Microsoft Internet Explorer contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the user. The vulnerability is due to an invalid pointer reference. An unauthenticated, remote attacker could exploit this vulnerability by creating a malicious website and convincing a targeted user to visit the site. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user. Functional code that exploits this vulnerability on systems that run Internet Explorer 6 is publicly available. Microsoft has confirmed this vulnerability and released software updates.

Microsoft Office contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper boundary restrictions when processing Office documents. An unauthenticated, remote attacker could exploit the vulnerability by convincing the user to view a malicious document. If successful, the attacker could execute arbitrary code with the privileges of the user. A functional exploit that is a part of the Metasploit framework is publicly available. Microsoft has confirmed the vulnerability in a security bulletin and released software updates.

Cisco TelePresence Recording Server contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with elevated privileges. The vulnerability is due to errors when processing malicious requests. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious requests to a targeted device. If successful, the attacker could execute arbitrary commands on the device with elevated privileges. Cisco has confirmed this vulnerability in a security advisory and has released updated software.

Cisco TelePresence application programming interfaces (APIs) that are hosted on Cisco TelePresence endpoint devices contain a vulnerability related to Cisco TelePresence Immersive Endpoint System that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted device. The vulnerability is due to improper processing of malformed requests by the affected software. An unauthenticated, remote attacker on an adjacent network could exploit this vulnerability by sending malicious requests to the device. If successful, the attacker could execute arbitrary commands on the device with elevated privileges, possibly resulting in a complete compromise. Cisco has confirmed the vulnerability in a security advisory and released software updates.

Microsoft Internet Explorer contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the user. The vulnerability is due to an invalid pointer reference. An unauthenticated, remote attacker could exploit this vulnerability by creating a malicious website and convincing a targeted user to visit the site. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user. Functional code that exploits this vulnerability on systems that run Internet Explorer 6 is publicly available. Microsoft has confirmed this vulnerability and released software updates.

Microsoft Office contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper boundary restrictions when processing Office documents. An unauthenticated, remote attacker could exploit the vulnerability by convincing the user to view a malicious document. If successful, the attacker could execute arbitrary code with the privileges of the user. A functional exploit that is a part of the Metasploit framework is publicly available. Microsoft has confirmed the vulnerability in a security bulletin and released software updates.

Cisco TelePresence System Software contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary commands on a targeted system. The vulnerability is due to improper sanitization of user-supplied input to Common Gateway Interface (CGI) scripts. An authenticated, remote attacker could exploit the vulnerability by sending malicious requests to the vulnerable application. If successful, the attacker could execute arbitrary commands on the system. Cisco has confirmed the vulnerability in a security advisory and released software updates.

Microsoft Internet Explorer versions 6, 7, 8, and 9 contain a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to improper handling of malformed web pages. An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to view a malicious website. If successful, the attacker could execute arbitrary code on the system with the privileges of the user. Microsoft has confirmed this vulnerability in a security bulletin and has released updated software.