Security Bulletin

RISK: Extremely High Risk

Android Stagefright Media Library Remote Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Android Stagefright Media Library. By sending crafted MMS or media files to target system, remote attackers can exploit the vulnerabilities by to execute arbitrary code on the target system. Note: Proof of concept or exploit code may be available in...

Last Update Date: 29 Jul 2015 11:09 Release Date: 29 Jul 2015 11197 Views

RISK: Medium Risk

Microsoft OLE Elevation of Privilege Vulnerabilities

Elevation of privilege vulnerabilities exists in Microsoft Windows OLE when it fails to properly validate user input. The vulnerabilities by themselves do not allow arbitrary code to be run. The vulnerabilities would have to be used in conjunction with another vulnerability that allows remote code execution. An...

Last Update Date: 28 Jul 2015 Release Date: 15 Jul 2015 6438 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by remote attackers to execute arbitrary code, bypass security controls, obtain potentially sensitive information, spoof URLs and conduct cross-site scripting attacks.

Last Update Date: 24 Jul 2015 Release Date: 23 Jul 2015 6287 Views

RISK: Medium Risk

Cisco Products Denial of Service Vulnerabilities

A vulnerability was identified in Cisco ASR 9000 Series Routers. A remote user can cause the target service to reload. A vulnerability was identified in Cisco IOS and IOS XE. A remote user can cause the target system to crash.

Last Update Date: 24 Jul 2015 10:16 Release Date: 24 Jul 2015 6161 Views

RISK: Extremely High Risk

Microsoft Font Driver Remote Code Execution Vulnerability

A vulnerability was found in the Windows Adobe Type Manager Library. A remote user can trigger arbitrary code execution on the target system.A remote user can create a specially crafted OpenType font file that, when loaded by the target user, will trigger a flaw in...

Last Update Date: 22 Jul 2015 Release Date: 21 Jul 2015 6998 Views

RISK: Medium Risk

Microsoft Malicious Software Removal Tool Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Microsoft Malicious Software Removal Tool (MSRT) when it fails to properly handle a race condition involving a DLL-planting scenario. An authenticated attacker who successfully exploited this vulnerability could elevate privileges on a target system. An attacker...

Last Update Date: 21 Jul 2015 Release Date: 15 Jul 2015 6548 Views

RISK: Medium Risk

Microsoft ATM Font Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Adobe Type Manager Font Driver (ATMFD) when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. An attacker could then install...

Last Update Date: 21 Jul 2015 Release Date: 15 Jul 2015 6240 Views

RISK: Medium Risk

Microsoft Windows Installer Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in some cases in the Windows Installer service when it improperly runs custom action scripts. An attacker who successfully exploited this vulnerability could elevate privileges on a targeted system. An attacker could then install programs; view, change, or delete...

Last Update Date: 21 Jul 2015 Release Date: 15 Jul 2015 6350 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Driver Elevation of Privilege Vulnerabilities

Win32k Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists due to the way the Windows kernel-mode driver handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change...

Last Update Date: 21 Jul 2015 Release Date: 15 Jul 2015 6264 Views

RISK: Medium Risk

Microsoft Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows graphics component when it fails to properly process bitmap conversions. An authenticated attacker who successfully exploited this vulnerability could elevate privileges on a targeted system. An attacker could then install programs; view, change, or delete data...

Last Update Date: 21 Jul 2015 Release Date: 15 Jul 2015 6347 Views