[asiic security networks]
"audit, execute, and secure"
[home] | [archives] | [products] | [news] | [downloads] | [ops.]

Asiic News

::date::::title::::branch::
2009-05-07ASN Reconstructionasiic/ASN
2009-05-07Urgent Notice: Asiic accepting filesasiic/ASN
2009-07-04no updates at this timeasiic/ASN
2009-07-04no updates at this timeasiic/rep.
2009-07-04no updates at this timeasiic/rep.
2009-07-04no updates at this timeasiic/rep.
2009-05-27Military developing "hacking" toolsasiic/ops.
2009-07-04no updates at this timeasiic/ops.
2009-07-04no updates at this timeasiic/ops.

Security News Pipeline 2009-07-04

Sophos latest virus and spyware detection
  • Troj/Agent-KGB
  • Troj/Bckdr-QVP
  • Troj/Inject-HR
  • Troj/Rbot-GXX
  • W32/VBTriv-Gen
  • Troj/BHO-MJ
  • Troj/BHO-MK
  • Troj/DwnLdr-HTK
  • Troj/PWS-BBU
  • Troj/Renos-DA

    © Copyright 1997-2009, Sophos Plc



  • Sophos latest suspicious behavior and file detection
  • Sus/Conficker-A
  • Sus/ComPack-C
  • Sus/ComPack-J
  • Sus/VBDWN-J
  • Sus/Banker-D
  • Sus/Parasit-A
  • Sus/BanHosts-A
  • Sus/ObfJS-BM
  • Sus/ObfJS-BP
  • Sus/Mdrop-J

    © Copyright 1997-2009, Sophos Plc


  • National Vulnerability Database
  • CVE-2009-2120
  • CVE-2009-2119
  • CVE-2009-2118
  • CVE-2009-2117
  • CVE-2009-2116
  • CVE-2009-2115
  • CVE-2009-2114
  • CVE-2009-2113
  • CVE-2009-2112
  • CVE-2009-2111
  • CVE-2009-2110
  • CVE-2009-2109
  • CVE-2009-2108
  • CVE-2009-1935
  • CVE-2009-2107 (webmedia_explorer)
  • CVE-2009-2106 (virtual_civil_services)
  • CVE-2009-2105 (references_database)
  • CVE-2009-2104 (modern_guest_book_commenting_system)
  • CVE-2009-2103 (frontend_mp3_player)
  • CVE-2009-2102 (com_jumi)
  • CVE-2009-2101 (torrentvolve)
  • CVE-2009-2100 (com_projectfork)
  • CVE-2009-2099 (com_rssfeeder)
  • CVE-2009-2098 (phportal)
  • CVE-2009-2097 (zoki_catalog)
  • CVE-2009-2096 (phpcollegeexchange)
  • CVE-2009-2095 (mundi_mail)
  • CVE-2009-2084 (slurm)
  • CVE-2009-1761 (arcserve_backup)
  • CVE-2009-1719 (jre)
  • CVE-2009-1391 (compress-raw-zlib_perl_module)
  • CVE-2009-1389 (kernel, linux_kernel)
  • CVE-2009-2083 (taxonomy_manager)
  • CVE-2009-2082 (multi-level_cms)
  • CVE-2009-2011 (dx_studio_player)
  • CVE-2009-1390 (mutt)
  • CVE-2008-5515 (tomcat)
  • CVE-2009-2081 (phpwebthings)
  • CVE-2009-2080 (the_ticket_system)
  • CVE-2009-2079 (taxonomy_manager)
  • CVE-2009-2078 (booktree)
  • CVE-2009-2077 (views)
  • CVE-2009-2076 (views)
  • CVE-2009-2075 (nodequeue)
  • CVE-2009-2074 (nodequeue)
  • CVE-2009-2073 (wrt160n)
  • CVE-2009-2072 (safari)
  • CVE-2009-2071 (chrome)
  • CVE-2009-2070 (opera)
  • CVE-2009-2069 (ie)
  • CVE-2009-2068 (opera)
  • CVE-2009-2067 (opera_browser)
  • CVE-2009-2066 (safari)
  • CVE-2009-2065 (firefox)
  • CVE-2009-2064 (internet_explorer, pocket_internet_explorer)
  • CVE-2009-2063 (opera)
  • CVE-2009-2062 (safari)
  • CVE-2009-2061 (firefox)
  • CVE-2009-2060 (chrome)
  • CVE-2009-2059 (opera_browser)
  • CVE-2009-2058 (safari)
  • CVE-2009-2057 (ie)

