Security Bulletin

RISK: High Risk

RealOne RMP File Heap Overflow Vulnerability

A vulnerability has been identified in RealPlayer. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted RMP file that, when loaded by the target user, will trigger a heap overflow...

Last Update Date: 19 Dec 2013 18:04 Release Date: 19 Dec 2013 3059 Views

RISK: Medium Risk

Wireshark Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).An error within the SIP dissector (epan/dissectors/packet-sip.c) can be exploited to cause an infinite loop....

Last Update Date: 19 Dec 2013 17:59 Release Date: 19 Dec 2013 3029 Views

RISK: High Risk

Apple OS X Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple OS X, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system The security issue and vulnerability is caused due to a bundled vulnerable version of Apple Safari...

Last Update Date: 18 Dec 2013 12:05 Release Date: 18 Dec 2013 3189 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.An error related to origin tracking can be exploited to autofill a form in a subframe...

Last Update Date: 18 Dec 2013 12:04 Release Date: 18 Dec 2013 3416 Views

RISK: Medium Risk

IrfanView GIF Image Processing Buffer Overflow Vulnerability

A vulnerability has been identified in IrfanView, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when handling the LZW code stream within GIF files and can be exploited to cause a...

Last Update Date: 18 Dec 2013 12:03 Release Date: 18 Dec 2013 3187 Views

RISK: Medium Risk

HP LaserJet Printers Denial of Service Vulnerability

A vulnerability has been identified in HP LaserJet Printers. which can be exploited by remote user can cause denial of service conditions. A remote user can send specially crafted data to cause partial denial of service conditions on the target printer.

Last Update Date: 16 Dec 2013 10:27 Release Date: 16 Dec 2013 3283 Views

RISK: High Risk

Microsoft Graphics Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that affected Windows components and other affected software handle specially crafted TIFF files. The vulnerability could allow remote code execution if a user views TIFF files in shared content. An attacker who successfully exploited this vulnerability could take complete...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 3098 Views

RISK: High Risk

Microsoft Windows WinVerifyTrust Signature Validation Vulnerability

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to leverage unverified portions of the file in such a...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 4080 Views

RISK: High Risk

Microsoft Scripting Runtime Object Library Use-After-Free Vulnerability

This is a remote code execution vulnerability in the Microsoft Scripting Runtime Object Library. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 3187 Views

RISK: Medium Risk

Microsoft SharePoint Page Content Vulnerabilities

Remote code execution vulnerabilities exist in Microsoft SharePoint Server. An authenticated attacker who successfully exploited these vulnerabilities could run arbitrary code in the security context of the W3WP service account.

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 2957 Views