Security Bulletin

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to compromise a user's system.An integer overflow error exists in PDF codecs.A use-after-free error exists within counter...

Last Update Date: 17 Feb 2012 14:30 Release Date: 17 Feb 2012 5018 Views

RISK: High Risk

Adobe Flash Player Cross Site Scripting and Other Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which can be exploited to cause a crash and potentially allow an attacker to take control of the affected system. This update also resolves cross-site scripting vulnerability that could be used to take actions on a...

Last Update Date: 16 Feb 2012 10:21 Release Date: 16 Feb 2012 4836 Views

RISK: High Risk

Microsoft Windows Indeo Codec Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that the Indeo Codec handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data...

Last Update Date: 15 Feb 2012 12:50 Release Date: 15 Feb 2012 4612 Views

RISK: High Risk

Microsoft Visio Viewer Multiple Vulnerabilities

A remote code execution vulnerability exists in the way that Microsoft Visio Viewer validates attributes when handling specially crafted Visio files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or...

Last Update Date: 15 Feb 2012 12:49 Release Date: 15 Feb 2012 4639 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

Copy and Paste Information Disclosure Vulnerability An information disclosure vulnerability exists in Internet Explorer that could allow an attacker to gain access to information in another domain or Internet Explorer zone. An attacker could exploit the vulnerability by constructing a specially crafted web page that could allow information...

Last Update Date: 15 Feb 2012 12:06 Release Date: 15 Feb 2012 4587 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities

GDI Access Violation Vulnerability A remote code execution vulnerability exists in the Windows kernel due to improper validation of input passed from user mode through the kernel component of GDI. The vulnerability could allow an attacker to run code in kernel-mode and then install programs; ...

Last Update Date: 15 Feb 2012 12:05 Release Date: 15 Feb 2012 4647 Views

RISK: Medium Risk

Microsoft Windows Color Control Panel Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that the Color Control Panel handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete...

Last Update Date: 15 Feb 2012 12:04 Release Date: 15 Feb 2012 4604 Views

RISK: Medium Risk

Microsoft SharePoint Multiple Vulnerabilities

XSS in inplview.aspx Vulnerability A cross-site scripting vulnerability exists in Microsoft SharePoint 2010 that could result in information disclosure or elevation of privilege if a user clicks a specially crafted URL containing malicious JavaScript elements. Due to the vulnerability, when the malicious JavaScript...

Last Update Date: 15 Feb 2012 12:02 Release Date: 15 Feb 2012 4702 Views

RISK: Medium Risk

Microsoft Windows Ancillary Function Driver Multiple Vulnerabilities

AfdPoll Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists where the Ancillary Function Driver (afd.sys) improperly validates input passed from user mode to the Windows kernel. The vulnerability could allow an attacker to run code with elevated privileges. A local attacker...

Last Update Date: 15 Feb 2012 12:01 Release Date: 15 Feb 2012 4767 Views

RISK: High Risk

Microsoft .NET Framework and Microsoft Silverlight Multiple Vulnerabilities

.NET Framework Unmanaged Objects Vulnerability A remote code execution vulnerability exists in Microsoft .NET Framework and Silverlight that can allow a specially crafted Microsoft .NET Framework application to access memory in an unsafe manner. An attacker who successfully exploited this vulnerability could run arbitrary code...

Last Update Date: 15 Feb 2012 11:45 Release Date: 15 Feb 2012 4541 Views