  • Sophos security news
  • Apple update fixes 46 iPhone security holes, but iPod Touch owners have to pay
  • Popular short URL service hacked and millions redirected
  • Apple Mac users warned of porn video website malware risk
  • Global director of SophosLabs puts Conficker under the microscope in educational webcast
  • Communist Party website infected by malware
  • Tory MP hacked on Facebook

    © Copyright 1997-2009, Sophos Plc


  • SecurityFocus News
  • News: FTC persuades court to shutter rogue ISP
  • News: Obama launches cybersecurity initiative
  • News: Browsers bashed first in hacking contest
  • News: Experts: U.S. needs to defend its "cyber turf"
  • Brief: Not all apps equal in Iranian filtering
  • Brief: Looking back: GhostNet dismantled in a day
  • Brief: Coming to terms with cyber warfare
  • Brief: MSFT, Adobe and Apple patch together
  • News: OpenSSH chink bares encrypted data packets
  • News: Kaspersky exposes sensitive database, says hacker
  • News: RFID passports cloned wholesale
  • News: Mac OS X research warns of stealthier attacks
  • Infocus: Enterprise Intrusion Analysis, Part One
  • Infocus: Responding to a Brute Force SSH Attack
  • Infocus: Data Recovery on Linux and ext3
  • Infocus: WiMax: Just Another Security Challenge?
  • Mark Rasch: Hacker-Tool Law Still Does Little
  • Gunter Ollmann: A Botnet by Any Other Name
  • Jeffrey Carr: Projecting Borders into Cyberspace
  • Adam O'Donnell: Celebrity Viruses Improve Security
  • More rss feeds from SecurityFocus

    Copyright @ 1999-2006 SecurityFocus


  • SecurityFocus Vulnerabilities
  • Vuln: Apple iPhone and iPod touch MPEG-4 Video Codec Denial of Service Vulnerability
  • Vuln: Pivot Multiple Cross Site Scripting And HTML Injection Vulnerabilities
  • Vuln: Joomla! 'com_jumi' Component 'fileid' Parameter SQL Injection Vulnerability
  • Vuln: Podcast Generator Multiple Remote And Local File Include Vulnerabilities
  • Bugtraq: PhpPortal v1 Insecure Cookie Handling Vulnerability
  • Bugtraq: Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008)
  • Bugtraq: The Möbius Defense, the end of Defense in Depth
  • Bugtraq: [SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities
  • More rss feeds from SecurityFocus

    Copyright @ 1999-2006 SecurityFocus


  • Governmentsecurity.org
  • FinallySecure releases Secure SignOn 7.0
  • DDOS Is Not The Most Political Way to Protest
  • Security Focus: Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
  • DHS Launches ‘The Blog @ Homeland Security’
  • Google Blog: CIA adopting Web 2.0 tools despite resistance
  • Another Google Search Feature Abused
  • New security software for HP notebook
  • Looking at things through “cloud glassesâ€
  • 'Nother month; dying cat; new geetar; myasa; Metasploit RSS; random
  • Facebook adds trade mark protection to vanity URL plan

  • CSOONLINE.com - Audit
  • Social Engineering: 5 Security Holes at the Office (Includes Video)
  • Social Engineering: The Fine Art of BS, Face to Face (Includes Video)
  • Information Systems Audit: The Basics
  • Where PCI DSS Still Falls Short (and How to Make it Better)
  • 3 Ways Pen Testing Helps DLP (and 2 Ways It Doesn't)
  • Monster.com Breach (Again!): Evolution of a Disclosure Letter
  • Why Mass. 201 CMR 17 Deadline Was Extended
  • PCI's Post-Audit Pain Points
  • Separation of Duties and IT Security
  • Former ISACA Head: SAS 70 Changes Coming
  • FUD Watch | Vendor Hype Escalates Over PCI Deadline
  • Dual Threats: How to Build Expertise, Certifications in Multiple Subjects
  • Security Agency Calls For EU Laws on Breach Disclosure
  • Safe Document Transfer: How to Secure the Paper Chain
  • What I Learned From the Top Five Security Events of 2007

    (c) Copyright 2009 CXO Media, Inc. All Rights Reserved.


