June 2014 Microsoft Patch Tuesday security updates

As expected, Microsoft delivered a patch today for a zero-day vulnerability in Internet Explorer 8 that was disclosed by HP’s Zero Day Initiative three weeks ago, six months after it was reported to the ZDI. The IE8 patch, MS14-035, is included in a cumulative Internet Explorer rollup that patche...

MS14-036: Vulnerabilities in Microsoft graphics component could allow remote code execution: June 10, 2014

Resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or webpage.INTRODUCTIONMicrosoft has released security bulletin MS14-036. To learn more about this security bulletin:Home...

Microsoft Windows Graphics Component CVE-2014-1818 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 SP1...

PT-2014-1672

Name of the Vulnerable Software and Affected Versions GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1 Office 2007 SP3 and 2010 SP1 and SP2 Live Meeting...

Microsoft Lync Server CVE-2014-1823 Information Disclosure Vulnerability

Description Microsoft Lync Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Lync Server 2010 Microsoft Lync Server 2013 Recommendations Run all software as ...

MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014

Resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or webpage.IntroductionThis security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that...

PT-2014-1677

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server versions 2010 through 2013 Description The issue is related to a cross-site scripting XSS vulnerability, which allows an attacker to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID. Thi...

Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)

An information disclosure vulnerability exists when Lync Server fails to properly sanitize specially crafted content. The vulnerability is caused when Lync Server does not properly sanitize specially crafted content. An attacker who successfully exploited this vulnerability could potentially...

PT-2014-1673

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold an...

MS13-096: Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (2908005)

The version of Microsoft's Graphics Component installed on the remote host is affected by a heap overflow vulnerability. Specially crafted TrueType font files are not processed properly. A remote, unauthenticated attacker could exploit this vulnerability by getting a user to view content that...

Microsoft Lync Remote Code Execution Vulnerability (2908005)

This host is missing a critical security update according to Microsoft Bulletin MS13-096. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Lync Attendee Remote Code Execution Vulnerability (2908005)

This host is missing a critical security update according to Microsoft Bulletin MS13-096. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft released Security Patch for CVE-2013-5065 TIFF Zero-Day vulnerability

Microsoft has released 11 Security Patch this Tuesday, including one for CVE-2013-5065 zero-day vulnerability, recently discovered Local privilege escalation vulnerability that could allow a hacker to launch an attack using corrupted TIFF images to take over victims' computers. FireEye researcher...

Microsoft Releases December 2013 Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Microsoft Office, Microsoft Lync, Internet Explorer, Microsoft Exchange, Microsoft SharePoint, and Microsoft Developer Tools as part of the Microsoft Security Bulletin Summary for December 2013. These vulnerabilities...

MS13-096: Vulnerability in Microsoft Graphics component could allow remote code execution: December 10, 2013

Resolves a vulnerability in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user views content that contains specially crafted TIFF files.INTRODUCTIONMicrosoft has released security bulletin MS13-096. To view the complete security bulletin, visi...

Microsoft Releases Advance Notification for December Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its December 2013 release will contain 11 bulletins. These bulletins will have severity ratings of critical and important and will be for Microsoft Windows, Microsoft Office, Microsoft Lync, Internet Explorer, Microsoft...

Microsoft set to deliver Patches for three Critical flaws, but no patch for Office Zero-day vulnerability

Microsoft has released advanced notification for the November 2013 security updates that are scheduled to be released on November 12, 2013. The company plans to deliver eight security bulletins for Windows 8.1, three of them are rated critical and five are important. But there's no relief in sigh...

Microsoft set to deliver Patches for three Critical flaws, but no patch for Office Zero-day vulnerability

Microsoft has released advanced notification for the November 2013 security updates that are scheduled to be released on November 12, 2013. The company plans to deliver eight security bulletins for Windows 8.1, three of them are rated critical and five are important. But there's no relief in sigh...

Design/Logic Flaw

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...

CVE-2013-3906

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...