Security Bulletin

RISK: High Risk

IBM Lotus Domino Cookie File Authentication Bypass and Code Execution Vulnerability

A vulnerability has been identified in IBM Lotus Domino, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a design error in the remote console functionality that relies on a user-supplied COOKIEFILE path to retrieve...

Last Update Date: 25 Mar 2011 11:57 Release Date: 25 Mar 2011 6262 Views

RISK: High Risk

VLC Media Player AMV and NSV Data Processing Vulnerability

Two vulnerabilities have been identified in VLC, which could be exploited by remote attackers to compromise a vulnerable system. Due to a memory corruption error in the "libdirectx" plugin when processing malformed NSV or AMV data, which could be exploited by remote attackers to execute...

Last Update Date: 25 Mar 2011 11:43 Release Date: 25 Mar 2011 5900 Views

RISK: High Risk

Apple iPhone iOS "OfficeArtMetafileHeader" Parsing Vulnerability

A vulnerability has been reported in Apple iPhone iOS, which can be exploited by malicious people to compromise a vulnerable device. A boundary error exists in QuickLook when parsing an OfficeArtMetafileHeader record in certain Microsoft Office files. This can be exploited to cause a...

Last Update Date: 25 Mar 2011 10:04 Release Date: 25 Mar 2011 5870 Views

RISK: Extremely High Risk

Adobe Flash Player Vulnerability

A vulnerability has been identified in Adobe flash player, which could be exploited by attackers to compromise a vulnerable system. This vulnerability is being exploited in the wild in targeted attacks via a Flash (.swf) file embedded in a Microsoft Excel (.xls) file delivered...

Last Update Date: 23 Mar 2011 Release Date: 15 Mar 2011 5904 Views

RISK: High Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by errors in AirPort, Apache...

Last Update Date: 23 Mar 2011 09:46 Release Date: 23 Mar 2011 6074 Views

RISK: High Risk

RealPlayer RealVideo Renderer Plugin Remote Heap Overflow Vulnerability

A vulnerability has been identified in RealPlayer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a heap overflow error in the RealVideo Renderer plugin for RealMedia (rvrender.dll) when processing a malformed IVR...

Last Update Date: 23 Mar 2011 09:45 Release Date: 23 Mar 2011 5776 Views

RISK: High Risk

MIT Kerberos krb5 Key Distribution Center PKINIT Double-free Vulnerability

A vulnerability has been identified in MIT Kerberos, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a double-free error in the "perpare_error_as()" [do_as_req.c] function within the...

Last Update Date: 17 Mar 2011 09:39 Release Date: 17 Mar 2011 5951 Views

RISK: High Risk

BlackBerry Smartphones Browser WebKit Style Handling Vulnerability

A vulnerability has been identified in various BlackBerry smartphones, which could be exploited by attackers to compromise a vulnerable smartphone. This issue is caused by a memory corruption error in WebKit when handling certain style data, which could be exploited by remote attackers to execute arbitrary code...

Last Update Date: 16 Mar 2011 09:36 Release Date: 16 Mar 2011 6033 Views

RISK: High Risk

Google Chrome Style Handling Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in WebKit when handling certain style data, which could be exploited by remote attackers to execute arbitrary code by...

Last Update Date: 15 Mar 2011 14:22 Release Date: 15 Mar 2011 5787 Views

RISK: High Risk

Apple iOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS, which could be exploited by remote attackers to obtain sensitive information, bypass security restrictions or compromise a vulnerable system. These issues are caused by errors in CoreGraphics, ImageIO, libxml, Networking, Safari, WebKit, and...

Last Update Date: 11 Mar 2011 10:50 Release Date: 11 Mar 2011 5907 Views