{"uuid": "13c084a7-92b4-4b29-91d6-3f78f65535e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3900", "type": "seen", "source": "https://t.me/hacking_Attack/96835", "content": "ableCertPaddingCheck\u201d=\u201d1\u201d\n[HKEY_LOCAL_MACHINE\\Software\\Wow6432Node\\Microsoft\\Cryptography\\Wintrust\\Config] \u201cEnableCertPaddingCheck\u201d=\u201d1\u201d\n\n \nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2013-3900/properties-pre-fix.jpg \n<figcaptionMalicious DLL shows as signed pre-fix\u200b\u200b\u200b \n\nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2013-3900/after-fix.jpg \n<figcaptionMalicious DLL shows as unsigned after the fix \nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Nginxpwner\nOnce these Registry keys are enabled, you can see how differently Microsoft validates the signature in the malicious d3dcompiler_47.dll DLL used in the 3CX supply chain attack. However, even if you add the Registry keys to apply the fix, they will be removed once you upgrade to Windows 11, making your device vulnerable again.\nPSA: Upgrading to #Windows11 wipes out security mitigations for CVE-2013-3900, meaning that if you upgrade you must re-apply said mitigations.\n\n\u2014 Matty (@ThePhoenixVents) January 5, 2023\nAs cybercriminals have recently exploited this vulnerability in attacks, such as the 3CX supply chain and a Zloader malware distribution campaign in January, it has become clear that the flaw needs to be fixed, even if it inconveniences developers.\nThe problem is that many people are unaware of this flaw, and they may assume that a malicious file is trustworthy because Windows reports it as being so.\nWill Dormann, a security researcher, warned that \u201cwhen a fix is optional, the masses aren\u2019t going to be protected.\u201d\n\nTo test the optional fix, I enabled it and used my computer as usual throughout the day without encountering any issues that made me regret my decision.Although some installers, such as Google Chrome, may not show as signed due to the fix, the added protection is worth the inconvenience.\n\nBleepingComputer has contacted Microsoft regarding the continued abuse of this vulnerability and the fact that the fix is optional, but no response has been received yet. \nTrending: Attackers Could Exploit Flaw in WiFi Protocol to Hijack TCP Connections Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-20-300x150.png Microsoft\u2019s Misconfigured Application Allowed for Real-Time Breach Attempts on Bing.comMarch 31, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-19-300x150.png Major Companies Hit in Ongoing 3CX VoIP Supply Chain AttackMarch 30, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-17-300x150.png Attackers Could Exploit Flaw in WiFi Protocol to Hijack TCP ConnectionsMarch 29, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-16-300x150.png MacStealer: The new info-stealing malware targeting Mac usersMarch 28, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:01:00.368413Z"}