Security Bulletin

RISK: High Risk

Apple iOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS 5, which can be exploited to cause sensitive information disclosure, spoofing, cross site scripting and remote code excution. These issues are caused by the errors in the following components/functions: CalDAV Calendar CFNetwork ...

Last Update Date: 13 Oct 2011 12:43 Release Date: 13 Oct 2011 4884 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities

Win32k Null Pointer De-reference Vulnerability An elevation of privilege vulnerability exists in the way that Windows kernel-mode drivers validate data supplied from user mode to kernel mode. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode and take complete...

Last Update Date: 12 Oct 2011 15:28 Release Date: 12 Oct 2011 4866 Views

RISK: High Risk

Microsoft Windows Media Center Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that Windows Media Center handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data...

Last Update Date: 12 Oct 2011 15:25 Release Date: 12 Oct 2011 4695 Views

RISK: High Risk

Microsoft Forefront Unified Access Gateway Multiple Vulnerabilities

ExcelTable Response Splitting XSS Vulnerability An HTTP response splitting vulnerability exists in Microsoft Forefront Unified Access Gateway (UAG) server where JavaScript can be injected back to the user in the resulting page, effectively allowing attacker-controlled JavaScript to run in the context of the user clicking...

Last Update Date: 12 Oct 2011 11:53 Release Date: 12 Oct 2011 4811 Views

RISK: High Risk

Microsoft Active Accessibility Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Active Accessibility component handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or...

Last Update Date: 12 Oct 2011 11:52 Release Date: 12 Oct 2011 4766 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

Scroll Event Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has been deleted. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-...

Last Update Date: 12 Oct 2011 11:51 Release Date: 12 Oct 2011 4501 Views

RISK: Medium Risk

Microsoft Windows Ancillary Function Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists where the Ancillary Function Driver (afd.sys) improperly validates input passed from user mode to the Windows kernel. The vulnerability could allow an attacker to run code with elevated privileges. A local attacker who successfully exploited this vulnerability could...

Last Update Date: 12 Oct 2011 11:51 Release Date: 12 Oct 2011 4744 Views

RISK: Medium Risk

Microsoft Host Integration Server Denial of Service Vulnerabilities

Endless Loop DoS in snabase.exe Vulnerability An unauthenticated denial of service vulnerability exists in the way that Host Integration Server handles some UDP and TCP network traffic. The vulnerability could allow a remote user to cause snabase.exe, snaserver.exe, snalink.exe...

Last Update Date: 12 Oct 2011 11:47 Release Date: 12 Oct 2011 4733 Views

RISK: High Risk

Apple iTunes Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iTunes, which can be exploited to cause remote code execution. These issues are caused by the errors in CoreFoundation, ColorSync, CoreAudio, CoreMedia, ImageIO and WebKit.

Last Update Date: 12 Oct 2011 11:44 Release Date: 12 Oct 2011 5176 Views

RISK: High Risk

Microsoft .NET Framework Class Inheritance Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft .NET Framework and Silverlight framework restrict inheritance within classes. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the logged-on user. An attacker could then install...

Last Update Date: 12 Oct 2011 11:39 Release Date: 12 Oct 2011 4710 Views