VUPEN Security Zero-Day Monitor - Latest Zero Day Vulnerabilities and Exploits

	About Us \| Contact Us

VUPEN Free Resources

VUPEN Security Advisories

VUPEN Research Team Blog

Security News and Threats

Zero-day Threats Monitor

Daily Security Mailinglist

Explanation of Terms

Advanced Search Engine

Zero-day Attacks Monitor

VUPEN Security Zero-Day Monitor is a comprehensive resource for up-to-date information on the latest
zero-day threats, risks and vulnerabilities. Please send your comments to : team@vupen.com

Microsoft Windows SMB "mrxsmb.sys" Remote Heap Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers or malicious users to cause a denial of service or take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-02-15 -> 12 Days of Exposure

Microsoft Office Excel Document Parsing Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Microsoft Office Excel, which could be exploited by attackers to compromise a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-02-08 -> 19 Days of Exposure

Microsoft Office PowerPoint OfficeArt Atom Code Execution Vulnerability

A vulnerability has been identified in Microsoft Office PowerPoint, which could be exploited by attackers to compromise a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-02-08 -> 19 Days of Exposure

HP Data Protector Manager and Client Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in HP Data Protector, which could be exploited by remote attackers to compromise a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-02-08 -> 19 Days of Exposure

CA Secure Content Manager "ECSQdmn.exe" Heap Overflow Vulnerability

A vulnerability has been identified in CA Secure Content Manager, which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-02-08 -> 19 Days of Exposure

Microsoft Windows MHTML Remote Information Disclosure Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to gain knowledge of sensitive information.

Rated as : Low Risk

Disclosure Date : 2011-01-29 -> 29 Days of Exposure

Microsoft Internet Explorer Circular Memory References Use-after-free

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-01-05 -> 53 Days of Exposure

Microsoft Windows Fax Cover Page Editor Code Execution Vulnerabilities

Two vulnerabilities have been identified in Microsoft Windows, which could be exploited by attackers to execute arbitrary code.

Rated as : High Risk

Disclosure Date : 2010-12-27 -> 62 Days of Exposure

Microsoft WMI Administrative Tools Trusted Value Remote Code Execution

A vulnerability has been identified in Microsoft WMI Administrative Tools, which could be exploited by remote attackers to compromise a vulnerable system.

Rated as : Critical

Disclosure Date : 2010-12-22 -> 67 Days of Exposure

Microsoft Exchange Server Outlook Web Access Session Hijacking

A vulnerability has been identified in Microsoft Exchange Server, which could be exploited by attackers to manipulate or obtain certain information.

Rated as : Low Risk

Disclosure Date : 2010-09-14 -> 166 Days of Exposure

Microsoft Windows Kernel "Win32k.sys" Pool Corruption Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to cause a denial of service or potentially gain elevated privileges.

Rated as : Moderate Risk

Disclosure Date : 2010-08-06 -> 205 Days of Exposure

Microsoft Windows Gzip Libraries Code Execution Vulnerability

A vulnerability has been identified in Microsoft Windows and Windows Services for UNIX, which could be exploited by attackers to compromise a vulnerable system.

Rated as : High Risk

Disclosure Date : 2009-03-26 -> 703 Days of Exposure

Microsoft Web Proxy Auto-Discovery Information Disclosure Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to gain knowledge of sensitive information.

Rated as : Low Risk

Disclosure Date : 2007-12-04 -> 1181 Days of Exposure

Microsoft Windows CFileFind Class "FindFile()" Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of an affected system.

Rated as : Moderate Risk

Disclosure Date : 2007-09-18 -> 1258 Days of Exposure

Microsoft DirectX Media SDK "SourceUrl" Remote Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft DirectX Media SDK, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system.

Rated as : Critical

Disclosure Date : 2007-08-13 -> 1294 Days of Exposure

Recently fixed zero-day vulnerabilities:

Microsoft Windows "EnableEudc()" Local Buffer Overflow (MS11-011)

A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to take complete control of a vulnerable system.

Rated as : Moderate Risk

Disclosure Date : 2010-11-24 -> 76 Days of Exposure

Microsoft Internet Explorer CSS Import Rule Use-after-free (MS11-003)

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2010-12-09 -> 61 Days of Exposure

Microsoft Internet Information Services FTP Buffer Overflow (MS11-004)

A vulnerability has been identified in Microsoft Internet Information Services (IIS), which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2010-12-22 -> 48 Days of Exposure

Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS11-006)

Multiple vulnerabilities have been identified in Microsoft Windows, which could be exploited by attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-01-04 -> 35 Days of Exposure

OpenOffice.org Impress File Processing Buffer Overflow Vulnerabilities

Two vulnerabilities have been identified in OpenOffice.org, which could be exploited by attackers to compromise a vulnerable system.

Rated as : Critical

Disclosure Date : 2010-08-04 -> 176 Days of Exposure

Opera Browser "select" Element Children Integer Truncation Vulnerability

A vulnerability has been identified in Opera, which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2011-01-21 -> 6 Days of Exposure

Microsoft Windows Task Scheduler Local Privilege Escalation (MS10-092)

A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to take complete control of a vulnerable system.

Rated as : Moderate Risk

Disclosure Date : 2010-10-22 -> 53 Days of Exposure

Microsoft Internet Explorer CSS "clip" Attribute Memory Corruption (MS10-090)

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system.

Rated as : Critical

Disclosure Date : 2010-11-03 -> 41 Days of Exposure

Adobe Flash Player Content Processing Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to execute arbitrary code.

Rated as : Critical

Disclosure Date : 2010-10-28 -> 19 Days of Exposure

Adobe Reader "printSeps()" Function Heap Corruption Vulnerability

A vulnerability has been identified in Adobe Reader, which could be exploited by remote attackers to execute arbitrary code.

Rated as : Critical

Disclosure Date : 2010-11-04 -> 12 Days of Exposure

Monthly Statistics

VUPEN Security Advisories By Criticality: Feb 2011
Critical Risk	: 22%
High Risk	: 3%
Moderate Risk	: 42%
Low Risk	: 33%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.

Try VUPEN VNS