attack vector

  1. MS12-006 - Important : Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584) - Versi

    Severity Rating: Important Revision Note: V1.0 (January 10, 2012): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in SSL 3.0 and TLS 1.0. This vulnerability affects the protocol itself and is not specific to the Windows...
    • News
    • Thread
    • attack vector cipher suites encrypted traffic extended security updates information disclosure ms12-006 publicly disclosed ssl tls vulnerability
    • Replies: 0
    • Forum: Security Alerts

  2. MS11-058 - Critical : Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) - Ve

    Severity Rating: Critical Revision Note: V1.2 (October 25, 2011): Announced a change to detection logic and corrected bulletin replacement information for some affected configurations. There were no changes to the security update files. See the Update FAQ for details...
    • News
    • Thread
    • attack vector critical dns extended security updates ms11-058 naptr query remote code execution update faq vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  3. MS11-076 - Important : Vulnerability in Windows Media Center Could Allow Remote Code Execution (2604

    Severity Rating: Important Revision Note: V1.0 (October 11, 2011): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in Windows Media Center. The vulnerability could allow remote code execution if an attacker convinces a user to...
    • News
    • Thread
    • attack vector critical update dynamic link library extended security updates media center network security remote code execution user awareness vulnerability webdav
    • Replies: 0
    • Forum: Security Alerts

  4. Microsoft Security Advisory (2588513): Vulnerability in SSL/TLS Could Allow Information Disclosure -

    Revision Note: V1.0 (September 26, 2011): Advisory published. Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulnerability in SSL 3.0 and TLS 1.0, affecting the Windows operating system. This vulnerability affects the...
    • News
    • Thread
    • advisory attack vector cybersecurity decryption https information disclosure microsoft operating system protocol risk assessment security ssl tls vulnerability web traffic windows
    • Replies: 0
    • Forum: Security Alerts

  5. MS11-036 - Important : Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (25

    Severity Rating: Important Revision Note: V1.2 (June 14, 2011): Announced that the updates for Microsoft Office for Mac, which were not available when the bulletin was originally published, are now available in bulletin MS11-045. Also, for both vulnerabilities addressed by this...
    • News
    • Thread
    • attack vector bulletin cve-2011-1269 cve-2011-1270 exploitation file validation important malware microsoft microsoft office patch powerpoint registry remote code execution security update user rights vulnerabilities workaround
    • Replies: 0
    • Forum: Security Alerts

  6. MS11-058 - Critical: Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) - Ver

    Severity Rating: Critical - Revision Note: V1.0 (August 9, 2011): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Windows DNS server. The more severe of these vulnerabilities could allow remote code execution if an attacker registers a domain...
    • News
    • Thread
    • attack vector critical dns execution extended security updates ms11-058 network security remote code execution vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  7. MS11-043 - Critical: Vulnerability in SMB Client Could Allow Remote Code Execution (2536276) - Versi

    Severity Rating: Critical - Revision Note: V1.0 (June 14, 2011): Bulletin published.Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sent a specially crafted SMB response to a...
    • News
    • Thread
    • attack vector critical update cybersecurity microsoft patch remote code execution security smb client user awareness vulnerability
    • Replies: 0
    • Forum: Security Alerts

  8. Hotmail and Yahoo users also victims of targeted attacks

    IDG News Service - Web mail users at Yahoo and Hotmail have been hit with the same kind of targeted attacks that were disclosed earlier this week by Google, according to security software vendor Trend Micro. Trend Micro described two similar attacks against Yahoo Mail and Windows Live Hotmail...
    • reghakr
    • Thread
    • antivirus attack vector cookie theft corporate network cybercrime cybersecurity data breach email threats gmail hotmail information security malware phishing security social engineering targeted attacks trend micro user protection webmail yahoo
    • Replies: 2
    • Forum: The Water Cooler

