Security Bulletin

RISK: High Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by errors in...

Last Update Date: 24 Jun 2011 11:16 Release Date: 24 Jun 2011 6869 Views

RISK: High Risk

Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.Some unspecified errors can be exploited to corrupt memory.A use-after-free error in the...

Last Update Date: 22 Jun 2011 14:33 Release Date: 22 Jun 2011 6696 Views

RISK: High Risk

Microsoft Word Insufficient Pointer Validation Vulnerability

A vulnerability has been identified in Microsoft Word, which can be exploited by malicious people to compromise a user's system. It is caused due to a certain value in a document being used as a pointer, which can be exploited to corrupt memory via a...

Last Update Date: 20 Jun 2011 17:28 Release Date: 20 Jun 2011 6570 Views

RISK: High Risk

IBM Lotus Notes KeyView File Processing Vulnerabilities

Multiple vulnerabilities have been reported in IBM Lotus Notes, which can be exploited by malicious people to compromise a user's system.An error when processing Windows Write (WRI) files can be exploited to cause a stack-based buffer overflow.Some errors when...

Last Update Date: 17 Jun 2011 10:21 Release Date: 17 Jun 2011 6447 Views

RISK: High Risk

Adobe ColdFusion Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe ColdFusion, which can be exploited by malicious people to conduct cross-site request forgery attacks, cause a DoS (Denial of Service), and compromise a vulnerable system. The administrative interface allows users to perform certain actions via HTTP...

Last Update Date: 16 Jun 2011 15:48 Release Date: 16 Jun 2011 6425 Views

RISK: High Risk

Adobe Shockwave Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system.Unspecified errors in dirapi.dll and IML32.dll, an input validation error in dirapi.dll, an integer underflow error in...

Last Update Date: 16 Jun 2011 15:47 Release Date: 16 Jun 2011 6409 Views

RISK: Extremely High Risk

Google Chrome Flash Player Unspecified Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a bundled vulnerable version of Adobe Flash Player. For more information, please refer to SA11061601. NOTE: ...

Last Update Date: 16 Jun 2011 15:43 Release Date: 16 Jun 2011 6347 Views

RISK: High Risk

Adobe Reader / Acrobat Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Reader / Acrobat, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a user's system. An error in 3difr.x3d...

Last Update Date: 16 Jun 2011 15:42 Release Date: 16 Jun 2011 6643 Views

RISK: Extremely High Risk

Adobe Flash Player Unspecified Memory Corruption Vulnerability

A vulnerability has been identified in Adobe Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an unspecified error and can be exploited to corrupt memory. Successful exploitation allows execution of arbitrary code. ...

Last Update Date: 16 Jun 2011 15:38 Release Date: 16 Jun 2011 6500 Views

RISK: Medium Risk

Microsoft Windows Active Directory Certificate Services Vulnerability

A reflected XSS vulnerability exists in Active Directory Certificate Services Web Enrollment that could allow an attacker to inject a client-side script into the user's instance of Internet Explorer. The script could spoof content, disclose information, or take any action that the user...

Last Update Date: 15 Jun 2011 14:19 Release Date: 15 Jun 2011 6502 Views