Threat Outbreak Alert: Fake Product Request List Email Messages on August 27, 2013

Medium Alert ID: 30520 First Published: 2013 August 28 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request list for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Notification Email Messages on August 9, 2013

Medium Alert ID: 30381 First Published: 2013 August 12 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on August 1, 2013

Medium Alert ID: 30286 First Published: 2013 August 2 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document attachment for the recipient. The text in the email message attempts to convince the recipien...

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

Threat Outbreak Alert: Fake Account Credential Information Email Messages on July 23, 2013

Medium Alert ID: 30182 First Published: 2013 July 23 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account credential information for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Merchant Billing Statement Email Messages on July 16, 2013

Medium Alert ID: 30087 First Published: 2013 July 15 19:06 GMT Last Updated: 2013 July 16 15:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an electronic billing statement for the recipient. The text in the email...

Threat Outbreak Alert: Fake Shipping Order Information Email Messages on August 26, 2013

Medium Alert ID: 30010 First Published: 2013 July 10 16:08 GMT Last Updated: 2013 August 26 18:40 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping order information for the recipient. The text in the email messag...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on July 9, 2013

Medium Alert ID: 30016 First Published: 2013 July 10 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Personal Photos Attachment Email Messages on July 6, 2013

Medium Alert ID: 29968 First Published: 2013 July 8 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment of personal photos for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product List Attachment Email Messages on June 22, 2013

Medium Alert ID: 29754 First Published: 2013 June 24 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order list and quotation for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Unpaid Debt Invoice Email Messages on June 12, 2013

Medium Alert ID: 29654 First Published: 2013 June 12 18:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an unpaid debt invoice for the recipient. The text in the email message attempts to convince the...

Heap Corruption in Nitro Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Nitro Pro version 7.5.0.22 and earlier versions and Nitro Reader version 2.5.0.36 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated...

Data-Stealing Spyware Redpill Back, Targeting India

A form of spyware first seen in 2008 and known for siphoning away users’ bank account credentials, emails, screenshots and various other bits of information has surfaced again – this time targeting computer users in India. Nicknamed Redpill, a reference to a plot device used in The Matrix films,...

VulnCheck KEV: CVE-2007-0671

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a...

BlackBerry Enterprise Servers vulnerable to TIFF Image based Exploit

If you are a BlackBerry Enterprise Network user, here is something you need to be careful about. BlackBerry Enterprise Server BES users have been warned that an image-based exploit could allow hackers to access and execute code on the servers used to support corporate users of BlackBerry...

Email Attachment Detection (client)

Binary data 6682.prm...

Memory Corruption in QuickTime Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime software version 7.7.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

Oracle AutoVue DXF Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle Autovue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

Memory Corruption in Google SketchUp Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google SketchUp software version 8.0.11752.0 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...