Description

Download Security Update 26 Release Notes (PDF)

Use the LiveUpdate feature of Symantec NetRecon 3.6 to download the security update.

Symantec NetRecon 3.6 Security Update 26 (SU 26) detects and reports 52 new vulnerabilities.

New vulnerabilities

• Microsoft Hotfix Conflict Vulnerability
• Microsoft IE Telnet Client File Overwrite Vulnerability
• Microsoft IIS Various Domain User Account Access Vulnerability
• Microsoft IIS MIME Header Denial of Service Vulnerability
• Microsoft Windows XP Pro Upgrade IE Patch Downgrade Vulnerability
• Microsoft Internet Explorer MIME Type File Extension Spoofing Vulnerability
• Microsoft Internet Explorer Known Local File Script Execution Vulnerability
• Microsoft IIS HTTP Redirect Cross Site Scripting Vulnerability
• Microsoft Internet Explorer Cookie Content Disclosure Vulnerability
• Microsoft IIS Administrative Pages Cross Site Scripting Vulnerabilities
• Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability
• Microsoft Jet Database Engine Remote Code Execution Vulnerability
• Microsoft Windows Logon Process Remote Buffer Overflow Vulnerability
• Multiple Vendor TCP Sequence Number Approximation Vulnerability
• Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability
• Windows Kernel Font Buffer Overflow Vulnerability
• Microsoft Windows Kernel Object Management Denial Of Service Vulnerability
• Microsoft Windows Message Queuing Remote Buffer Overflow Vulnerability
• Microsoft Windows Kernel CSRSS Local Privilege Escalation Vulnerability
• Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability
• Microsoft Exchange Server SMTP Extended Verb Buffer Overflow Vulnerability
• Microsoft Windows Kernel Access Validation Request Buffer Overflow Vulnerability
• Multiple Vendor TCP/IP Implementation ICMP Remote Denial Of Service Vulnerabilities
• Microsoft Windows Shell Remote Code Execution Vulnerability
• Microsoft Windows Explorer Preview Pane Script Injection Vulnerability
• Microsoft Windows ASN.1 Library Bit String Processing Variant Heap Corruption Vulnerability
• Multiple Vendor Telnet Client Remote Information Disclosure Vulnerability
• Microsoft Internet Explorer PNG Image Rendering Buffer Overflow Vulnerability
• Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability
• Microsoft Internet Explorer XML Redirect Information Disclosure Vulnerability
• Microsoft Internet Explorer Unspecified DigWebX ActiveX Control Vulnerability
• Microsoft Internet Explorer Unspecified GIF And BMP Denial Of Service Vulnerability
• Microsoft Agent Trusted Content Spoofing Vulnerability
• Microsoft Windows Web Client Service Remote Code Execution Vulnerability
• Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability
• Microsoft Exchange Server Outlook Web Access HTML Injection Vulnerability
• Microsoft Windows HTML Help Remote Code Execution Vulnerability
• Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overflow Vulnerability
• Microsoft Windows Color Management Module ICC Profile Buffer Overflow Vulnerability
• Microsoft Windows Kernel Unspecified Remote Desktop Protocol Denial Of Service Vulnerability
• Microsoft Internet Explorer JPEG Image Rendering Unspecified Buffer Overflow Vulnerability
• Microsoft Internet Explorer JPEG Image Rendering CMP Fencepost Denial Of Service Vulnerability
• Microsoft Internet Explorer JPEG Image Rendering Memory Consumption Denial Of Service Vulnerability
• Microsoft Internet Explorer JPEG Image Rendering Unspecified Denial Of Service Vulnerability
• Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability
• Microsoft Internet Explorer Web Folder Behaviors Cross-Domain Scripting Vulnerability
• Microsoft Windows Plug and Play Buffer Overflow Vulnerability
• Microsoft Windows Print Spooler Buffer Overflow Vulnerability
• Microsoft Internet Explorer Unspecified SharePoint Portal Services Log Sink ActiveX Vulnerability
• Microsoft Windows Telephony Service Buffer Overflow Vulnerability
• Microsoft Windows Kerberos Denial Of Service Vulnerability
• Microsoft Windows Kerberos PKINIT Man In The Middle Vulnerability

For vulnerability details, download the Security Update 26 Release Notes (PDF).