Security Bulletin

RISK: Medium Risk

Microsoft UDDI Services Elevation of Privilege Vulnerability

An elevation of privilege exists in Microsoft Windows when the Universal Description, Discovery, and Integration (UDDI) Services improperly validate or sanitize the search parameter in a FRAME tag. An attacker who successfully exploited this vulnerability could leak authorization cookies or unexpectedly redirect a user to...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3949 Views

RISK: Medium Risk

Microsoft System Center Operations Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft System Center Operations Manager that is caused by the improper validation of input. An attacker who successfully exploited this vulnerability could inject a client-side script into the user's browser. The script could spoof content, disclose...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3829 Views

RISK: Medium Risk

Microsoft Mount Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Mount Manager component improperly processes symbolic links. An attacker who successfully exploited this vulnerability could write a malicious binary to disk and execute it.

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 4138 Views

RISK: Medium Risk

Microsoft XML Core Services Information Disclosure Vulnerabilities

Multiple MSXML Information Disclosure VulnerabilitiesInformation disclosure vulnerabilities exist when Microsoft XML Core Services (MSXML) explicitly allows the use of Secure Sockets Layer (SSL) 2.. An attacker who successfully exploited these vulnerabilities could decrypt portions of encrypted network information traffic. MSXML Information Disclosure VulnerabilityAn...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3974 Views

RISK: High Risk

Microsoft Server Message Block Remote Code Execution Vulnerability

An authenticated remote code execution vulnerability exists in Windows that is caused when Server Message Block (SMB) improperly handles certain logging activities, resulting in memory corruption. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3934 Views

RISK: High Risk

Microsoft RDP Remote Code Execution Vulnerabilities

Remote Desktop Session Host Spoofing Vulnerability A spoofing vulnerability exists when the Remote Desktop Session Host (RDSH) improperly validates certificates during authentication. An attacker who successfully exploited this vulnerability could impersonate the client session. Remote Desktop Protocol DLL Planting Remote Code Execution Vulnerability A...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3931 Views

RISK: High Risk

Microsoft Office Remote Code Execution Vulnerabilities

Multiple Microsoft Office Memory Corruption VulnerabilitiesRemote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 4029 Views

RISK: High Risk

Microsoft Graphics Component Remote Code Execution Vulnerabilities

Multiple OpenType Font Parsing VulnerabilitiesRemote code execution vulnerabilities exist in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. An attacker who successfully exploited these vulnerabilities could take complete control of the affected system. An attacker could then install programs; view...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 4263 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Multiple Memory Corruption VulnerabilitiesRemote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Multiple ASLR Bypass VulnerabilitiesSecurity feature bypass vulnerabilities exist when...

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3852 Views

RISK: Medium Risk

Android AOSP SMS Messaging App Multiple Vulnerabilities

Two vulnerabilities were identified in Google Android, which affect the non-customized version (i.e. original) of the messaging app. One could cause the app to crash while the other could allow an attacker to tamper with the received status and date of...

Last Update Date: 13 Aug 2015 10:40 Release Date: 13 Aug 2015 4152 Views