Security Bulletin

RISK: Medium Risk

ISC BIND NXDOMAIN Redirection Processing Vulnerability

A vulnerability has been identified in BIND. A remote user can cause the target service to crash.

Last Update Date: 17 Feb 2016 Release Date: 11 Feb 2016 5999 Views

RISK: Medium Risk

Mozilla Firefox Bypass Security Restrictions Vulnerability

A vulnerability has been identified in Mozilla Firefox, exploitation of this vulnerability could allow a remote attacker bypass security controls on the target system.

Last Update Date: 15 Feb 2016 10:25 Release Date: 15 Feb 2016 6214 Views

RISK: Medium Risk

Cisco ASA Internet Key Exchange Buffer Overflow Vulnerability

A vulnerability has been identified in Cisco ASA software. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system.

Last Update Date: 12 Feb 2016 Release Date: 11 Feb 2016 6496 Views

RISK: High Risk

Microsoft NPS RADIUS Server Denial of Service Vulnerabilty

A denial of service vulnerability exists when a Network Policy Server (NPS) improperly handles a Remote Authentication Dial-In User Service (RADIUS) authentication request. An unauthenticated attacker who successfully exploited this vulnerability could send specially crafted username strings to a Network Policy Server (...

Last Update Date: 11 Feb 2016 12:26 Release Date: 11 Feb 2016 6599 Views

RISK: Medium Risk

Microsoft Active Directory Federation Services Denial of Service Vulnerability

A denial of service vulnerability exists when Active Directory Federation Services (ADFS) attempts to process certain input during forms-based authentication. An attacker who successfully exploits this vulnerability by sending certain input during forms-based authentication could cause the server...

Last Update Date: 11 Feb 2016 12:26 Release Date: 11 Feb 2016 6075 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Last Update Date: 11 Feb 2016 12:25 Release Date: 11 Feb 2016 6126 Views

RISK: Medium Risk

Microsoft Remote Desktop Protocol Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Remote Desktop Protocol (RDP) when an attacker logs on to the target system using RDP and sends specially crafted data over the authenticated connection. An attacker who successfully exploited this vulnerability could execute code with elevated privileges. An attacker...

Last Update Date: 11 Feb 2016 12:25 Release Date: 11 Feb 2016 6123 Views

RISK: Medium Risk

Microsoft WebDAV Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Microsoft Web Distributed Authoring and Versioning (WebDAV) client when WebDAV improperly validates input. An attacker who successfully exploited this vulnerability could execute arbitrary code with elevated permissions.

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 6038 Views

RISK: High Risk

Microsoft Office Remote Code Execution Vulnerabilities

Multiple Microsoft Office Memory Corruption Vulnerabilities Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. If the...

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 6005 Views

RISK: High Risk

Microsoft Windows Remote Code Execution Vulnerabilities

Windows Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 5995 Views