Security Bulletin

RISK: Medium Risk

Microsoft Excel Multiple Vulnerabilities

Excel Insufficient Record Validation Vulnerability A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change...

Last Update Date: 15 Jun 2011 14:06 Release Date: 15 Jun 2011 6132 Views

RISK: Medium Risk

Microsoft Windows MHTML Mime-Formatted Request Vulnerability

An information disclosure vulnerability exists in the way that MHTML interprets MIME-formatted requests for content that are embedded in an HTML document. Similar to server-side cross-site scripting (XSS) vulnerabilities, it is possible under certain conditions for this vulnerability to allow...

Last Update Date: 15 Jun 2011 14:02 Release Date: 15 Jun 2011 6364 Views

RISK: High Risk

Microsoft Windows Vector Markup Language Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability...

Last Update Date: 15 Jun 2011 14:00 Release Date: 15 Jun 2011 6213 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

MIME Sniffing Information Disclosure Vulnerability An information disclosure vulnerability exists in Internet Explorer that could allow an attacker to force the browser to perform unexpected actions when a user downloads Web content, allowing an attacker to view content from a different domain or Internet Explorer zone other than...

Last Update Date: 15 Jun 2011 12:41 Release Date: 15 Jun 2011 5983 Views

RISK: High Risk

Microsoft .NET Framework JIT Optimization Vulnerability

A remote code execution vulnerability exists in the way that Microsoft .NET Framework validates certain values within an object. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete...

Last Update Date: 15 Jun 2011 12:40 Release Date: 15 Jun 2011 6337 Views

RISK: High Risk

Microsoft Windows SMB Response Parsing Vulnerability

An unauthenticated remote code execution vulnerability exists in the way that the Microsoft Server Message Block (SMB) client implementation handles specially crafted SMB responses. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending a specially crafted...

Last Update Date: 15 Jun 2011 12:38 Release Date: 15 Jun 2011 6507 Views

RISK: High Risk

Microsoft Windows Distributed File System Memory Corruption Vulnerability

DFS Memory Corruption Vulnerability An unauthenticated remote code execution vulnerability exists in the way that the Distributed File System (DFS) client parses specially crafted DFS responses. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending...

Last Update Date: 15 Jun 2011 12:37 Release Date: 15 Jun 2011 6344 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Drivers Win32k OTF Validation Vulnerability

A remote code execution vulnerability exists due to the way that the Windows kernel-mode driver improperly parses specially crafted OpenType fonts on x64-based and Itanium-based systems. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker...

Last Update Date: 15 Jun 2011 12:35 Release Date: 15 Jun 2011 6317 Views

RISK: High Risk

Microsoft Forefront Threat Management Gateway Firewall Client Memory Corruption Vulnerability

A remote code execution vulnerability exists in the TMG Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Last Update Date: 15 Jun 2011 12:32 Release Date: 15 Jun 2011 6423 Views

RISK: High Risk

Microsoft .NET Framework Array Offset Vulnerability

A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a specially crafted Microsoft .NET application to access memory in an unsafe manner. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the logged-on...

Last Update Date: 15 Jun 2011 12:29 Release Date: 15 Jun 2011 6227 Views