Security Bulletin

RISK: Medium Risk

Microsoft Windows Kernel Multiple Vulnerabilities( 09 February 2011 )

Driver Improper Interaction with Windows Kernel Vulnerability An elevation of privilege vulnerability exists due to the improper interaction of drivers with the Windows kernel. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode and take complete control of an affected system...

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 5601 Views

RISK: Medium Risk

Microsoft Windows CSRSS Elevation of Privilege Vulnerability( 09 February 2011 )

An elevation of privilege vulnerability exists in the way that the Windows Client/Server Run-time Subsystem (CSRSS) terminates a process when a user logs off. An attacker who successfully exploited this vulnerability could run code designed to monitor the actions of...

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 5923 Views

RISK: Medium Risk

Microsoft Windows Scripting Engines Information Disclosure Vulnerability( 09 February 2011 )

An information disclosure vulnerability exists in the JScript and VBScript scripting engines due to a memory corruption error. An attacker who successfully exploited this vulnerability could read data not intended to be disclosed. Note that this vulnerability would not allow an attacker to execute...

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 6079 Views

RISK: Medium Risk

Microsoft Visio Multiple Vulnerabilities( 09 February 2011 )

Visio Object Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that Microsoft Visio validates objects in memory when parsing specially crafted Visio files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker...

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 6010 Views

RISK: Medium Risk

Microsoft Windows Active Directory SPN Validation Vulnerability( 09 February 2011 )

A denial of service vulnerability exists in implementations of Microsoft Windows Active Directory due to improper validation of service principal names (SPN), which could result in SPN collisions. When this occurs, services that use the SPN will downgrade to NT LAN Manager (...

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 6126 Views

RISK: Medium Risk

Microsoft IIS FTP Service Heap Buffer Overrun Vulnerability( 09 February 2011 )

A vulnerability exists in the FTP Service in Microsoft Internet Information Services (IIS) 7. and Microsoft Internet Information Services (IIS) 7.5. The vulnerability could allow remote code execution.

Last Update Date: 11 Feb 2011 Release Date: 9 Feb 2011 6653 Views

RISK: Medium Risk

Microsoft Windows OpenType Font Encoded Character Vulnerability( 09 February 2011 )

A remote code execution vulnerability exists in the way that the Windows OpenType Compact Font Format (CFF) driver improperly parses specially crafted OpenType fonts. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then...

Last Update Date: 9 Feb 2011 15:59 Release Date: 9 Feb 2011 6035 Views

RISK: High Risk

Microsoft Windows Shell Graphics Processing Overrun Vulnerability( 09 February 2011 )

A remote code execution vulnerability exists in the way that the Windows Shell graphics processor handles specially crafted thumbnail images. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the logged-on user. An attacker could...

Last Update Date: 9 Feb 2011 15:43 Release Date: 9 Feb 2011 6214 Views

RISK: Extremely High Risk

Microsoft Internet Explorer Multiple Vulnerabilities ( 09 February 2011 )

CSS Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that Internet Explorer accesses memory while importing a Cascading Style Sheet that refers to itself recursively. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user...

Last Update Date: 9 Feb 2011 15:34 Release Date: 9 Feb 2011 6148 Views

RISK: High Risk

IBM Lotus Notes "cai" URI and iCal Remote Code Execution Vulnerabilities

Two vulnerabilities have been identified in IBM Lotus Notes, which could be exploited by remote attackers to compromise a vulnerable system. 1. An input validation error when processing "cai" URIs, which could allow attackers to execute arbitrary code. 2. A buffer overflow...

Last Update Date: 8 Feb 2011 15:27 Release Date: 8 Feb 2011 6353 Views