  • CSOONLINE.com - Network Security
  • Mission Impossible? A Plan to Secure the Federal Cyberspace
  • Blogger: Windows 7 UAC Feature Still Vulnerable
  • Google Trying for More Gmail Security
  • With Unrest in Iran, Cyber Attacks Begin
  • 5 Mergers for a Less Aggravating IT Security Industry
  • Universities Cope with New Anti-Piracy Requirement
  • Undercover: A Case of Help Desk Failure
  • Adobe Fixes Security Bugs In Reader, Acrobat
  • Microsoft Security Update Zaps Rogue AV Program
  • How Microsoft Influenced Adobe Security (In a Good Way)
  • Forrester: Deep Packet Inspection As An Enabling Technology
  • It's the Information, Stupid
  • Security Analyst to DLP Vendors: Watch Your Language
  • Spam Finds New Paths Into Corporate Nets
  • FBI E-mail Clobbered After Virus

    (c) Copyright 2009 CXO Media, Inc. All Rights Reserved.


  • CSOONLINE.com - Malware/Cybercrime
  • Mission Impossible? A Plan to Secure the Federal Cyberspace
  • With Unrest in Iran, Cyber Attacks Begin
  • With Unrest in Iran, Cyber-attacks Begin
  • Microsoft Issues Record 31 Patches
  • Accused Facebook Spammer Could Face Jail Time
  • Universities Cope with New Anti-Piracy Requirement
  • Undercover: A Case of Help Desk Failure
  • How Microsoft Influenced Adobe Security (In a Good Way)
  • T-Mobile Confirms Stolen Data is Genuine
  • Social Engineering: 5 Security Holes at the Office (Includes Video)
  • Man Made $112,000 in Bank Account Hacking Scheme
  • Social Engineering: The Fine Art of BS, Face to Face (Includes Video)
  • Hackers claim $10,000 prize for breaking into StrongWebmail
  • It's the Information, Stupid
  • Security Analyst to DLP Vendors: Watch Your Language

    (c) Copyright 2009 CXO Media, Inc. All Rights Reserved.


  • CSOONLINE.com - Access Control
  • Insider at Cal Water Steals $9M and Runs
  • How SCAP Brought Sanity to Vulnerability Management
  • Password Seeks Partner For Long-Term, Secure Relationship
  • RSA 2009: Automation, Integration Key to Fighting Cyber Crooks
  • Researcher: Power Grid Hackers Probably Attacked Typical PC Flaws
  • Taking a Lesson in Federal Compliance from the Chemical Industry
  • Security's Role in Handling Layoffs
  • Sample Computer and E-Mail Usage Policy - Manufacturing Company
  • Diary of a Data Breach Investigation
  • Symantec Warns Customers of Call Center Theft
  • Data Security: Whose Job Is It Really?
  • 3 Ways Pen Testing Helps DLP (and 2 Ways It Doesn't)
  • Avoiding Pitfalls in Log Management Planning and Selection
  • 10 IE Browser Settings for Safer Surfing
  • How To Design Green AND Secure Buildings

    (c) Copyright 2009 CXO Media, Inc. All Rights Reserved.


  • milw0rm.com
  • Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method Vuln
  • CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities
  • DESlock+ 4.0.2 dlpcrypt.sys Local Kernel ring0 Code Execution Exploit
  • compface <= 1.5.2 (XBM File) Local Buffer Overflow PoC
  • phportal 1.0 Insecure Cookie Handling Vulnerability
  • FretsWeb 1.2 (name) Remote Blind SQL Injection Exploit
  • FretsWeb 1.2 Multiple Local File Inclusion Vulnerabilities
  • fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
  • TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities
  • Multiple HTTP Server Low Bandwidth Denial of Service (slowloris.pl)

    Copyright © 2004-2008


  • Packet Storm Security Last 20
  • dsa-1820-1.txt
  • dsa-1819-1.txt
  • dsa-1818-1.txt
  • dsa-1817-1.txt
  • TZO-43-2009.txt
  • TZO-34-2009.txt
  • nokia-spoofdos.txt
  • iphone-makecall.txt
  • opennhrp-0.11.tar.bz2
  • netbsd-shellcode.txt
  • cmsbuzz-xsspasswd.txt
  • deslock-dlpcrypt.c
  • edrawpdfviewer-activex.txt
  • eb-0.3.tgz
  • fwbuilder-3.0.5.tar.gz
  • iptables-1.4.4.tar.bz2
  • shellgen.py.txt
  • phpportal-insecure.txt
  • compface-dos.txt
  • MDVSA-2009-135.txt

