVE-2022-38041)
• Microsoft多个产品安全漏洞(CVE-2022-38022)
• Microsoft多个产品安全漏洞(CVE-2022-38033)
• Microsoft多个产品安全漏洞(CVE-2022-37991)
• Microsoft多个产品资源管理不当导致资源耗尽漏洞(CVE-2022-37981)
• Microsoft多个产品安全漏洞(CVE-2022-37977)
• Microsoft多个产品安全漏洞(CVE-2022-37987)
• Microsoft多个产品通过欺骗导致权限绕过漏洞(CVE-2022-35770)
• Microsoft多个产品通过欺骗导致权限绕过漏洞(CVE-2022-34689)