Further Information

AL-2007.0024 -- [Win][UNIX/Linux] -- Cookie stealing and domain bypass vulnerability in Firefox - An unpatched vulnerability has been disclosed in the Firefox web browser which could allow for a malicious website to read and modify cookies for other domains. (15/02/2007)

AL-2007.0020 -- [Win][OSX] -- Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434) - Microsoft has released patches for several vulnerability in Microsoft Word which, if exploited, could allow the execution of arbitary code via specially crafted Word documents. (14/02/2007)

AL-2007.0019 -- [Win] -- Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135) - Microsoft has released patches for a critical vulnerability in the PDF parsing functionality of the Microsoft Malware Protection Engine. This component is used in various Microsoft security products, including Windows Live OneCare, Antigen, Windows Defender and Forefront Security. (14/02/2007)

AL-2007.0021 -- [Win] -- Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554) - Microsoft has released patches for vulnerabilities in Microsoft Office which, if exploited, could allow the execution of arbitary code. (13/02/2007)

AL-2007.0017 -- [Win] -- Microsoft February security bulletins pre-release announcement - Microsoft are due to release twelve security bulletins at 5am AEST on Wednesday the 14th of February. (13/02/2007)

AU-2007.0005 -- AusCERT Update - [Win] - CA Personal Firewall privilege escalation vulnerabilities now fixed - This CA advisory addresses the vulnerability previously reported in AA-2006.0094. (12/02/2007)

ESB-2007.0081 -- [Win][UNIX/Linux][RedHat] -- Critical: java-1.4.2-ibm security update - (12/02/2007)

ESB-2007.0087 -- [Win][UNIX/Linux] -- Mercury LoadRunner, Performance Center, Monitor over Firewall, Remote Unauthenticated Arbitrary Code Execution - (09/02/2007)

ESB-2007.0083 -- [Win][Linux] -- RARLabs Unrar Password Prompt Buffer Overflow Vulnerability - (08/02/2007)

ESB-2007.0082 -- [Win][Linux] -- Vulnerabilities in Trend Micro AntiVirus scan engine allow remote compromise - (08/02/2007)

ESB-2007.0079 -- [Win][UNIX/Linux] -- Multiple vulnerabilities in PostgreSQL - (07/02/2007)

ESB-2007.0077 -- [Win] -- Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability - (06/02/2007)

AL-2007.0015 -- [Win][OSX] -- Unpatched Vulnerability in Microsoft Office Could Allow Remote Code Execution - A new vulnerability has been reported in Microsoft Office that may allow execution of arbitrary code. (06/02/2007)

ESB-2007.0074 -- [Win][UNIX/Linux] -- Multiple problems in Wireshark (formerly Ethereal(R)) versions 0.10.14 to 0.99.4 - (05/02/2007)

AU-2007.0003 -- AusCERT Update - [Win] - Exploit code released for CA BrightStor ARCserve Backup - Exploit code has been released for recent CA BrightStor ARCserve Backup vulnerabiities (02/02/2007)

ESB-2007.0057 -- [Win][UNIX/Linux][Debian] -- New vlc packages fix arbitrary code execution - (29/01/2007)

AL-2007.0014 -- [Win] -- New unpatched Microsoft Word vulnerability being actively exploited to execute arbitrary code - A new trojan is exploiting an unpatched vulnerability in Microsoft Word. (28/01/2007)

ESB-2007.0053 -- [Win] -- Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability - (25/01/2007)

ESB-2007.0052 -- [Win] -- CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities - (25/01/2007)

ESB-2007.0047 -- [Win][UNIX/Linux][RedHat] -- Moderate: gtk2 security update - (25/01/2007)

ESB-2007.0044 -- [Win][OSX] -- Security Update 2007-001 fixes QuickTime vulnerability - (24/01/2007)

ESB-2007.0041 -- [Win][UNIX/Linux][OSX] -- Sun Updates for Multiple Vulnerabilities in Java - (23/01/2007)

ESB-2007.0033 -- [Win][UNIX/Linux] -- Security Vulnerability in Processing GIF Images in the Java Runtime Environment May Allow an Untrusted Applet to Elevate Privileges - (22/01/2007)

ESB-2007.0031 -- [UNIX/Linux][Debian] -- New cacti packages fix arbitrary code execution - (18/01/2007)

ESB-2007.0030 -- [Win][UNIX/Linux] -- WordPress multiple vulnerabilities - (16/01/2007)

AL-2007.0011 -- [Win] -- CA ARCserve Backup and Protection Suite products - multiple critical vulnerabilities - A attacker who can connect to the backup server may compromise it and potentially use this control to restore malicious code to any backup client computers within the organisation. (11/01/2007)

AU-2007.0002 -- AusCERT Update - [Win] - ColdFusion vulnerability allows reading of file contents - (11/01/2007)

ESB-2007.0020 -- [Solaris][Linux][Win] -- Security Vulnerability With StarOffice/StarSuite Versions 6, 7 and 8 Related to the '.wmf' File Format - (11/01/2007)

ESB-2007.0016 -- [Win] -- Patch available for ColdFusion MX 7 information disclosure issue - (10/01/2007)

AU-2007.0001 -- AusCERT Update - [Win][Linux] - Server-side workarounds to prevent cross-site scripting due to Adobe Reader and Acrobat - The mitigations in this bulletin help guard against the possibility that some customers or users of an authenticated website may still have the vulnerable versions of Adobe Reader installed. (10/01/2007)

AL-2007.0009 -- [Win][UNIX/Linux] -- Multiple vulnerabilities in Adobe Reader and Acrobat 7.0.8 and prior - New vulnerabilities allowing remote compromise of the client computer are addressed, as well as the serious cross-domain vulnerability described in ESB-2007.0001. (10/01/2007)

ESB-2007.0012 -- [Win] -- MS07-001 - Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution - (10/01/2007)

AL-2007.0006 -- [Win] -- MS07-003 - Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - An attacker may potentially compromise vulnerable computers remotely by sending a specially crafted email to a user. (09/01/2007)

AL-2007.0005 -- [Win][OSX] -- MS07-002 - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - A remote attacker can potentially compromise vulnerable computers by supplying a specially crafted Excel file. (09/01/2007)

AA-2007.0001 -- [Win] -- Novell Client patches fix four vulnerabilities - Novell Client versions up to and including 4.91 SP3 contain four vulnerabilities with impacts including potential remote compromise and inappropriate access. (08/01/2007)


Previous  1, 2, 3 ... , 113, 114, 115  Next denotes AusCERT member only content.