Microsoft Internet Explorer CVE-2013-3885 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 10 is affected...

Microsoft Internet Explorer CVE-2013-3874 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 9 is affected...

Microsoft Silverlight CVE-2013-3896 Information Disclosure Vulnerability

Description Microsoft Silverlight is prone to an information-disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow attackers to gain access to potentially sensitive information that may aid in furthe...

Microsoft Windows TrueType Font CMAP Table CVE-2013-3894 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot...

Facebook Graph Search becomes more powerful than ever, Review your Privacy Settings again

Facebook Graph Search is more powerful than ever, has been updated to allow people to search in greater depth on Facebook. Facebook expanded its Graph Search to include posts and status updates, which means everything you've been posting is way easier to find than ever before. "Now you will be ab...

Threat Outbreak Alert: Fake Contract Document Delivery Email Messages on October 3, 2013

Severity Alert ID: 31124 First Published: 2013 October 4 13:39 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 3, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Facebook Graph Search becomes more powerful than ever, Review your Privacy Settings again

Facebook Graph Search is more powerful than ever, has been updated to allow people to search in greater depth on Facebook. Facebook expanded its Graph Search to include posts and status updates, which means everything you’ve been posting is way easier to find than ever before. "Now you will be ab...

Threat Outbreak Alert: Fake Electronic Payment Information Email Messages on October 3, 2013

Severity Alert ID: 31110 First Published: 2013 October 3 15:17 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 3, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert: Fake Payment Slip Notification Email Messages on October 3, 2013

Severity Alert ID: 31111 First Published: 2013 October 3 15:01 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 3, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Adobe Customer Information and Source Code Compromises

US-CERT is aware of the public acknowledgement of a compromise of up to 3 million Adobe customers' information, including names and detailed account information. The source code for multiple Adobe products may also have been compromised. US-CERT advises that Adobe customers be aware of possible...

Importance of Logs and Log Management for IT Security

IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...

Importance of Logs and Log Management for IT Security

IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...

Threat Outbreak Alert: Fake Online Account Fraudulent Activity Notice Email Messages on September 19, 2013

Medium Alert ID: 30882 First Published: 2013 September 19 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fraudulent, online-account activity notification for the recipient. The text in the email message attempts...

Mozilla: Memory corruption involving scrolling (MFSA 2013-90)

Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors...

Mozilla: Memory corruption involving scrolling (MFSA 2013-90)

Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors...

CVE-2013-2296

CVE-2013-2296 affects Walrus in Eucalyptus prior to 3.2.2. The issue: GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations do not verify authorization, allowing remote authenticated users to bypass restrictions on (1) modifying logging, (2) modifying ver...

Threat Outbreak Alert: Malicious Budget Information Link Email Messages on September 12, 2013

Medium Alert ID: 30784 First Published: 2013 September 12 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain budget information for the recipient. The text in the email message instructs the...

Microsoft Excel CVE-2013-1315 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...

Microsoft Word CVE-2013-3857 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Microsoft Internet Explorer CVE-2013-3206 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability due to a use-after-free error. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Interne...