Security Bulletin

RISK: Medium Risk

Microsoft MSXML Information Disclosure Vulnerability

An information disclosure vulnerability exists that could allow an attacker to read files on the local file system of a user, or read content of web domains where a user is currently authenticated. An attacker could exploit this vulnerability when a user views specially crafted web content that...

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 3378 Views

RISK: Medium Risk

Microsoft TCP/IP Version 6 (IPv6) Denial of Service Vulnerability

A denial of service vulnerability exists in Windows in the IPv6 implementation of TCP/IP. An attacker who successfully exploited this vulnerability could cause the affected system to stop responding.

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 3322 Views

RISK: High Risk

Microsoft Graphics Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that affected Windows components handle specially crafted 2D geometric figures. The vulnerability could allow remote code execution if a user views files containing such specially crafted figures using Internet Explorer. An attacker who successfully exploited this vulnerability could take...

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 3319 Views

RISK: High Risk

Microsoft Forefront Protection Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Forefront Protection for Exchange. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the configured service account.

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 3314 Views

RISK: Medium Risk

Microsoft .NET Framework Multiple Vulnerabilities

POST Request DoS VulnerabilityA denial of service vulnerability exists in Microsoft ASP.NET that could allow an attacker to cause an ASP.NET server to become unresponsive.Type Traversal VulnerabilityAn elevation of privilege vulnerability exists in the Microsoft.NET Framework that could allow an attacker to...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 3563 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Internet Explorer Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists within Internet Explorer during validation of local file installation and during secure creation of registry keys.VBScript Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 3352 Views

RISK: High Risk

Microsoft VBScript Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. If the current user is logged on with...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 3308 Views

RISK: Medium Risk

Adobe Shockwave Player Multiple Memory Corruption Vulnerabilities

Two vulnerabilities have been identified in Adobe Shockwave Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted Shockwave content that, when loaded by the target user, will trigger a memory...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 3588 Views

RISK: Extremely High Risk

Adobe Flash Player Integer Underflow Vulnerability

A vulnerability was identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted content that, when loaded by the target user, will trigger an integer underflow and...

Last Update Date: 7 Feb 2014 Release Date: 5 Feb 2014 4055 Views

RISK: Medium Risk

OpenLDAP Deny of Service Vulnerability

A vulnerability was identified in OpenLDAP. A remote user can cause denial of service conditions. A remote user can send specially crafted search request and then immediately unbind from the server to cause the target slapd service to crash.

Last Update Date: 6 Feb 2014 Release Date: 5 Feb 2014 3369 Views