Bardissi Enterprises Blog

• This vulnerability affects: All current versions of Microsoft PowerPoint for Windows and Mac computers (also affects PowerPoint Viewer and Office Compatibility Packs)
• How an attacker exploits it: By enticing your users into opening a maliciously crafted PowerPoint presentation
• Impact: An attacker can execute code on your computer, potentially gaining control of it
• What to do: Implement the workarounds described in the Solution Path section of this alert

Severity: High

1 July, 2008

Summary:

§ These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions; as well as Safari 3.x for OS X 10.4.x

§ How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site

§ Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining control of your user’s computer

§ What to do: OS X administrators should download, test and install Security Update 2008-004, Mac OS X 10.5.4, and Safari 3.1.2

Severity: Medium

18 March, 2008

Summary:

• These vulnerabilities affect: Safari 3 for OS X and Windows
• How an attacker exploits them: By enticing one of your users into visiting a malicious web site
• Impact: Various results; in the worst case, attacker executes code on your user’s computer, with your user’s privileges
• What to do: Install Safari 3.1

Severity: High

11 March, 2008

Summary:

• These vulnerabilities affect: Most current versions of Microsoft Office for Windows, and in some cases for Mac (and some other Office-related programs)
• How an attacker exploits them: By enticing you to open maliciously crafted Office documents, visit a malicious web site, or click a malicious link
• Impact: An attacker can execute code, potentially gaining complete control of your computer
• What to do: Install the appropriate Office or Office related patches immediately

Severity: High

11 February, 2008

Summary:

• These vulnerabilities affect: OS X 10.4.11(Tiger) and OS X 10.5.x (Leopard), both client and server versions
• How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site
• Impact: Various results. In the worst case, attacker executes code on your user’s computer, with your users privileges
• What to do: OS X 10.4.11 users should install Security Update 2008-001. OS X 10.5.x users should install version 10.5.2

Exposure:

Today, Apple released a security update fixing over 11 security issues in software packages that ship as part of OS X, including Mail, Launch Services, and Samba. Many of these vulnerabilities allow attackers to execute any code they choose on your OS X machines, so we rate this update Critical. Apply it as soon as you can. Some of the fixed vulnerabilities include: