SecurityFeed.info » Determina Zero-Day Protection

Feeds

57036 items (57036 unread) in 90 feeds

• Aviv Raff On .NET (29 unread)
• Bugtraq (bugtraq) Mailing List (2860 unread)
• CGISecurity.com: Your Web Site and Application Security Resource (415 unread)
• christian's weblog (25 unread)
• Irongeek's Security Site (344 unread)
• Jeremiah Grossman (191 unread)
• Heorot.net (19 unread)
• milw0rm.com (1332 unread)
• Nmap Hackers (nmap-hackers) Mailing List (27 unread)
• Rootsecure.net (3262 unread)
• SecuriTeam.com (645 unread)
• Security Vulnerability Research & Defense (147 unread)
• SecurityFocus News (435 unread)
• SecurityFocus Vulnerabilities (2707 unread)
• Securityvulns news channel (1735 unread)
• SecWatch - Latest Exploit Alerts (10 unread)
• Taking Network Security to the Streets (28 unread)
• The One And Only Matt Parnell.com (86 unread)
• The Register - Security (2360 unread)
• The Register - Software (2742 unread)
• VulnWatch (vulnwatch) Mailing List (19 unread)
• Web App Security (webappsec) Mailing List (433 unread)
• IceСμbeς (15 unread)
• Linmagazine (757 unread)
• ‫netcraft Bytes :) (130 unread)
• Blonde 2.0 (218 unread)
• The Microsoft Security Response Center (MSRC) (175 unread)
• (IN)SECURE Magazine Notifications RSS (45 unread)
• 0x000000 Security (95 unread)
• ----- Anti-Malware ----- Analysis and Defense (16 unread)
• Apple Fun (25 unread)
• Technorati Search for: aviv.raffon.net (368 unread)
• C.I.S.R.T. (25 unread)
• Determina Zero-Day Protection (6 unread)
• Didier Stevens (157 unread)
• eEye Digital Security - Research Blog (12 unread)
• Ryan Naraine's Security Watch (488 unread)
• Security - RSS Feeds (1100 unread)
• Exploit Prevention Labs (28 unread)
• Software Vulnerability Exploitation Blog (22 unread)
• F-Secure Antivirus Research Weblog (470 unread)
• Full Disclosure (1289 unread)
• George Ou (10 unread)
• GNUCITIZEN Media Portfolio (157 unread)
• ha.ckers.org web application security lab (135 unread)
• heise security (1864 unread)
• invisiblethings' blog (57 unread)
• Jeff Jones's blog (13 unread)
• JScript Blog (26 unread)
• Matasano Chargen (74 unread)
• McAfee Avert Labs (354 unread)
• Michael Howard's Web Log (46 unread)
• PandaLabs (227 unread)
• Zero Day (867 unread)
• SANS Internet Storm Center, InfoCON: green (1115 unread)
• Latest Secunia Security Watchdog Blog Entries (71 unread)
• SecuriTeam Blogs (248 unread)
• Security Fix (494 unread)
• HP ASC Portal (30 unread)
• Strike Center (12 unread)
• Sunbelt Blog (909 unread)
• Sunnet Beskerming Security Advisories (149 unread)
• Technobabylon
• The Recurity Lablog (34 unread)
• Wired: Threat Level (1460 unread)
• TrendLabs | Malware Blog - by Trend Micro (636 unread)
• Uninformed Journal (49 unread)
• WabiSabiLabi's blog (23 unread)
• WatchGuard Wire (134 unread)
• Latest Blog Entires From WebSense Security Labs (164 unread)
• Hackszine.com (664 unread)
• DVLabs: Blogs (145 unread)
• Errata Security (177 unread)
• Robert Hensing's Blog (93 unread)
• PaulDotCom Community Blog (14 unread)
• David LeBlanc's Web Log (34 unread)
• Billy (BK) Rios (29 unread)
• David Litchfield's blog (22 unread)
• Farfromr00tin (27 unread)
• aut disce, aut discede (17 unread)
• pwn* (26 unread)
• hackademix.net (106 unread)
• SecurityDot Vulnerabilities (1939 unread)
• Vulnerabilities & Exploits (87 unread)
• Malicious Code (100 unread)
• Security Risks (66 unread)
• Digg / Security / upcoming (17371 unread)
• digg.com: News / Security / Popular (395 unread)
• DarkReading - Security News (926 unread)
• DarkReading - All Stories (148 unread)

Determina Zero-Day Protection (6 unread)

• May 09, 2008
• 1:52

  Windows Metafile Denial of Service

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2006-5997
  Public disclosure: No

  This vulnerability causes an affected application to consume 100% CPU when a user attempts to view a malicious image. All applications that use the standard Windows API for displaying WMF files are affected.

  Affected systems:

  • Windows NT
  • Windows 2000
  • Windows XP
  • Windows 2003

  After Determina reported this vulnerability, Microsoft fixed it in Windows Vista and will include the fix in the next service pack of Windows XP.

• December 21, 2006
• 0:42

  HTML Remote Code Execution Vulnerability

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2007-0038
  Public disclosure: No

  This vulnerability can be exploited by a malicious web page or HTML email message and results in remote code execution with the privileges of the logged-in user. The vulnerable code is present in all versions of Windows up to and including Windows Vista. All applications that use certain Windows API calls are affected, including Internet Explorer, Windows Explorer, Mozilla Firefox and Outlook.

  Affected systems:

  • Windows NT
  • Windows 2000
  • Windows XP
  • Windows 2003
  • Windows Vista
• 0:42

  Windows Local Denial of Service

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2007-0037
  Public disclosure: No

  This vulnerability allows a logged on user to cause a NULL pointer dereference in the kernel and bluescreen the system.

  Affected systems:

  • Windows 2000
  • Windows XP
  • Windows 2003
  • Windows Vista
• 0:42

  CVE number: CVE-2007-0036 Public disclosure: ...

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2007-0036
  Public disclosure: No

  This vulnerability allows a logged on user to cause an unhandled exception in the kernel and bluescreen the system.

  Affected systems:

  • Windows NT
  • Windows 2000
  • Windows XP
  • Windows 2003
  • Windows Vista
• 0:42

  Exchange Malformed Attachment Denial of Service

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2007-0039
  Public disclosure: No

  This vulnerability causes a denial of service in Exchange during the processing of a malformed email attachment.

  Affected systems:

  • Exchange 2000
  • Exchange 2003
• 0:42

  Windows CSRSS HardError Message Box Vulnerability

   » ‎ Determina Zero-Day Protection

  CVE number: CVE-2006-6696
  Public disclosure: December 15, 2006
  Determina advisory: December 20, 2006

  This vulnerability allows a logged on user to execute arbitrary code in the CSRSS.EXE process and elevate their privileges to SYSTEM level. This vulnerability was discovered by Determina, but it was independently disclosed on a public website, prompting the release of a Determina advisory. Exploits for this vulnerability are publicly available.

  Affected systems:

  • Windows 2000
  • Windows XP
  • Windows 2003
  • Windows Vista