CVE-2015-2415: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

PT-2015-1553

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1 Office Compatibility Pack version SP3 Description The issue is caused by a buffer overflow in dynamic memory, allowing remote attackers to execute arbitrary code or cause a...

PT-2015-1534

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2013 SP1 Office for Mac version 2011 Excel Viewer version 2007 SP3 Office Compatibility Pack version SP3 Excel Services on SharePoint Server versions 2007 SP3 through 2013 SP1 Description The issue is...

PT-2015-5734

Name of the Vulnerable Software and Affected Versions Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP2 Microsoft Excel Viewer 2007 SP3 Microsoft Office Compatibility Pack SP3 Description A remote code execution issue exists due to improper handling of dynamic link library DLL files by Microsoft...

CVE-2015-2377: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

PT-2015-1535

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack version SP3 Microsoft Excel versions 2007 SP3 through 2013 SP1 Office Compatibility Pack version SP3 Description The issue is caused by a buffer overflow in dynamic memory, allowing a remote attacker to...

Veeam Backup & Replication Upgrade Paths

Tenants of Veeam Cloud Service Providers If your Veeam Backup & Replication installation is connected to a Veeam Cloud Service Provider, contact your Service Provider before upgrading to ensure that the intended upgrade will not break compatibility. A tenant cannot be on a newer version of Veeam...

CVE-2015-1967

MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used...

CVE-2015-1967: Exposure of Sensitive Information to an Unauthorized Actor

MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used...

DLA-246-2 linux-2.6 - security update

Bulletin has no description...

Fedora 22 : armacycles-ad-0.2.8.3.3-1.fc22 (2015-9528)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

Fedora 21 : armacycles-ad-0.2.8.3.3-1.fc21 (2015-9504)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

Fedora 21 : python-tornado-3.2.2-1.fc21 (2015-8606)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

CVE-2015-1759 is a memory-corruption remote code execution vulnerability in Microsoft Office, specifically in the Office Compatibility Pack SP3, caused by improper handling of in-memory objects during parsing of crafted Office files. The flaw can allow an attacker to execute arbitrary code on a v...

CVE-2015-1759: Undefined Security Weakness

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

CVE-2015-1760: Undefined Security Weakness

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...