Security Bulletin

RISK: Medium Risk

Microsoft Windows Kernel-Mode Driver Elevation of Privilege Vulnerabilities

Microsoft Windows Kernel Memory Disclosure VulnerabilityAn information disclosure vulnerability exists in the Windows kernel-mode driver that could allow the disclosure of kernel memory contents to an attacker. This vulnerability is caused when the Windows kernel-mode driver fails to initialize function buffers in a manner that...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 4021 Views

RISK: High Risk

Microsoft Office Remote Code Execution Vulnerabilities

Microsoft Office Component Use After Free VulnerabilityA remote code execution vulnerability exists in Microsoft Office software that is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. This could corrupt system memory in such a way as to allow an attacker to...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3762 Views

RISK: High Risk

Microsoft Windows Adobe Font Driver Remote Code Execution Vulnerabilities

Adobe Font Driver Denial of Service VulnerabilityA denial of service vulnerability exists in how the Adobe Font Driver manages memory when parsing fonts. A user who visited a specially crafted website or opened a specially crafted file could be affected by this vulnerability. The update addresses this vulnerability...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3876 Views

RISK: High Risk

Microsoft Windows Remote Code Execution Vulnerabilities

WTS Remote Code Execution VulnerabilityA remote code execution vulnerability exists when Windows Text Services improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the logged-on user. DLL Planting Remote Code Execution VulnerabilityA remote code execution...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3923 Views

RISK: High Risk

Microsoft Windows VBScript Scripting Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine, when rendered in Internet Explorer, handles objects in memory. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3958 Views

RISK: High Risk

Cumulative Security Update for Internet Explorer

Multiple Memory Corruption Vulnerabilities in Internet Explorer Remote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. The update addresses the...

Last Update Date: 12 Mar 2015 Release Date: 11 Mar 2015 3869 Views

RISK: High Risk

Apple OS X Xcode Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple OS X Xcode, which can be exploited to cause denial of service and security restriction bypass

Last Update Date: 11 Mar 2015 10:36 Release Date: 11 Mar 2015 3792 Views

RISK: High Risk

Apple iOS and Apple TV Multiple Vulnerabilities

Multiple Vulnerabilities have been identified in Apple iOS and Apple TV, which can be exploited to cause remote code execution, sensitive information disclosure and denial of service.

Last Update Date: 11 Mar 2015 10:34 Release Date: 11 Mar 2015 3881 Views

RISK: Medium Risk

IBM Lotus Notes and Domino Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Lotus Notes and Domino, which can be exploited to cause sensitive information disclosure, security restriction bypass, denial of service, tampering and elevation of privilege.

Last Update Date: 11 Mar 2015 10:32 Release Date: 11 Mar 2015 3937 Views

RISK: High Risk

SSL/TLS Export Cipher "Factoring RSA Export Keys" (FREAK) Vulnerability

A vulnerability has been identified in SSL/TLS. The vulnerability allows attackers to intercept HTTPS connections between vulnerable clients and servers and force them to use ‘export-grade’ cryptography, which can then be decrypted or altered, i.e. conduct a key...

Last Update Date: 9 Mar 2015 Release Date: 5 Mar 2015 6586 Views