Mailing Lists & Feeds
Current Activity Calendar
| September 24, 2007 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.CA ARCserve Backup for Laptops and Desktops contains multiple vulnerabilitiesadded September 24, 2007 at 03:02 pm
US-CERT is aware of several vulnerabilities that affect the CA ARCserve Backup for Laptops and Desktops product. These vulnerabilities may allow an attacker to execute arbitrary code, bypass authentication, or cause a denial-of-service condition. Google Search Appliance Vulnerabilityadded September 24, 2007 at 12:28 pm
US-CERT is aware of a publicly reported cross-site scripting (XSS) vulnerability in Google's search appliance. Cross-site scripting vulnerabilities may allow a remote, unauthenticated attacker to inject malicious script into a web page. Reports of Multiple Product PDF Rendering Vulnerabilityadded September 21, 2007 at 03:24 pm
US-CERT is aware of public reports of a vulnerability that may affect Adobe Acrobat, Adobe Acrobat Reader, and Foxit Reader. Few details are currently available, but it is claimed that an attacker may be able to execute arbitrary code or commands on an affected system by enticing a user to open a specially crafted PDF document.
New VMware Product Versions Addresses Several Vulnerabilitiesadded September 19, 2007 at 01:24 pm | updated September 20, 2007 at 01:26 pm
VMware has released updates for several products in part to address several vulnerabilities. These vulnerabilities may allow an attacker to overwrite arbitrary files, gain elevated privileges, cause a denial-of-service condition, or execute arbitrary code on an affected system. Affected products include VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player. Microsoft Windows MFC Libraries Buffer Overflow Vulnerabilityadded September 18, 2007 at 02:08 pm | updated September 20, 2007 at 09:09 am
US-CERT is aware of a vulnerability in the Microsoft Windows MFC42 and MFC71 libraries. Specifically, the vulnerability exists due to the "FindFile" function failing to properly validate the length of user supplied input. By passing an overly long argument to the "FindFile" function, an attacker may be able to cause a buffer overflow and execute arbitrary code on an affected system. Any application that utilizes these libraries and allows users to manipulate the arguments being passed to the API may be affected. Mozilla Releases Security Advisory to Mitigate QuickTime Code Execution Vulnerabilityadded September 19, 2007 at 09:41 am
Mozilla has released security advisory MFSA 2007-28 to address a weakness that may allow an attacker to execute arbitrary commands on an affected system. This update may prevent exploitation of a vulnerability in Apple QuickTime by removing Firefox's ability to run arbitrary scripts, which are provided by command line arguments. More information regarding this vulnerability can be found in Vulnerability Note VU#751808. Public Exploit Code Targeting Firefox and QuickTimeadded September 12, 2007 at 04:26 pm | updated September 14, 2007 at 09:02 am
US-CERT is aware of working publicly available exploit code that targets users with Firefox and QuickTime installed. This exploit allows a remote, unauthenticated attacker to execute arbitrary commands on an affected system. |
||||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader