Threat Outbreak Alert: Fake Contract Notice Email Messages on March 5, 2014

Medium Alert ID: 33200 First Published: 2014 March 5 20:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a contract notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 3, 2014

Medium Alert ID: 33155 First Published: 2014 March 3 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

Threat Outbreak Alert: Fake Product Contract Notification Email Messages on February 28, 2014

Medium Alert ID: 33116 First Published: 2014 February 28 19:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product contract notification for the recipient. The text in the email message attempts to convince the...

GE Proficy CIMPLICITY gefebt.exe Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'GE Proficy CIMPLICITY gefebt.exe Remote Code Execution', 'Description' = %q This module abuses the gefebt.exe component in GE Proficy...

Notepad++ CCompletion Plugin 1.19 - Local Stack Buffer Overflow

Notepad++ CCompletion Plugin 1.19 - Local Stack Buffer Overflow Application:Notepad++ Version:6.5.2 UNICODE Get the application from: http://notepad-plus-plus.org/download/v6.5.2.html Plugin:CCompletion Version: Version 1.19 Unicode Get the plugin from:...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on February 23, 2014

Medium Alert ID: 32987 First Published: 2014 February 24 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Payment Information Document Email Messages on February 14, 2014

Medium Alert ID: 32876 First Published: 2014 February 14 17:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince th...

Threat Outbreak Alert: Fake Invoice Document Email Messages on February 4, 2014

Medium Alert ID: 32705 First Published: 2014 February 4 17:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Lawsuit Details Attachment Email Messages on April 14, 2014

Medium Alert ID: 32636 First Published: 2014 January 31 15:06 GMT Last Updated: 2014 April 16 11:23 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain lawsuit details attachment for the recipient. The text in the email...

Threat Outbreak Alert: Fake Multimedia Email Messages on January 28, 2014

Medium Alert ID: 32600 First Published: 2014 January 28 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia message for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Document Attachment Email Messages on January 27, 2014

Medium Alert ID: 32589 First Published: 2014 January 27 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Interest Rate Change Notification Email Messages on January 27, 2014

Medium Alert ID: 32584 First Published: 2014 January 27 18:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an interest rate change notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Purchase Details Attachment Email Messages on January 22, 2014

Medium Alert ID: 32538 First Published: 2014 January 23 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a purchase details attachment for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Photograph Sharing Email Messages on January 17, 2014

Medium Alert ID: 32482 First Published: 2014 January 17 20:27 GMT Last Updated: 2014 January 22 14:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to...

CVE-2013-5349

Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size...

Integer overflow

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag...

Integer overflow

Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size...

CVE-2013-5349

Google Picasa (Windows/macOS) versions prior to 3.9.0 Build 137.69 are affected by CVE-2013-5349 due to an integer underflow when parsing Canon RAW CR2 JPEG tags, which can trigger a heap-based buffer overflow and arbitrary code execution. The OpenVAS/Nessus entries confirm multiple related flaws...

Threat Outbreak Alert: Fake Purchase Order Invoice Request Email Messages on January 7, 2014

Medium Alert ID: 32360 First Published: 2014 January 7 21:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order invoice request for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Services Invoice Email Messages on December 31, 2013

Medium Alert ID: 32305 First Published: 2014 January 3 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a services message for the recipient. The text in the email message attempts to convince th...