Mailing Lists & Feeds
Current Activity Calendar
| November 01, 2006 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Exploit Code Posted for Vulnerability in Microsoft's Visual Studioadded November 1, 2006US-CERT is aware of publicly available exploit code for a new vulnerability in the Windows Management Instrumentation (WMI) Object Broker ActiveX control. This control is packaged with Microsoft Visual Studio 2005 and can be loaded by a malicious website using Internet Explorer. By persuading a user to view a specially crafted HTML document (e.g., a web page or an HTML email message) with Internet Explorer, a remote attacker may be able to execute arbitrary code on a vulnerable system. More information about this vulnerability can be found in the following:
Until an official update, patch, or more information becomes available, we recommend the following actions to help mitigate the security risks:
Multiple Vulnerabilities in Microsoft Internet Explorer 7added October 31, 2006We are aware of multiple vulnerabilities in Microsoft Internet Explorer 7. The first is a spoofing vulnerability where a remote attacker can use a specially crafted Uniform Resource Identifier (URI) to spoof the address bar in a pop-up window. The user is led to believe that the content of the pop-up window is coming from the trusted website, and therefore could potentially provide sensitive information to a malicious website or an untrusted source. More information about this vulnerability can be found in the following:
The second vulnerability is a flaw in the way the "mhtml:" URL redirections are handled. If successfully exploited, a remote attacker could bypass security restrictions and gain access to sensitive information served from another domain in the context of a malicious web page. Exploit code that takes advantage of this vulnerability is public. Until an official update, patch, or more information becomes available, we recommend the following actions to help mitigate the security risks:
Proof-of-Concept Code for DoS Vulnerability in Microsoft Internet Exploreradded October 27, 2006We are aware of proof-of-concept code for a denial-of-service vulnerability in Microsoft Internet Explorer. By persuading a user to view a specially crafted HTML document (e.g., a web page or an HTML email message), Internet Explorer may crash when processing a specific method in the 'ADODB.Connection' ActiveX Object. It is not clear at this point whether an attacker may be able to execute arbitrary code with this vulnerability. More information about this vulnerability can be found in the following:
Until an official update, patch, or more information becomes available, we recommend the following actions to help mitigate the security risks:
Multiple Vulnerabilities in AOL Nullsoft Winamp Ultravoxadded October 26, 2006We are aware of two heap buffer overflow vulnerabilities in AOL's Nullsoft Winamp Ultravox. The first overflow is a flaw in the handling of the 'ultravox-max-msg' header of the Ultravox protocol. The Ultravox protocol supports the delivery and publishing of streaming media such as music files. The second overflow is a flaw in the parsing of Lyrics3 tags. Lyrics3 is a system for embedding the lyrics inside an MP3 song file. By persuading a user to access a specially crafted playlist file or connect to a malicious server with Winamp, a remote, unauthenticated attacker may be able to execute arbitrary code with privileges of the user. We recommend that users upgrade to Winamp 3.51 to help mitigate the security risks. We will continue to update current activity as more information becomes available. Identity Theft Continues to Rise, Financial Accounts Targetedadded October 25, 2006We continue to see a rise in online identity theft cases, leading to the compromise of financial account information. In addition to banking accounts, we are observing increased activity targeting brokerage accounts. We remind users to remain cautious when receiving unsolicited email in order to avoid phishing and keylogger type attacks. We also emphasize the importance of preventative computer security measures to help avoid phishing and other types of attacks. Individuals can help protect themselves by following these safeguards:
For additional information regarding phishing, we recommend reading the following documents:
Oracle Critical Update for October 2006added October 17, 2006 | updated October 18, 2006Oracle has released Oracle Critical Patch Update (CPU) for October 2006. This update addresses numerous vulnerabilities in different Oracle products and components. The impacts of these vulnerabilities vary depending on the product, component, and configuration of the system. Potential consequences include the execution of arbitrary code or commands, disclosure of sensitive information, and denial of service. More information about these vulnerabilities can be found in the Technical Cyber Security Alert TA06-291A. We strongly encourage Oracle administrators to review, test, and install the patches within the Critical Patch Update for October 2006. Proof-of-Concept Code for Vulnerability in NVIDIA Graphics Driveradded October 18, 2006We are aware of proof-of-concept exploit code for a buffer overflow vulnerability in the NVIDIA Binary Graphics Driver for UNIX systems. If a remote attacker sends a specially crafted sequence of glyphs to a vulnerable system, that attacker may be able to execute arbitrary code with potentially root level privileges or cause a denial-of-service condition. More information about this vulnerability can be found in the following:
Until an official update, patch, or more information becomes available, we recommend the following actions to help mitigate the security risks:
Proof-of-Concept Code for Unpatched Vulnerability in Microsoft PowerPointadded October 13, 2006We are aware of publicly available proof-of-concept code for an unpatched vulnerability in Microsoft PowerPoint. The complete impact of this vulnerability is not yet known. More information is available at the Microsoft Security Response Center Blog! Until an update, patch, or more information becomes available, we recommend the following actions to help mitigate the security risks:
We strongly encourage users not to open unfamiliar or unexpected email attachments, even if sent by a known and trusted source. Users may wish to read Cyber Security Tip ST04-010 for more information on working with email attachments. We will continue to monitor this issue and provide additional information as it becomes available. Support Ends for Windows XP Service Pack 1added October 10, 2006We are reminding users that as of today, October 10th, 2006, Microsoft has ended public assisted support for Windows XP Service Pack 1 (SP1). According to Microsoft, incident support options and security updates will no longer be available for this retired service pack as defined by the Microsoft Support Lifecycle Policy . Microsoft recommends that users upgrade to Windows XP Service Pack 2 (SP2) to receive security updates. For more information, please see End of support for Windows 98, Windows Me, and Windows XP Service Pack 1 . Microsoft Releases October Security Bulletinadded October 10, 2006 | updated October 10, 2006Microsoft has released updates to address vulnerabilities in Microsoft Windows and Office as part of the Microsoft Security Bulletin Summary for October 2006. We strongly encourage users to review the bulletins and follow best-practice security policies to determine what updates should be applied. Additionally, more information about these vulnerabilities can be found in the Vulnerability Notes Database and Technical Cyber Security Alert TA06-283A . Mozilla Posts Statement Regarding Firefox JavaScript Vulnerabilityadded October 1, 2006 | updated October 4, 2006At the recent Toorcon conference, two presenters claimed to have discovered a new vulnerability in the Mozilla Firefox JavaScript engine that could allow malicious code execution. The report was never confirmed and just yesterday, one of the presenters issued a statement to Mozilla that they had not successfully exploited the vulnerability, nor did they know of anyone who had. Mozilla has released additional information regarding this report and is continuing to investigate the issue. Updates for Multiple Apple OS X Vulnerabilitiesadded September 29, 2006 | updated October 4, 2006Apple has released Security Update 2006-006 to address multiple vulnerabilities in Apple products. The impacts of these vulnerabilities include execution of arbitrary code, bypassing security restrictions, and denial of service. This security update also addresses previously known vulnerabilities in Adobe Flash Player for Apple OS X. More information about these vulnerabilities can be found in the following:
Apple has also released Mac OS X 10.4.8 Update (Intel). This update includes security fixes for Intel-based Apple systems. We recommend the following actions to help mitigate the security risks:
We will continue to monitor this issue and provide additional information as it becomes available. |
|||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader