Further Information

AL-2007.0117 -- [Win][UNIX/Linux] -- Oracle Critical Patch Update Pre-Release Announcement for October 2007 - Oracle have release information regarding patches for 51 vulnerabilities in various of Oracle Products. (19/10/2007)

ESB-2007.0724 -- [Win][Linux][Solaris] -- StarOffice crafted TIFF file vulnerabilities - (18/10/2007)

ESB-2007.0794 -- [Win][UNIX/Linux][Debian] -- New wesnoth packages fix denial of service - (16/10/2007)

ESB-2007.0762 -- [Win][UNIX/Linux][RedHat] -- Moderate: opal security update - (09/10/2007)

ESB-2007.0761 -- [Win][UNIX/Linux] -- Moderate: pwlib security update - (09/10/2007)

ESB-2007.0738 -- [Win][UNIX/Linux] -- openssl vulnerabilities - (01/10/2007)

ESB-2007.0722 -- [Win][UNIX/Linux] -- Multiple ImageMagick Vulnerabilities - (24/09/2007)

ESB-2007.0664 -- [Win][UNIX/Linux] -- New vim packages fix several vulnerabilities - (24/09/2007)

ESB-2007.0715 -- [Win] -- Multiple vendors affected by Microsoft Foundation Class library FindFile() buffer overflow - The vulnerable components are standard Microsoft libraries used in Windows software development. Therefore it is expected that products from many third party vendors may be affected. (21/09/2007)

Fake Microsoft Security Bulletin - Spam email trying to get users to run a malicious executable file claiming to be an update from Microsoft. (21/09/2007)

ESB-2007.0712 -- [Win][UNIX/Linux][RedHat] -- Important: libvorbis security update - (20/09/2007)

AU-2007.0021 -- AusCERT Update - [Win][OSX] - Firefox 2.0.0.7 released addressing QuickTime browser integration vulnerability - This new version mitigates the vulnerability previously reported in AusCERT Alert AL-2007.0111. (19/09/2007)

ESB-2007.0650 -- [Win] -- Oracle JInitiator ActiveX control stack buffer overflows - (19/09/2007)

ESB-2007.0704 -- [Win][UNIX/Linux] -- OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities - A remote attacker may potentially compromise the computer by supplying to OpenOffice users a document that contains a malicious TIFF file. (18/09/2007)

ESB-2007.0699 -- [Win][UNIX/Linux][RedHat] -- Qt libraries - buffer overflow vulnerability in Unicode string handling - (14/09/2007)

AL-2007.0111 -- [Win][OSX] -- QuickTime and iTunes - browser integration vulnerability allows remote compromise via Firefox - On a system where the QuickTime plugin is installed, when the user visits a malicious web page using Firefox a remote attacker may execute arbitrary code, compromising the computer. (13/09/2007)

AA-2007.0076 -- [Win] -- Skype chat instant messaging worm currently spreading - A new worm is currently spreading via the "chat" instant messaging feature of Skype. (11/09/2007)

ESB-2007.0686 -- [Win] -- Intuit QuickBooks Online Edition v9 - multiple vulnerabilities allow remote compromise - (10/09/2007)

ESB-2007.0654 -- [Win][Cisco] -- XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page - (05/09/2007)

ESB-2007.0515 -- [Win][UNIX/Linux] -- Java Secure Socket Extension Does Not Correctly Process SSL/TLS Handshake Requests Resulting in a Denial of Service (DoS) Condition - (04/09/2007)

ESB-2007.0661 -- [Win] -- Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities - (31/08/2007)

AL-2007.0105 -- [Win] -- Email claiming to be from Australian Office of Fair Trading (Trojan) - (31/08/2007)

ESB-2007.0651 -- [Win] -- MSN Messenger and Windows Live Messenger webcam stream heap overflow - (30/08/2007)

AA-2007.0069 -- [Win][UNIX/Linux] -- Multiple remote DoS vulnerabilities in Sophos Anti-Virus - (30/08/2007)

AA-2007.0067 -- [Win][UNIX/Linux] -- ClamAV Multiple Denial of Service Vulnerabilities - (30/08/2007)

AA-2007.0070 -- [Win] -- Subversion Client Directory Traversal Vulnerability - (29/08/2007)

ESB-2007.0624 -- [Win][Linux][Solaris] -- Vulnerability in the Java Runtime Environment Font Parsing Code may Allow an Untrusted Applet to Elevate Privileges - (17/08/2007)

ESB-2007.0616 -- [Win] -- Vulnerabilities in Windows Media Player Could Allow Remote Code Execution (936782) - (15/08/2007)

AL-2007.0100 -- [Win] -- Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127) - A remote code execution vulnerability exists in the Vector Markup Language (VML) implementation in Microsoft Windows. (15/08/2007)

AL-2007.0098 -- [Win] -- Cumulative Security Update for Internet Explorer (937143) - Three code execution vulnerabilities exists in Internet Explorer, all of which may be exploited if a user visits a specially crafted web page. (15/08/2007)

AL-2007.0097 -- [Win][OSX] -- Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965) - A remote code execution vulnerability exists in the way Excel handles malformed Excel files. This vulnerability also affects Microsoft Office 2004 for Mac. (15/08/2007)

ESB-2007.0605 -- [Win][Cisco] -- Cisco Security Response: Cisco Unified MeetingPlace XSS Vulnerability - (13/08/2007)

AA-2007.0066 -- [Win][UNIX/Linux] -- OpenSSL RSA encryption may allow local private key compromise - The RSA encryption algorithm of OpenSSL contains a vulnerability which may allow an untrusted local user to obtain the private key. (10/08/2007)

ESB-2007.0608 -- [Win] -- Symantec ActiveX Control Input Validation Error - (10/08/2007)

AA-2007.0065 -- [Win][UNIX/Linux] -- An updated version of The Sleuth Kit (TSK) corrects multiple vulnerabilities - (09/08/2007)


Previous  1, 2, 3, 4 ... 23, 24, 25  Next denotes AusCERT member only content.