Sun JavaMail 1.3.2 MimeBodyPart.getFileName Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13141/info Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet. This issue was reported to affect...

Horde IMP 2.2.x/3.2.x/4.0.x Email Attachments HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Threat Outbreak Alert RuleID10304: Email Messages Distributing Malicious Software on June 12, 2014

Medium Alert ID: 34605 First Published: 2014 June 12 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10304 may contain the following files: Name | Siz...

Microsoft Outlook App for Android Devices Stores Emails Unencrypted on File System

If you have an account with Microsoft's popular free email service Outlook.com, and using Outlook app for Android, then there is a bad news for you. Microsoft's Android app for Outlook.com, provides users to access their Outlook emails on their Android devices, fails to provide security and...

Another Internet Explorer Zero Day Surfaces

Researchers have disclosed a new zero day vulnerability in Internet Explorer 8 that could enable an attacker to run arbitrary code on vulnerable machines via drive-by downloads or malicious attachments in email messages. The vulnerability was discovered and disclosed to Microsoft in October, but...

Apple iOS 7 Updates Silently Remove Encryption for Email Attachments

There is no question that Mobile devices have become a staple in everyday living around the world. But have you ever asked yourself, How Secure are the Android, iPhone or any other Smart devices? It is really important for us to think about the Security and Privacy of our Data stored in...

Threat Outbreak Alert: Fake Payment Processing Notification Failure Email Messages on April 28, 2014

Medium Alert ID: 33965 First Published: 2014 April 28 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing failure notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on April 24, 2014

Medium Alert ID: 33928 First Published: 2014 April 24 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message instructs the recipient to open a .zip...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on April 9, 2014

Medium Alert ID: 33715 First Published: 2014 April 9 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account transaction for the recipient. The text in the email message attempts to convince the recipient to...

Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: shipping notifications that may be phishing scams or may contain malware electronic greeting cards that may contain malware requests for charitable contributions that may...

Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote stack-based buffer-overflow vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014

Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on March 21, 2014

Medium Alert ID: 33457 First Published: 2014 March 21 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Business Complaint Notification Email Messages on March 11, 2014

Medium Alert ID: 33272 First Published: 2014 March 11 17:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a complaint notification from the Better Business Bureau for the recipient. The text in the email message attemp...

Threat Outbreak Alert: Email Messages with Malicious Images on March 9, 2014

Medium Alert ID: 33246 First Published: 2014 March 10 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Attachment Email Messages on February 20, 2014

Medium Alert ID: 32948 First Published: 2014 February 20 20:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Bank Payment Confirmation Email Messages on December 17, 2013

Medium Alert ID: 32210 First Published: 2013 December 18 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to persuade the recipient to...

DEBIAN-CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

Threat Outbreak Alert: Fake Financial Fraud Alert Email Messages on November 25, 2013

Medium Alert ID: 31884 First Published: 2013 November 25 14:38 GMT Last Updated: 2013 November 26 15:31 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a financial fraud alert for the recipient. The text ...