FortiGuard Advisory: Microsoft Internet Explorer Remote Memory Corruption Vulnerability

Microsoft Internet Explorer Remote Memory Corruption Vulnerability 2010.January.21 Summary: ======== Fortinet's FortiGuard Labs has discovered a memory corruption vulnerability in Microsoft's Internet Explorer. Impact: ======= Remote Code Execution. Risk: ===== Critical Affected Software:...

Microsoft Knew of IE Zero-Day Flaw Since September

Microsoft today admitted it knew of the Internet Explorer flaw used in the attacks against Google and Adobe since September last year. The flaw was in the Microsoft Security Response Center’s MSRC queue to be fixed in the the next batch of patches due in February but the targeted zero-day attacks...

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-009 January 21, 2010 -- CVE ID: CVE-2009-0376 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability

ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-005 January 21, 2010 -- CVE ID: CVE-2009-4241 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

ZDI-10-004: Cisco CiscoWorks IPM GIOP getProcessName Remote Code Execution Vulnerability

ZDI-10-004: Cisco CiscoWorks IPM GIOP getProcessName Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-004 January 21, 2010 -- CVE ID: CVE-2010-0138 -- Affected Vendors: Cisco -- Affected Products: Cisco Internetwork Performance Monitor -- TippingPointTM IPS...

ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerability

ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-008 January 21, 2010 -- CVE ID: CVE-2009-4244 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerability

ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-007 January 21, 2010 -- CVE ID: CVE-2009-4257 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

Microsoft: Emergency IE Patch Coming

Microsoft has started dropping broad hints that an emergency patch for Internet Explorer will be released very soon to counter targeted attacks and the publication of exploit code for a “browse and you’re owned” vulnerability in its flagship Web browser. UPDATE: Here is the official confirmation...

Code to mitigate IE event zero-day (CVE-2010-0249)

Here's a mitigation for the CVE-2010-0249 IE createEventObject srcElement zero-day. Quite simply, it just disables the createEventObject method by mangling its name in memory. If anyone knows an important web application that uses createEventObject, please respond to the mailing list. Use this co...

Microsoft Confirms IE Zero-Day Used in Google Attack

Hackers linked to China used a zero-day vulnerability in Microsoft’s Internet Explorer browser to compromise corporate systems at more than 30 U.S. companies, including Google, Adobe and Juniper Networks. According to Microsoft, the vulnerability is still unpatched and can lead to remote code...

ZDI-10-002: Oracle Secure Backup observiced.exe Remote Code Execution Vulnerability

ZDI-10-002: Oracle Secure Backup observiced.exe Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-002 January 12, 2010 -- CVE ID: CVE-2010-0072 -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- Vulnerability Details: This vulnerability...

Google Attackers Used Internet Explorer Zero Day

Several of the companies victimized in the attack that hit Google and dozens of other companies recently were compromised through the use of a new, unpatched vulnerability in Internet Explorer, experts say. The flaw was used in a sophisticated attack that included victims receiving targeted email...

Novell iManager <= 2.7.2 Buffer Overflow Vulnerability

Novell iManager is prone to a stack-based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-001 January 7, 2010 -- CVE ID: CVE-2009-4486 -- Affected Vendors: Novell -- Affected Products: Novell iManager -- Vulnerability Details: This vulnerability allows...

Five Important Security Resolutions for Adobe

The year was 2001. Code Red, the Microsoft Web Server worm was running rampant and underscored every security professional’s perception that Microsoft products were both a necessary evil and a serious security liability. Fast-forward to nine years later. Microsoft products still contain more than...

Code to mitigate IIS semicolon zero-day

This mitigation should help block attempts to exploit the IIS semicolon zero-day BID 37460, but no warranties and no guarantees. It didn't crash my web servers during testing, but I make no representations as to how it will or won't perform on anyone else's web servers. This mitigation is only...

Microsoft Investigating New IIS Zero Day

Microsoft is investigating reports of a new zero-day vulnerability in its IIS Web server software, and says that the flaw is a problem mainly on servers that are poorly configured. The vulnerability, which first surfaced last week, exists in versions 6.0 and earlier of IIS, according to an adviso...

ZDI-09-099: Hewlett-Packard OpenView Data Protector Backup Client Service Buffer Overflow Vulnerability

ZDI-09-099: Hewlett-Packard OpenView Data Protector Backup Client Service Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-099 December 17, 2009 -- CVE ID: CVE-2007-2280 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Data...

Brad Arkin on Adobe Reader Zero-Day Flaws and Security Response

Dennis Fisher and Ryan Naraine talk with Brad Arkin, Adobe’s director of product security and privacy, about the new zero-day flaws in Acrobat and Reader, Adobe’s security response process and the challenges of getting updates to end users. Podcast audio courtesy of sykboy65 Subscribe to the...

[security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01124817 Version: 1 HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be acte...