Mailing Lists & Feeds
Current Activity Calendar
| January 05, 2007 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Microsoft Releases Advance Notification for January Security Bulletinadded January 4, 2007Microsoft has issued a Security Bulletin Advance Notification indicating that their January release cycle will contain eight bulletins, some of which have a maximum severity rating of Critical. The notification further states that three of the bulletins are for Windows; one for Windows and Visual Studio; one for Windows and Office; and three are for Office. The release is scheduled for Tuesday, January 9th. We will provide additional information as it becomes available. Cross-Site Scripting Vulnerability in Adobe Acrobat Plug-Inadded January 4, 2007US-CERT is aware of a cross-site scripting vulnerability in the Adobe Acrobat Plug-In. The Adobe Acrobat Plug-In allows users to view PDF files inside of a web browser. The Adobe Acrobat Plug-In fails to properly validate URI parameters for JavaScript code. This allows user-supplied JavaScript to execute within the context of the web site hosting the PDF file causing a cross-site scripting vulnerability. More information about this vulnerability can be found in the following:
US-CERT encourages users to upgrade to the latest release of Adobe Acrobat Reader as soon as possible. If unable to upgrade, then US-CERT recommends that users take the following actions to help mitigate the security risks:
Note: Any website that hosts a PDF file may be used as an attack vector or launch point to exploit this vulnerability. Web site and network administrators may wish to filter JavaScript in both URLs and leaving the network to prevent their websites from being leveraged in attacks. Information on how to filter JavaScript out of URLs is available in VU#815960. IRS Phishing Scam and Identity Theftadded January 3, 2007US-CERT continues to receive reports of phishing scams that target online users. Most recently, users have reported receiving emails that appear to be from the Internal Revenue Service (IRS). The phishing email claims to offer a tax refund and requests users to click on a link to provide personal and possibly sensitive information. Identity thieves could use this information to further compromise unsuspecting victims. A spokesperson for the IRS has confirmed that they do not solicit anything by email. US-CERT reminds users to remain cautious when receiving unsolicited email that could be a potential phishing email. US-CERT reminds users to remain cautious when receiving unsolicited email. US-CERT encourages users to report phishing incidents based on the following guidelines:
Additionally, users are encouraged to take the following measures to prevent phishing attacks from occurring:
Proof-of-Concept Code for a Vulnerability in Apple QuickTimeadded January 2, 2007 | updated January 3, 2007US-CERT is aware of proof-of-concept code for a buffer overflow vulnerability in Apple QuickTime. The flaw is in the way that QuickTime handles Real Time Streaming Protocol (RTSP) URL strings. By persuading a user to access a specially crafted QuickTime file, a remote attacker may be able to execute arbitrary code or cause a denial of service on a vulnerable system. Note: Apple iTunes installations are also affected by this vulnerability. More information about this vulnerability can be found in the following:
Until a security fix or more information becomes available, US-CERT recommends the following action to help mitigate the security risks:
Public Exploit Code Available for DoS Vulnerability in Microsoft Windows Workstationadded December 27, 2006US-CERT is aware of a publicly available exploit code for a buffer overflow vulnerability in Microsoft Windows Workstation. According to Secunia Advisory SA23487, there is a flaw in the way the Workstation service handles large RPC requests. By sending specially crafted data to the Workstation service, a remote attacker could cause a denial-of-service condition on a vulnerable system. Initial analysis indicates that Windows XP and Windows 2000 are vulnerable to this flaw. Until a security fix from Microsoft becomes available, US-CERT recommends the following action to help mitigate the security risks:
US-CERT will continue to investigate and will provide additional information as it becomes available. Proof-of-Concept Code for Vulnerability in Microsoft Windowsadded December 26, 2006US-CERT is aware of publicly available proof-of-concept code for a local privilege escalation vulnerability in Microsoft Windows 2000, Windows Server 2003, Windows XP, and Windows Vista. More information concerning this flaw is available at the Microsoft Security Response Center Blog. US-CERT will continue to investigate and will provide additional information as it becomes available. Mozilla Releases Security Advisories to Address Multiple Vulnerabilitiesadded December 20, 2006 | updated December 21, 2006Mozilla has released Security Advisories to correct multiple vulnerabilities in Firefox, Thunderbird, and SeaMonkey. If successfully exploited, these vulnerabilities may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition on a vulnerable system. More information about these vulnerabilities can be found in the following:
US-CERT strongly encourages users to take the following actions to help mitigate the security risks:
Microsoft Publishes New Information on the Three Word Vulnerabilitiesadded December 19, 2006Microsoft has published new information on its Security Response Center Blog addressing the latest Word vulnerabilities reported earlier this month. Until a security fix from Microsoft becomes available, US-CERT recommends that users follow the recommendations in Microsoft Security Advisory 929433 to help mitigate the security risks for all three Word vulnerabilities. |
|||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader