Security Bulletin

RISK: High Risk

Adobe Reader Buffer Overflow Vulnerability

A vulnerability has been identified in Adobe Reader, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to an error within CoolType.dll and can be exploited to cause a heap-based buffer overflow. Note...

Last Update Date: 11 Feb 2015 16:36 Release Date: 11 Feb 2015 4173 Views

RISK: Medium Risk

Cisco IOS Denial of Service Vulnerability

A vulnerability was identified in Cisco IOS. A local user can cause denial of service conditions.An unprivileged local user can cause issue IOS Shell commands to cause the target device to crash.

Last Update Date: 11 Feb 2015 16:35 Release Date: 11 Feb 2015 3944 Views

RISK: Medium Risk

Microsoft Virtual Machine Manager Elevation of Privilege Vulnerability

A vulnerability exists in Virtual Machine Manager (VMM) when VMM improperly validates user roles. The vulnerability could allow elevation of privilege if an attacker logs on an affected system. An attacker must have valid Active Directory logon credentials and be able to log on with those...

Last Update Date: 11 Feb 2015 10:27 Release Date: 11 Feb 2015 3898 Views

RISK: Medium Risk

Microsoft Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows fails to properly handle uninitialized memory when parsing certain, specially crafted TIFF image format files. The vulnerability could allow information disclosure if an attacker runs a specially crafted application on an affected system.

Last Update Date: 11 Feb 2015 10:26 Release Date: 11 Feb 2015 3870 Views

RISK: Medium Risk

Microsoft Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows when it fails to properly validate and enforce impersonation levels. An attacker who successfully exploited this vulnerability could bypass impersonation-level security checks and gain elevated privileges on a targeted system. This vulnerability can be exploited only in...

Last Update Date: 11 Feb 2015 10:25 Release Date: 11 Feb 2015 3810 Views

RISK: Medium Risk

Microsoft Windows Group Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Group Policy application of Security Configuration policies that could cause Group Policy settings on a targeted system to revert to their default, and potentially less secure, state. An attacker could accomplish this by way of a man-in...

Last Update Date: 11 Feb 2015 10:24 Release Date: 11 Feb 2015 3892 Views

RISK: Medium Risk

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Office when it fails to use the Address Space Layout Randomization (ASLR) security feature, allowing an attacker to more reliably predict the memory offsets of specific instructions in a given call stack. The security feature bypass by itself...

Last Update Date: 11 Feb 2015 10:23 Release Date: 11 Feb 2015 3855 Views

RISK: Medium Risk

Microsoft Office Remote Code Execution Vulnerabilities

Excel Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Excel that is caused when Excel improperly handles objects in memory while parsing specially crafted Office files. This could corrupt system memory in such a way as to allow an attacker to execute arbitrary code.Office...

Last Update Date: 11 Feb 2015 10:22 Release Date: 11 Feb 2015 3835 Views

RISK: High Risk

Microsoft Internet Explorer Security Update

Multiple Memory Corruption Vulnerabilities in Internet ExplorerRemote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. The update addresses the vulnerabilities by...

Last Update Date: 11 Feb 2015 10:20 Release Date: 11 Feb 2015 3910 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Driver Remote Code Execution Vulnerabilities

Win32k Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists in the Windows kernel-mode driver (Win32k.sys) that is caused when it improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker could then install...

Last Update Date: 11 Feb 2015 10:19 Release Date: 11 Feb 2015 3855 Views