Security Bulletin

RISK: High Risk

Apple Safari Use-After-Free and Multiple Memory Corruption Vulnerabilities

Multiple vulnerabilities have been reported in Apple Safari, which can be exploited by malicious people to compromise a user's system. A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a memory corruption flaw in WebKit and...

Last Update Date: 27 Feb 2014 10:41 Release Date: 27 Feb 2014 3905 Views

RISK: High Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple OS X. A remote user can cause arbitrary code to be executed on the target user's system. An application can bypass sandbox restrictions on the target system. A remote user can obtain potentially sensitive information.

Last Update Date: 27 Feb 2014 10:41 Release Date: 27 Feb 2014 3788 Views

RISK: Medium Risk

Red Hat Enterprise Linux openldap Denial Of Service Vulnerability

A denial of service flaw was identified in the OpenLDAP server daemon (slapd) performed reference counting when using the rwm (rewrite/remap) overlay. A remote attacker able to query the OpenLDAP server could use this flaw to crash the server by immediately unbinding...

Last Update Date: 26 Feb 2014 14:40 Release Date: 26 Feb 2014 3825 Views

RISK: Medium Risk

libpng Denial-Of-Service Vulnerability

A vulnerabiity was identified in libpng. Decoding a malformed .png file may cause the target application to become unresponsive.

Last Update Date: 26 Feb 2014 14:35 Release Date: 26 Feb 2014 3818 Views

RISK: Medium Risk

Mac OS X SSL/TLS Authentication Vulnerability

A vulnerability has been identified in Mac OS X, which can be exploited by remote user can decrypt SSL/TLS sessions in certain cases. A remote user with the ability to conduct a man-in-the-middle attack can exploit a connection authentication flaw...

Last Update Date: 25 Feb 2014 Release Date: 24 Feb 2014 4022 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by remote user to determine the installation path or cause arbitrary code to be executed on the target user's system.A remote user can create specially crafted content that, when loaded by the...

Last Update Date: 25 Feb 2014 Release Date: 24 Feb 2014 3938 Views

RISK: High Risk

Linksys E-Series Routers Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple Linksys E-Series routers, which can be exploited by malicious people to bypass certain security restrictions. The device does not properly restrict access to tmUnblock.cgi and hndUnblock.cgi, which can be exploited to inject...

Last Update Date: 25 Feb 2014 09:32 Release Date: 25 Feb 2014 3990 Views

RISK: High Risk

Kloxo SQL Injection Vulnerability

A vulnerability has been identified in Kloxo, which can be exploited by malicious people to take full control of the server, and remotely execute arbitrary code. According to forum vpsBoard (https://vpsboard.com/topic/3384-kloxo-installations-compromised/), ...

Last Update Date: 24 Feb 2014 18:24 Release Date: 24 Feb 2014 4352 Views

RISK: Extremely High Risk

Adobe Flash Player Remote Code Execution Vulnerability

A vulnerability was identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted file that, when loaded by the target user, will execute arbitrary code on...

Last Update Date: 21 Feb 2014 11:56 Release Date: 21 Feb 2014 4275 Views

RISK: Extremely High Risk

Microsoft Internet Explorer Use-After-Free Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which can be exploited by attackers to cause arbitrary code to be executed on the target user's system. A remote user can create HTML with a specially crafted Adobe Flash object that, when loaded by the...

Last Update Date: 21 Feb 2014 Release Date: 17 Feb 2014 4533 Views