398 matches found
Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability
Description Microsoft Word is prone to a remote stack-based buffer-overflow vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...
Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014
Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on March 21, 2014
Medium Alert ID: 33457 First Published: 2014 March 21 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notification for the recipient. The text in the email message attempts to convince the recipient to...
Threat Outbreak Alert: Fake Business Complaint Notification Email Messages on March 11, 2014
Medium Alert ID: 33272 First Published: 2014 March 11 17:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a complaint notification from the Better Business Bureau for the recipient. The text in the email message attemp...
Threat Outbreak Alert: Email Messages with Malicious Images on March 9, 2014
Medium Alert ID: 33246 First Published: 2014 March 10 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The text in the email message attempts to convince the recipient to open the...
Threat Outbreak Alert: Fake Invoice Attachment Email Messages on February 20, 2014
Medium Alert ID: 32948 First Published: 2014 February 20 20:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipient to open the...
Threat Outbreak Alert: Fake Bank Payment Confirmation Email Messages on December 17, 2013
Medium Alert ID: 32210 First Published: 2013 December 18 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to persuade the recipient to...
DEBIAN-CVE-2013-4478
Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...
Threat Outbreak Alert: Fake Financial Fraud Alert Email Messages on November 25, 2013
Medium Alert ID: 31884 First Published: 2013 November 25 14:38 GMT Last Updated: 2013 November 26 15:31 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a financial fraud alert for the recipient. The text ...
CryptoLocker Spam Campaign Targets Millions in UK
Tens of millions of online banking customers in the U.K. are the targets of a dangerous spam campaign enticing users to open an attachment containing the CryptoLocker ransomware. The U.K.’s National Crime Agency’s National Cyber Crime Unit posted an advisory late last week warning people to be...
Threat Outbreak Alert: Fake Account Payment Information Email Messages on November 8, 2013
Medium Alert ID: 31683 First Published: 2013 November 8 18:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the recipient to open th...
Microsoft Warns of Targeted Attacks on Windows 0-Day
Microsoft is warning users about targeted attacks against a new vulnerability in several versions of Windows and Office that could allow an attacker to take over a user’s machine. The bug, which is not yet patched, is being used as part of targeted attacks with malicious email attachments, mainly...
Threat Outbreak Alert: Fake Meeting Invitation Email Messages on December 9, 2013
Medium Alert ID: 31616 First Published: 2013 November 4 20:45 GMT Last Updated: 2013 December 10 13:39 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a meeting invitation for the recipient. The text in the email message...
Upatre Malware Infections on the Rise
Researchers from the Microsoft Malware Protection Center MMPC have seen a spike in Win/32.Upatre infections in recent months. The trojan compromises host machines through malicious email attachments and, once installed, moves to download different malware from its command and control server. The...
Microsoft Windows OpenType Font Parsing CVE-2013-3128 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot Avay...
Microsoft Windows TrueType Font CMAP Table CVE-2013-3894 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot...
Microsoft Word CVE-2013-3857 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3847 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3850 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...