Threat Outbreak Alert RuleID25012: Email Messages Distributing Malicious Software on September 14, 2016

Medium Alert ID: 48896 First Published: 2016 September 14 14:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25012 may contain the following files: Name ...

MS16-110: Description of the security update for Windows: September 13, 2016

None None...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the confidentiality, integrity, and accessibility of information

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to Hotspot...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the confidentiality, integrity, and accessibility of information

The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to librarie...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the confidentiality, integrity, and accessibility of information

The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to librarie...

Vulnerability of the Java Platform software platform, allowing attackers to compromise accessibility

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility through actions related to JavaFX...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the confidentiality, integrity, and accessibility of information

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to Hotspot...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the confidentiality, integrity, and accessibility of information

The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to deployme...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the Google Chrome browser are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...

Pillow -- multiple vulnerabilities

Pillow reports: Pillow prior to 3.3.2 may experience integer overflow errors in map.c when reading specially crafted image files. This may lead to memory disclosure or corruption. Pillow prior to 3.3.2 and PIL 1.1.7 at least do not check for negative image sizes in ImagingNew in Storage.c. A...

HP Integrated Lights-Out Information Disclosure Vulnerability (CNVD-2016-07089)

HP Integrated Lights-Out is used for remote management of servers. An information disclosure vulnerability exists in HP Integrated Lights-Out. A remote attacker could exploit this vulnerability to cause information disclosure via TLS CBC Padding and MAC errors...

The vulnerability of Kaspersky Internet Security’s antivirus protection allows a hacker to trigger a service failure.

The vulnerability of the KLIF driver in Kaspersky Internet Security’s antivirus protection system exists due to errors in the filtering of system calls. Exploiting this vulnerability could allow a malicious actor, operating locally, to cause a service failure by sending the API call...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Windows operating system’s kernel is related to the improper handling of system call errors during page faults. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created application...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system’s print queue dispatcher is related to security configuration errors. Exploiting this vulnerability allows a perpetrator performing a “man-in-the-middle” attack to execute arbitrary code using a specially crafted print driver during printer...

DSA-3647-1 icedove - security update

Bulletin has no description...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

Design/Logic Flaw

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

UBUNTU-CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...