Test ID:	1.3.6.1.4.1.25623.1.0.802912
Category:	Windows
Title:	Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
Summary:	Microsoft Windows operating system is prone to Spoofing vulnerability.
Description:	Summary: Microsoft Windows operating system is prone to Spoofing vulnerability. Vulnerability Insight: Microsoft certificate authorities, which are stored outside the recommended secure storage practices can be misused. An attacker could use these certificates to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. Vulnerability Impact: Successful exploitation could allow remote attackers to use the certificates to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. Affected Software/OS: - Microsoft Windows XP x32 Edition Service Pack 3 and prior - Microsoft Windows XP x64 Edition Service Pack 2 and prior - Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior - Microsoft Windows 2003 x32/x64 Edition Service Pack 2 and prior - Microsoft Windows Vista x32/x64 Edition Service Pack 2 and prior - Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior - Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 and prior Solution: Apply the patch from the referenced advisory. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.