Security Bulletin

RISK: High Risk

Microsoft Active Directory Memory Consumption Vulnerability

A denial of service vulnerability exists in implementations of Active Directory that could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 3427 Views

RISK: High Risk

Microsoft Windows Kernel Elevation of Privilege Vulnerabilities

An elevation of privilege vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and read arbitrary amounts of kernel memory.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 3389 Views

RISK: High Risk

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that SharePoint Server enforces access controls on specific SharePoint Lists.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 3414 Views

RISK: High Risk

Microsoft RDP ActiveX Control Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Remote Desktop ActiveX control, mstscax.dll, attempts to access an object in memory that has been deleted. An attacker could exploit the vulnerability by convincing the user to visit a specially crafted webpage. An attacker who successfully...

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 4308 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities

Remote code execution vulnerabilities exist in the way that Internet Explorer accesses an object in memory that has been deleted. These vulnerabilities may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

Last Update Date: 10 Apr 2013 12:20 Release Date: 10 Apr 2013 4155 Views

RISK: Medium Risk

HP-UX Java Multiple vulnerabilities

Multiple vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other exploits.

Last Update Date: 9 Apr 2013 10:16 Release Date: 9 Apr 2013 4200 Views

RISK: High Risk

Mozilla Firefox for Android Stack Corruption Vulnerability

A vulnerability has been identified in Mozilla Firefox for Android, which can be exploited to potentially compromise a user's device. The vulnerability is caused due to an unspecified error related to plug-in code and can be exploited to cause stack corruption.

Last Update Date: 5 Apr 2013 10:56 Release Date: 5 Apr 2013 4187 Views

RISK: Medium Risk

HP-UX Tomcat Servlet Engine Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP-UX Tomcat Servlet Engine, which can be exploited by malicious, local users to bypass certain security restrictions, disclose sensitive information, or cause a DoS (Denial of Service), by malicious users to disclose sensitive information and manipulate...

Last Update Date: 3 Apr 2013 10:59 Release Date: 3 Apr 2013 4461 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and Seamonkey, which can be exploited by remote attackers to conduct a cross-site scripting attack, elevation of privilege or execute arbitrary code.

Last Update Date: 3 Apr 2013 10:56 Release Date: 3 Apr 2013 4365 Views

RISK: Medium Risk

Splunk Web Input Validation Vulnerability

A vulnerability was identified in Splunk Web. A remote user can conduct cross-site scripting attacks. Splunk Web does not properly filter HTML code from user-supplied input before displaying the input. A remote user can cause arbitrary scripting code to be executed by the...

Last Update Date: 2 Apr 2013 15:13 Release Date: 2 Apr 2013 4264 Views