Memory Corruption in QuickTime Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime software version 7.7.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

Oracle AutoVue DXF Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle Autovue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

Memory Corruption in Google SketchUp Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google SketchUp software version 8.0.11752.0 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

Spear Phishing Emails, Malware, Targeting BlackBerry Users

Blackberry owners are being targeted by a new type of malware that’s beginning to spread via spear phishing emails, according to security firm Websense. According to a post on the company’s blog, Security Labs, those users who are targeted receive an email with the subject line “Your BlackBerry I...

Vulnerability in Cisco WebEx Player Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Cisco WebEx Player. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Cisco. Cisco has remediated the...

Threat Outbreak Alert: Fake Meeting Notice Email Messages on January 28, 2015

Low Alert ID: 26363 First Published: 2012 July 9 15:25 GMT Last Updated: 2015 January 29 14:20 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a meeting notice for the recipient. The text in the email message attempts to...

Apple QuickTime MPEG Parsing Memory Corruption

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime Player software version 7.7.1 and earlier verisons. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected...

Threat Outbreak Alert: Fake Terra Greeting Card Notification Email Messages on May 11, 2012

Low Alert ID: 25908 First Published: 2012 May 14 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam e-mail messages that claim to contain a Terra greeting card for the recipient. The text in the e-mail message attempts to convince the...

CVE-2012-1916

CVE-2012-1916 affects the @Mail WebMail Client in AtMail Open-Source prior to version 1.05. The issue allows remote attackers to execute arbitrary code by delivering an email with an attachment that has an executable extension, resulting in creation of an executable file under tmp/. This is descr...

CVE-2012-1916

@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/...

JPEG 2000 Memory Overwrite Vulnerability in OpenJPEG Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting OpenJPEG software version 1.4 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, OpenJPEG...

Vulnerabilities in XnViewer Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of two integer overflow vulnerabilities affecting XnViewer version 1.98.2 and earlier versions. Microsoft discovered and disclosed the vulnerabilities under coordinated vulnerability disclosure to the affected...

Vulnerability in Hex-Rays IDA Pro, IDAPython Plugin Could Allow Arbitrary Script Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting IDA Pro running the IDAPython plugin. By default, the IDAPython plugin is installed with all versions of IDA Pro. Microsoft discovered and disclosed the vulnerability under...

Microsoft PowerPoint OfficeArt Shape Remote Code Execution (MS11-094; CVE-2011-3413)

A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to memory corruption in PowerPoint while reading an invalid record in a specially crafted PowerPoint file. A remote attacker may exploit this vulnerability by convincing a target user to open...

Microsoft Publisher Malformed File Parsing Memory Corruption (MS11-091; CVE-2011-3412)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is due to an error in the way Microsoft Publisher handles memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to open a...

Microsoft Publisher Invalid Pointer Code Execution (MS11-091; CVE-2011-3411)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...

FreeBSD : linux-flashplugin -- multiple vulnerabilities (d226626c-857f-11e0-95cc-001b2134ef46)

Adobe Product Security Incident Response Team reports : Critical vulnerabilities have been identified in Adobe Flash Player 10.2.159.1 and earlier versions Adobe Flash Player 10.2.154.28 and earlier for Chrome users for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.2.157.51 and...

Critical Flash Player Update to fix 11 Security Holes

Critical Flash Player Update to fix 11 Security Holes Adobe has released another batch of security updates for its ubiquitous Flash Playersoftware. This "critical" patch fixes at least 11 vulnerabilities, including one that reports suggest is being exploited in targeted email attacks. In the...

Microsoft PowerPoint无效"PersistDirectoryEntry"记录远程代码执行漏洞(MS11-022)

BUGTRAQ ID: 47251 CVE ID: CVE-2011-0656 Microsoft PowerPoint，简称PowerPoint，是一个由Microsoft公司开发的演示文稿程序，是Microsoft Office系统中的其中一个组件。 Microsoft Excel在实现上存在无效"PersistDirectoryEntry"记录远程代码执行漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 攻击者通过创建可作为电子邮件附件包含其中或在特制的受控的网站存储的特制PP文件利用此漏洞。 Microsoft Office Microsoft...