Security Bulletin

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

A remote code execution vulnerability exists when Internet Explorer improperly processes script while debugging a webpage. The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a...

Last Update Date: 13 Jun 2013 19:26 Release Date: 13 Jun 2013 3334 Views

RISK: Medium Risk

Wireshark Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. An error in the CAPWAP dissector (dissectors/packet-capwap.c) can be exploited to...

Last Update Date: 11 Jun 2013 10:12 Release Date: 11 Jun 2013 3337 Views

RISK: High Risk

Cisco IOS XR SNMP Denial of Service Vulnerability

A vulnerability has been identified in Cisco IOS XR, which can be exploited by a remote user to cause denial of service conditions. A remote user can send a large number of UDP packets to SNMP port 162 to trigger a memory leak in the SNMP process and...

Last Update Date: 10 Jun 2013 10:26 Release Date: 10 Jun 2013 3551 Views

RISK: Medium Risk

PHP php_quot_print_encode() Buffer Overflow Vulnerability

A vulnerability has been identified in PHP, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error within the "php_quot_print_encode()" function (ext/standard/quot_print.c) when parsing passed strings, which...

Last Update Date: 10 Jun 2013 10:25 Release Date: 10 Jun 2013 3507 Views

RISK: High Risk

Parallels Plesk Panel Arbitrary PHP Code Execution Vulnerability

A vulnerability has been identified in Parallels Plesk Panel, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an unspecified error and can be exploited to execute arbitrary PHP code. Successful exploitation requires a ScriptAlias for the php...

Last Update Date: 10 Jun 2013 Release Date: 7 Jun 2013 3592 Views

RISK: Medium Risk

Symantec Web Gateway `l´ Cross-Site Scripting Vulnerability

A vulnerability has been identified in Symantec Web Gateway, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the "l" parameter to spywall/timer.php is not properly sanitised before being returned to the user. ...

Last Update Date: 7 Jun 2013 Release Date: 8 May 2012 4614 Views

RISK: High Risk

PHP com_print_typeinfo Remote Code Execution Vulnerability

A vulnerability has been identified in PHP, which can be exploited by malicious people to compromise a vulnerable system. It is due to the vulnerability in the com_print_typeinfo function. The php engine needs to execute the malicious code, which can include any shellcode like the the...

Last Update Date: 7 Jun 2013 Release Date: 22 May 2012 5641 Views

RISK: Medium Risk

Foxit Reader Facebook Plugin Insecure Library Loading Vulnerability

A vulnerability has been identified in Foxit Reader, which can be exploited by malicious people to compromise a user's system. The bundled Facebook plug-in (facebook_plugin.fpi) loads libraries (e.g. dwmapi.dll) in an insecure manner...

Last Update Date: 7 Jun 2013 Release Date: 24 Aug 2012 4565 Views

RISK: Medium Risk

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability has been identified in Cisco WebEx Meetings Server, which can be exploited by malicious people to potentially disclose sensitive information. The vulnerability is caused due to an error when authenticating some user requests, which can be exploited to disclose event passwords and host keys.

Last Update Date: 7 Jun 2013 10:17 Release Date: 7 Jun 2013 3546 Views

RISK: Medium Risk

IBM InfoSphere Information Server Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM InfoSphere Information Server, which can be exploited by malicious, local users to disclose potentially sensitive information and by malicious people to disclose certain sensitive information, manipulate certain data, and cause a DoS (Denial of Service). The application...

Last Update Date: 7 Jun 2013 10:17 Release Date: 7 Jun 2013 3546 Views