Security Bulletin

RISK: High Risk

Microsoft Windows CSRSS Memory Corruption Vulnerability

An elevation of privilege vulnerability exists when the Windows CSRSS improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the local system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 6185 Views

RISK: High Risk

Microsoft Active Directory Memory Consumption Vulnerability

A denial of service vulnerability exists in implementations of Active Directory that could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 6284 Views

RISK: High Risk

Microsoft Windows Kernel Elevation of Privilege Vulnerabilities

An elevation of privilege vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and read arbitrary amounts of kernel memory.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 6265 Views

RISK: High Risk

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that SharePoint Server enforces access controls on specific SharePoint Lists.

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 6325 Views

RISK: High Risk

Microsoft RDP ActiveX Control Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Remote Desktop ActiveX control, mstscax.dll, attempts to access an object in memory that has been deleted. An attacker could exploit the vulnerability by convincing the user to visit a specially crafted webpage. An attacker who successfully...

Last Update Date: 10 Apr 2013 12:21 Release Date: 10 Apr 2013 7574 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities

Remote code execution vulnerabilities exist in the way that Internet Explorer accesses an object in memory that has been deleted. These vulnerabilities may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

Last Update Date: 10 Apr 2013 12:20 Release Date: 10 Apr 2013 7088 Views

RISK: Medium Risk

HP-UX Java Multiple vulnerabilities

Multiple vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other exploits.

Last Update Date: 9 Apr 2013 10:16 Release Date: 9 Apr 2013 7090 Views

RISK: High Risk

Mozilla Firefox for Android Stack Corruption Vulnerability

A vulnerability has been identified in Mozilla Firefox for Android, which can be exploited to potentially compromise a user's device. The vulnerability is caused due to an unspecified error related to plug-in code and can be exploited to cause stack corruption.

Last Update Date: 5 Apr 2013 10:56 Release Date: 5 Apr 2013 7102 Views

RISK: Medium Risk

HP-UX Tomcat Servlet Engine Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP-UX Tomcat Servlet Engine, which can be exploited by malicious, local users to bypass certain security restrictions, disclose sensitive information, or cause a DoS (Denial of Service), by malicious users to disclose sensitive information and manipulate...

Last Update Date: 3 Apr 2013 10:59 Release Date: 3 Apr 2013 7350 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and Seamonkey, which can be exploited by remote attackers to conduct a cross-site scripting attack, elevation of privilege or execute arbitrary code.

Last Update Date: 3 Apr 2013 10:56 Release Date: 3 Apr 2013 7186 Views