Security Bulletin

RISK: High Risk

Microsoft Windows Data Access Components Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Data Access Components accesses an object in memory that has been improperly initialized. An attacker who successfully exploited this vulnerability could run arbitrary code on the target system. An attacker could then install programs; view, ...

Last Update Date: 11 Jul 2012 17:08 Release Date: 11 Jul 2012 4207 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

Cached Object Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has been deleted. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

Last Update Date: 11 Jul 2012 17:07 Release Date: 11 Jul 2012 4287 Views

RISK: High Risk

VLC Player Buffer Overflow Vulnerability

A vulnerability has been identified in VLC Player. which can be exploited by remote user to compromise a vulnerable system. A remote user can create a specially crafted file that, when loaded by the target user, will trigger a heap overflow and execute arbitrary code on...

Last Update Date: 10 Jul 2012 Release Date: 9 Jul 2012 4538 Views

RISK: High Risk

Microsoft IIS Web Server Discloses Sensitive Information Vulnerability

A vulnerability has been identified in Microsoft IIS Web Server. which can be exploited by remote user to potentially sensitive information. A remote user can supply a specially crafted request containing the tilde ('~') character to determine whether a matching file exists within the web directory on the...

Last Update Date: 10 Jul 2012 Release Date: 9 Jul 2012 4768 Views

RISK: Medium Risk

Asterisk Product Denial of Service Vulnerabilities

Multiple vulnerabilities has been identified in Asterisk, which can be exploited by remote authenticated user to denial of service attack.A remote authenticated user can respond to a re-invite with a provisional response and not send a final response to cause the remote system to fail...

Last Update Date: 10 Jul 2012 Release Date: 9 Jul 2012 4390 Views

RISK: Medium Risk

Pidgin MXit Message Parsing Buffer Overflow Vulnerability

A vulnerability has been identified in Pidgin, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the "mxit_show_message()" function (libpurple/protocols/mxit/markup.c) when...

Last Update Date: 10 Jul 2012 Release Date: 9 Jul 2012 4325 Views

RISK: Medium Risk

IBM WebSphere Application Server Feature Pack Security Bypass Vulnerability

A vulnerability has been identified in IBM WebSphere Application Server Feature Pack for Web Services, which can be exploited by malicious users to bypass certain security restrictions. An error related to LPTA tokens in a WS-Security policy enabled Java API for XML Web Services (JAX...

Last Update Date: 6 Jul 2012 10:34 Release Date: 6 Jul 2012 4682 Views

RISK: Medium Risk

RSA Access Manager Session Replay Vulnerability

A vulnerability has been identified in RSA Access Manager. A remote user can exploit a flaw in the logout process and replay session credentials to gain access to the target system.

Last Update Date: 5 Jul 2012 10:14 Release Date: 5 Jul 2012 4417 Views

RISK: Medium Risk

HP Network Node Manager i Input Validation Vulnerability

A vulnerability has been identified in HP Network Node Manager i. A remote user can conduct cross-site scripting attacks.The software does not properly filter HTML code from user-supplied input before displaying the input. A remote user can cause arbitrary scripting code to...

Last Update Date: 3 Jul 2012 18:32 Release Date: 3 Jul 2012 4459 Views

RISK: Medium Risk

Wireshark Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Wireshark which can be exploited by malicious people to cause a DoS (Denial of Service). Infinite and large loops in the ANSI MAP, ASF, BACapp, Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP...

Last Update Date: 3 Jul 2012 15:57 Release Date: 3 Jul 2012 4633 Views