  • Latest Risks RSS Feed - Symantec Corp.
  • Packed.Generic.236
  • W32.SillyFDC.BBY
  • Bloodhound.Exploit.256
  • Suspicious.S.Gen
  • Suspicious.S.Bifrose
  • Suspicious.S.Zlob
  • Bloodhound.PDF.15
  • Bloodhound.Exploit.251
  • Bloodhound.Exploit.250
  • Bloodhound.Exploit.249
  • Bloodhound.Exploit.245
  • Bloodhound.Exploit.252
  • W32.SillyFDC.BBW
  • Suspicious.S.Vundo.3
  • Trojan.Amoevae
  • VBS.Mutafrog!inf
  • W32.Grenail.E!inf
  • W32.Fujacks.CA
  • W32.Ackantta.C@mm
  • Packed.Generic.235
  • Packed.Generic.226
  • W32.SillyFDC.BBU
  • W32.SillyFDC.BBV
  • W32.SillyFDC.BBT
  • Downloader.Lapurd
  • Trojan.Heapshelldll
  • Trojan.Iflar
  • Trojan.Cipevas
  • Trojan.Ransomcrypt
  • X97M.Ecmetsys
  • Bloodhound.PDF.13
  • Packed.Generic.233
  • W32.Mibling
  • Boot.Chan
  • USBcillin
  • W32.Sfc!mod
  • W32.Neeris.C
  • Unvirex
  • Trojan.Hanambot
  • Packed.Generic.228
  • AntivirusDoktor2009
  • Bloodhound.Exploit.240
  • Bloodhound.Exploit.239
  • Packed.Generic.230
  • Bloodhound.Exploit.242
  • Bloodhound.Exploit.241
  • Packed.Generic.229
  • SpywareCease
  • Trojan.Bredolab
  • W32.Simouk
  • Trojan.Pidief.F
  • W32.Korron.B

  • Microsoft Security Bulletins
  • MS09-027 - Critical: Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514)
  • MS09-026 - Important: Vulnerability in RPC Could Allow Elevation of Privilege (970238)
  • MS09-025 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)
  • MS09-024 - Critical: Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)
  • MS09-023 - Moderate: Vulnerability in Windows Search Could Allow Information Disclosure (963093)
  • MS09-022 - Critical: Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)
  • MS09-021 - Critical: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)
  • MS09-020 - Important: Vulnerabilities in Internet Information Services (IIS) Could Allow Elevation of Privilege (970483)
  • MS09-019 - Critical: Cumulative Security Update for Internet Explorer (969897)
  • MS09-018 - Critical: Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055)
  • MS09-017 - Critical: Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (967340)
  • MS09-016 - Important: Vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway (Medium Business Edition) Could Cause Denial of Service (961759)
  • MS09-015 – Moderate: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
  • MS09-014 - Critical: Cumulative Security Update for Internet Explorer (963027)
  • MS09-013 - Critical: Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution (960803)
  • MS09-012 - Important: Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)
  • MS09-011 – Critical: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373)
  • MS09-010 - Critical: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
  • MS09-009 - Critical: Vulnerabilities in Microsoft Office Excel Could Cause Remote Code Execution (968557)
  • MS09-008 – Important: Vulnerabilities in DNS and WINS Server Could Allow Spoofing (962238)
  • MS09-007 - Important: Vulnerability in SChannel Could Allow Spoofing (960225)
  • MS09-006 – Critical: Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)
  • MS09-005 - Important: Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
  • MS09-004 - Important: Vulnerability in Microsoft SQL Server Could Allow Remote Code Execution (959420)
  • MS09-003 - Critical: Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)

