Security Bulletin

RISK: High Risk

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities

Remote code execution vulnerabilities exist when Internet Explorer improperly accesses an object in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

Last Update Date: 11 Sep 2013 14:48 Release Date: 11 Sep 2013 6221 Views

RISK: High Risk

Microsoft Windows OLE Remote Code Execution Vulnerability

A vulnerability exists in OLE that could lead to remote code execution if a user opens a file that contains a specially crafted OLE object. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. If a user is...

Last Update Date: 11 Sep 2013 14:48 Release Date: 11 Sep 2013 6071 Views

RISK: Medium Risk

Microsoft Windows Theme File Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that affected editions of Microsoft Windows handles certain specially crafted Windows theme files. This vulnerability could allow an attacker to execute arbitrary code if the attacker convinces a user to apply a specially crafted Windows theme. An attacker could...

Last Update Date: 11 Sep 2013 14:47 Release Date: 11 Sep 2013 6084 Views

RISK: Medium Risk

Microsoft Office Remote Code Execution Vulnerabilities

XML External Entities Resolution VulnerabilityAn information disclosure vulnerability exists in the way that Microsoft Word parses specially crafted XML files containing external entities.Multiple Memory Corruption Vulnerabilities in Microsoft WordRemote code execution vulnerabilities exist in the way that affected Microsoft Office software parses specially crafted files. An attacker...

Last Update Date: 11 Sep 2013 14:47 Release Date: 11 Sep 2013 6073 Views

RISK: Medium Risk

Microsoft Excel Remote Code Execution Vulnerabilities

Microsoft Office Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Excel parses content in Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or...

Last Update Date: 11 Sep 2013 14:40 Release Date: 11 Sep 2013 6267 Views

RISK: Medium Risk

Microsoft Access Remote Code Execution Vulnerabilties

Remote code execution vulnerabilities exist in the way that Microsoft Access parses content in Access files. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create...

Last Update Date: 11 Sep 2013 14:39 Release Date: 11 Sep 2013 6097 Views

RISK: Medium Risk

Microsoft Office IME (Chinese) Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Office IME for Chinese that could allow a low-privilege user to elevate their access privileges.

Last Update Date: 11 Sep 2013 14:39 Release Date: 11 Sep 2013 6112 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Drivers Elevation of Privilege Vulnerabilties

Multiple Win32k Multiple Fetch VulnerabilitiesElevation of privilege vulnerabilities exist when the Windows kernel-mode driver improperly handles objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges and read arbitrary amounts of kernel memory.Win32k Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability...

Last Update Date: 11 Sep 2013 14:36 Release Date: 11 Sep 2013 5975 Views

RISK: Medium Risk

Microsoft FrontPage Information Disclosure Vulnerability

An information disclosure vulnerability exists in FrontPage that could allow an attacker to disclose the contents of a file on a target system.

Last Update Date: 11 Sep 2013 14:35 Release Date: 11 Sep 2013 6360 Views

RISK: Medium Risk

Microsoft Windows Service Control Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Service Control Manager (SCM) handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. An attacker could then install programs; ...

Last Update Date: 11 Sep 2013 14:35 Release Date: 11 Sep 2013 6211 Views