  9. MS11-036 - Important: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (254

    Bulletin Severity Rating:Important - This security update resolves two privately reported vulnerabilities in Microsoft PowerPoint. The vulnerabilities could allow remote code execution if a user opens a specially crafted PowerPoint file. An attacker who successfully exploited either of these...
    • News
    • Thread
    • attack vector cve-2011-1269 cve-2011-1270 exploitation file validation microsoft powerpoint remote code execution security update user rights vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  10. MS11-036 - Important: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (254

    Severity Rating: Important - Revision Note: V1.0 (May 10, 2011): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Microsoft PowerPoint. The vulnerabilities could allow remote code execution if a user opens a specially crafted PowerPoint file. An...
    • News
    • Thread
    • attack vector cve-2011-1269 cve-2011-1270 exploitation file validation important microsoft office powerpoint remote code execution revision note security update user rights vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  11. Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V6.0 (March 8, 2011): Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS11-015, "Vulnerabilities in Windows Media Could Allow Remote Code Execution;" MS11-016, "Vulnerability in Microsoft Groove Could Allow Remote Code...
    • News
    • Thread
    • advisory attack vector bulletin groove music library loading media player microsoft remote code execution remote desktop security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  12. Microsoft Security Advisory (967940): Update for Windows Autorun

    Revision Note: V2.1 (February 22, 2011): Summary revised to notify users of a change in the deployment logic for updates described in this advisory. This change is intended to minimize the user interaction required to install the updates on systems configured for automatic updating.Summary...
    • News
    • Thread
    • advisory attack vector autoplay autorun deployment execution flash drive functionality media restrictions microsoft protection security server update usb user interaction windows windows vista
    • Replies: 0
    • Forum: Security Alerts

  13. MS11-010 - Important: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevatio

    Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in the Microsoft Windows Client/Server Run-time Subsystem (CSRSS) in Windows XP and Windows Server 2003. This security update is rated Important for all supported editions of these operating...
    • News
    • Thread
    • attack vector csrss elevation extended security updates important updates operating system privilege escalation vulnerability windows server windows xp
    • Replies: 0
    • Forum: Security Alerts

  14. Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V3.0 (December 14, 2010) Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS10-093, "Vulnerability in Windows Movie Maker Could Allow Remote Code Execution;" MS10-094, "Vulnerability in Windows Media Encoder Could Allow...
    • News
    • Thread
    • address book advisory attack vector bulletin encoder insecure library loading microsoft movie maker remote code execution research security update vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  15. Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V2.0 (November 9, 2010) Added Microsoft Security Bulletin MS10-087, "Vulnerabilities in Microsoft Office Could Allow Remote Code Execution," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published detailing...
    • News
    • Thread
    • advisory attack vector bulletin library loading microsoft office remote code execution security update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  16. MS10-061 - Critical: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (23472

    Bulletin Severity Rating:Critical - This security update resolves a publicly disclosed vulnerability in the Print Spooler service. The vulnerability could allow remote code execution if an attacker sends a specially crafted print request to a vulnerable system that has a print spooler interface...
    • News
    • Thread
    • attack vector bulletin critical patch information disclosure print spooler remote code execution rpc security vulnerability windows update
    • Replies: 0
    • Forum: Security Alerts

  17. Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution

    Revision Note: V1.0 (August 23, 2010) Advisory published.Summary: Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries. Link Removed due to 404 Error
    • News
    • Thread
    • advisory application attack vector library loading microsoft remote code execution security vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  18. Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V1.0 (August 23, 2010) Advisory published. Advisory Summary:Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries. Link Removed due to 404 Error
    • News
    • Thread
    • advisory application attack vector cve cybersecurity information security library loading microsoft patch remote code execution research risk management security software security threats update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  19. MS10-050 - Important: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997

    Severity Rating: Important - Revision Note: V1.0 (August 10, 2010): Bulletin published.Summary: This security update resolves a privately reported vulnerability in Windows Movie Maker. The vulnerability could allow remote code execution if an attacker sent a specially crafted Movie Maker project...
    • News
    • Thread
    • attack vector extended security updates important malware movie maker patch remote code execution user rights vulnerability windows
    • Replies: 0
    • Forum: Security Alerts