Mailing Lists & Feeds
Current Activity Calendar
| July 10, 2007 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Microsoft Releases July Security Bulletinsadded July 10, 2007 at 03:33 pm Microsoft has released updates to address vulnerabilities in Windows, Excel, Office Publisher, and .NET Framework as part of the Microsoft Security Bulletin Summary for July 2007. SAP Products Contain Vulnerabilitiesadded July 10, 2007 at 03:31 pmUS-CERT is aware of vulnerabilities that exist in the SAP Message and DB Web Servers. These vulnerabilities may allow an unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Web Browser Code Execution Vulnerabilityadded July 10, 2007 at 12:15 pmUS-CERT is aware of a public exploit code for a new vulnerability targeting Microsoft Internet Explorer. The public exploit code demonstrates the vulnerability using the Mozilla Firefox firefoxurl:// URL protocol. To trigger this vulnerability, an attacker must persuade a user who has Firefox installed to access a specially crafted web page with Internet Explorer. US-CERT will provide additional information as it becomes available. Microsoft Releases Advance Notification for July Security Bulletinsadded July 5, 2007 at 01:52 pmMicrosoft has issued a Security Bulletin Advance Notification indicating that their July release cycle will contain six bulletins, three of which have a maximum severity rating of Critical. The notification further states that the three Critical bulletins are for Windows, Office, Excel, and .NET Framework. There will also be two Important bulletins for Office Publisher and Windows XP Professional as well as one Moderate bulletin for Windows Vista. Microsoft will also release an updated version of the Microsoft Windows Malicious Software Removal Tool. The release is scheduled for Tuesday, July 10, 2007.
New Storm Worm Variant Spreads through Social Engineeringadded June 29, 2007 at 01:31 pm | updated July 5, 2007 at 09:42 am
US-CERT is aware of a new variant of the Trojan Worm known as "Storm Worm" that uses social engineering with mass mailing to spread to unsuspecting victims. This variant of Storm Worm arrives as an email message and contains a link to a malicious website that, when visited, installs malware on the user's system.
Russian Cyber Attacks Reportedadded July 2, 2007 at 01:12 pmUS-CERT is aware of reports of cyber attacks occurring in Russian cyber-space. According to reports these attacks may be politically motivated. It is reported that the attacks are similar to those that affected Estonia in April and May. http://www.washingtonpost.com/wp-dyn/content/article/2007/07/01/AR2007070100009.html US-CERT will continue to monitor this activity and may update with additional information.Publicly Available Exploit Code for a Vulnerability in RealNetworks Media Playersadded June 28, 2007 at 11:50 am
US-CERT is aware of publicly available exploit code for a buffer overflow vulnerability in RealNetworks media players. By supplying a user with a crafted media file or stream, a remote unauthenticated attacker could execute arbitrary code or cause a denial-of-service condition on a vulnerable system. |
|||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader