Security Bulletin

RISK: High Risk

Microsoft Windows ActiveX Control Multiple Vulnerabilities

Microsoft Internet Explorer 8 Developer Tools Vulnerability A remote code execution vulnerability exists in the ActiveX control, Microsoft Internet Explorer 8 Developer Tools. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could...

Last Update Date: 13 Apr 2011 16:18 Release Date: 13 Apr 2011 5507 Views

RISK: High Risk

Microsoft Internet Explorer Multiple Vulnerabilities

Layouts Handling Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views...

Last Update Date: 13 Apr 2011 16:15 Release Date: 13 Apr 2011 5412 Views

RISK: High Risk

McAfee Firewall Reporter Remote Authentication Bypass Vulnerability

A vulnerability has been identified in McAfee Firewall Reporter, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a design error within the "GernalUtilities.pm" script that checks for the existence of a particular file without verifying...

Last Update Date: 13 Apr 2011 15:51 Release Date: 13 Apr 2011 5485 Views

RISK: Medium Risk

Novell ZENworks Configuration Management File Overwrite Vulnerability

A vulnerability has been identified in Novell ZENworks Configuration Management, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error related to specific transversal file modifications, which could allow attackers to execute arbitrary code via an inventory service...

Last Update Date: 12 Apr 2011 12:11 Release Date: 12 Apr 2011 5593 Views

RISK: High Risk

VLC Media Player Libmodplug "CSoundFile::ReadS3M()" Stack Overflow Vulnerability

A vulnerability has been identified in VLC Media Player, which could be exploited by attackers to take complete control of a vulnerable system. This issue is caused by a stack overflow error in the "CSoundFile::ReadS3M()" [load_s3m.cpp] function of Libmodplug when handling...

Last Update Date: 8 Apr 2011 10:33 Release Date: 8 Apr 2011 5839 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by remote attackers to compromise a vulnerable system. 1. A buffer error related to base string handling, which could allow arbitrary code execution. 2. A use-after-free in...

Last Update Date: 28 Mar 2011 11:51 Release Date: 28 Mar 2011 5894 Views

RISK: High Risk

Google Picasa Insecure Library Loading Vulnerability

A vulnerability has been identified in Google Picasa, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error when loading executable and library files while using the "Locate on Disk" feature, which could allow attackers...

Last Update Date: 28 Mar 2011 11:50 Release Date: 28 Mar 2011 5820 Views

RISK: Medium Risk

Comodo Fraudulent Digital Certificates Spoofing Vulnerabiliity

It is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Other products (including all web browsers) using digital certificates may also be affected. Comodo advised that...

Last Update Date: 25 Mar 2011 Release Date: 24 Mar 2011 6221 Views

RISK: High Risk

Citrix Presentation Server and XenApp ActiveSync Remote Code Execution Vulnerability

A vulnerability has been identified in Citrix Presentation Server and Citrix XenApp, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in the ActiveSync feature when processing malformed packets while synchronizing PDA devices, which could be exploited...

Last Update Date: 25 Mar 2011 12:18 Release Date: 25 Mar 2011 6251 Views

RISK: High Risk

HP OpenView Storage Data Protector Media Operations Memory Corruption Vulnerability

A vulnerability has been identified in HP OpenView Storage Data Protector Media Operations, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a memory corruption error in the "DBServer.exe" component when processing user...

Last Update Date: 25 Mar 2011 11:58 Release Date: 25 Mar 2011 6058 Views