Security Bulletin

RISK: Medium Risk

Microsoft VBScript Scripting Engine Could Allow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer. If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, the Windows Help System would be started with a Windows...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4238 Views

RISK: Medium Risk

Microsoft Visio Could Allow Remote Code Execution Vulnerabilities

1. Visio Attribute Validation Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Office Visio validates attributes when handling specially crafted Visio files.An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4181 Views

RISK: Medium Risk

Microsoft Windows Could Allow Remote Code Execution Vulnerabilities

1. WinVerifyTrust Signature Validation VulnerabilityA remote code execution vulnerability exists in the Windows Authenticode Signature Verification function used for portable executable (PE) and cabinet file formats. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to manipulate unverified portions of the...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4199 Views

RISK: Medium Risk

Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft MPEG Layer-3 codecs handle AVI media files. This vulnerability could allow remote code execution if a user opened a specially crafted AVI file containing an MPEG Layer-3 audio stream. If a user is...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4150 Views

RISK: Medium Risk

Microsoft Office Publisher Could Allow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Office Publisher opens Publisher files. An attacker could exploit the vulnerability by creating a specially crafted Publisher file that could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4168 Views

RISK: Medium Risk

Microsoft Windows Media Services Could Allow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows 2000 Server Service Pack 4 running the optional Windows Media Services component due to the way the Windows Media Unicast Service handles specially crafted transport information packets. On Microsoft Windows 2000 Server Service Pack 4, Windows Media Services is...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4171 Views

RISK: Medium Risk

Microsoft Media Player Could Allow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Windows Media Player ActiveX control. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs or view, change, or delete data with full user rights.

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4129 Views

RISK: Medium Risk

Adobe Acrobat and Reader Multiple Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Reader and Acrobat, which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, cause a denial of service or compromise a vulnerable system. These issues are caused by buffer overflows, memory corruptions, ...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4337 Views

RISK: Medium Risk

Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service Vulnerabilities

1. SMTP Server MX Record VulnerabilityA denial of service vulnerability exists in the way that the Microsoft Windows Simple Mail Transfer Protocol (SMTP) component handles specially crafted DNS Mail Exchanger (MX) resource records. An attempt to exploit the vulnerability would not require authentication, ...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4344 Views

RISK: Medium Risk

Microsoft Windows Kernel Could Allow Elevation of Privilege Vulnerabilities

1. Windows Kernel Null Pointer VulnerabilityA denial of service vulnerability exists in the Windows kernel due to the insufficient validation of registry keys passed to a Windows kernel system call. An attacker could exploit the vulnerability by running a specially crafted application, causing the system to become...

Last Update Date: 28 Jan 2011 Release Date: 14 Apr 2010 4257 Views