    Copyright Microsoft Corporation 2005


  • Vulnerabilities RSS Feed - Symantec Corp.
  • Microsoft Internet Explorer (CVE-2009-1528) Uninitialized Memory Remote Code ...
  • Microsoft Internet Explorer Cached Content Cross Domain Information Disclosur...
  • Microsoft Office Works for Windows Document Converters Remote Code Execution ...
  • Microsoft PowerPoint Data Out of Bounds Remote Code Execution Vulnerability
  • Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability
  • Microsoft DirectX DirectShow MJPEG Video Decompression Remote Code Execution ...
  • Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability
  • Microsoft Windows SChannel Authentication Spoofing Vulnerability
  • Microsoft Windows Kernel GDI EMF/WMF Remote Code Execution Vulnerability
  • Microsoft Windows DNS Server WPAD Access Validation Vulnerability
  • Microsoft Excel Invalid Object Remote Code Execution Vulnerability
  • Adobe Acrobat and Reader PDF File Handling Remote Code Execution Vulnerability
  • Microsoft Internet Explorer CSS Memory Corruption Remote Code Execution Vulne...
  • Microsoft Internet Explorer Uninitialized Memory Remote Code Execution Vulner...
  • Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability
  • Microsoft Windows SMB Remote Code Execution Vulnerability
  • Microsoft Windows SMB Buffer Overflow Vulnerability
  • Microsoft Internet Explorer XML Handling Remote Code Execution Vulnerability
  • Microsoft Windows GDI WMF Integer Overflow Vulnerability
  • Microsoft Internet Explorer HTML Objects Remote Code Execution Vulnerability
  • Microsoft Word RTF Malformed Control Word Remote Code Execution Vulnerability
  • Microsoft XML Core Services Transfer Encoding Cross Domain Information Disclo...
  • Adobe Reader 'util.printf()' JavaScript Function Stack Buffer Overflow Vulner...
  • Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerabi...
  • Microsoft Excel BIFF File Format Parsing Remote Code Execution Vulnerability
  • Microsoft Host Integration Server RPC Remote Code Execution Vulnerability
  • Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vuln...
  • Microsoft Windows Media Encoder 9 'wmex.dll' ActiveX Control Remote Buffer Ov...
  • Microsoft GDI+ VML Heap-Based Buffer Overflow Vulnerability
  • Microsoft Windows Media Player SSPL File Sample Rate Remote Code-Execution Vu...
  • Microsoft Excel Indexing Validation Remote Code Execution Vulnerability
  • Microsoft Outlook Express And Windows Mail MHTML Handler Information Disclosu...
  • Microsoft Windows Messenger ActiveX Control Information Disclosure Vulnerability
  • Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Sp...
  • Microsoft Word Unspecified Remote Code Execution Vulnerability
  • Microsoft Windows Explorer saved-search File Remote Code Execution Vulnerability
  • Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download ...
  • Microsoft DirectX SAMI File Parsing Stack Buffer Overflow Vulnerability
  • Microsoft Internet Explorer HTML Objects 'substringData()' Remote Code Execut...
  • Microsoft Windows Bluetooth Stack Remote Code Execution Vulnerability
  • Microsoft Word RTF Malformed String Handling Memory Corruption Remote Code Ex...
  • Microsoft Jet DataBase Engine MDB File Parsing Remote Buffer Overflow Vulnera...
  • Microsoft Project Resource Memory Allocation Remote Code Execution Vulnerability
  • Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulner...
  • Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulner...
  • Microsoft Excel Conditional Formatting Values Remote Code Execution Vulnerabi...
  • Microsoft Office File Memory Corruption Vulnerability
  • Microsoft Excel Data Validation Record Remote Code Execution Vulnerability
  • Adobe Acrobat and Reader Multiple Arbitrary Code Execution and Security Vulne...
  • Microsoft Word Unspecified Memory Corruption Remote Code Execution Vulnerability
  • Microsoft Windows Vista DHCP Remote Denial Of Service Vulnerability
  • Microsoft Visual FoxPro FPOLE.OCX ActiveX Control Arbitrary Command Execution...
  • Microsoft Excel Header Parsing Remote Code Execution Vulnerability
  • Microsoft Windows TCP/IP IGMP MLD Remote Code Execution Vulnerability
  • Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability
  • Microsoft Windows Media Format Runtime ASF File Remote Code Execution Vulnera...
  • Apple QuickTime RTSP Response Header Content-Length Remote Buffer Overflow Vu...
  • Xunlei Thunder PPLAYER.DLL_1_WORK ActiveX Control Buffer Overflow Vulnerability
  • Microsoft Windows URI Handler Command Execution Vulnerability
  • Microsoft Windows Recursive DNS Spoofing Vulnerability
  • RealPlayer ierpplug.dll ActiveX Control Playlist Name Stack Buffer Overflow V...
  • Microsoft Internet Explorer Script Error Handling Memory Corruption Vulnerabi...
  • Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability
  • Microsoft Word Workspace Memory Corruption Remote Code Execution Vulnerability
  • Adobe Acrobat Mailto PDF File Command Execution Vulnerability
  • BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnera...
  • Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buffer Overf...
  • Microsoft MSN Messenger Video Conversation Buffer Overflow Vulnerability
  • Trend Micro ServerProtect SPNTSVC.EXE Multiple Stack Buffer Overflow Vulnerab...
  • Microsoft Internet Explorer Vector Markup Language VGX.DLL Remote Buffer Over...
  • Microsoft XML Core Services Remote Code Execution Vulnerability
  • Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability
  • Microsoft Excel Workspace Designation Remote Code Execution Vulnerability
  • Microsoft Office Publisher Invalid Memory Reference Remote Code Execution Vul...
  • Microsoft Excel Worksheet Remote Code Execution Vulnerability
  • Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code E...
  • Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability
  • Microsoft Word RTF Parsing Remote Code Execution Vulnerability
  • Microsoft Word Array Remote Code Execution Vulnerability
  • Microsoft Internet Explorer Property Method Remote Code Execution Vulnerability
  • Microsoft Agent URI Processing Remote Code Execution Vulnerability
  • Microsoft Windows Csrss HardError Messages Multiple Vulnerabilities
  • Microsoft Windows Cursor And Icon ANI Format Handling Remote Code Execution V...
  • Microsoft Word Malformed Drawing Object Arbitrary Code Execution Vulnerability
  • Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability
  • Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability
  • Microsoft Windows Vector Markup Language Buffer Overrun Vulnerability
  • Microsoft Internet Explorer DHTML Script Function Remote Code Execution Vulne...
  • Windows Media Player Remote ASF File Buffer Overflow Vulnerability
  • Windows Media Player ASX PlayList File Heap Overflow Vulnerability
  • Microsoft XML Core Service XMLHTTP ActiveX Control Remote Code Execution Vuln...
  • Microsoft Word Mail Merge Remote Code Execution Vulnerability
  • Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability
  • Microsoft Excel DATETIME Remote Code Execution Vulnerability
  • Microsoft Office Smart Tag Remote Code Execution Vulnerability
  • Microsoft Internet Explorer Vector Markup Language Buffer Overflow Vulnerability
  • Microsoft Publisher Font Parsing Remote Code Execution Vulnerability
  • Microsoft Windows Server Service Remote Buffer Overflow Vulnerability
  • Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerabi...
  • Microsoft Internet Explorer Chained Cascading Style Sheets Remote Code Execut...
  • Microsoft Internet Explorer HTML Layout and Positioning Remote Code Execution...
  • Microsoft Windows MHTML URI Buffer Overflow Vulnerability
  • Microsoft Windows DHCP Client Service Remote Code Execution Vulnerability
  • Microsoft Windows Server Driver Mailslot Remote Heap Buffer Overflow Vulnerab...
  • Microsoft Windows Malformed ART Image Remote Code Execution Vulnerability
  • Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerabi...
  • Microsoft Windows GDI WMF Handling Heap Overflow Vulnerability
  • Symantec Client Security and Symantec AntiVirus Elevation of Privilege
  • Microsoft Exchange Server Calendar Remote Code Execution Vulnerability
  • Microsoft MDAC RDS.Dataspace ActiveX Control Remote Code Execution Vulnerability
  • Microsoft Internet Explorer CreateTextRange Remote Code Execution Vulnerability
  • Microsoft Excel Malformed Range Memory Corruption Vulnerability
  • Apple Mac OS X Archive Metadata Command Execution Vulnerability
  • Microsoft Windows Media Player Bitmap Handling Buffer Overflow Vulnerability
  • Microsoft Internet Explorer WMF Image Parsing Memory Corruption Vulnerability
  • Microsoft Outlook / Microsoft Exchange TNEF Decoding Remote Code Execution Vu...
  • Microsoft Windows Embedded Web Font Buffer Overflow Vulnerability
  • Microsoft Windows Graphics Rendering Engine WMF SetAbortProc Code Execution V...
  • Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution V...
  • Cisco IPSec Unspecified IKE Traffic Denial Of Service Vulnerabilities
  • Microsoft Windows Graphics Rendering Engine WMF/EMF Format Code Execution Vul...
  • Microsoft Windows Explorer Web View Script Injection Vulnerability
  • Microsoft DirectX DirectShow AVI Processing Buffer Overflow Vulnerability
  • Cisco IOS Firewall Authentication Proxy Buffer Overflow Vulnerability
  • VERITAS Backup Exec for Windows Servers, VERITAS Backup Exec for NetWare Serv...
  • Microsoft Windows Print Spooler Buffer Overflow Vulnerability
  • Microsoft Windows Plug and Play Buffer Overflow Vulnerability
