KB2607712: Fraudulent Digital Certificates Could Allow Spoofing
Description
Microsoft is aware of active attacks using at least one fraudulent digital certificate issued by DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store. A fraudulent certificate could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer. While this is not a vulnerability in a Microsoft product, this issue affects all supported releases of Microsoft Windows.
Solution(s)
- install-microsoft-patch-windows-xp-x64-2616676
- install-microsoft-patch-windows-xp-x86-2616676
- install-microsoft-patch-windows-2003-ia64-2616676
- install-microsoft-patch-windows-2003-x64-2616676
- install-microsoft-patch-windows-2003-x86-2616676
- install-microsoft-patch-windows-vista-x64-2616676
- install-microsoft-patch-windows-vista-x86-2616676
- install-microsoft-patch-windows-2008-ia64-2616676
- install-microsoft-patch-windows-2008-x64-2616676
- install-microsoft-patch-windows-2008-x86-2616676
- install-microsoft-patch-windows-7-x64-2616676
- install-microsoft-patch-windows-7-x86-2616676
- install-microsoft-patch-windows-2008-r2-ia64-2616676
- install-microsoft-patch-windows-2008-r2-x64-2616676
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center