Description of the security update for SharePoint Server 2010 Office Web Apps: April 11, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: April 11, 2017 This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft Office XSS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Office Web Apps server. The attacker who successful...

Google Android Qualcomm CP access driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Qualcomm CP access driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android MediaTek touchscreen driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the MediaTek touchscreen driver implementation, which allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android Broadcom Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-04966)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Broadcom Wi-Fi driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android Broadcom Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-04967)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Broadcom Wi-Fi driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Apple iOS webkit memory corruption vulnerability (CNVD-2017-05602)

Apple iOS is an operating system for Apple smart devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can crash the application or execute arbitrary co...

CVE-2017-0584

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0562

An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2017-0454

An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

The vulnerability of Microsoft Excel, a software in the Microsoft Office Web Apps suite, allows a malicious actor to trigger a service failure or execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft Office Web Apps is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by...

The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and certain Microsoft Office programs allow a perpetrator to cause service interruptions or execute arbitrary code.

The vulnerabilities of the Microsoft Office Web Apps, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and the Microsoft Office suite are caused by an operation that goes beyond the buffer boundaries in memory...

Huawei Files Plaintext Storage Password Vulnerability

Huawei Files is a file management APP software on cell phones from Huawei China. A plaintext storage password vulnerability exists in Huawei Files 7.1.0.308 and earlier versions. An attacker can read the plaintext password information of a user's confidential cabinet by spoofing the related...

How to Configure Citrix Profile Management

The primary intent of this article is to provide steps on how to configure Citrix Profile management for the first timeassuming that Virtual Apps and Desktops/Citrix Cloud environment is already configured. Introduction Profile management ensures that the user’s personal settings are applied to t...

Google just discovered a dangerous Android Spyware that went undetected for 3 Years

An Android version of one of the most sophisticated mobile spyware has been discovered that remained undetected for at least three years due to its smart self-destruction capabilities. Dubbed Chrysaor, the Android spyware has been used in targeted attacks against activists and journalists mostly ...

CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

Verizon to pre-install a 'Spyware' app on its Android phones to collect user data

If the death of online privacy rules wasn't enough for Internet Service Providers and advertisers to celebrate, Verizon has planned to pre-install spyware on customers' Android devices in order to collect their personal data. The telecom giant has partnered with Evie Launcher to bring a new...

Deploying enterprise MDX enabled apps from App Store via Volume Purchase

The CEM/XenMobile Server is currently optimized for Volume Purchase distribution of Public App Store apps that are not MDX enabled. While it is possible to distribute MDX enabled apps from App Store via volume purchase, some considerations must be taken into account for optimal performance. This...

CVE-2015-0863

GALAXY Apps aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code...

Code injection

GALAXY Apps aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code...