Security Bulletin

RISK: Medium Risk

Opera Browser "Content-Length" Header Buffer Overflow Vulnerability

A vulnerability has been identified in Opera, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing malformed HTTP "Content-Length:" headers, which could be exploited by remote attackers to crash...

Last Update Date: 28 Jan 2011 Release Date: 5 Mar 2010 5500 Views

RISK: Medium Risk

IBM Lotus iNotes ActiveX Control and UltraLite Vulnerabilities

Multiple vulnerabilitieshave been identified in IBM Lotus iNotes (Domino Web Access), which could be exploited by remote attackers to manipulate data or compromise an affected system.1. Due to a buffer overflow error in the iNotes ActiveX control.2. Due to unspecified errors related...

Last Update Date: 28 Jan 2011 Release Date: 2 Mar 2010 5438 Views

RISK: Medium Risk

IBM Lotus iNotes ActiveX Control Remote Buffer Overflow Vulnerability

A vulnerability has been identified in IBM Lotus iNotes (Domino Web Access) ActiveX control, which could be exploited by remote attackers to compromise an affected system. This issue is caused by a buffer overflow error when processing malformed data, which could be exploited by remote...

Last Update Date: 28 Jan 2011 Release Date: 2 Mar 2010 5421 Views

RISK: Medium Risk

Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability

A vulnerability has been identified in VBScript, which could be exploited by remote attackers to compromise a vulnerable system. The vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer. If a malicious Web site displayed a specially crafted dialog box...

Last Update Date: 28 Jan 2011 Release Date: 2 Mar 2010 5206 Views

RISK: Medium Risk

Adobe Download Manager File Download and Execute Vulnerability

A vulnerability has been identified in Adobe Download Manager, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error when processing URLs, which could be exploited by attackers to download and install unauthorized software onto a vulnerable system...

Last Update Date: 28 Jan 2011 Release Date: 26 Feb 2010 5466 Views

RISK: Medium Risk

Symantec Products Client Proxy Remote Buffer Overflow Vulnerability

A vulnerability has been identified in various Symantec products, which could be exploited by remote attackers to compromise an affected system. This issue is caused by a buffer overflow error in the Client Proxy "CLIproxy.dll" ActiveX control when processing user-supplied data, ...

Last Update Date: 28 Jan 2011 Release Date: 19 Feb 2010 5327 Views

RISK: Medium Risk

IBM Lotus Notes Unspecified Buffer Overflow Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to an unspecified error and can be exploited to cause a stack-based buffer overflow.Successful exploitation allows...

Last Update Date: 28 Jan 2011 Release Date: 19 Feb 2010 5336 Views

RISK: Medium Risk

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilitieshave been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by attackers to manipulate or disclose certain data, bypass security restrictions or compromise a vulnerable system.1. Due to memory corruption errors in the JavaScript and browser engines when parsing malformed...

Last Update Date: 28 Jan 2011 Release Date: 19 Feb 2010 5397 Views

RISK: Medium Risk

Novell Products Kerberos AES / RC4 Integer Underflow Vulnerabilities

Multiple vulnerabilitieshave been identified in Novell products, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. These issues are caused by errors in Kerberos. These issues are caused by integer underflow errors in the AES and RC4 decryption...

Last Update Date: 28 Jan 2011 Release Date: 19 Feb 2010 5423 Views

RISK: Medium Risk

Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the "authplay.dll" module when processing malformed Flash data within a PDF document...

Last Update Date: 28 Jan 2011 Release Date: 18 Feb 2010 5330 Views