attack

  1. Security Update for Windows Vista (KB2807986)

    A security issue has been identified that could allow an authenticated local attacker to compromise your system and gain control over it. Source: Link Removed
    • News
    • Thread
    • attack authentication security system control update vulnerability windows vista
    • Replies: 0
    • Forum: Live RSS Feeds

  2. MS13-025 - Important : Vulnerability in Microsoft OneNote Could Allow Information Disclosure (281626

    Severity Rating: Important Revision Note: V1.0 (March 12, 2013): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft OneNote. The vulnerability could allow information disclosure if an attacker convinces a user to open...
    • News
    • Thread
    • attack bulletin information disclosure march 2013 ms13-025 onenote security update severity rating vulnerability
    • Replies: 0
    • Forum: Security Alerts

  3. TA13-064A: Oracle Java Contains Multiple Vulnerabilities

    Original release date: March 05, 2013 Systems Affected Any system using Oracle Java 7, 6, 5 (1.7, 1.6, 1.5) including Java Platform Standard Edition 7 (Java SE 7) Java Platform Standard Edition 6 (Java SE 6) Java Platform Standard Edition 6 (Java SE 5) Java SE Development Kit (JDK...
    • News
    • Thread
    • applet arbitrary attack browser security code execution drive-by download exploitation java java control panel jdk jre malicious memory oracle plugin security social engineering update vulnerabilities web browser
    • Replies: 0
    • Forum: Security Alerts

  4. TA13-010A: Oracle Java 7 Security Manager Bypass Vulnerability

    Original release date: January 10, 2013 | Last revised: February 06, 2013 Systems Affected Any system using Oracle Java 7 (1.7, 1.7.0) including Java Platform Standard Edition 7 (Java SE 7) Java SE Development Kit (JDK 7) Java SE Runtime Environment (JRE 7) OpenJDK 7 and 7u IcedTea...
    • News
    • Thread
    • applet attack browser cve disable java drive-by download exploitation impact java 7 jdk jre malicious openjdk oracle security security settings social engineering solution update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  5. MS13-011 - Critical : Vulnerability in Media Decompression Could Allow Remote Code Execution (278009

    Severity Rating: Critical Revision Note: V1.0 (February 12, 2013) Bulletin published. Summary: This security update resolves one publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted...
    • News
    • Thread
    • attack critical media decompression microsoft office document remote code execution security user rights vulnerability windows update
    • Replies: 0
    • Forum: Security Alerts

  6. Microsoft Security Advisory (2794220): Vulnerability in Internet Explorer Could Allow Remote Code Ex

    Revision Note: V1.1 (December 31, 2012): Added link to Microsoft Fix it solution, "MSHTML Shim Workaround," that prevents exploitation of this issue. Summary: Microsoft is investigating public reports of a vulnerability in Internet Explorer 6, Internet Explorer 7, and Internet Explorer...
    • News
    • Thread
    • advisory attack exploitation fix internet explorer microsoft remote code security vulnerability workaround
    • Replies: 0
    • Forum: Security Alerts

  7. MS13-007 - Important : Vulnerability in Open Data Protocol Could Allow Denial of Service (2769327) -

    Severity Rating: Important Revision Note: V1.0 (January 8, 2013): Bulletin published. Summary: This security update resolves a privately reported vulnerability in the Open Data (OData) protocol. The vulnerability could allow denial of service if an unauthenticated attacker...
    • News
    • Thread
    • attack best practices denial of service firewall http open data protocol security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  8. MS13-006 - Important : Vulnerability in Microsoft Windows Could Allow Security Feature Bypass (27852

    Severity Rating: Important Revision Note: V1.0 (January 8, 2013): Bulletin published. Summary: This security update resolves a privately reported vulnerability in the implementation of SSL and TLS in Microsoft Windows. The vulnerability could allow security feature bypass...
    • News
    • Thread
    • attack bypass encryption microsoft security ssl tls update vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  9. MS12-063 - Critical : Cumulative Security Update for Internet Explorer (2744842) - Version: 1.0

    Severity Rating: Critical Revision Note: V1.0 (September 21, 2012): Bulletin published. Summary: This security update resolves one publicly disclosed and four privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code...
    • News
    • Thread
    • attack bulletin critical cumulative internet explorer ms12-063 remote code execution security update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  10. Microsoft Security Advisory (2757760): Vulnerability in Internet Explorer Could Allow Remote Code Ex

    Revision Note: V1.0 (September 17, 2012): Advisory published. Summary: Microsoft is investigating public reports of a vulnerability in Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, and Internet Explorer 9. Internet Explorer 10 is not affected. Microsoft is aware of...
    • News
    • Thread
    • advisory attack ie6 ie7 ie8 ie9 internet explorer microsoft remote code security vulnerability
    • Replies: 1
    • Forum: Security Alerts

