Security Bulletin

RISK: Medium Risk

SonicWALL SSL-VPN Buffer Overflow Vulnerability

A vulnerability has been identified in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control, which could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is caused due to a boundary error in the "Aventail.EPInstaller" ActiveX control...

Last Update Date: 28 Jan 2011 Release Date: 1 Nov 2010 5173 Views

RISK: Medium Risk

Adobe Flash Player Content Processing Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by an unspecified error when processing malformed Flash content, which could be exploited by attackers to compromise a vulnerable system by tricking a...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 4960 Views

RISK: Medium Risk

Cisco Products Multiple Remote Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in various Cisco products, which could be exploited by remote attackers to take complete control of a vulnerable system. These issues are caused by buffer overflow errors in the Cisco developed authentication code in the web server module of CiscoWorks Common Services when...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 5024 Views

RISK: Medium Risk

Adobe Acrobat and Reader "authplay.dll" Code Execution Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the "authplay.dll" module when processing malformed Flash content within a PDF document, ...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 5141 Views

RISK: Medium Risk

Mozilla Firefox DOM Insertion Remote Code Execution Vulnerability

A vulnerability has been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by malicious web sites to execute arbitrary code. This issue is caused by a memory corruption error when handling "document.write()" methods and DOM insertion, which could allow...

Last Update Date: 28 Jan 2011 Release Date: 28 Oct 2010 5017 Views

RISK: Medium Risk

Adobe Shockwave Player rcsL Chunk Memory Corruption Vulnerability

A vulnerability has been identified in Adobe Shockwave Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the Director (dirapi.dll) module when processing and calculating offsets while parsing "rcsL" ...

Last Update Date: 28 Jan 2011 Release Date: 22 Oct 2010 4982 Views

RISK: Medium Risk

Apple Mac OS X Multiple Java Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote attackers or malicious users to execute arbitrary code.1. Amemory corruption error in Java's handling of applet window bounds, which could allow remote attackers to compromise a vulnerable...

Last Update Date: 28 Jan 2011 Release Date: 22 Oct 2010 5118 Views

RISK: Medium Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by attackers to manipulate or disclose certain data, bypass security restrictions or compromise a vulnerable system.1. Due to memory corruption errors in the browser engine when parsing malformed data...

Last Update Date: 28 Jan 2011 Release Date: 21 Oct 2010 4947 Views

RISK: Medium Risk

Google Chrome Memory Corruption and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to bypass security restrictions, manipulate certain information or compromise a vulnerable system.1. Due to an unknown error related to autofill / autocomplete profile spamming.2. Due to a memory...

Last Update Date: 28 Jan 2011 Release Date: 21 Oct 2010 5066 Views

RISK: Medium Risk

RealNetworks RealPlayer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealNetworks RealPlayer, which could be exploited by remote attackers to compromise a vulnerable system.1. an invalid index when processing RealMedia .IVR file with malformed sample data, which could allow attackers to execute arbitrary code by tricking a user...

Last Update Date: 28 Jan 2011 Release Date: 19 Oct 2010 5017 Views