Security Bulletin

RISK: Medium Risk

Splunk Enterprise Data Processing Vulnerability

A vulnerability has been identified in Splunk Enterprise. A remote user can cause denial of service conditions. A remote user can send specially crafted data to cause the target server to become unavailable. Systems configured as data 'receivers' on the listening or receiving port...

Last Update Date: 20 Dec 2013 10:09 Release Date: 20 Dec 2013 3808 Views

RISK: Medium Risk

Asterisk Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Asterisk, which can be exploited by malicious people to escalate privileges and cause a DoS (Denial of Service). A 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. ...

Last Update Date: 19 Dec 2013 18:10 Release Date: 19 Dec 2013 3795 Views

RISK: High Risk

RealOne RMP File Heap Overflow Vulnerability

A vulnerability has been identified in RealPlayer. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted RMP file that, when loaded by the target user, will trigger a heap overflow...

Last Update Date: 19 Dec 2013 18:04 Release Date: 19 Dec 2013 3823 Views

RISK: Medium Risk

Wireshark Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).An error within the SIP dissector (epan/dissectors/packet-sip.c) can be exploited to cause an infinite loop....

Last Update Date: 19 Dec 2013 17:59 Release Date: 19 Dec 2013 3783 Views

RISK: High Risk

Apple OS X Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple OS X, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system The security issue and vulnerability is caused due to a bundled vulnerable version of Apple Safari...

Last Update Date: 18 Dec 2013 12:05 Release Date: 18 Dec 2013 3945 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.An error related to origin tracking can be exploited to autofill a form in a subframe...

Last Update Date: 18 Dec 2013 12:04 Release Date: 18 Dec 2013 4187 Views

RISK: Medium Risk

IrfanView GIF Image Processing Buffer Overflow Vulnerability

A vulnerability has been identified in IrfanView, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when handling the LZW code stream within GIF files and can be exploited to cause a...

Last Update Date: 18 Dec 2013 12:03 Release Date: 18 Dec 2013 3951 Views

RISK: Medium Risk

HP LaserJet Printers Denial of Service Vulnerability

A vulnerability has been identified in HP LaserJet Printers. which can be exploited by remote user can cause denial of service conditions. A remote user can send specially crafted data to cause partial denial of service conditions on the target printer.

Last Update Date: 16 Dec 2013 10:27 Release Date: 16 Dec 2013 4067 Views

RISK: High Risk

Microsoft Graphics Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that affected Windows components and other affected software handle specially crafted TIFF files. The vulnerability could allow remote code execution if a user views TIFF files in shared content. An attacker who successfully exploited this vulnerability could take complete...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 3869 Views

RISK: High Risk

Microsoft Windows WinVerifyTrust Signature Validation Vulnerability

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to leverage unverified portions of the file in such a...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 4981 Views