  11. Microsoft Security Advisory (2661254): Update For Minimum Certificate Key Length - Version: 1.2

    Revision Note: V1.2 (September 11, 2012): Clarified that applications and services that use RSA keys for cryptography and call into the CertGetCertificateChain function could be impacted by this update. Examples of these applications and services include but are not limited to encrypted email...
    • News
    • Thread
    • advisory applications attack certificate cryptography encryption fraudulent key length microsoft phishing private pki revision note rsa keys security services spoofing ssl tls update windows
    • Replies: 0
    • Forum: Security Alerts

  12. MS12-060 - Critical : Vulnerability in Windows Common Controls Could Allow Remote Code Execution (27

    Severity Rating: Critical Revision Note: V1.0 (August 14, 2012): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Windows common controls. The vulnerability could allow remote code execution if a user visits a website...
    • News
    • Thread
    • attack common controls critical email threats microsoft remote code execution security update vulnerability web exploit windows
    • Replies: 0
    • Forum: Security Alerts

  13. MS12-048 - Important : Vulnerability in Windows Shell Could Allow Remote Code Execution (2691442) -

    Severity Rating: Important Revision Note: V1.0 (July 10, 2012): Bulletin published. Summary: This security update resolves one privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a file or directory with...
    • News
    • Thread
    • administrator rights attack important ms12-048 remote code execution security security bulletin update user rights vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  14. MS12-049 - Important : Vulnerability in TLS Could Allow Information Disclosure (2655992) - Version:

    Severity Rating: Important Revision Note: V1.0 (July 10, 2012): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in TLS. The vulnerability could allow information disclosure if an attacker intercepts encrypted web traffic served...
    • News
    • Thread
    • attack bulletin cbc cipher disclosure encryption important information interception microsoft security tls traffic update vulnerability web
    • Replies: 0
    • Forum: Security Alerts

  15. MS12-042 - Important : Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2711167

    Severity Rating: Important Revision Note: V1.0 (June 12, 2012): Bulletin published. Summary: This security update resolves one privately reported vulnerability and one publicly disclosed vulnerability in Microsoft Windows. The vulnerabilities could allow elevation of...
    • News
    • Thread
    • anonymous users attack bulletin crafted application elevation exploitation important kernel local logon microsoft ms12-042 privately disclosed privilege remote attack reported security severity update vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  16. TA12-174A: Microsoft XML Core Services Attack Activity

    Syndicated from the United States Security Readiness Team (US-CERT). Link Removed - Invalid URL
    • News
    • Thread
    • activity attack core services microsoft security us-cert xml
    • Replies: 0
    • Forum: Security Alerts

  17. Security Advisory 2718704: Collision attack details, WU update rollout

    Today, as a part of our continuing phased mitigation strategy recently discussed, we have initiated the additional hardening of Windows Update. We’ve also provided more information about the MD5 hash-collision attacks used by the Flame malware in the SRD blog. This information should help...
    • News
    • Thread
    • advisory attack automatic update certificates code signing collision cryptography customer support hardening information integrity malware md5 mitigation phased strategy protection security trustworthy computing windows update windows vista
    • Replies: 0
    • Forum: Security Alerts

  18. Security Advisory 2718704: Update to Phased Mitigation Strategy

    Hello, At Microsoft, our commitment is to help ensure customer trust in their computing experience. That was the impetus for Trustworthy Computing, and central to that is the priority we place on taking the necessary actions to help protect our customers. Yesterday, we issued Security Advisory...
    • News
    • Thread
    • advisory attack certificates codesigning collaboration collisions cryptography customers defense deployment hardening malware microsoft mitigation phased protection security trustworthy update windows
    • Replies: 0
    • Forum: Security Alerts

  19. MS12-034 - Critical : Combined Security Update for Microsoft Office, Windows, .NET Framework, and Si

    Severity Rating: Critical Revision Note: V1.2 (May 22, 2012): Added an entry to the Frequently Asked Questions (FAQ) Related to This Security Update section to explain this revision. Summary: This security update resolves three publicly disclosed vulnerabilities and seven...
    • News
    • Thread
    • attack codeexecution critical document dotnet email faq framework malicious microsoft office remote revision security silverlight truetype update vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  20. MS10-016: Vulnerability in Windows Movie Maker could allow remote code execution

    Resolves a vulnerability in Windows Movie Maker and Microsoft Office Producer for Microsoft Office PowerPoint 2003 that could allow remote code execution if an attacker sent a specially crafted Movie Maker or Producer file. More...
    • News
    • Thread
    • attack exploitation kb975561 malware microsoft office powerpoint remote code execution security patch vulnerability windows movie maker
    • Replies: 0
    • Forum: Knowledge Base (KB)