Microsoft Visual Studio WMI Object Broker ActiveX code execution updated since 12.12.2006
Published:		13.12.2006
Source:		MICROSOFT
SecurityVulns ID:		6919
Type:		client
Level:		6/10
Description:		Object can be used to bypass internet zone restrictions.

Affected:

MICROSOFT : Visual Studio 2005

Original document		ZDI, ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability (13.12.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-073 Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674) (12.12.2006)

Files:		Microsoft Security Bulletin MS06-073 Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Internet Explorer / Outlook Express multiple security vulnerabilities updated since 12.12.2006
Published:		13.12.2006
Source:		MICROSOFT
SecurityVulns ID:		6918
Type:		client
Level:		7/10
Description:		Memory corruption on Javascript errors processing and Javascript normalize() function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book (WAB) parsing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		SECUNIA, [Full-disclosure] ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability (13.12.2006)
		SECUNIA, [Full-disclosure] Secunia Research: Internet Explorer Script Error Handling Memory Corruption (13.12.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694) (12.12.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-072 (12.12.2006)

Files:		Microsoft Security Bulletin MS06-072 Cumulative Security Update for Internet Explorer (925454)
		Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694)
Discuss:		Read or add your comments to this news (0 comments)

Sophos Anti-Virus multiple security vulnerabilities updated since 30.10.2006
Published:		13.12.2006
Source:		SECUNIA
SecurityVulns ID:		6753
Type:		remote
Level:		5/10
Description:		Crash on parsing malformed RAR, CHM and petite-packed files. Buffer overflow on CPIO and SIT archives parsing.

Affected:		SOPHOS : Sophos Anti-Virus for Windows 6.0
		SOPHOS : Sophos Endpoint Security 6.0
		SOPHOS : Sophos Anti-Virus for Linux 5.0
		SOPHOS : Sophos Anti-Virus 4.10

Original document		ZDI, ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability (13.12.2006)
		ZDI, ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability (13.12.2006)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (09.12.2006)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability (09.12.2006)
		IDEFENSE, iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability (01.11.2006)
		SECUNIA, [SA22635] Sophos Anti-Virus Petite Plugin Denial of Service Vulnerability (30.10.2006)
		SECUNIA, [SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities (30.10.2006)

Files:		Exploits Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability
		Sophos Antivirus CHM File Name Length Heap Overflow Vulnerability
Discuss:		Read or add your comments to this news (0 comments)