1688 matches found
KLA10731 Multiple vulnerabilities in Apple QuickTime
An unspecified vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed movie file. Original advisories Apple advisory...
KLA10727 Code execution vulnerabilities in Adobe Flash Player and AIR
Type confusion, integer overflow, use-after-free and memory corruption vulnerabilities were found in Adobe products. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via an unknown vectors...
KLA10724 Code execution vulnerability in Foxit products
Multiple use-after-free vulnerabilities were found in Foxit products. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed PDF document. Technical details Vulnerabilities related to Print method an...
KLA10716 Code execution vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Improper memory handling can be exploited remotely via a specially designed content to execute arbitra...
KLA10719 Multiple vulnerabilities in Microsoft VBScript
Memory handling vulnerabilities were found in Microsoft VBScript. By exploiting these vulnerabilities malicious users can execute arbitrary code or obtain sensitive information. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2015-6135...
KLA10702 Code execution vulnerability in Google Picasa
Integer overflow was found in Google Picasa. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed CAMF section in FOVb image. Original advisories - CVE list CVE-2015-8221 critical Solution Update to the...
KLA10699 Multiple vulnerabilities in LibreOffice
Multiple serious vulnerabilities have been found in LibreOffice. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Lack of configuration restrictions at LinkUpdateMod...
KLA10693 Information disclosure vulnerability in Microsoft Lync & Skype for Business
An improper information sanitization was found in Microsoft Lync and Skype for Business. By exploiting this vulnerability malicious users can execute arbitrary code or obtain sensitive information. This vulnerability can be exploited remotely via a specially designed message. Technical details Th...
KLA10687 Code execution vulnerability in Adobe Shockwave Player
An unspecified vulnerability was found in Adobe Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Adobe bulletin Exploitation Related products Adobe-Shockwave-Player CVE list CVE-2015-7649 critical Solution Update to the latest...
2345 Ace Input Method Local Elevation of Privilege Vulnerability
2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2,3,4,5 Network Technology Co. The system service installed by 2345 Ace Input Method provides the ability to create an elevated privilege process, but a vulnerability exists in the validation process. Due to improper...
KLA10684 Flash Player update for Google Chrome
Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10680. Original advisories Google release blog entry Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...
KLA10685 Multiple vulnerabilities at Apple iTunes
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Multiple memory corruptions at WebKit can be exploited via iTunes Store...
Threat Outbreak Alert RuleID18807: Email Messages Distributing Malicious Software on October 19, 2015
Medium Alert ID: 41602 First Published: 2015 October 20 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18807 may contain the following files: Name |...
KLA10680 Code execution vulnerability in Adobe Flash Player
Multiple type confusion vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SWF file or other unknown vectors. Technical details This vulnerability...
Threat Outbreak Alert RuleID18397: Email Messages Distributing Malicious Software on October 2, 2015
Medium Alert ID: 41311 First Published: 2015 October 1 15:10 GMT Last Updated: 2015 October 5 13:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18397 an...
KLA10671 Flash Player update for Google Chrome
Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10670. Original advisories Blog entry Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related...
KLA10666 Code execution vulnerability in Corel WordPerfect
An unspecified vulnerability was found in Corel WordPerfect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Microsoft Word document. Original advisories ZDI advisory Exploitation Public exploits...
KLA10664 Code execution vulnerability in Yahoo! Messenger
Buffer overflow vulnerability was found in Yahoo! Messenger. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed emoticons.xml file. Technical details Vulnerability caused by...
CVE-2015-6265
The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...
Command injection
The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...