  • Microsoft Internet Explorer Web Folder Behaviors Cross-Domain Scripting Vulne...
  • Microsoft Windows Color Management Module ICC Profile Buffer Overflow Vulnera...
  • Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overfl...
  • Microsoft Windows HTML Help Remote Code Execution Vulnerability
  • Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability
  • Microsoft Internet Explorer PNG Image Rendering Buffer Overflow Vulnerability
  • Microsoft Windows Shell Remote Code Execution Vulnerability
  • Microsoft Exchange Server SMTP Extended Verb Buffer Overflow Vulnerability
  • Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerab...
  • Microsoft MSN Messenger GIF Image Processing Remote Buffer Overflow Vulnerabi...
  • Microsoft Office XP HTML Link Processing Remote Buffer Overflow Vulnerability
  • Microsoft Windows Media Player Remote PNG Image Format Buffer Overflow Vulner...
  • Microsoft Windows Server Message Block Handlers Remote Code Execution Vulnera...
  • Apple ITunes Playlist Buffer Overflow Vulnerability
  • Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability
  • Microsoft Windows LoadImage API Function Integer Overflow Vulnerability
  • Microsoft Windows DHCP Server Remote Buffer Overflow Vulnerability
  • Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerabi...
  • Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
  • Microsoft Windows Program Group Converter Filename Local Buffer Overrun Vulne...
  • Microsoft Windows Compressed (zipped) Folder Buffer Overflow Vulnerability
  • Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability
  • Microsoft Exchange Outlook Web Access Script Injection Vulnerability
  • Microsoft DirectX DirectPlay Remote Malformed Packet Denial Of Service Vulner...
  • Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability
  • Multiple Vendor TCP Sequence Number Approximation Vulnerability
  • Summary of Symantec Safeguard Protection for Microsoft Security Bulletins for...
  • Microsoft Windows LSASS Buffer Overrun Vulnerability
  • Outlook Express MHTML Forced File Execution Vulnerability
  • Microsoft Windows Private Communications Transport Protocol Buffer Overrun Vu...
  • Microsoft Windows WMF/EMF Image Formats Remote Buffer Overflow Vulnerability
  • Microsoft MSN Messenger Information Disclosure Vulnerability
  • Microsoft Outlook Mailto Parameter Quoting Zone Bypass Vulnerability
  • Microsoft Windows Media Services Remote Denial of Service Vulnerability
  • Microsoft Windows ASN.1 Library Integer Handling Vulnerability
  • Microsoft Windows Internet Naming Service Buffer Overflow Vulnerability
  • Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability
  • Microsoft MDAC Function Broadcast Response Buffer Overrun Vulnerability
  • Linux Kernel do_mremap Function Boundary Condition Vulnerability
  • Openwares.org Internet Explorer Patch Buffer Overflow Vulnerability
  • RSync Daemon Mode Undisclosed Remote Heap Overflow Vulnerability
  • Yahoo! Messenger YAuto.DLL Open Buffer Overflow Vulnerability
  • Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability
  • Microsoft Internet Explorer Self Executing HTML Arbitrary Code Execution Vuln...
  • Atrium Software Mercur Mailserver POP3 AUTH Remote Buffer Overflow Vulnerability
  • Microsoft Messenger Service Buffer Overrun Vulnerability
  • Microsoft Exchange Server Buffer Overflow Vulnerability
  • Microsoft Windows RPCSS Multi-thread Race Condition Vulnerability
  • OpenSSL ASN.1 Parsing Vulnerabilities
  • Sun Solaris SAdmin Client Credentials Remote Administrative Access
  • Multiple Microsoft RPC DCOM Subsystem Vulnerabilities
  • Pam_SMB Remote Buffer Overflow Vulnerability
  • Microsoft Data Access Components ODBC Buffer Overflow Vulnerability
  • Multiple Oracle XDB FTP / HTTP Services Buffer Overflow Vulnerabilities
  • Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
  • Cisco IOS Malicious IPV4 Packet Sequence Denial Of Service Vulnerability
  • University of Minnesota Gopherd GSisText Buffer Overflow Vulnerability
  • CCBill WhereAmI.CGI Remote Arbitrary Command Execution Vulnerability
  • InterSystems Cache Insecure Default Permissions Vulnerability
  • Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerab...
  • Symantec Security Check ActiveX Buffer Overflow
  • Multiple Sun Database Functions Buffer Overflow Vulnerabilities
  • PMachine Lib.Inc.PHP Remote Include Command Execution Vulnerability
  • Sun Management Center Change Manager PamVerifier Buffer Overflow Vulnerability
  • FastTrack P2P Supernode Packet Handler Buffer Overflow Vulnerability
  • IBM AIX Multiple Unspecified Security Vulnerabilities
  • Internet Explorer file:// Request Zone Bypass Vulnerability
  • Apache Mod_Auth_Any Remote Command Execution Vulnerability
  • Cisco CatOS Authentication Bypass Vulnerability
