CERT Advisories

Current Activity - Apple Releases QuickTime 7.7.2

Wed, 16 May 2012 15:38:39 GMT

Posted by Current Activity on May 16

US-CERT Current Activity

Apple Releases QuickTime 7.7.2

Original release date: Wednesday, May 16, 2012 at 10:23 am
Last revised: Wednesday, May 16, 2012 at 10:23 am

Apple has released QuickTime 7.7.2 to address multiple vulnerabilities.
These vulnerabilities may allow an attacker to execute arbitrary code or
cause a denial-of-service condition.

US-CERT encourages users and administrators to review Apple Support
Article HT5261 and apply any...

Current Activity - Google Releases Google Chrome 19

Tue, 15 May 2012 19:09:37 GMT

Posted by Current Activity on May 15

US-CERT Current Activity

Google Releases Google Chrome 19

Original release date: Tuesday, May 15, 2012 at 2:13 pm
Last revised: Tuesday, May 15, 2012 at 2:13 pm

Google has released Google Chrome 19 for Linux, Mac, Windows, and Chrome
Frame to address multiple vulnerabilities. These vulnerabilities may
allow an attacker to execute arbitrary code or cause a denial-of-service
condition.

US-CERT encourages users and administrators to review the...

Current Activity - Apple Releases Multiple Security Updates

Thu, 10 May 2012 19:18:15 GMT

Posted by Current Activity on May 10

US-CERT Current Activity

Apple Releases Multiple Security Updates

Original release date: Thursday, May 10, 2012 at 2:30 pm
Last revised: Thursday, May 10, 2012 at 2:30 pm

Apple has released security updates for Apple OS X and Safari to address
multiple vulnerabilities for the following products:

* Safari 5.1.7 for Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion
Server v10.7.4, OS X Lion v10.7.4, Windows 7, Vista, XP SP2 or later
* OS X...

Alert TA12-129A -- Microsoft Updates for Multiple Vulnerabilities

Wed, 09 May 2012 01:22:07 GMT

Posted by US-CERT Alerts on May 08

National Cyber Alert System

Technical Cyber Security Alert TA12-129A

Microsoft Updates for Multiple Vulnerabilities

Original release date: May 08, 2012
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows
* Microsoft .NET Framework
* Microsoft Office
* Microsoft Silverlight

Overview

Select Microsoft software products contain multiple
vulnerabilities....

Current Activity - Microsoft Releases May Security Bulletin

Tue, 08 May 2012 19:50:54 GMT

Posted by Current Activity on May 08

US-CERT Current Activity

Microsoft Releases May Security Bulletin

Original release date: Tuesday, May 8, 2012 at 03:38 pm
Last revised: Tuesday, May 8, 2012 at 03:38 pm

Microsoft has released updates to address vulnerabilities in Microsoft
Windows, Office, .NET Framework, and Silverlight as part of the
Microsoft Security Bulletin Summary for May 2012. These vulnerabilities
may allow an attacker to execute arbitrary code or operate with...

Current Activity - Adobe Releases Security Advisory for Adobe Flash Player

Fri, 04 May 2012 15:40:07 GMT

Posted by Current Activity on May 04

US-CERT Current Activity

Adobe Releases Security Advisory for Adobe Flash Player

Original release date: Friday, May 4, 2012 at 11:06 am
Last revised: Friday, May 4, 2012 at 11:06 am

Adobe has released a Security Advisory for Adobe Flash Player to address
a vulnerability affecting the following software versions:

* Adobe Flash Player 11.2.202.233 and earlier versions for Windows,
Macintosh, and Linux operating systems * Adobe Flash Player...

Current Activity - Microsoft Releases Advance Notification for May Security Bulletin

Thu, 03 May 2012 20:23:22 GMT

Posted by Current Activity on May 03

US-CERT Current Activity

Microsoft Releases Advance Notification for May Security Bulletin

Original release date: Thursday, May 3, 2012 at 03:49 pm
Last revised: Thursday, May 3, 2012 at 03:49 pm

Microsoft has issued a Security Bulletin Advance Notification indicating
that its May release will contain seven bulletins. These bulletins will
have the severity ratings of critical and important and will be for
Microsoft Windows, Office, .NET...

Current Activity - Google Releases Chrome 18.0.1025.168

Tue, 01 May 2012 14:47:27 GMT

Posted by Current Activity on May 01

US-CERT Current Activity

Google Releases Chrome 18.0.1025.168

Original release date: Tuesday, May 1, 2012 at 09:58 am
Last revised: Tuesday, May 1, 2012 at 09:58 am

Google has released Chrome 18.0.1025.168 for Linux, Macintosh, Windows,
and Google Chrome Frame to address multiple vulnerabilities. These
vulnerabilities may allow an attacker to execute arbitrary code or cause
a denial-of-service condition.

US-CERT encourages users and...

Current Activity - RuggedCom Rugged Operating System Vulnerability

Tue, 24 Apr 2012 20:42:48 GMT

Posted by Current Activity on Apr 24

US-CERT Current Activity

RuggedCom Rugged Operating System Vulnerability

Original release date: Tuesday, April 24, 2012 at 4:14 pm
Last revised: Tuesday, April 24, 2012 at 4:14 pm

RuggedCom Rugged Operating System (ROS), used in RuggedCom network
infrastructure devices, contains a hard-coded user account with a
predictable password.

This user account cannot be manually disabled. An attacker who
successfully guesses the password may be able to...

Current Activity - DNSChanger Malware

Tue, 24 Apr 2012 18:47:37 GMT

Posted by Current Activity on Apr 24

US-CERT Current Activity

DNSChanger Malware

Original release date: Tuesday, April 24, 2012 at 2:20 pm
Last revised: Tuesday, April 24, 2012 at 2:20 pm

US-CERT encourages users and administrators to ensure their systems are
not infected with the DNSChanger malware by utilizing tools and
resources available at the DNS Changer Working Group (DCWG) website.
Computers testing positive for infection of DNSChanger malware will need
to be cleaned of...

Current Activity - Oracle Releases Critical Patch Update for April 2012

Wed, 18 Apr 2012 15:09:47 GMT

Posted by Current Activity on Apr 18

US-CERT Current Activity

Oracle Releases Critical Patch Update for April 2012

Original release date: Wednesday, April 18, 2012 at 9:55 am
Last revised: Wednesday, April 18, 2012 at 9:55 am

Oracle has released its Critical Patch Update for April 2012 to address
88 vulnerabilities across multiple products. This updates contains the
following security fixes:

* 6 for Oracle Database Server * 11 for Oracle Fusion Middleware * 6
for Oracle...

Current Activity - Apple Releases Flashback Malware Security Updates

Mon, 16 Apr 2012 21:12:16 GMT

Posted by Current Activity on Apr 16

US-CERT Current Activity

Apple Releases Flashback Malware Security Updates

Original release date: Monday, April 16, 2012 at 3:11 pm
Last revised: Monday, April 16, 2012 at 3:11 pm

Apple has released security updates to address Flashback malware in the
following products:

* OS X Lion v10.7.3 * OS X Lion Server v10.7.3 * Mac OS X v10.6.8 * Mac
OS X Server v10.6.8

Apple has released a malware removal tool for the most common variant of
the...

Current Activity - HP ProCurve 5400 zl Switches Security Bulletin

Thu, 12 Apr 2012 19:22:32 GMT

Posted by Current Activity on Apr 12

US-CERT Current Activity

HP ProCurve 5400 zl Switches Security Bulletin

Original release date: Thursday, April 12, 2012 at 2:51 pm
Last revised: Thursday, April 12, 2012 at 2:51 pm

Hewlett-Packard (HP) has released a security bulletin to address a
security vulnerability affecting HP 5400 zl series switches purchased
after April 30, 2011. These switches contain a compact flash card that
may be infected with malware.

US-CERT encourages users...

Current Activity - Samba Releases Updates for 3.0.x - 3.6.3

Wed, 11 Apr 2012 18:06:51 GMT

Posted by Current Activity on Apr 11

US-CERT Current Activity

Samba Releases Updates for 3.0.x - 3.6.3

Original release date: Wednesday, April 11, 2012 at 11:00 am
Last revised: Wednesday, April 11, 2012 at 11:00 am

Samba has released an update to address a vulnerability in Samba
versions 3.6.3 and all previous versions. Exploitation of this
vulnerability may allow a remote attacker to use anonymous connections
to execute arbitrary code with root privileges.

US-CERT encourages...

Alert TA12-101B -- Adobe Reader and Acrobat Security Updates and Architectural Improvements

Wed, 11 Apr 2012 07:45:05 GMT

Posted by US-CERT Alerts on Apr 11

National Cyber Awareness System

Technical Cyber Security Alert TA12-101B

Adobe Reader and Acrobat Security Updates and Architectural Improvements

Original release date: April 10, 2012
Last revised: --
Source: US-CERT

Systems Affected

* Adobe Reader X (10.1.2) and earlier 10.x versions for Windows and Macintosh
* Adobe Reader 9.5 and earlier 9.x versions for Windows, Macintosh, and UNIX
* Adobe...