Security Bulletin

RISK: Medium Risk

Apple Mac OS X ATSServer CFF Font Parsing Vulnerability

A vulnerability has been identified in Apple Mac OS X, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the Apple Type Services (ATS) when processing embedded CFF fonts, which could allow attackers...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 5974 Views

RISK: Medium Risk

Microsoft Forefront Unified Access Gateway Multiple Vulnerabilities( 10 November 2010 )

1. UAG Redirection Spoofing VulnerabilityA spoofing vulnerability exists in Forefront Unified Access Gateway (UAG). The vulnerability could allow spoofing or redirecting of traffic intended for the UAG server if a UAG user clicks a specially crafted link. An attacker could send a specially crafted URL to...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 5679 Views

RISK: Medium Risk

Adobe Flash Player Code Execution and Information Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash and Flex, which could be exploited by attackers to disclose sensitive information or compromise a vulnerable system.These issues are caused by input validation and memory corruption errors when processing malformed Flash content, which could be exploited by attackers...

Last Update Date: 28 Jan 2011 Release Date: 8 Nov 2010 5750 Views

RISK: Medium Risk

Google Chrome Memory Corruption and Use-after-free Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by remote attackers to execute arbitrary code.1. A use-after-free related to text editing.2. A memory corruption error when handling an overly large text area.3. ...

Last Update Date: 28 Jan 2011 Release Date: 5 Nov 2010 5676 Views

RISK: Medium Risk

Adobe Acrobat and Reader "printSeps()" Heap Corruption Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a heap corruption error in the "EScript.api" plugin when processing the "printSeps()" function within a PDF...

Last Update Date: 28 Jan 2011 Release Date: 5 Nov 2010 5860 Views

RISK: Medium Risk

Microsoft Internet Explorer CSS Tag Parsing Code Execution Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused due to an invalid flag reference within the "mshtml.dll" module when processing a Cascading Style Sheets...

Last Update Date: 28 Jan 2011 Release Date: 4 Nov 2010 5523 Views

RISK: Medium Risk

ProFTPD Remote Buffer Overflow and Directory Traversal Vulnerabilities

Two vulnerabilities have been identified in ProFTPD, which could be exploited by remote attackers to take complete control of an affected system.The first issue is caused by a stack overflow error in the "pr_netio_telnet_gets()" [src/netio.c] function when processing input containing...

Last Update Date: 28 Jan 2011 Release Date: 3 Nov 2010 5766 Views

RISK: Medium Risk

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Shockwave Player, which could be exploited by remote attackers to compromise a vulnerable system. These issues are caused by memory corruptions and buffer overflow errors in the "DIRAPI.dll" and "IML32.dll" modules when processing...

Last Update Date: 28 Jan 2011 Release Date: 1 Nov 2010 5721 Views

RISK: Medium Risk

Microsoft Windows DAO 3.6 Object Library Insecure Library Loading Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is caused due to the Data Access Objects library (dao360.dll) loading libraries (e.g. msjet49.dll) in...

Last Update Date: 28 Jan 2011 Release Date: 1 Nov 2010 6042 Views

RISK: Medium Risk

SonicWALL SSL-VPN Buffer Overflow Vulnerability

A vulnerability has been identified in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control, which could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is caused due to a boundary error in the "Aventail.EPInstaller" ActiveX control...

Last Update Date: 28 Jan 2011 Release Date: 1 Nov 2010 5855 Views