Multiple Vendors - RAR Handling Remote Null Pointer Dereference Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to exploit this issue to execut...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 28, 2014

Medium Alert ID: 34407 First Published: 2014 May 29 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 28, 2014

Medium Alert ID: 34390 First Published: 2014 May 28 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment relating to a purchase order payment for the recipient. The email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Personal Photo Sharing Email Messages on May 22, 2014

Medium Alert ID: 34333 First Published: 2014 May 22 13:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo sharing message for the recipient. The email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Malicious Attachment Email Messages on April 28, 2014

Medium Alert ID: 33978 First Published: 2014 April 29 18:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and an attachment for the recipient. However, the .rar attachment contains a malicious .scr file that, when...

WinRAR ZIP File Handling Filename Spoofing Vulnerability

Added: 04/28/2014 BID: 66383 OSVDB: 62610 Background WinRAR is a shareware file archiver and data compression utility which runs on Microsoft Windows. It can create archives in ZIP format, as well as its own proprietary RAR format, and unpack a variety of other archive types. Problem WinRAR 4.x i...

Threat Outbreak Alert: Fake Package Shipping Information Email Messages on April 10, 2014

Medium Alert ID: 33739 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)

A security bypass vulnerability has been reported in multiple antivirus products. An attacker could exploit this vulnerability via a RAR file with an initial MZ character sequence. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on...

Threat Outbreak Alert: Fake Email Messages with Malicious Attachments on March 24, 2014

Medium Alert ID: 33492 First Published: 2014 March 25 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Account Statement Email Messages on March 11, 2014

Medium Alert ID: 33302 First Published: 2014 March 12 17:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 3, 2014

Medium Alert ID: 33155 First Published: 2014 March 3 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on December 16, 2013

Medium Alert ID: 32183 First Published: 2013 December 17 00:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to a photo for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...

Attacks on New Microsoft Zero Day Using Multi-Stage Malware

Attackers exploiting the Microsoft Windows and Office zero day revealed yesterday are using an exploit that includes a malicious RAR file as well as a fake Office document as the lure, and are installing a wide variety of malicious components on newly infected systems. The attacks seen thus far a...

Threat Outbreak Alert: Fake Payment Invoice Email Messages on October 14, 2013

Medium Alert ID: 31246 First Published: 2013 October 14 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment invoice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Email Messages with Malicious Attachments on September 26, 2013

Medium Alert ID: 31003 First Published: 2013 September 28 06:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment. The email attempts to convince the recipient to open the attachment. However, the attachment...

Fedora Update for ark FEDORA-2013-13499

Check for the Version of ark OpenVAS Vulnerability Test Fedora Update for ark FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 17 Update: ark-4.10.5-1.fc17

Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on July 15, 2013

Medium Alert ID: 30092 First Published: 2013 July 15 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to convince the recipient...