Mailing Lists & Feeds
Current Activity Calendar
| February 18, 2008 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Mozilla Firefox and Opera Vulnerabilityadded February 18, 2008 at 03:34 pm
US-CERT is aware of public reports of a vulnerability in Mozilla Firefox and Opera web browsers. This vulnerability is caused by improper handling of bitmap image files (.bmp). By sending a specially crafted bitmap image file to the browser, an attacker may be able to obtain sensitive information or cause a denial-of-service condition. Public Exploit Code for Microsoft Works Vulnerabilitiesadded February 15, 2008 at 08:37 am
US-CERT is aware of reports of publicly available exploit code for vulnerabilities in Microsoft Works 6 File Converter. By convincing a user to open a specially crafted Works file, an attacker may be able to execute arbitrary code on an affected system. This vulnerability was addressed in Microsoft Security Bulletin MS08-011. Email Attacks Circulatingadded February 14, 2008 at 03:27 pm
US-CERT is aware of reports of several email attacks circulating.
Public Exploit for Local Linux Kernel Vulnerabilityadded February 14, 2008 at 11:53 am
US-CERT has received information that public exploit information is available for a vulnerability affecting Linux kernels 2.6.17 to 2.6.24.1. These kernel versions contain a buffer overflow vulnerability in the get_user_pages function which may allow an unprivileged local attacker to gain root privileges. Adobe Flash Media Server Vulnerabilitiesadded February 14, 2008 at 09:33 am
Adobe has released Flash Media Server 2.0.5 to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Cisco Releases Security Advisories for Vulnerabilitiesadded February 13, 2008 at 03:17 pm
Cisco has released security advisories in response to multiple vulnerabilities.
More information will be provided as it becomes available. Microsoft Releases February Security Bulletinadded February 12, 2008 at 01:55 pm | updated February 13, 2008 at 08:46 am
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Office, Visual Basic, VBScript, JScript, Internet Explorer, IIS, Active Directory, ADAM, Office, Works, and Works Suite as part of the Microsoft Security Bulletin Summary for February 2008. Apple Releases Security Updates for Multiple Vulnerabilitiesadded February 12, 2008 at 09:40 am | updated February 12, 2008 at 04:08 pm
Apple has released Security Update 2008-001 and Mac OS X 10.5.2 to address multiple vulnerabilities in Mac OS X and related products. The impacts of these vulnerabilities include remote code execution, denial of service, and information disclosure. Active Exploitation of Adobe Reader Vulnerabilitiesadded February 11, 2008 at 11:41 am | updated February 12, 2008 at 09:40 am
US-CERT has received information that vulnerabilities affecting Adobe Reader are actively being exploited. These vulnerabilities are exploited through a maliciously crafted PDF file containing a variant of the Zonebac Trojan.
US-CERT will continue to provide information as it becomes available. Mozilla Firefox view-source Information Disclosure Vulnerabilityadded February 11, 2008 at 11:46 am
US-CERT is aware of public reports of a vulnerability in Mozilla Firefox 2.0.0.12. This vulnerability may allow an attacker to read files from the Firefox installation directory, which may include some add-ons. |
|||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader