Security Bulletin

RISK: Medium Risk

IBM Informix Client and Connect ".nfx" File Buffer Overflow Vulnerability

A vulnerability has been identified in IBM Informix Client and Informix Connect, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the SetNet32 utility when processing a ".nfx" file containing a malformed field (...

Last Update Date: 28 Jan 2011 Release Date: 6 Oct 2009 4905 Views

RISK: Medium Risk

GoogleApps "googleapps.url.mailto:" Argument Injection Vulnerability

A vulnerability has been identified in Google Apps, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in the "googleapps.exe"application when processing parameters passed to the "---renderer-path" argument via...

Last Update Date: 28 Jan 2011 Release Date: 5 Oct 2009 4762 Views

RISK: Medium Risk

Novell NetWare RPC CALLIT Buffer Overflow Vulnerability

A vulnerability has been identified in Novell NetWare, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a stack overflow error in the NFS Portmapper (PKERNEL.NLM) when processing malformed RPC CALLIT requests, which could be...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 4822 Views

RISK: Medium Risk

Google Chrome v8 Engine Floating Point Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the v8 engine when parsing strings into floating point numbers via the "dtoa()" implementation, which could...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 4839 Views

RISK: Medium Risk

IBM Installation Manager "iim:" URI Remote Library Injection Vulnerability

A vulnerability has been identified in IBM Installation Manager, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in the "IBMIM.exe" file when processing parameters passed to the "-vm" argument via the...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 4837 Views

RISK: Medium Risk

Cisco IOS for Unified Communications Manager Express Vulnerability

A vulnerability has been identified in Cisco IOS for Unified Communications Manager Express, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error in the login section of the Extension Mobility feature...

Last Update Date: 28 Jan 2011 Release Date: 25 Sep 2009 4777 Views

RISK: Medium Risk

Apple iTunes Playlist Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Apple iTunes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing playlist ".pls" files containing malformed data, which could be exploited by attackers to crash an...

Last Update Date: 28 Jan 2011 Release Date: 23 Sep 2009 4761 Views

RISK: Medium Risk

Sun StarOffice / StarSuite XML Parsing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun StarOffice/StarSuite, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. User-after-free errors when processing an XML document with specially-crafted Notation or Enumeration attribute...

Last Update Date: 28 Jan 2011 Release Date: 22 Sep 2009 4838 Views

RISK: Medium Risk

Sun StarOffice / StarSuite Word Document Table Parsing Vulnerabilities

Two vulnerabilities have been identified in StarOffice and StarSuite, may allow a remote unprivileged user to execute arbitrary code on the system with the privileges of a local user running StarOffice/StarSuite, if the local user opens a crafted Microsoft Word document provided by the remote user...

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 4828 Views

RISK: Medium Risk

VMware Workstation 5 VMnc Codec Multiple Vulnerabilities

A vulnerabilities have been identified in VMware Workstation, which could be exploited by attackers to compromisean affected system.The vulnerabilities are caused due to multiple errors in vmnc.dll when processing specially crafted AVI files and can be exploited to cause heap-based buffer overflows.

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 4767 Views