http://www.iss.net en 2007 IBM Internet Security Systems. All rights reserved worldwide. http://www.iss.net/threats/pushdoSSLDDoS.html Pushdo is a botnet primarily used for spamming. Recently it has been observed launching Distributed Denial of Service (DDoS) attacks against certain SSL-enabled websites. The Pushdo malware is also known as Pandex and some components are known as Cutwail. Tue, 2 Feb 2010 00:00:00 -0500 http://www.iss.net/threats/359.html Microsoft Internet Explorer could allow a remote attacker to execute code on the system, caused by an invalid pointer reference error.  Active attacks on this vulnerabiltiy have been found in wild as reported by Google and Microsoft earlier this week. Fri, 15 Jan 2010 00:00:00 -0500 http://www.iss.net/threats/358.html A vulnerability in Adobe Acrobat and Acrobat Reader can result in remote code execution. This vulnerability was discovered being exploited in the wild on Dec. 11, 2009, and publicly acknowledged by Adobe on Dec. 14, 2009.  New in-the-wild PDF variants were discovered by ISS Managed Security Services on Dec. 18, 2009, indicating that this attack is being picked up by more attackers using more traditional obfuscation and attack techniques. Tue, 15 Dec 2009 00:00:00 -0500 http://www.iss.net/threats/357.html By sending a specially-crafted HTTP request, a remote attacker could exploit a vulnerability in the HP OpenView Network Node Manager to execute arbitrary code on the system. Wed, 9 Dec 2009 00:00:00 -0500 http://www.iss.net/threats/356.html By sending a specially-crafted request, a remote attacker could exploit a vulnerability in Novell eDirectory to execute arbitrary code on the system. Tue, 1 Dec 2009 00:00:00 -0500 http://www.iss.net/threats/355.html By persuading a victim to visit a specially-crafted CSS page, a remote attacker could exploit a vulnerability in Microsoft Internet Explorer to execute arbitrary code on the system with the privileges of the victim. Mon, 23 Nov 2009 00:00:00 -0500