Threat Outbreak Alert RuleID21140: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43615 First Published: 2016 February 18 16:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21140 and RuleID21140KVR may contain the...

(0Day) SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

USN-2899-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled LWP document files. If a user were tricked into opening a specially crafted LWP document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-01023)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer 9 through 11 that could allow a remote attacker to obtain sensitive information from process...

CVE-2016-0053

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execut...

Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a complet...

osTicket 1.9.12 XSS / File Upload / Access Bypass / Session Fixation

============================================= - Release date: February 04th, 2016 - Discovered by: Giovanni Cerrato and Enrico Cinquini - Severity: High ============================================= I. VULNERABILITY ------------------------- osTicket multiple vulnerabilities. II. INTRODUCTION...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

Wikileak's Julian Assange Could Be Set Free On Friday by United Nation

The decision of the United Nations investigation into the Julian Assange case is set to be revealed and could order the release of Wikileaks founder on February 5. "BREAKING: UN set to announce decision on Assange's release on Friday,"BREAKING: UN set to announce decision on Assange's release on...

BlackEnergy APT Group Spreading Malware via Tainted Word Docs

Attackers have begun using rigged Microsoft Word documents propagated via spearphishing emails to spread the BlackEnergy Trojan. Researchers with Kaspersky Lab’s Global Research and Analysis Team discovered a malicious Word document last week that appears to stem from a campaign against one of th...

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, is caused by buffer overflow. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially...

The vulnerability of the Microsoft Office suite, specifically the Word Viewer program for reading doc files, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office suite, including the Word Viewer program for reading DOC files, stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a multi-level PDF document...

USN-2875-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00267)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00262)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00264)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00263)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00266)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...