Search, View and Navigation
Main Menu
Mailing List
[SingCERT] Adobe Flash Player Update
Last Updated on Wednesday, 27 February 2013 14:23
[ Summary ]
Adobe has released security updates for Adobe Flash Player to address a vulnerability that could cause a crash and potentially allow an attacker to take control of the affected system.
A remote user can create a specially crafted Flash content that, when loaded by the target user, will execute arbitrary code on the target system. The code will run with the privileges of the target user.
A buffer overflow may occur in the Flash Player broker service [CVE-2013-0504].
A permission error may occur in the Flash Player Firefox sandbox [CVE-2013-0643].
A flaw may occur in the ExternalInterface ActionScript feature [CVE-2013-0648].
The two flaws [CVE-2013-0643, CVE-2013-0648] are being actively exploited against Mozilla Firefox.
[SingCERT] Security updates available for Adobe Reader and Acrobat
Last Updated on Thursday, 21 February 2013 17:06
[ Summary ]
Two vulnerabilities were reported in Adobe Acrobat/Reader. Successful exploitation of these vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.
These updates resolve:
- a memory corruption vulnerability that could lead to code execution (CVE-2013-0640).
- a buffer overflow vulnerability that could lead to code execution (CVE-2013-0641).
These vulnerabilities are being actively exploited against Windows-based systems.
Read more: [SingCERT] Security updates available for Adobe Reader and Acrobat
[SingCERT] Spam Emails from Yahoo! Accounts
Last Updated on Thursday, 21 February 2013 17:07
[ Summary ]
SingCERT has received reports of spam emails from Yahoo! accounts containing links to websites selling “work from home” schemes and packages.
Users are advised not to click on such links and should not enter in any personal particulars to these websites if prompted.
More Articles...
Page 3 of 6