Security Bulletin

RISK: Medium Risk

FFmpeg Multiple Vulnerabilities

Some vulnerabilities have been reported in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.Some errors within libavcodec/vmnc.c can be exploited to cause out of bounds read...

Last Update Date: 15 Oct 2013 16:19 Release Date: 15 Oct 2013 3180 Views

RISK: Medium Risk

BlackBerry Universal Device Service Wrapper Vulnerability

A vulnerability has been identified in BlackBerry Universal Device Service, which could potentially allow an attacker to obtain escalation of privilege and then execute arbitrary code.

Last Update Date: 10 Oct 2013 10:25 Release Date: 10 Oct 2013 3243 Views

RISK: High Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco products, which can be exploited by attackers to conduct cross site scripting, denial of service, elevation of privilege, security restriction bypass and sensitive information disclosure.

Last Update Date: 10 Oct 2013 10:24 Release Date: 10 Oct 2013 3232 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities

OpenType Font Parsing VulnerabilityA remote code execution vulnerability exists in the way that Windows parses specially crafted OpenType fonts (OTF). An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

Last Update Date: 9 Oct 2013 19:00 Release Date: 9 Oct 2013 3327 Views

RISK: High Risk

Microsoft .NET Framework Remote Code Execution Vulnerabilities

OpenType Font Parsing VulnerabilityA remote code execution vulnerability exists in the way that affected components handle specially crafted OpenType fonts (OTF). The vulnerability could allow remote code execution if a user visits a website hosting an XAML Browser Application (XBAP) containing a specially crafted OTF file...

Last Update Date: 9 Oct 2013 18:58 Release Date: 9 Oct 2013 3274 Views

RISK: High Risk

Microsoft Windows Common Control Library Remote Code Execution Vulnerability

Comctl32 Integer Overflow VulnerabilityA remote code execution vulnerability exists in the way that the Windows common control library handles allocating memory for data structures. The vulnerability could allow remote code execution if an attacker sends a specially crafted web request to an ASP.NET web application running on...

Last Update Date: 9 Oct 2013 18:58 Release Date: 9 Oct 2013 3151 Views

RISK: High Risk

Microsoft SharePoint Server Remote Code Execution Vulnerabilities

Microsoft Excel Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that affected Microsoft Office Services and Web Apps parse content in specially crafted files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs...

Last Update Date: 9 Oct 2013 18:57 Release Date: 9 Oct 2013 3189 Views

RISK: Medium Risk

Microsoft Excel Remote Code Execution Vulnerabilities

A remote code execution vulnerability exists in the way that Microsoft Excel parses content in Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or...

Last Update Date: 9 Oct 2013 18:57 Release Date: 9 Oct 2013 3162 Views

RISK: Medium Risk

Microsoft Word Remote Code Execution Vulnerabilities

A remote code execution vulnerability exists in the way that affected Microsoft Word software parses specially crafted files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 9 Oct 2013 18:56 Release Date: 9 Oct 2013 3206 Views

RISK: Medium Risk

Microsoft Silverlight Information Disclosure Vulnerability

An information disclosure vulnerability exists in how Silverlight handles certain objects in memory.

Last Update Date: 9 Oct 2013 18:56 Release Date: 9 Oct 2013 3304 Views