Security Bulletin

RISK: High Risk

Microsoft Windows Media Format Runtime Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way Windows Media Format Runtime handles certain media files. This vulnerability could allow an attacker to execute arbitrary code if the attacker convinces a user to open a specially crafted media file. An attacker could then install programs; view...

Last Update Date: 10 Jul 2013 15:13 Release Date: 10 Jul 2013 4221 Views

RISK: Medium Risk

Microsoft Windows 7 Defender Improper Pathname Vulnerability

This is an elevation of privilege vulnerability. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSystem account and take complete control of the system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 10 Jul 2013 15:13 Release Date: 10 Jul 2013 4030 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multipule vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious, local users to disclose potentially sensitive data and by malicious people to bypass certain security restrictions, conduct spoofing attacks, disclose certain sensitive data, and...

Last Update Date: 10 Jul 2013 14:26 Release Date: 10 Jul 2013 4241 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which can be exploited by malicious people to compromise a user's system. An unspecified error can be exploited to cause a heap-based buffer overflow. An unspecified error can be exploited to cause memory corruption...

Last Update Date: 10 Jul 2013 14:25 Release Date: 10 Jul 2013 4164 Views

RISK: Medium Risk

Adobe Shockwave Player Unspecified Memory Corruption Vulnerability

A vulnerability has been reported in Adobe Shockwave Player, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an unspecified error and can be exploited to corrupt memory. Successful exploitation may allow execution of arbitrary code.

Last Update Date: 10 Jul 2013 14:25 Release Date: 10 Jul 2013 4044 Views

RISK: Medium Risk

Adobe ColdFusion Multiple Vulnerabilities

Multiple vulnerability have been identified in Adobe ColdFusion, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an unspecified error and can be exploited to invoke public methods on ColdFusion Components (CFC) using WebSockets...

Last Update Date: 10 Jul 2013 14:25 Release Date: 10 Jul 2013 4078 Views

RISK: Medium Risk

IBM WebSphere Application Server Community Edition Serialized Object Handling Vulnerability

A vulnerability has been identified in IBM WebSphere Application Server Community Edition, which can be exploited by malicious people to compromise a vulnerable system. The application bundles a vulnerable version of Geronimo.

Last Update Date: 10 Jul 2013 12:43 Release Date: 10 Jul 2013 4205 Views

RISK: High Risk

VLC Media Player MKV Parsing Integer Overflow Vulnerability

A vulnerability has been identified in VLC Media Player , which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an integer overflow error within the libmkv_plugin.dll module when parsing MKV files, which can be...

Last Update Date: 10 Jul 2013 12:43 Release Date: 10 Jul 2013 4467 Views

RISK: Medium Risk

FFmpeg Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise an application using the library. An error within the "decode_subframe()" function (libavcodec/wmaprodec.c) can be exploited...

Last Update Date: 9 Jul 2013 11:25 Release Date: 9 Jul 2013 4086 Views

RISK: Medium Risk

cPanel cpanellogd Multiple Vulnerabilities

Two vulnerabilities have been identified in cPanel, which can be exploited by malicious users to gain escalated privileges. Two unspecified errors exist within cpanellogd when creating an archive of the user domain's access logs in the user's home directory and can be exploited to...

Last Update Date: 9 Jul 2013 10:37 Release Date: 9 Jul 2013 4089 Views