Vulnerability Team

Nuevas variantes de vulnerabilidades que afectan al kernel de Linux:

Linux Kernel FSGEOMETRY_V1 IOCTL Local Information Disclosure Vulnerability

Linux Kernel EFI Partition Denial of Service Vulnerability

Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability

Linux Kernel 'sound/oss/opl3.c' Local Privilege Escalation Vulnerability

Linux Kernel 'sound/oss/midi_synth.c' Memory Corruption Vulnerability

Linux Kernel Signal Code Spoofing Local Denial of Service Vulnerability

Linux Kernel 'iriap.c' Multiple Remote Buffer Overflow Vulnerabilities

Linux Kernel 'fs/partitions/osf.c' Information Disclosure Vulnerability

Linux Kernel ROSE Protocol Multiple Memory Corruption Vulnerabilities

Linux Kernel 'drivers/char/tpm/tpm.c' Information Disclosure Vulnerability

Linux Kernel Unix Socket Backlog Local Denial of Service Vulnerability

Linux Kernel 'fs/partitions/ldm.c' Buffer Overflow and Denial of Service Vulnerabilities

Linux Kernel ATI Radeon R300 Local Input Validation Vulnerability

Linux Kernel 'sctp_rcv_ootb()' Remote Denial of Service Vulnerability

Linux Kernel Validate 'map_count' Variable Local Security Bypass Vulnerability

Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para ayudar a mitigar los riesgos.

fuente: securityfocus.com

VLC media player is prone to multiple buffer-overflow vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the affected application or crash the application, denying service to legitimate users.

Versions prior to VLC media player 1.1.8 are vulnerable.

REFERENCE

The Vulnerability Team adviced to users and administrators to review and apply the updates notifications
necessary to help mitigate the risks.

source: securityfocus.com

New vulnerabilities are reported in the same day when Microsoft release the Microsoft Security Bulletin.



Microsoft Windows OpenType Compact Font Format Remote Code Execution Vulnerability

Microsoft Groove 2007 'mso.dll' DLL Loading Arbitrary Code Execution Vulnerability

Microsoft VBScript and JScript Scripting Engines Information Disclosure Vulnerability

Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability

Microsoft Internet Explorer DLL Loading Arbitrary Code Execution Vulnerability

Microsoft Internet Explorer 'mshtml.dll' Dangling Pointer Vulnerability

Microsoft Internet Explorer CSS Parsing Remote Memory Corruption Vulnerability

Microsoft Internet Explorer CVE-2011-0035 Uninitialized Memory Remote Code Execution Vulnerability
The Vulnerability Team adviced to users and administrators to review and apply the updates notifications necessary to help mitigate the risks.


source: securityfocus.com

Adobe Photoshop is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data.

Attackers can exploit these issues to execute arbitrary code in the context of the currently logged-in user. Successful exploits will compromise the affected application and possibly the underlying computer. Failed exploit attempts may cause a denial-of-service condition.

Adobe Photoshop CS4 11.01 is vulnerable; other versions may also be affected.

REFERENCIA DE LA VULNERABILIDAD 

fuente: securityfocus.com