Security Bulletin

RISK: Medium Risk

Adobe Flash Player Content Processing Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by an unspecified error when processing malformed Flash content, which could be exploited by attackers to compromise a vulnerable system by tricking a...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 5681 Views

RISK: Medium Risk

Cisco Products Multiple Remote Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in various Cisco products, which could be exploited by remote attackers to take complete control of a vulnerable system. These issues are caused by buffer overflow errors in the Cisco developed authentication code in the web server module of CiscoWorks Common Services when...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 5702 Views

RISK: Medium Risk

Adobe Acrobat and Reader "authplay.dll" Code Execution Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the "authplay.dll" module when processing malformed Flash content within a PDF document, ...

Last Update Date: 28 Jan 2011 Release Date: 29 Oct 2010 5832 Views

RISK: Medium Risk

Mozilla Firefox DOM Insertion Remote Code Execution Vulnerability

A vulnerability has been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by malicious web sites to execute arbitrary code. This issue is caused by a memory corruption error when handling "document.write()" methods and DOM insertion, which could allow...

Last Update Date: 28 Jan 2011 Release Date: 28 Oct 2010 5710 Views

RISK: Medium Risk

Adobe Shockwave Player rcsL Chunk Memory Corruption Vulnerability

A vulnerability has been identified in Adobe Shockwave Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the Director (dirapi.dll) module when processing and calculating offsets while parsing "rcsL" ...

Last Update Date: 28 Jan 2011 Release Date: 22 Oct 2010 5656 Views

RISK: Medium Risk

Apple Mac OS X Multiple Java Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote attackers or malicious users to execute arbitrary code.1. Amemory corruption error in Java's handling of applet window bounds, which could allow remote attackers to compromise a vulnerable...

Last Update Date: 28 Jan 2011 Release Date: 22 Oct 2010 5790 Views

RISK: Medium Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by attackers to manipulate or disclose certain data, bypass security restrictions or compromise a vulnerable system.1. Due to memory corruption errors in the browser engine when parsing malformed data...

Last Update Date: 28 Jan 2011 Release Date: 21 Oct 2010 5630 Views

RISK: Medium Risk

Google Chrome Memory Corruption and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to bypass security restrictions, manipulate certain information or compromise a vulnerable system.1. Due to an unknown error related to autofill / autocomplete profile spamming.2. Due to a memory...

Last Update Date: 28 Jan 2011 Release Date: 21 Oct 2010 5754 Views

RISK: Medium Risk

RealNetworks RealPlayer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealNetworks RealPlayer, which could be exploited by remote attackers to compromise a vulnerable system.1. an invalid index when processing RealMedia .IVR file with malformed sample data, which could allow attackers to execute arbitrary code by tricking a user...

Last Update Date: 28 Jan 2011 Release Date: 19 Oct 2010 5689 Views

RISK: Medium Risk

BlackBerry Enterprise Server and Professional Software Vulnerability

A vulnerability has been identified in BlackBerry Enterprise Server and BlackBerry Professional Software, which could be exploited by remote attackers to compromise a vulnerable server. This issue is caused by a buffer overflow error in the PDF distiller of the BlackBerry Attachment Service component when processing malformed PDF...

Last Update Date: 28 Jan 2011 Release Date: 15 Oct 2010 5654 Views