Security Bulletin

RISK: Medium Risk

Microsoft Office PowerPoint Multiple Vulnerabilities

A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint files. An attacker could exploit the vulnerability by creating a specially crafted PowerPoint file that could be included as an e-mail attachment, or hosted on a specially crafted or compromised...

Last Update Date: 13 Apr 2011 18:11 Release Date: 13 Apr 2011 5583 Views

RISK: Medium Risk

Microsoft Office Excel Multiple Vulnerabilities

A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or...

Last Update Date: 13 Apr 2011 18:03 Release Date: 13 Apr 2011 5512 Views

RISK: Medium Risk

Microsoft MFC Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that certain applications built Microsoft Foundation Classes (MFC) handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then...

Last Update Date: 13 Apr 2011 17:59 Release Date: 13 Apr 2011 5767 Views

RISK: Medium Risk

Microsoft Windows Fax Cover Page Editor Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Windows Fax Cover Page Editor improperly parses specially crafted fax cover pages. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts...

Last Update Date: 13 Apr 2011 17:51 Release Date: 13 Apr 2011 5736 Views

RISK: Medium Risk

Microsoft Office Multiple Vulnerabilities

Office Component Insecure Library Loading Vulnerability A remote code execution vulnerability exists in the way that Microsoft Office handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view...

Last Update Date: 13 Apr 2011 17:45 Release Date: 13 Apr 2011 5621 Views

RISK: Medium Risk

Microsoft Windows OpenType Font Stack Overflow Vulnerability

A remote code execution vulnerability exists in the way that the OpenType Font (OTF) driver improperly parses specially crafted OpenType fonts. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, ...

Last Update Date: 13 Apr 2011 17:03 Release Date: 13 Apr 2011 5436 Views

RISK: High Risk

Microsoft Windows Scripting Memory Reallocation Vulnerability

A remote code execution vulnerability exists in the JScript and VBScript scripting engines due to a memory corruption error. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the logged-on user. An attacker could then install programs; view, ...

Last Update Date: 13 Apr 2011 16:53 Release Date: 13 Apr 2011 5417 Views

RISK: High Risk

Microsoft Windows DNS Query Vulnerability

A remote code execution vulnerability exists in the way that the DNS client service handles specially crafted LLMNR queries. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the NetworkService account. An attacker could then install programs; view, change, ...

Last Update Date: 13 Apr 2011 16:43 Release Date: 13 Apr 2011 5526 Views

RISK: High Risk

Microsoft Windows GDI+ Integer Overflow Vulnerability

A remote code execution vulnerability exists in the way that GDI+ handles integer calculations. The vulnerability could allow remote code execution if a user opens a specially crafted EMF image file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. ...

Last Update Date: 13 Apr 2011 16:35 Release Date: 13 Apr 2011 5571 Views

RISK: High Risk

Microsoft Windows .NET Framework Stack Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft .NET Framework handles certain function calls. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 13 Apr 2011 16:25 Release Date: 13 Apr 2011 5503 Views