  • Snort TCP Packet Reassembly Integer Overflow Vulnerability
  • Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability
  • Samba Multiple Unspecified Remote Buffer Overflow Vulnerabilities
  • Sendmail Address Prescan Memory Corruption Vulnerability
  • Sun XDR Library xdrmem_getbytes() Integer Overflow Vulnerability
  • Microsoft Windows 2000 WebDAV / ntdll.dll Buffer Overflow Vulnerability
  • Samba SMB/CIFS Packet Assembling Buffer Overflow Vulnerability
  • Sendmail Header Processing Buffer Overflow Vulnerability
  • Cisco IOS OSPF Neighbor Buffer Overflow Vulnerability
  • IBM Lotus Domino HTTP Redirect Buffer Overflow Vulnerability
  • Opera Cross Domain Scripting Vulnerability
  • Microsoft Windows Locator Service Buffer Overflow Vulnerability
  • ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities
  • Half-Life Client Server Message Format String Vulnerability
  • Longshine Wireless Access Point Devices Information Disclosure Vulnerability
  • Perl-HTTPd File Disclosure Vulnerability
  • Microsoft Internet Explorer PNG Deflate Heap Corruption Vulnerability
  • Cobalt RaQ4 Administrative Interface Command Execution Vulnerability
  • Lib CGI Include Buffer Overflow Vulnerability
  • Microsoft Data Access Components RDS Buffer Overflow Vulnerability
  • TCPDump / LIBPCap Trojan Horse Vulnerability
  • Macromedia JRun Oversized URI Buffer Overflow Vulnerability
  • Multiple Microsoft IIS Vulnerabilities
  • Multiple Vendor kadmind Remote Buffer Overflow Vulnerability
  • Linux-HA Heartbeat Remote Buffer Overflow Vulnerability
  • Sendmail Trojan Horse Vulnerability
  • Multiple Microsoft SQL Server Vulnerabilities
  • Multiple OpenVMS WASD HTTP Server Vulnerabilities
  • Microsoft Virtual Machine Multiple JDBC Vulnerabilities
  • Apache_mod_ssl Worm Alert
  • Multiple Cisco VPN 3000 Vulnerabilities
  • Microsoft Terminal Services Advanced Client buffer overflow allows malicious ...
  • Microsoft File Transfer Manager ActiveX Control Buffer Overflow
  • Microsoft Content Management Server flaws allow system compromise
  • Microsoft SQL Server MDAC Buffer Overflow Compromise
  • Microsoft SQL Server Resolution Service buffer overflows allow arbitrary code...
  • PHP multipart/form-data POST parsing error allows arbitrary code
  • Sun ONE (iPlanet) Web Server search buffer overflow allows arbitrary code
  • OpenSSH daemon challenge-response allows DoS or remote compromise
  • Apache HTTP Server chunk encoding stack overflow
  • Microsoft IIS HTR Chunked Encoding heap overflow allows arbitrary code
  • Microsoft Windows RAS phonebook buffer overflow allows code execution
  • ISC Bind 9.x vulnerability allows Domain Name Server Denial-of-Service
  • Sun Solaris SNMP components allows remote execution of code with root access
  • Microsoft Exchange Server 2000 Store Service allows DoS
  • RedHat sharutils package uudecode flaw allows elevated privileges
  • MSN Chat Control buffer overflow allows remote code execution
  • Sun Solaris admintool buffer overflow in PRODVERS argument allows root access
  • Multiple Vulnerabilities Discovered In Microsoft Internet Information Services
  • CiscoSecure ACS flaw allows arbitrary code execution
  • Microsoft SQL Server Extended Procedure Function Buffer Overflow
  • Zlib compression library double free bug could allow arbitrary code
  • Microsoft Virtual Machine multiple flaws allow malicious control
  • Multiple Buffer Overflows in PHP allow remote access to server
  • Microsoft Commerce Server 2000 Unchecked Buffer in AuthFilter
  • Multiple SNMP vulnerabilities in multiple products
  • ISS BlackICE ping flood buffer overflow allows code execution
  • CDE dtspcd Buffer Overflow
  • Linux rsync I/O errors allow DoS or root access
  • Symantec Enterprise Security Solutions check for susceptibility to the Micros...
  • Buffer Overflow in System V Derived Login
  • Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro secu...
  • Multi-vendor Unicode IDS bypass
  • Update: Symantec Customer Security Advisory for the CodeRed Worm
  • Symantec Enterprise Security Solutions protect against the Microsoft Windows ...
  • Symantec Enterprise Security Solutions protect against the sadmind/IIS worm a...
  • Symantec Enterprise Security Solutions protect against Microsoft Windows 2000...
  • Increased Risk in China/US Hacking Activity
  • Incorrect Mime Header Vulnerability (MSIE)
  • Lion worm and its propagation methods are detected and prevented by Symantec ...
  • Fraudulent Digital Certificate (Verisign)
  • Symantec security products address BIND vulnerabilities.
  • Lotus Domino Denial of Service Malformed HTML Email
  • Ramen WORM propagation methods are detected by Symantec security products
  • How Symantec Addresses Microsoft Compromise
  • Widespread Exploitation of Common Linux Vulnerabilities Reported