Security Bulletin

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which could be exploited by remote attackers to gain knowledge of sensitive information, perfom unauthorized actions, or compromise a vulnerable system. An integer truncation error when handling large form inputs, which could be exploited to execute...

Last Update Date: 1 Feb 2011 Release Date: 28 Jan 2011 6327 Views

RISK: Medium Risk

OpenOffice.org Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenOffice.org, which could be exploited by remote attackers to compromise a vulnerable system. A buffer overflow error when processing malformed TGA files, which could be exploited by attackers to execute arbitrary code by convincing a user...

Last Update Date: 1 Feb 2011 Release Date: 28 Jan 2011 6459 Views

RISK: Medium Risk

Symantec Products Intel Alert Management System Vulnerabilities

Multiple vulnerabilities have been identified in various Symantec products, which could be exploited by remote attackers or malicious users to cause a denial of service or take complete control of a vulnerable system. These issues are caused by buffer overflow and input validation errors...

Last Update Date: 1 Feb 2011 Release Date: 28 Jan 2011 6440 Views

RISK: Medium Risk

Microsoft Windows MHTML Information Disclosure Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to gain knowledge of sensitive information. This issue is caused by an error in the way MHTML (MIME Encapsulation of Aggregate HTML) interprets MIME-formatted requests for content blocks within a...

Last Update Date: 1 Feb 2011 Release Date: 31 Jan 2011 6077 Views

RISK: High Risk

RealPlayer AVI Header Parsing Buffer Overflow Vulnerability

A vulnerability has been identified in RealPlayer, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the "vidplin.dll" module when processing malformed header data, which could be exploited ...

Last Update Date: 31 Jan 2011 16:43 Release Date: 31 Jan 2011 6465 Views

RISK: Medium Risk

Google Chrome and Chrome OS Multiple Memory Corruption Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome and Chrome OS, which could be exploited by remote attackers to cause a denial of service or execute arbitrary code. These issues are caused by input validation errors, invalid and dangling pointers, and memory corruptions related to extensions...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2011 5853 Views

RISK: Medium Risk

BlackBerry Products PDF Distiller Remote Code Execution Vulnerability

A vulnerability has been identified in BlackBerry Enterprise Server and BlackBerry Professional Software, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the PDF distiller of the BlackBerry Attachment Service component when processing malformed PDF files...

Last Update Date: 28 Jan 2011 Release Date: 13 Jan 2011 5872 Views

RISK: Medium Risk

HP OpenView Network Node Manager Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system.1. Due to a format string error in the "nnmrptconfig.exe" CGI executable when parsing an invalid template...

Last Update Date: 28 Jan 2011 Release Date: 13 Jan 2011 6366 Views

RISK: Medium Risk

Nokia Multimedia Player Playlist Handling Buffer Overflow Vulnerability

A vulnerability has been identified in Nokia Multimedia Player, which could be exploited by attackers to execute arbitrary code. This issue is caused by a buffer overflow error when processing playlists (e.g. ".npl") containing overly long data, which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 13 Jan 2011 5766 Views

RISK: Medium Risk

Microsoft Data Access Components Multiple Vulnerabilities

1. DSN Overflow VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Data Access Components validates third-party API usage. This vulnerability could allow code execution if a user visited a specially crafted Web page. If a user is logged on with administrative user...

Last Update Date: 28 Jan 2011 Release Date: 12 Jan 2011 5633 Views