Security Bulletin

RISK: Medium Risk

Novell iPrint Client "GetDriverSettings()" Buffer Overflow Vulnerability

A vulnerability has been identifited in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to a boundary error within the "GetDriverSettings()" function in nipplib.dll. This can be exploited to...

Last Update Date: 28 Oct 2011 14:59 Release Date: 28 Oct 2011 5216 Views

RISK: Medium Risk

OpenLDAP "UTF8StringNormalize()" Off-by-One Denial of Service Vulnerability

A vulnerability has been identified in OpenLDAP, which can be exploited by malicious users to cause a Denial of Service.The vulnerability is caused due to an off-by-one error in the "UTF8StringNormalize()" function when NULL terminating a string. This can be...

Last Update Date: 28 Oct 2011 14:59 Release Date: 28 Oct 2011 5112 Views

RISK: Medium Risk

Winamp Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Winamp, which can be exploited by malicious people to compromise a user's system.An error in the in_midi.dll plugin when handling the "iOffsetMusic" value within the Creative Music Format (CMF) header can be exploited...

Last Update Date: 28 Oct 2011 14:58 Release Date: 28 Oct 2011 5297 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions, conduct spoofing attacks, conduct cross-site scripting attacks, and potentially compromise a user's system. An error within the history handling can be...

Last Update Date: 27 Oct 2011 16:48 Release Date: 27 Oct 2011 5019 Views

RISK: Medium Risk

FreeType Multiple Vulnerabilities

Mulitple vulnerabilities have been identified in FreeType, which can be exploited by malicious people to compromise an application using the library. The vulnerabilities are caused due to unspecified errors.

Last Update Date: 25 Oct 2011 11:28 Release Date: 25 Oct 2011 5142 Views

RISK: Medium Risk

Splunk Cross-Site Scripting and Denial of Service Vulnerabilities

Two vulnerabilities have been identified in Splunk, which can be exploited by malicious people to conduct cross-site scripting attacks and cause Denial of Service.Input passed via the "segment" parameter to prototype/segmentation_performance in the Splunk Web component is not properly sanitised before...

Last Update Date: 21 Oct 2011 11:37 Release Date: 21 Oct 2011 5315 Views

RISK: High Risk

Novell ZENworks Configuration Management AdminStudio ActiveX Controls Vulnerabilities

Multiple vulnerabilities have been reported in Novell ZENworks Configuration Management, which can be exploited by malicious people to compromise a user's system. An unspecified error in the "DoFindReplace()" method within the SIGrid.Grid.1 ActiveX control can be exploited...

Last Update Date: 20 Oct 2011 11:30 Release Date: 20 Oct 2011 5302 Views

RISK: High Risk

Oracle Solaris Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Oracle Solaris, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, and by malicious people to cause a DoS and potentially compromise a vulnerable system. These issues are caused by the errors...

Last Update Date: 20 Oct 2011 11:26 Release Date: 20 Oct 2011 5179 Views

RISK: High Risk

Oracle Java SE Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Oracle Java SE, which can be exploited by attackers to compromise a vulnerable system.

Last Update Date: 19 Oct 2011 09:58 Release Date: 19 Oct 2011 5570 Views

RISK: High Risk

Oracle Products Multiple Vulnerabilies

Multiple vulnerabilities have been identified in various Oracle products and components, which could be exploited by attackers to compromise a vulnerable system.

Last Update Date: 19 Oct 2011 09:57 Release Date: 19 Oct 2011 5116 Views