Today we released Security Advisory 2896666 regarding an issue that affects customers using Microsoft Windows Vista and Windows Server 2008, Microsoft Office 2003 through 2010, and all supported versions of Microsoft Lync. We are aware of targeted attacks, largely in the Middle East and South...
anti-virus
customer guidance
emet
exploit
firewall
malware
microsoft
microsoft office
risk management
security advisory
software updates
threat landscape
tiff codec
user interaction
vulnerability
windows server
windows vista
Severity Rating: Critical
Revision Note: (October 8, 2013) Bulletin published.
Summary: This security update resolves seven privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow remote code execution if a user views shared content that...
Severity Rating: Important
Revision Note: V1.0 (October 8, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Silverlight. The vulnerability could allow information disclosure if an attacker hosts a website that contains a specially...
Severity Rating: Important
Revision Note: V1.0 (October 8, 2013): Bulletin published.
Summary: This security update resolves two privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a specially crafted file is opened in an affected...
Severity Rating: Critical
Revision Note: V1.2 (September 18, 2013): Corrected language in the vulnerability FAQ, How could an attacker exploit the vulnerability? This is an informational change only.
Summary: This security update resolves a privately reported vulnerability in Microsoft Office...
Severity Rating: Critical
Revision Note: V1.2 (September 18, 2013): Corrected language in the vulnerability FAQ, How could an attacker exploit the vulnerability? This is an informational change only.
Summary: This security update resolves a privately reported vulnerability in Microsoft Office...
Severity Rating: Critical
Revision Note: V1.0 (September 10, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a file that contains a specially crafted OLE...
administrative rights
critical severity
exploit
microsoft windows
ms13-070
ole vulnerability
remote code execution
risk assessment
security update
user privileges
Severity Rating: Important
Revision Note: V1.0 (September 10, 2013): Bulletin published.
Summary: This security update resolves 13 privately reported vulnerabilities in Microsoft Office. The most severe vulnerabilities could allow remote code execution if a specially crafted file is opened in an...
Researcher uses big Facebook vulnerability to post on Mark Zuckerberg’s wall
The user submitted the exploit to the Bug Bounty Program, which, apparently, refused to acknowledge it, and the user then demonstrated the exploit on Mr. Zuckerberg's Facebook profile page.
Link Removed
To add...
Severity Rating: Important
Revision Note: V1.2 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2770660 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their...
Severity Rating: Critical
Revision Note: V1.0 (July 9, 2013): Bulletin published.
Summary: This security update resolves four privately reported vulnerabilities and two publicly disclosed vulnerabilities in Microsoft .NET Framework and Microsoft Silverlight. The most severe of these...
Original release date: July 12, 2013
Systems Affected
McAfee ePolicy Orchestrator (ePO)
Overview
A new exploit tool targets two vulnerabilities in McAfee’s ePolicy Orchestrator (ePO).
Description
A new exploit tool specifically built to attack McAfee’s ePolicy Orchestrator (ePO) targets...
Revision Note: V1.0 (May 14, 2013): Advisory published.
Summary: Microsoft is releasing this security advisory to help ensure customers are aware that an update to the Microsoft Malware Protection Engine also addresses a security vulnerability reported to Microsoft. The update addresses a...
Original release date: July 12, 2013
Systems Affected McAfee ePolicy Orchestrator (ePO)
Overview A new exploit tool targets two vulnerabilities in McAfee’s ePolicy Orchestrator (ePO).
Description A new exploit tool specifically built to attack McAfee’s ePolicy Orchestrator (ePO)...
Severity Rating: Important
Revision Note: V1.0 (June 11, 2013): Bulletin published.
Summary: This security update resolves one privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted...
Severity Rating: Important
Revision Note: V1.0 (June 11, 2013): Bulletin published.
Summary: This security update resolves one privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted...
Revision Note: V1.0 (May 14, 2013): Advisory published.
Summary: Microsoft is releasing this security advisory to help ensure customers are aware that an update to the Microsoft Malware Protection Engine also addresses a security vulnerability reported to Microsoft. The update...
advisory
arbitrary
attack
code
context
control
customers
engine
execution
exploit
information
localsystem
malware
microsoft
protection
remote
security
system
update
vulnerability
Severity Rating: Critical
Revision Note: V1.0 (May 14, 2013): Bulletin published.
Summary: This security update resolves one publicly disclosed vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted...
bulletin
critical
exploit
internet explorer
ms13-038
patch
remote code execution
revision note
security
software
update
user rights
vulnerability
webpage
windows