Security Bulletin

RISK: High Risk

Google Chrome Two Vulnerabilities

Two vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system. A use-after-free error in Webkit's SVG (Scalable Vector Graphics) functionality can be exploited...

Last Update Date: 12 Oct 2012 11:39 Release Date: 12 Oct 2012 4579 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities reported in Mozilla Firefox, Seamonkey and Thunderbird. A remote user can cause arbitrary code to be executed on the target user's system, inject scripting code, and spoof portions of the page. A remote user can create specially crafted content that, ...

Last Update Date: 12 Oct 2012 Release Date: 11 Oct 2012 4228 Views

RISK: Medium Risk

OpenVMS Secure Web Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified with HP Secure Web Server (SWS) for OpenVMS. The vulnerabilities could be remotely exploited to create a Denial of Service (DoS), unauthorized access, or unauthorized disclosure of information.

Last Update Date: 11 Oct 2012 14:31 Release Date: 11 Oct 2012 4233 Views

RISK: Medium Risk

Cisco ASA Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco ASA. A remote user can execute arbitrary code on the target system, and cause denial of service conditions. A remote user can send specially crafted DHCP data via IPv4 to the DHCP server on the target device or through the...

Last Update Date: 11 Oct 2012 11:42 Release Date: 11 Oct 2012 4332 Views

RISK: Medium Risk

Cisco Firewall Services Module Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Firewall Services Module. A remote user can execute arbitrary code on the target system, and cause denial of service conditions. A remote user can send specially crafted DCERPC data through the target device to trigger a stack overflow in the...

Last Update Date: 11 Oct 2012 11:40 Release Date: 11 Oct 2012 4359 Views

RISK: Medium Risk

Cisco WebEx Player Buffer Overflow Vulnerability

Multiple vulnerabilities have been identified in Cisco WebEx Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted WRF file that, when loaded by the target user, will trigger a buffer...

Last Update Date: 11 Oct 2012 10:49 Release Date: 11 Oct 2012 4390 Views

RISK: High Risk

Microsoft SQL Server Reflected XSS Vulnerability

A reflected XSS vulnerability exists in SQL Server Report Manager that could allow an attacker to inject a client-side script into the user's instance of Internet Explorer. The script could spoof content, disclose information, or take any action that the user could take...

Last Update Date: 10 Oct 2012 15:45 Release Date: 10 Oct 2012 3983 Views

RISK: High Risk

Microsoft Windows Kerberos NULL Dereference Vulnerability

A denial of service vulnerability exists when the Microsoft Kerberos implementation fails to properly handle a specially crafted session. An attacker who successfully exploited this vulnerability could cause the system to stop responding and restart.

Last Update Date: 10 Oct 2012 15:44 Release Date: 10 Oct 2012 4063 Views

RISK: High Risk

Microsoft Windows Kernel Integer Overflow Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts...

Last Update Date: 10 Oct 2012 15:42 Release Date: 10 Oct 2012 3978 Views

RISK: Medium Risk

Microsoft FAST Search Server 2010 for SharePoint Multiple Vulnerabilities

Remote code execution vulnerabilities exist in FAST Search Server 2010 for SharePoint using the Advanced Filter Pack, an attacker could run arbitrary code in the context of a user account with a restricted token. By default, Advanced Filter Pack in FAST is disabled.

Last Update Date: 10 Oct 2012 15:40 Release Date: 10 Oct 2012 4785 Views