Test ID:	1.3.6.1.4.1.25623.1.0.801975
Category:	Windows
Title:	Fraudulent Digital Certificates Spoofing Vulnerability (2607712)
Summary:	Microsoft Windows operating system is prone to a spoofing vulnerability.;; This VT has been superseded by KB2641690 Which is addressed in VT gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl (OID:1.3.6.1.4.1.25623.1.0.802403).
Description:	Summary: Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 Which is addressed in VT gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl (OID:1.3.6.1.4.1.25623.1.0.802403). Vulnerability Insight: The flaw is due to an error when handling the fraudulent digital certificates issued by Comodo and it is not properly validating its identity. Vulnerability Impact: Successful exploitation will allow remote attackers to spoof content, perform phishing attacks or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer. Affected Software/OS: - Microsoft Windows 7 Service Pack 1 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2003 Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior Solution: Apply the Patch from the referenced advisory. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.