Security Bulletin

RISK: High Risk

Microsoft Windows Schannel Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Secure Channel (Schannel) that is caused by an issue in the TLS state machine whereby a client system accepts an RSA key with a shorter key length than the originally negotiated key length. The vulnerability facilitates exploitation of the publicly...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 4105 Views

RISK: High Risk

Microsoft Windows Remote Desktop Protocol Denial of Service Vulnerability

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker creates multiple RDP sessions that fail to properly free objects in memory. Note that the denial of service would not allow an attacker to execute code or to elevate their user rights. ...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3968 Views

RISK: Medium Risk

Microsoft Windows Photo Decoder Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows fails to properly handle uninitialized memory when parsing certain, specially crafted JPEG XR (.JXR) image format files. The vulnerability could allow information disclosure if an attacker runs a specially crafted application on an affected system.

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3882 Views

RISK: Medium Risk

Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Task Scheduler fails to properly validate and enforce impersonation levels. The vulnerability could allow a user with limited privileges on an affected system to leverage Task Scheduler to execute files that they do not have permissions to run.

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3927 Views

RISK: Medium Risk

Microsoft NETLOGON Spoofing Vulnerability

A spoofing vulnerability exists in NETLOGON that is caused when the Netlogon service improperly establishes a secure communications channel belonging to a different machine with a spoofed computer name. To successfully exploit this vulnerability, an attacker would first have to be logged on to...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3898 Views

RISK: Medium Risk

Microsoft Exchange Server Elevation of Privilege Vulnerabilities

Multiple OWA XSS VulnerabilitiesElevation of privilege vulnerabilities exist when Microsoft Exchange Server does not properly sanitize page content in Outlook Web App. An attacker could exploit these vulnerabilities by modifying certain properties within Outlook Web App and then convincing users to browse to the targeted Outlook Web App site...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3940 Views

RISK: High Risk

Apple OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple OS X, which can be exploited to cause remote code execution, elevation of privilege and sensitive information disclosure.

Last Update Date: 12 Mar 2015 09:34 Release Date: 12 Mar 2015 3870 Views

RISK: High Risk

Cisco Products Multiple vulnerabilities

Multiple vulnerabilities have been identified in Cisco products, which can be exploited to allow an unauthenticated, remote attacker to create a denial of service (DoS) condition, or perform a man-in-the-middle attack.

Last Update Date: 12 Mar 2015 09:32 Release Date: 12 Mar 2015 3963 Views

RISK: Medium Risk

Microsoft Windows Kernel Elevation of Privilege Vulnerabilities

Registry Virtualization Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists in the way that Windows Registry Virtualization improperly allows a user to modify the virtual store of another user. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the account of...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3863 Views

RISK: Medium Risk

Microsoft Windows PNG Processing Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows fails to properly handle uninitialized memory when parsing certain, specially crafted PNG image format files. The vulnerability could allow information disclosure if an attacker convinces a user to visit a website that contains specially crafted PNG images.

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3895 Views