Security Bulletin

RISK: Medium Risk

FFmpeg Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise an application using the library. An error within the "ff_init_buffer_info()" function (libavcodec/utils.c) can be exploited...

Last Update Date: 19 Feb 2014 11:24 Release Date: 19 Feb 2014 3994 Views

RISK: High Risk

Symantec Endpoint Protection Manager Remote Code Execution Vulnerability

A vulnerability has been identified in Symantec Endpoint Protection Manager, which could be exploited by malicious users to execute arbitrary code. The management console for Symantec Endpoint Protection Manager does not properly handle external XML data, which could potentially allow unauthorized access to restricted server-side...

Last Update Date: 19 Feb 2014 11:23 Release Date: 19 Feb 2014 4230 Views

RISK: Medium Risk

Microsoft MSXML Information Disclosure Vulnerability

An information disclosure vulnerability exists that could allow an attacker to read files on the local file system of a user, or read content of web domains where a user is currently authenticated. An attacker could exploit this vulnerability when a user views specially crafted web content that...

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 4143 Views

RISK: Medium Risk

Microsoft TCP/IP Version 6 (IPv6) Denial of Service Vulnerability

A denial of service vulnerability exists in Windows in the IPv6 implementation of TCP/IP. An attacker who successfully exploited this vulnerability could cause the affected system to stop responding.

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 4094 Views

RISK: High Risk

Microsoft Graphics Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that affected Windows components handle specially crafted 2D geometric figures. The vulnerability could allow remote code execution if a user views files containing such specially crafted figures using Internet Explorer. An attacker who successfully exploited this vulnerability could take...

Last Update Date: 12 Feb 2014 12:17 Release Date: 12 Feb 2014 4072 Views

RISK: High Risk

Microsoft Forefront Protection Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Forefront Protection for Exchange. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the configured service account.

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4098 Views

RISK: Medium Risk

Microsoft .NET Framework Multiple Vulnerabilities

POST Request DoS VulnerabilityA denial of service vulnerability exists in Microsoft ASP.NET that could allow an attacker to cause an ASP.NET server to become unresponsive.Type Traversal VulnerabilityAn elevation of privilege vulnerability exists in the Microsoft.NET Framework that could allow an attacker to...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4373 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Internet Explorer Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists within Internet Explorer during validation of local file installation and during secure creation of registry keys.VBScript Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4127 Views

RISK: High Risk

Microsoft VBScript Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. If the current user is logged on with...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4097 Views

RISK: Medium Risk

Adobe Shockwave Player Multiple Memory Corruption Vulnerabilities

Two vulnerabilities have been identified in Adobe Shockwave Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted Shockwave content that, when loaded by the target user, will trigger a memory...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4387 Views