Security Bulletin

RISK: Medium Risk

OpenJPEG JPEG2000 Image Processing Buffer Overflow Vulnerability

A vulnerability has been identified in OpenJPEG, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to an error when decoding images and can be exploited to cause a heap-based buffer overflow...

Last Update Date: 20 Sep 2012 Release Date: 30 Aug 2012 4553 Views

RISK: Medium Risk

SumatraPDF Document Processing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in SumatraPDF, which can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to unspecified errors when processing PDF files and can be exploited to corrupt memory. Successful exploitation may allow execution of arbitrary...

Last Update Date: 20 Sep 2012 10:40 Release Date: 20 Sep 2012 4270 Views

RISK: Medium Risk

Google SketchUp SKP File Processing Vulnerability

A vulnerability has been identified in Google SketchUp, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an unspecified error when processing SKP files and can be exploited to corrupt memory. Successful exploitation may allow execution...

Last Update Date: 20 Sep 2012 10:37 Release Date: 20 Sep 2012 4195 Views

RISK: Medium Risk

Windows Phone Certificate Validation Vulnerability

A vulnerability has been identified in Windows Phone 7, a remote user can spoof secure e-mail servers in certain cases. The software does not validate Common Name (CN) values of mail server SSL certificates when sending or retrieving email via POP3, IMAP, ...

Last Update Date: 19 Sep 2012 10:35 Release Date: 19 Sep 2012 4293 Views

RISK: Medium Risk

Novell GroupWise Internet Agent Integer Overflow Vulnerability

A vulnerability has been identified in Novell GroupWise Internet Agent. A remote user can execute arbitrary code on the target system. A remote user can send a specially crafted request with the HTTP 'Content-Length' header value of '-1' to the administration interface...

Last Update Date: 17 Sep 2012 10:06 Release Date: 17 Sep 2012 4161 Views

RISK: Medium Risk

IBM AIX NFSv4 GID Enforcement Vulnerability

A vulnerability has been identified in IBM AIX NFSv4. A remote user can cause denial of service conditions. GID in not properly enforced.

Last Update Date: 17 Sep 2012 10:05 Release Date: 17 Sep 2012 4241 Views

RISK: High Risk

ISC BIND Resource Record Denial of Service Vulnerability

A vulnerability has been identified in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an assertion error when processing resource records having RDATA greater than 65535 bytes. This can be exploited to...

Last Update Date: 14 Sep 2012 11:38 Release Date: 14 Sep 2012 4436 Views

RISK: High Risk

Apple iTunes WebKit Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iTunes, which can be exploited by malicious people to compromise a user's system. Some unspecified errors exist within the WebKit component. No further information is currently available. Some vulnerabilities are caused due to a bundled vulnerable version...

Last Update Date: 14 Sep 2012 11:38 Release Date: 14 Sep 2012 4881 Views

RISK: Medium Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by attacker to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

Last Update Date: 14 Sep 2012 Release Date: 10 Sep 2012 4416 Views

RISK: Medium Risk

Cisco Unified Presence and Jabber Extensible Communications Platform Stream Header Processing Vulnerability

A vulnerability has been identified in Cisco Unified Presence and Jabber Extensible Communications Platform. A remote user can cause denial of service conditions. A remote user can send a specially crafted Extensible Messaging and Presence Protocol (XMPP) stream header to cause the target...

Last Update Date: 13 Sep 2012 10:16 Release Date: 13 Sep 2012 4257 Views