New answers tagged

0

To answer the second part of your question (What can be done with it?): The curveball vulnerability essentially undermines the trust of a certificate (which is crucial in PKI). This allows an attacker to sign content with a spoofed certificate. The content will appear as trustworthy to a user, even though it is not. Basically everything that uses the ...


3

After seeing multiple answers with mixed conclusions here and in Google searches, as well as no thorough explanations on whether or not Windows 7 is effected by this vulnerability, I took it upon myself to determine the true answer and show my testing process. Below are screenshots of a fresh Windows 10 installation in a Virtual Machine(VM) within which I ...


2

This post on the SANS ISC InfoSec Forums website states Windows 7 is not affected. . .The affected library, crypt32.dll (CryptoAPI), is present in older versions of Windows, including Windows 7. But not all versions of this library are affected. and CMU CERT Coordination Center Vulnerability Note VU#849224 explains Windows 8.1 and prior, as well as ...


Top 50 recent answers are included