Security Bulletin

RISK: Medium Risk

libpng `png_decompress_chunk()´ Integer Overflow Vulnerability

A vulnerability has been identified in libpng, which can be exploited by malicious people to potentially compromise an application using the library.The vulnerability is caused due to an integer overflow error within the "png_decompress_chunk()" function (pngrutil.c) when uncompressing certain chunks, ...

Last Update Date: 22 May 2012 Release Date: 17 Feb 2012 5795 Views

RISK: High Risk

OpenSSL `asn1_d2i_read_bio()´ DER Format Data Processing Vulnerability

A vulnerability has been identified in OpenSSL, which can be exploited by malicious people to potentially compromise an application using the library.The vulnerability is caused due to a type casting error in the "asn1_d2i_read_bio()" function when processing DER format data and can be exploited to...

Last Update Date: 22 May 2012 Release Date: 20 Apr 2012 5723 Views

RISK: Medium Risk

Samba LSA RPC `take ownership´ Privilege Security Bypass Vulnerability

A vulnerability has been identified in Samba, which can be exploited by malicious users to bypass certain security restrictions. The security issue is caused due to improper application of security checks in the CreateAccount, OpenAccount, AddAccountRights, and RemoveAccountRights remote procedure calls (RPC...

Last Update Date: 22 May 2012 Release Date: 2 May 2012 5607 Views

RISK: Medium Risk

Apache HTTP Server `httpOnly´ Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache HTTP Server, which can be exploited by malicious people to disclose potentially sensitive information and cause a DoS (Denial of Service).An error when handling the "%{cookiename}C" log format string when using a threaded MPM can...

Last Update Date: 22 May 2012 Release Date: 30 Jan 2012 5750 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, where some have unknown impacts and others can be exploited by malicious people to bypass certain security restrictions, and compromise a user's system. An error exists when loading links from internal pages, and related...

Last Update Date: 17 May 2012 18:00 Release Date: 17 May 2012 5334 Views

RISK: Medium Risk

OpenOffice.org Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenOffice.org. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted file that, when loaded by the target user, will trigger an integer...

Last Update Date: 17 May 2012 15:44 Release Date: 17 May 2012 5289 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted file that, when loaded by the target user, will execute arbitrary code on...

Last Update Date: 17 May 2012 15:43 Release Date: 17 May 2012 5126 Views

RISK: Medium Risk

RealPlayer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealPlayer, which can be exploited by malicious people to compromise a user's system. An error within the handling of MP4 files can be exploited to corrupt memory, the parsing of RealMedia ASMRuleBook can be exploited to execute arbitrary code...

Last Update Date: 17 May 2012 15:42 Release Date: 17 May 2012 5219 Views

RISK: Medium Risk

Adobe Photoshop CS5 Collada File Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Adobe Photoshop CS5, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the U3D.8BI plug-in when processing certain Collada file elements. This...

Last Update Date: 16 May 2012 11:52 Release Date: 16 May 2012 5323 Views

RISK: High Risk

Opera URL Parsing Code Execution Vulnerability

A vulnerability has been identified in Opera, which can be exploited by remote attacker to compromise a user's system. An out-of-bounds write error when parsing the URL can be exploited to corrupt memory via a specially crafted URL.

Last Update Date: 14 May 2012 11:06 Release Date: 14 May 2012 5538 Views