Security Bulletin

RISK: Medium Risk

RealNetworks RealPlayer "OpenURLInDefaultBrowser()" Vulnerability

A vulnerability has been identified in RealNetworks RealPlayer, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error within the "OpenURLInDefaultBrowser()" method when processing user-supplied parameters, which could allow an attacker to execute arbitrary...

Last Update Date: 19 Apr 2011 Release Date: 15 Apr 2011 5951 Views

RISK: Extremely High Risk

Google Chrome Flash Content Processing Code Execution Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by an error in Flash. This vulnerability is exploited in the wild. For additional information, please refer to Adobe Flash Player Content...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5522 Views

RISK: Extremely High Risk

Adobe Acrobat and Reader "authplay.dll" Code Execution Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the "authplay.dll" module when processing malformed Flash content within a PDF document, ...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5777 Views

RISK: Extremely High Risk

Adobe Flash Player Content Processing Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error when processing malformed Flash content, which could be exploited by attackers to compromise a vulnerable system by tricking...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5562 Views

RISK: High Risk

Microsoft Reader LIT File Processing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Microsoft Reader, which could be exploited by attackers to execute arbitrary code. These issues are caused by buffer and integer overflows, memory corruptions and array indexing errors when processing malformed LIT files, which could be exploited by attackers to compromise...

Last Update Date: 15 Apr 2011 14:45 Release Date: 15 Apr 2011 5995 Views

RISK: High Risk

Microsoft Windows SMB Transaction Parsing Vulnerability

An unauthenticated remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB packets. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending a specially crafted SMB...

Last Update Date: 13 Apr 2011 18:48 Release Date: 13 Apr 2011 5802 Views

RISK: High Risk

Microsoft Windows SMB Client Multiple Vulnerabilities

Browser Pool Corruption Vulnerability An unauthenticated remote code execution vulnerability exists in the way that the Common Internet File System (CIFS) Browser Protocol implementation parses malformed browser messages. An attempt to exploit the vulnerability would not require authentication. An attacker who successfully exploited this vulnerability...

Last Update Date: 13 Apr 2011 18:46 Release Date: 13 Apr 2011 5348 Views

RISK: Medium Risk

Microsoft Windows MHTML Mime-Formatted Request Vulnerability

An information disclosure vulnerability exists in the way MHTML interprets MIME-formatted requests for content blocks within a document. It is possible under certain conditions for this vulnerability to allow an attacker to run a client-side script in the wrong security context. Similar...

Last Update Date: 13 Apr 2011 18:30 Release Date: 13 Apr 2011 5776 Views

RISK: Medium Risk

Microsoft Windows WordPad Converter Parsing Vulnerability

A remote code execution vulnerability exists in the way that Microsoft WordPad parses specially crafted Word documents. The vulnerability could allow remote code execution if a user opens a specially crafted Word file that includes a malformed structure. An attacker could then install programs...

Last Update Date: 13 Apr 2011 18:18 Release Date: 13 Apr 2011 5637 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities

Win32k Use After Free Vulnerability An elevation of privilege vulnerability exists due to the way that Windows Kernel-mode drivers manage kernel-mode driver objects. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs...

Last Update Date: 13 Apr 2011 18:14 Release Date: 13 Apr 2011 5693 Views