Security Bulletin

RISK: Medium Risk

Asterisk Skinny Channel Driver Vulnerability

A vulnerability has been identified in Asterisk. A remote authenticated user can cause denial of service conditions.A remote authenticated user with a valid SCCP ID can close a connection to the target Asterisk server when a station is in the 'Off Hook' call state to...

Last Update Date: 15 Jun 2012 17:07 Release Date: 15 Jun 2012 4399 Views

RISK: High Risk

Apple Mac OS X Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Java for Mac OS X, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise...

Last Update Date: 14 Jun 2012 10:15 Release Date: 14 Jun 2012 5144 Views

RISK: Extremely High Risk

Microsoft XML Core Services Uninitialised Object Vulnerability

A vulnerability has been identified in Microsoft XML Core Services, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when attempting to access an object in memory that has not been initialised. Successful...

Last Update Date: 13 Jun 2012 15:30 Release Date: 13 Jun 2012 5129 Views

RISK: Medium Risk

Microsoft Windows Kernel Multiple Vulnerabilities

User Mode Scheduler Memory Corruption Vulnerability An elevation of privilege vulnerability exists in the way that the Windows User Mode Scheduler handles system requests. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, ...

Last Update Date: 13 Jun 2012 15:28 Release Date: 13 Jun 2012 4985 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities

String Atom Class Name Handling Vulnerability An elevation of privilege vulnerability exists because of the way that Windows kernel-mode drivers manage kernel-mode driver objects. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install...

Last Update Date: 13 Jun 2012 15:27 Release Date: 13 Jun 2012 4919 Views

RISK: Medium Risk

Microsoft Dynamics AX Enterprise Portal XSS Vulnerability

A cross-site scripting vulnerability exists in Microsoft Dynamics AX Enterprise Portal that could result in information disclosure or elevation of privilege if a user clicks a specially crafted URL that contains malicious JavaScript elements. Because of the vulnerability, when the malicious JavaScript is...

Last Update Date: 13 Jun 2012 15:25 Release Date: 13 Jun 2012 5117 Views

RISK: Medium Risk

Microsoft Lync Multiple Vulnerabilities

TrueType Font Parsing Vulnerability A remote code execution vulnerability exists in the way that affected components handle shared content that contains specially crafted TrueType fonts. The vulnerability could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts. An attacker who...

Last Update Date: 13 Jun 2012 15:21 Release Date: 13 Jun 2012 4828 Views

RISK: High Risk

Microsoft Windows .NET Framework Memory Access Vulnerability

A remote code execution vulnerability exists in the Microsoft .NET Framework due to the improper execution of a function pointer. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view...

Last Update Date: 13 Jun 2012 15:20 Release Date: 13 Jun 2012 4942 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

Center Element Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has been deleted. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

Last Update Date: 13 Jun 2012 15:18 Release Date: 13 Jun 2012 4920 Views

RISK: High Risk

Microsoft Windows Remote Desktop Protocol Vulnerability

A remote code execution vulnerability exists in the way that the Remote Desktop Protocol accesses an object in memory that has been improperly initialized or has been deleted. An attacker who successfully exploited this vulnerability could run arbitrary code on the target system. An ...

Last Update Date: 13 Jun 2012 15:17 Release Date: 13 Jun 2012 5069 Views