Security Bulletin

RISK: Medium Risk

VMware Workstation / Player / Fusion UDF Filesystem Handling Buffer Overflow Vulnerability

A vulnerability has been identified in some VMware products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when handling UDF filesystem images. This can be exploited to cause a buffer overflow via...

Last Update Date: 6 Oct 2011 14:21 Release Date: 6 Oct 2011 5679 Views

RISK: Medium Risk

SSL/TLS Protocol Vulnerability

A vulnerability has idenitied in SSL/TLS using Cypher Block Chaining (CBC), which can be exploited by malicious people to conduct Man-in-the-middle attack to decrypt encrypted SSL/TLS traffic and obtain sensitive information. A proof of concept...

Last Update Date: 3 Oct 2011 Release Date: 30 Sep 2011 6314 Views

RISK: High Risk

Apache HTTPD Range header vulnerability

A vulnerability has been identified in Apache HTTPD, which can be exploited by remote attacker to cause Denial of Service. The vulnerability can be detected by visiting the following website:http://apache-range-exploit.com/

Last Update Date: 3 Oct 2011 Release Date: 29 Aug 2011 6951 Views

RISK: Medium Risk

Adobe Photoshop Elements 8 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Photoshop Elements 8, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 6022 Views

RISK: Medium Risk

Symantec IM Manager Administrator Console Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Symantec IM Manager, which can be exploited by malicious people to conduct Code Injection, Cross-Site Scripting and SQL Injection.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 5415 Views

RISK: Medium Risk

Cisco IOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco IOS, which can be exploited by malicious people to conduct denial of service attack and compromise a user's system.

Last Update Date: 30 Sep 2011 18:32 Release Date: 30 Sep 2011 5643 Views

RISK: High Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Thunderbird, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 30 Sep 2011 18:15 Release Date: 30 Sep 2011 5411 Views

RISK: High Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple weaknesses and vulnerabilities have been identified in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.Some unspecified errors can be exploited to corrupt memory.An error in the implementation of the "window...

Last Update Date: 30 Sep 2011 18:12 Release Date: 30 Sep 2011 5386 Views

RISK: High Risk

Novell GroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which can be exploited by malicious people to conduct cross-site scripting attacks, denial of service attack and compromise a user's system. The GroupWise Internet Agent (GWIA) is vulnerable to a DoS exploit whereby...

Last Update Date: 27 Sep 2011 12:26 Release Date: 27 Sep 2011 5349 Views

RISK: Medium Risk

Apache Tomcat HTTP DIGEST authentication Multiple Vulnerability

在 Apache Tomcat 發現多個漏洞，惡意使用者可利用漏洞繞過保安限制。HTTP DIGEST 核證被發有以下弱點：允許 replay 攻擊沒有檢查伺服...

Last Update Date: 27 Sep 2011 12:17 Release Date: 27 Sep 2011 5644 Views