Security Bulletin

RISK: High Risk

NTP Abused to Launch Distributed Reflection Denial of Service Attack (DRDoS)

Network Time Protocol (NTP) and other UDP-based protocols can be used to amplify denial-of-service attacks. Servers running the NTP based on implementations of ntpd prior to version 4.2.7p26 that use the default unrestricted query configuration...

Last Update Date: 3 Apr 2014 Release Date: 7 Feb 2014 6508 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can bypass sandbox controls. A remote user can create specially crafted content that, when loaded by the target...

Last Update Date: 3 Apr 2014 09:11 Release Date: 3 Apr 2014 4183 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Two vulnerabilities have been identified in Adobe Flash Player, which can be exploited by remote user to cause arbitrary code to be executed on the target user's system.A remote user can create specially crafted content that, when loaded by the target user on a...

Last Update Date: 31 Mar 2014 18:01 Release Date: 31 Mar 2014 4395 Views

RISK: High Risk

Adobe Reader Bypass Sandbox Restrictions Vulnerabilities

Two vulnerabilities have been identified in Adobe Reader, which can be exploited by remote user to cause arbitrary code to be executed on the target user's system.A remote user can create a specially crafted PDF file that, when loaded by the target user, ...

Last Update Date: 31 Mar 2014 18:00 Release Date: 31 Mar 2014 4232 Views

RISK: High Risk

Symantec LiveUpdate Administrator Unauthenticated Vulnerabilities

Two vulnerabilities have been identified in Symantec LiveUpdate Administrator, which can be exploited by remote user to inject SQL commands. A remote user can reset account passwords to arbitrary values.The management web interface does not properly validate user-supplied input. A remote user can...

Last Update Date: 31 Mar 2014 18:00 Release Date: 31 Mar 2014 4122 Views

RISK: Medium Risk

Synology DiskStation Manager Multiple Vulnerabilities

Multiple vulnerabilities were identified in Synology DiskStation Manager, which can be exploited by malicious people to cause a DoS (Denial of Service), conduct spoofing attacks, and compromise a vulnerable system.

Last Update Date: 28 Mar 2014 09:40 Release Date: 28 Mar 2014 3945 Views

RISK: Medium Risk

Cisco IOS Multiple Vulnerabilities

Multiple vunlerabilities have been identified in Cisco IOS, which can be exploited to cause denial of service.

Last Update Date: 27 Mar 2014 09:26 Release Date: 27 Mar 2014 3945 Views

RISK: Medium Risk

Kaspersky Internet Security Regex Processing Vulnerability

A vulnerability has been identified in Kaspersky Internet Security. which could allow a remote user to cause denial of service conditions.A remote user can create a specially crafted file that, when scanned by the target user, will cause the anti-virus service to hang...

Last Update Date: 26 Mar 2014 Release Date: 24 Mar 2014 3844 Views

RISK: Medium Risk

PHP Fileinfo libmagic AWK File Processing Denial of Service Vulnerability

A vulnerability has been identified in PHP, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the libmagic library bundled in the Fileinfo extension when processing certain AWK scripts, which can be...

Last Update Date: 26 Mar 2014 18:53 Release Date: 26 Mar 2014 3954 Views

RISK: Extremely High Risk

Microsoft Word RTF File Processing Vulnerability

A vulnerability has been identified in Microsoft Word. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted RTF file that, when loaded by the target user, will trigger a memory...

Last Update Date: 25 Mar 2014 09:19 Release Date: 25 Mar 2014 4134 Views