Security Bulletin

RISK: High Risk

Citrix Secure Gateway Unspecified Remote Code Execution Vulnerability

A vulnerability has been identified in Citrix Secure Gateway, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified error which could result in arbitrary code being executed on the server in the context of the Secure Gateway process...

Last Update Date: 1 Mar 2011 16:47 Release Date: 1 Mar 2011 6607 Views

RISK: High Risk

Foxit Reader and Phantom ICC Parsing Integer Overflow Vulnerability

A vulnerability has been identified in Foxit Reader and Phantom, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an integer overflow error when parsing certain ICC chunks, which could be exploited by attackers to crash an affected application...

Last Update Date: 28 Feb 2011 11:11 Release Date: 28 Feb 2011 6498 Views

RISK: Medium Risk

Cisco TelePresence Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco TelePresence products, which could be exploited by attackers to bypass restrictions, gain knowledge of sensitive information or unauthorized access, upload arbitrary files, cause a denial of service or execute arbitrary code. These issues are caused by errors related...

Last Update Date: 25 Feb 2011 18:12 Release Date: 25 Feb 2011 6325 Views

RISK: High Risk

CA Products HIPSEngine XMLSecDB ActiveX File Creation Vulnerability

A vulnerability has been identified in CA Host-Based Intrusion Prevention System (HIPS) and CA Internet Security Suite (ISS), which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a design error in the XMLSecDB ActiveX control...

Last Update Date: 25 Feb 2011 16:40 Release Date: 25 Feb 2011 6367 Views

RISK: High Risk

Novell NetWare XNFS "xdrDecodeString()" Code Execution Vulnerability

A vulnerability has been identified in Novell NetWare, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by an input validation error in the "xdrDecodeString()" function within the "XNFS.NLM" component when handling...

Last Update Date: 25 Feb 2011 16:38 Release Date: 25 Feb 2011 6370 Views

RISK: Medium Risk

Novell ZENworks Configuration Management TFTP Remote Heap Overflow Vulnerability

A vulnerability has been identified in Novell ZENworks Configuration Management (ZCM), which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a heap overflow error in the "novell-tftp.exe" component when processing requests sent to...

Last Update Date: 25 Feb 2011 Release Date: 18 Feb 2011 6700 Views

RISK: Medium Risk

Cisco Security Agent "st_upload" Remote File Creation Vulnerability

A vulnerability has been identified in Cisco Security Agent, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by an input validation error in the "webagent.exe" component when processing "st_upload" POST requests...

Last Update Date: 25 Feb 2011 Release Date: 18 Feb 2011 6449 Views

RISK: High Risk

Oracle Sun Java JDK, JRE and SDK Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Oracle Sun Java JDK, JRE and SDK, which could be exploited by remote attackers or malicious users to manipulate or gain knowledge of sensitive information, bypass restrictions, cause a denial of service or compromise a vulnerable system. These issues...

Last Update Date: 25 Feb 2011 Release Date: 18 Feb 2011 7158 Views

RISK: High Risk

Asterisk UPDTL Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Asterisk, which could be exploited by remote attackers to cause a denial of service or execute arbitrary code. These issues are caused by stack and heap overflow errors in the UDPTL decoding routines, which could be exploited by remote attackers...

Last Update Date: 23 Feb 2011 15:24 Release Date: 23 Feb 2011 6394 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which could be exploited by remote attackers to compromise a vulnerable system. These issues are caused by input validation errors, memory corruptions, and integer overflow errors when processing malformed Flash content, which could...

Last Update Date: 16 Feb 2011 Release Date: 10 Feb 2011 6154 Views