Latest Advisories Notable Vulnerabilities

  • January 2010 - Microsoft Releases 1 Security Advisory
     Advisory Date:  12 January 2010
    < div id="listDescVul"class="pane showpane noborder" >

    Microsoft addresses the following vulnerability in its January batch of patches:

    • (MS10-001) Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (972270)
      This security update resolves a privately reported vulnerability in Microsoft Windows.
  • < div id="listDescVul"class="pane showpane noborder" >
    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.
  • Adobe Illustrator Encapsulated Postscript File Remote Buffer Overflow Vulnerability
     Severity: :    
     Advisory Date:  17 December 2009
    < div id="listDescVul"class="pane showpane noborder" >

    Trend Micro advises users about an existing vulnerability in Adobe Illustrator. The exploit happens when the said application fails to successfully parse comments from EPS (Encapsulated PostScript) files, leading to a buffer overflow.

    Once the vulnerability is successfully exploited, attackers can be allowed to execute arbitrary code on the compromised system, allowing them to gain complete control of it.

  • < div id="listDescVul"class="pane showpane noborder" >

    Microsoft addressed the following vulnerabilities in its December batch of patches:

    • (MS09-071) Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318)

      This security update resolves several vulnerabilities in Microsoft Windows. These vulnerabilities could allow remote code execution if messages received by the Internet Authentication Service server are copied incorrectly into memory when handling PEAP authentication attempts.

    • (MS09-074) Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183)

      This security update resolves a vulnerability in Microsoft Office Project. The vulnerability could allow remote code execution if a user opens a specially crafted Project file.

    • (MS09-072) Cumulative Security Update for Internet Explorer (976325)

      This security update resolves several vulnerabilities in Internet Explorer. The vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer.

    • (MS09-069) Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392)

      This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a denial of service if a remote, authenticated attacker, sends a specially crafted ISAKMP message to the Local Security Authority Subsystem Service (LSASS) on an affected system.

    • (MS09-070) Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)

      This security update resolves several vulnerabilities in Microsoft Windows. The more severe of these vulnerabilities could allow remote code execution if an attacker sent a specially crafted HTTP request to an ADFS-enabled Web server.

    • (MS09-073) Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)

      This security update resolves a vulnerability in Microsoft WordPad and Microsoft Office text converters. The vulnerability could allow remote code execution if a specially crafted Word 97 file is opened in WordPad or Microsoft Office Word.