Security Bulletin

RISK: High Risk

VMware Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple products, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, bypass certain security restrictions, conduct spoofing attacks, conduct DNS cache poisoning attacks, cause a DoS (Denial of Service...

Last Update Date: 31 Oct 2011 12:47 Release Date: 31 Oct 2011 5867 Views

RISK: Medium Risk

Cisco Security Agent Outside In Technology File Processing Vulnerabilities

Two vulnerabilities identified in Cisco Security Agent, which can be exploited by malicious people to compromise a vulnerable system.An unspecified error exists in the vswk6.dll and sccut.dll modules when handling Lotus 123 files.A second unspecified error exists in the vswk6....

Last Update Date: 28 Oct 2011 15:00 Release Date: 28 Oct 2011 5876 Views

RISK: High Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Quicktime, which can be exploited by malicious people to compromise a user's system.An integer overflow error when handling PICT files can be exploited via a specially crafted .pict file.A signedness error when handling font tables...

Last Update Date: 28 Oct 2011 15:00 Release Date: 28 Oct 2011 5958 Views

RISK: Medium Risk

Novell iPrint Client "GetDriverSettings()" Buffer Overflow Vulnerability

A vulnerability has been identifited in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to a boundary error within the "GetDriverSettings()" function in nipplib.dll. This can be exploited to...

Last Update Date: 28 Oct 2011 14:59 Release Date: 28 Oct 2011 5960 Views

RISK: Medium Risk

OpenLDAP "UTF8StringNormalize()" Off-by-One Denial of Service Vulnerability

A vulnerability has been identified in OpenLDAP, which can be exploited by malicious users to cause a Denial of Service.The vulnerability is caused due to an off-by-one error in the "UTF8StringNormalize()" function when NULL terminating a string. This can be...

Last Update Date: 28 Oct 2011 14:59 Release Date: 28 Oct 2011 5843 Views

RISK: Medium Risk

Winamp Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Winamp, which can be exploited by malicious people to compromise a user's system.An error in the in_midi.dll plugin when handling the "iOffsetMusic" value within the Creative Music Format (CMF) header can be exploited...

Last Update Date: 28 Oct 2011 14:58 Release Date: 28 Oct 2011 6029 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions, conduct spoofing attacks, conduct cross-site scripting attacks, and potentially compromise a user's system. An error within the history handling can be...

Last Update Date: 27 Oct 2011 16:48 Release Date: 27 Oct 2011 5763 Views

RISK: Medium Risk

FreeType Multiple Vulnerabilities

Mulitple vulnerabilities have been identified in FreeType, which can be exploited by malicious people to compromise an application using the library. The vulnerabilities are caused due to unspecified errors.

Last Update Date: 25 Oct 2011 11:28 Release Date: 25 Oct 2011 5897 Views

RISK: Medium Risk

Splunk Cross-Site Scripting and Denial of Service Vulnerabilities

Two vulnerabilities have been identified in Splunk, which can be exploited by malicious people to conduct cross-site scripting attacks and cause Denial of Service.Input passed via the "segment" parameter to prototype/segmentation_performance in the Splunk Web component is not properly sanitised before...

Last Update Date: 21 Oct 2011 11:37 Release Date: 21 Oct 2011 6055 Views

RISK: High Risk

Novell ZENworks Configuration Management AdminStudio ActiveX Controls Vulnerabilities

Multiple vulnerabilities have been reported in Novell ZENworks Configuration Management, which can be exploited by malicious people to compromise a user's system. An unspecified error in the "DoFindReplace()" method within the SIGrid.Grid.1 ActiveX control can be exploited...

Last Update Date: 20 Oct 2011 11:30 Release Date: 20 Oct 2011 6033 Views