Security update for Mozilla Firefox (important)

Mozilla Firefox was updated to 49.0.2 to fix two security issues a some bugs. The following vulnerabilities were fixed: CVE-2016-5287: Crash in nsTArraybase bsc1006475 CVE-2016-5288: Web content can read cache entries bsc1006476 The following changes and fixes are included: Asynchronous rendering...

Security Advisory - PXN Defense Mechanism Failure Vulnerability in Huawei Mobile Phones

There is a Privileged Execute-Never PXN defense mechanism failure vulnerability in the drive code of some Huawei mobile phones. An attacker may trick users into installing malicious apps which can disable the PXN defense mechanism by invoking related drive code to crash the system or escalate...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Mobile Applications Leak Device, Location Data

Both Android and iOS apps leak data, leaving users vulnerable to data theft, denial-of-service attacks, and remote SIM card rooting. In a report released Thursday “Are mobile apps a leaky tap in the enterprise?” researchers at Zscaler assert that Android and iOS users are equally vulnerable to a...

Android devices cannot launch apps after updating VDA agent to version 7.11

After upgrading VDA to v7.11; Receiver for Android users cannot launch published Apps or Desktops. The following error message is observed on the Android devices: "The common name on the ID certificate is not what was expected" In addition, the receiver logs shall contain similar stack trace: 09-...

CVE-2016-7193

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps...

CVE-2016-7193

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps...

Memory corruption

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps...

CVE-2016-7193

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps...

CVE-2016-7193

Summary of CVE-2016-7193 : A memory corruption flaw in Microsoft Office’s handling of RTF documents allows remote code execution on affected Office products (Word 2007 SP2, Office 2010 SP2, Word 2013/2016, Word for Mac variants, Office Web Apps Server, etc.). The root cause is a vulnerability in ...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-09558)

Android is an open source operating system based on Linux. Android's Mediaserver has a security vulnerability that allows a remote attacker to build malicious apps with elevated privileges...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

Android kernel sensitive information leakage vulnerability

Android is an open source operating system based on Linux. Android's kernel has a security vulnerability that allows remote attackers to exploit vulnerabilities to build malicious applications that can access sensitive information...

Android MediaTek video driver elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android's MediaTek video driver allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Zygote elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the core/java/android/os/Process.java file in Android's Zygote allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android NVIDIA Analytics Tool Sensitive Information Disclosure Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android's NVIDIA Analytics tool allows remote attackers to exploit the vulnerability to build malicious applications that can access sensitive information...

Android kernel sensitive information leakage vulnerability (CNVD-2016-09566)

Android is an open source operating system based on Linux. A security vulnerability in Android's kernel Binder allows remote attackers to exploit the vulnerability to build malicious applications that can access sensitive information...

Android NVIDIA Analysis Tool Sensitive Information Disclosure Vulnerability (CNVD-2016-09565)

Android is an open source operating system based on Linux. A security vulnerability in Android's NVIDIA Analytics tool allows remote attackers to exploit the vulnerability to build malicious applications that can access sensitive information...

Android NVIDIA MMC Test Driver Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android's NVIDIA MMC test driver allows a remote attacker to exploit the vulnerability to build malicious apps with elevated privileges...

Android Qualcomm component elevation of privilege vulnerability (CNVD-2016-09563)

Android is an open source operating system based on Linux. There is a security vulnerability in the Qualcomm component of Android that allows a remote attacker can exploit the vulnerability to build malicious applications and elevate privileges...