138 matches found
Adobe Reader and Acrobat memory corruption vulnerabilities
Overview Adobe Reader and Acrobat 11.0.01 and earlier, 10.1.5 and earlier, and 9.5.3 and earlier contain memory corruption vulnerabilities. Description The Adobe security bulletin APSB13-07 states:Adobe has released security updates for Adobe Reader and Acrobat XI 11.0.01 and earlier for Windows...
Foxit Advanced PDF Editor 3 contains a stack buffer overrun vulnerability
Overview Foxit Advanced PDF Editor 3, and possibly earlier versions, contains a stack buffer overrun vulnerability. Description Foxit Advanced PDF Editor 3, and possibly earlier versions, contains a stack buffer overrun vulnerability that may be exploited by an attacker that is able to successful...
Microsoft Internet Explorer 6/7/8 mshtml!CDwnBindInfo对象释放后重用代码执行漏洞
BUGTRAQ ID: 57070 CVECAN ID: CVE-2012-4792 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer在mshtml!CDwnBindInfo对象的处理上存在释放后重用漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页内容导致执行任意代码控制用户系统。 此漏洞是0day漏洞，目前已被发现用于执行针对性的攻击。 不受影响系统： Microsoft Internet Explorer 9.x Microsoft Internet Explorer 10.x 0 Microsoft...
Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers
Overview Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description Autonomy Keyview IDOL is a set of libraries that can decode over 1,000 different file formats. The...
Researcher Finds Technique to Bypass Microsoft's EMET Protections
A security researchers has discovered a pair of methods that enable him to bypass the protections offered by Microsoft’s EMET anti-exploit technology. The Enhanced Mitigation Experience Toolkit, which Microsoft updated late last month to include one of the three technologies that were finalists i...
Microsoft XML Core Services远程代码执行漏洞
CVE ID: CVE-2012-1889 Microsoft XML Core Services MSXML是一组服务，可用JScript、VBScript、Microsoft开发工具编写的应用构建基于XML的Windows-native应用。 Microsoft XML Core Services 3.0、4.0、5.0、6.0在实现上存在漏洞，可能导致访问未初始化内存对象进而发生内存破坏，远程攻击者可利用该漏洞在用户通过IE查看恶意网页时执行任意代码。 0 Microsoft XML Core Services 6.0 Microsoft XML Core Services 5.0...
Oracle Outside In CorelDRAW file parser stack buffer overflow
Overview Oracle Outside In contains a stack buffer overflow in the CorelDRAW parser, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of libraries that can decode over 500 different file formats. Originally...
Adobe Reader and Acrobat font memory corruption vulnerability
Overview Adobe Reader and Acrobat fail to properly handle font data, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description A critical vulnerability exists in the font parsing code in Adobe Reader and Acrobat. The vulnerability results i...
RSLinx Classic EDS Wizard buffer overflow vulnerability
Overview Rockwell Automation RSLinx Classic EDS Hardware Installation Tool contains a buffer overflow vulnerability. Description According to Rockwell Automation's website: RSLinx Classic provides plant-floor device connectivity for a wide variety of Rockwell Software applications such as RSLogix...
Microsoft Releases Version 2.1 of EMET Mitigation Toolkit
Microsoft has released a new version of its Enhanced Mitigation Experience Toolkit, a free download that gives IT staffs the ability to better defend against exploit attempts. The EMET now includes support, as well. EMET is a toolkit that essentially is designed to add exploit mitigation...
Microsoft Releases New Version of EMET
Microsoft has released a new, fully supported version of the Enhanced Mitigation Experience Toolkit EMET designed to mitigate exploitation attempts. EMET allows users to manage security mitigation technologies to make it more difficult for an attacker to exploit software vulnerabilities. US-CERT...
Adobe Flash Player contains unspecified code execution vulnerability
Overview Adobe Flash contains a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The following versions of Adobe Flash versions contain an unspecified vulnerability that can result in memory corruption: Adobe Flash Playe...
Microsoft Enhanced Mitigation Experience Toolkit (EMET) Installed
Microsoft's Enhanced Mitigation Experience Toolkit EMET, a tool for mitigating security vulnerabilities in Windows applications, is installed on the remote system. C Tenable, Inc. include"compat.inc"; if description scriptid49675; scriptversion"1.24";...
Microsoft Anti-Exploit Tool Protects Against Adobe Zero Day
Although Adobe doesn’t have a patch ready yet for the newly disclosed vulnerability in the company’s Reader application, Adobe and Microsoft security officials said that Microsoft’s recently released Enhanced Mitigation Environment Toolkit 2.0 can protect users against the exploit that is current...
Adobe Releases Security Advisory for Vulnerability in Reader and Acrobat
Adobe has released a security advisory to address a vulnerability in Adobe Reader and Acrobat. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. The advisory indicates that this vulnerability is being actively exploited...
Microsoft Releases New Version of EMET Exploit Mitigation Toolkit
Mitigation has become the word of the moment at Microsoft, and the company on Thursday continued its recent flow of tools designed to lessen the effectiveness of certain attacks with the release of version 2.0 of its Enhanced Mitigation Experience Toolkit. The new version of the toolkit includes ...
Free Microsoft Tool Hardens Programs Against Attack
Microsoft has released a free tool for retroactively hardening applications against known attacks, without recompiling the program with a special compiler flag. The Enhanced Mitigation Evaluation Toolkit EMET allows developers and administrators to activate specific protection mechanisms in...
