Security Bulletin

RISK: High Risk

Adobe Flash Player / AIR Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.

Last Update Date: 11 Jun 2014 14:34 Release Date: 11 Jun 2014 3287 Views

RISK: Medium Risk

Microsoft Remote Desktop Tampering Vulnerability

A tampering vulnerability exists in the Remote Desktop Protocol. The vulnerability may allow an attacker to modify the traffic content of an active RDP session.

Last Update Date: 11 Jun 2014 14:33 Release Date: 11 Jun 2014 3163 Views

RISK: Medium Risk

Microsoft TCP Protocol Denial of Service Vulnerability

A denial of service vulnerability exists in the Windows TCP/IP networking protocol. An attacker who successfully exploited this vulnerability could cause the affected system to stop responding.

Last Update Date: 11 Jun 2014 14:33 Release Date: 11 Jun 2014 3096 Views

RISK: Medium Risk

Microsoft Lync Server Information Disclosure Vulnerability

An information disclosure vulnerability exists when Lync Server fails to properly sanitize specially crafted content. An attacker who successfully exploited this vulnerability could potentially execute scripts in the user’s browser to obtain information from web sessions.

Last Update Date: 11 Jun 2014 14:32 Release Date: 11 Jun 2014 3122 Views

RISK: Medium Risk

Microsoft XML Core Services Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that Microsoft Windows parses XML content. The vulnerability may allow an attacker to access information not otherwise allowed.

Last Update Date: 11 Jun 2014 14:32 Release Date: 11 Jun 2014 3054 Views

RISK: Medium Risk

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that affected Microsoft Office software parses specially crafted files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 11 Jun 2014 14:32 Release Date: 11 Jun 2014 3017 Views

RISK: Extremely High Risk

Microsoft Internet Explorer Cumulative Security Update

TLS Server Certificate Renegotiation VulnerabilityAn information disclosure vulnerability exists in the way that Internet Explorer handles negotiation of certificates in a TLS session. An attacker who successfully exploited this vulnerability could hijack a mutually authenticated TLS connection between Internet Explorer and an arbitrary target server.Internet Explorer Information...

Last Update Date: 11 Jun 2014 14:31 Release Date: 11 Jun 2014 3179 Views

RISK: High Risk

Microsoft Graphics Component Remote Code Execution Vulnerabilities

A remote code execution vulnerability exists in the way that affected components handle specially crafted font files. The vulnerability could allow remote code execution if a user opens a specially crafted file or webpage. An attacker who successfully exploited this vulnerability could take complete control of an affected...

Last Update Date: 11 Jun 2014 14:31 Release Date: 11 Jun 2014 3087 Views

RISK: High Risk

Chrome for Android OpenSSL Security Vulnerability

A vulnerability was identified in Chrome for Android, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, and compromise a vulnerable system.

Last Update Date: 10 Jun 2014 10:17 Release Date: 10 Jun 2014 3220 Views

RISK: High Risk

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenSSL, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system. An error when handling SSL/TLS handshakes can be exploited...

Last Update Date: 6 Jun 2014 11:01 Release Date: 6 Jun 2014 3543 Views