Security Bulletin

RISK: High Risk

Mozilla Firefox/ Thunderbird Multiple vulnerabilities

Multiple vulnerabilities were identified in Mozilla Firefox and Thunderbird.A remote user can cause arbitrary code to be executed on the target user's system.A remote user can obtian potentially sensitive information.A remote user can bypass same-origin policy.

Last Update Date: 16 Oct 2014 Release Date: 15 Oct 2014 3291 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Driver Remote Code Execution Vulnerabilities

Win32k.sys Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when the Windows kernel-mode driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change...

Last Update Date: 15 Oct 2014 17:55 Release Date: 15 Oct 2014 3411 Views

RISK: Medium Risk

Microsoft Windows FAT32 Disk Partition Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Windows FASTFAT system driver interacts with FAT32 disk partitions. An attacker who successfully exploited this vulnerability could execute arbitrary code with elevated privileges.

Last Update Date: 15 Oct 2014 17:51 Release Date: 15 Oct 2014 3286 Views

RISK: Medium Risk

Microsoft Message Queuing Service Elevation of Privilege Vulnerability

A vulnerability exists in the Microsoft Message Queuing (MSMQ) service that could allow an attacker to elevate privileges on the targeted system.

Last Update Date: 15 Oct 2014 17:51 Release Date: 15 Oct 2014 3113 Views

RISK: Medium Risk

Microsoft Word and Office Web Apps Remote Code Execution Vulnerability

A remote code execution vulnerability exists in way that Microsoft Office software parses certain properties of Microsoft Word files. If an attacker is successful in exploiting this vulnerability, and if the current user is logged on with administrative user rights, the attacker could take complete control of...

Last Update Date: 15 Oct 2014 17:51 Release Date: 15 Oct 2014 3126 Views

RISK: Medium Risk

Microsoft Windows OLE Remote Code Execution Vulnerability

A vulnerability exists in Windows OLE that could allow remote code execution if a user opens a file that contains a specially crafted OLE object. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. If the current user...

Last Update Date: 15 Oct 2014 17:51 Release Date: 15 Oct 2014 3119 Views

RISK: Medium Risk

Microsoft ASP.NET MVC Security Feature Bypass Vulnerability

A cross-site scripting (XSS) vulnerability exists in ASP.NET MVC that could allow an attacker to inject a client-side script into the user's web browser. The script could spoof content, disclose information, or take any action that the...

Last Update Date: 15 Oct 2014 17:51 Release Date: 15 Oct 2014 3253 Views

RISK: High Risk

Microsoft .NET Framework Remote Code Execution Vulnerabilities

.NET ClickOnce Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists in Microsoft .NET Framework that could allow an attacker to elevate privileges on the targeted system..NET Framework Remote Code Execution VulnerabilityA remote code execution vulnerability exists in the way that Microsoft .NET Framework improperly...

Last Update Date: 15 Oct 2014 17:50 Release Date: 15 Oct 2014 3125 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Multiple Elevation of Privilege Vulnerabilities in Internet ExplorerElevation of privilege vulnerabilities exist within Internet Explorer. An attacker who successfully exploited these vulnerabilities could elevate privileges in affected versions of Internet Explorer. These vulnerabilities by themselves do not allow arbitrary code to be run. However, these vulnerabilities...

Last Update Date: 15 Oct 2014 17:50 Release Date: 15 Oct 2014 3148 Views

RISK: High Risk

Adobe Flash Player / AIR Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to compromise a user's system.An unspecified error can be exploited to corrupt memory and subsequently execute arbitrary code.Another unspecified error can be...

Last Update Date: 15 Oct 2014 16:39 Release Date: 15 Oct 2014 3229 Views