Security Bulletin

RISK: Medium Risk

RealPlayer MP4 File Atom Handling Buffer Overflow Vulnerability

A vulnerability has been identified in RealPlayer, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when handling atoms in MP4 files and can be exploited to cause a buffer overflow via an MP4 file...

Last Update Date: 4 Jul 2014 14:13 Release Date: 4 Jul 2014 3077 Views

RISK: High Risk

Apple Products Multiple Vulnerabilities

A vulnerability was identified in Apple TV. A local user can make purchases without authorization.Multiple vulnerabilities were identified in Apple iOS. A remote user can cause arbitrary code to be executed on the target user's system. A local application can obtain elevated privileges...

Last Update Date: 2 Jul 2014 14:53 Release Date: 2 Jul 2014 3903 Views

RISK: High Risk

eClass SQL Injection Vulnerability

A SQL injection vulnerability has been identified in eClass IP (for secondary schools) and eClass Junior (for primary schools), which can be exploited to extract information from the database.

Last Update Date: 30 Jun 2014 10:44 Release Date: 30 Jun 2014 3696 Views

RISK: Medium Risk

JBoss Multiple Products Remote Code Execution Vulnerability

A vulnerability was identified in Red Hat JBoss Web Framework Kit, Enterprise Application Platform and Enterprise Web Platform. The vulnerability is caused due to an error related to Seam logging, which can be exploited to execute arbitrary code via specially crafted authentication headers.

Last Update Date: 27 Jun 2014 11:52 Release Date: 27 Jun 2014 3225 Views

RISK: Medium Risk

JBoss Enterprise Application Platform Multiple vulnerabilities

Multiple vulnerabilities have been identified in JBoss Enterprise Application Platform, which could be exploited by remote attackers to cause denial of service and gain access to confidential data.

Last Update Date: 27 Jun 2014 11:52 Release Date: 27 Jun 2014 3047 Views

RISK: Medium Risk

Cisco IOS IPsec Processing Denial of Service Vulnerability

A vulnerability has been identified in Cisco IOS, which can be exploited by malicious users to cause a DoS (Denial of Service). The vulnerability is caused due to an error when processing IPsec packets and can be exploited to cause a reload of the device.

Last Update Date: 27 Jun 2014 11:52 Release Date: 27 Jun 2014 3183 Views

RISK: Medium Risk

GnuPG do_uncompress() Compressed Data Processing Flaw

A vulnerability has been identified in GnuPG. A remote user can cause denial of service conditions. A remote user can send specially crafted compressed data packets to trigger a flaw in do_uncompress() and cause the target process to enter an infinite loop.

Last Update Date: 27 Jun 2014 Release Date: 26 Jun 2014 3002 Views

RISK: Medium Risk

Cisco WebEx Meeting Server Information Disclosure Vulnerability

A vulnerability was identified in Cisco WebEx Meeting Server, which could be exploited by an authenticated, remote attacker to access sensitive information. An attacker could send a crafted URL request to a vulnerable device to disclose the meeting information.

Last Update Date: 26 Jun 2014 Release Date: 24 Jun 2014 3294 Views

RISK: Medium Risk

Samba Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Samba, which can be exploited by malicious users to cause a DoS (Denial of Service).An error in the "sys_recvfrom()" function (source3/lib/system.c) can be exploited to trigger an infinite loop within...

Last Update Date: 26 Jun 2014 Release Date: 24 Jun 2014 3177 Views

RISK: High Risk

McAfee Multiple Products OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities were identified in multiple McAfee products, which can be exploited by malicious, local users to disclose certain sensitive information and by malicious by people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable...

Last Update Date: 25 Jun 2014 09:56 Release Date: 25 Jun 2014 3238 Views