Security Bulletin

RISK: Medium Risk

Microsoft Windows Backup Manager Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Windows Backup Manager handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or...

Last Update Date: 28 Jan 2011 Release Date: 12 Jan 2011 5607 Views

RISK: Medium Risk

Microsoft Internet Explorer Circular Memory References Use-after-free Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a use-after-free error within the "mshtml.dll" library when handling circular references...

Last Update Date: 28 Jan 2011 Release Date: 6 Jan 2011 5846 Views

RISK: Medium Risk

Microsoft Windows Graphics Rendering Engine Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of a vulnerable system. This issue is caused by a stack overflow error in the "CreateSizedDIBSECTION()" function within the "shimgvw.dll" module when parsing a...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 5654 Views

RISK: Medium Risk

GIMP Multiple Vulnerabilities

Multiple vulnerabilities have been identified in GIMP, which could be exploited by attackers to execute arbitrary code. These issues are caused by buffer overflow errors in the Lighting Effects, Sphere Designer, GFIG, and PSP (Paint Shop Pro) file plugins when processing malformed files...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 6123 Views

RISK: Medium Risk

ImgBurn Insecure Library Loading Vulnerability

A vulnerability has been discovered in ImgBurn, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to the application loading libraries (e.g. dwmapi.dll) in an insecure manner. This can be...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 5812 Views

RISK: Medium Risk

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerability

A vulnerability has been identified in VLC Media Player, which could be exploited by attackers to execute arbitrary code. This issue is caused by an array indexing error in the "Close()" and "DemuxAudioMethod1()" [modules/demux/real.c] functions within the...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2011 6037 Views

RISK: Medium Risk

Wireshark "dissect_enttec_dmx_data()" Buffer Overflow Vulnerability

A vulnerability has been identified in Wireshark, which could be exploited by attackers to cause a denial of service or execute arbitrary code. This issue is caused by a buffer overflow error in the "dissect_enttec_dmx_data()" [epan/dissectors/packet-enttec.c] function...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2011 6036 Views

RISK: Medium Risk

Microsoft Windows Fax Cover Page Editor Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the Fax Cover Page Editor (fxscover.exe) utility when processing a cover file ".cov" containing...

Last Update Date: 28 Jan 2011 Release Date: 28 Dec 2010 5967 Views

RISK: Medium Risk

Microsoft Internet Explorer Remote Code Execution vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by the creation of uninitialized memory during a CSS function within Internet Explorer. It is possible under certain conditions for the memory to...

Last Update Date: 28 Jan 2011 Release Date: 24 Dec 2010 5674 Views

RISK: Medium Risk

Microsoft Internet Information Services (IIS) FTP Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Internet Information Services (IIS), which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a buffer overflow error in the "TELNET_STREAM_CONTEXT::OnSendData()" function within the protocol handler...

Last Update Date: 28 Jan 2011 Release Date: 23 Dec 2010 5897 Views