Skip to content

Home  |   FAQ  |   Contact  |   Privacy & Use

customize
Current Activity Calendar
Left Arrow
June 2007
 Right Arrow
Su M Tu W Th F Sa
          1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
Please click on a date above to see current activity for that day.

  • Latest Current Activity
    •

    June 06, 2007 - Current Activity

    This is an archived copy of current activity, if you would like to see the most recent version, please click here.

    June 6Computer Associates Release Security Notice for Anti-Virus Engine
    June 6Sun Microsystems Releases Security Advisory for Java Runtime Environment Image Parsing Code
    June 6Microsoft Windows GDI+ ICO Vulnerability
    June 6PHP Vulnerabilty
    June 5Microsoft Internet Explorer and Mozilla Firefox Vulnerabilities
    June 1Apple Releases Update for Xserve Lights-Out Management Firmware
    May 31Mozilla Releases Security Advisories to Address Multiple Vulnerabilities


    Computer Associates Release Security Notice for Anti-Virus Engine

    added June 6, 2007 at 03:02 pm | updated June 6, 2007 at 03:02 pm

    The Computer Associates Anti-Virus engine fails to properly process CAB archives .  These vulnerabilities may allow an unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition.

    More information can be found in the following:

    US-CERT encourages users to apply the updates as described in the Computer Associates Security Notice.


    Sun Microsystems Releases Security Advisory for Java Runtime Environment Image Parsing Code

    added June 6, 2007 at 09:02 am | updated June 6, 2007 at 01:20 pm

    Sun Microsystems released a Security Advisory for the Java Runtime Environment Image Parsing Code.  This vulnerability may allow an applet to read and write local files or execute local applications. 

    US-CERT encourages users to examine the resolutions that are described in the Sun Security Advisory as soon as possible and follow the steps in the Securing Your Web Browser document.

    More information can be found in Vulnerability Note VU#138545


    Microsoft Windows GDI+ ICO Vulnerability

    added June 6, 2007 at 11:56 am | updated June 6, 2007 at 01:18 pm

    Microsoft Windows Graphics Device Interface is vulnerable to an integer division-by-zero error.  This vulnerability may lead to a denial-of-service condition due to the introduction of a specially crafted icon file.

    It may be possible for a malformed icon file to be embedded in an executable or other file.

    More information can be found in the following:

    US-CERT strongly encourages users to review the bulletin and follow best-practice security policies to determine what actions should be applied.


    PHP Vulnerabilty

    added June 5, 2007 at 03:33 pm | updated June 6, 2007 at 11:07 am

    US-CERT is aware of a publicly reported vulnerability in PHP.  PHP version 5.2.3 may be vulnerable to an integer overflow within the chunk_split() function.

    More information can be found in the following PHP Security Blog.

    US-CERT will provide additional information as it becomes available.


    Microsoft Internet Explorer and Mozilla Firefox Vulnerabilities

    added June 4, 2007 at 03:25 pm | updated June 5, 2007 at 09:33 am

    US-CERT is aware of a public report of multiple vulnerabilities in Mozilla Firefox and Microsoft Internet Explorer.

    More information can be found in Vulnerability Note VU#471361.

    US-CERT encourages users to follow the steps in the Securing Your Web Browser document.


    Apple Releases Update for Xserve Lights-Out Management Firmware

    added June 1, 2007 at 03:48 pm

    Apple releases Firmware Update 1.0 to address a vulnerability in Xserve Lights-Out Management Firmware.  The vulnerability lies in Apple's implementation of IPMI and may allow a remote, unprivileged ipmitool user to gain administrative privileges on a Xserve system.

    US-CERT encourages users to apply Firmware Update 1.0 as soon as possible.

    US-CERT will continue to investigate this vulnerability and provide additional details as they become available.


    Mozilla Releases Security Advisories to Address Multiple Vulnerabilities

    added May 31, 2007 at 08:55 am | updated May 31, 2007 at 04:03 pm

    The Mozilla Foundation has released Security Advisories to address multiple vulnerabilities in Firefox, Thunderbird, and SeaMonkey.  The impacts of these vulnerabilities include arbitrary code execution, denial of service, memory corruption and cross-site scripting.

    More information can be found in Technical Cyber Security Alert TA07-151A and the Vulnerability Notes Database.

    US-CERT encourages users to apply the updates as described in the Security Advisories.