Security Bulletin

RISK: High Risk

Microsoft Windows NAT Denial of Service Vulnerability

A denial of service vulnerability exists in the Windows NAT Driver that could cause the target system to stop responding until restarted.

Last Update Date: 14 Aug 2013 15:50 Release Date: 14 Aug 2013 3299 Views

RISK: High Risk

ThinkVantage Access Connections Insecure Library Loading Vulnerability

A vulnerability has been discovered in ThinkVantage Access Connections, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries (mfc71enu.dll and mfc71loc.dll) in an insecure manner. This...

Last Update Date: 14 Aug 2013 15:49 Release Date: 14 Aug 2013 3216 Views

RISK: Medium Risk

Microsoft Windows ASLR Security Feature Bypass Vulnerability

A security feature vulnerability exists in Windows due to improper implementation of Address Space Layout Randomization (ASLR). The vulnerability could allow an attacker to bypass the ASLR security feature, most likely during or in the course of exploiting a remote code execution vulnerability. The attacker could...

Last Update Date: 14 Aug 2013 15:48 Release Date: 14 Aug 2013 3320 Views

RISK: High Risk

Microsoft Windows Remote Procedure Call Vulnerability

An elevation of privilege vulnerability exists in the way that Windows handles asynchronous RPC requests. An attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. An attacker could then install programs; view, change, or delete data...

Last Update Date: 14 Aug 2013 15:46 Release Date: 14 Aug 2013 3271 Views

RISK: Medium Risk

Microsoft Exchange Server Oracle Outside In Contains Multiple Exploitable Vulnerabilities

Two of the three vulnerabilities addressed in this bulletin, CVE-2013-2393 and CVE-2013-3776, exist in Exchange Server 2007, Exchange Server 2010, and Exchange Server 2013 through the WebReady Document Viewing feature. The vulnerabilities could allow remote code execution...

Last Update Date: 14 Aug 2013 15:44 Release Date: 14 Aug 2013 3313 Views

RISK: Medium Risk

Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the Unicode Scripts Processor included in affected versions of Microsoft Windows. An attacker who successfully exploited this vulnerability could run arbitrary code as the current user.

Last Update Date: 14 Aug 2013 15:42 Release Date: 14 Aug 2013 3270 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Vulnerabilities

Internet Explorer Process Integrity Level Assignment VulnerabilityAn elevation of privilege vulnerability exists in the way that Internet Explorer handles process integrity level assignment in specific cases. An attacker who successfully exploited this vulnerability could allow arbitrary code to execute with elevated privileges.EUC-JP Character Encoding VulnerabilityAn...

Last Update Date: 14 Aug 2013 15:41 Release Date: 14 Aug 2013 3286 Views

RISK: High Risk

HP, H3C and 3COM Products OSPF Vulnerability

A vulnerability has been identified in various HP networking products including H3C and 3COM routers and switches which can be exploited by a remote unauthenticated user to cause denial of service conditions or obtain potentially sensitive information. A remote authenticated user can send specially crafted Open Shortest Path First...

Last Update Date: 9 Aug 2013 12:06 Release Date: 9 Aug 2013 3436 Views

RISK: Medium Risk

HP LaserJet Pro Printers Unauthorised Access Vulnerability

A vulnerability has been identified in certain HP LaserJet Pro printers, which could be exploited remotely to gain unauthorized access to data.

Last Update Date: 8 Aug 2013 Release Date: 7 Aug 2013 3387 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Firefox, Seamonkey, and Thunderbird. A remote user can cause arbitrary code to be executed on the target user's system, cause denial of service conditions, and conduct cross-site scripting attacks. A local user can obtain...

Last Update Date: 8 Aug 2013 Release Date: 7 Aug 2013 3405 Views