Security Bulletin

RISK: Medium Risk

Mozilla Firefox, SeaMonkey and Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird, which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, cause a denial of service or compromise a vulnerable system.1. Due to memory corruption errors in the...

Last Update Date: 28 Jan 2011 Release Date: 22 Apr 2009 4910 Views

RISK: Medium Risk

BlackBerry Products PDF Distiller Unspecified Vulnerabilities

Some vulnerabilities have been identified in in BlackBerry Enterprise Server and BlackBerry Professional Software, which could be exploited by remote attackers to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.The vulnerabilities are caused due to unspecified errors within the PDF distiller...

Last Update Date: 28 Jan 2011 Release Date: 20 Apr 2009 4712 Views

RISK: Medium Risk

Micosoft Whale IAG ActiveX Remote Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Microsoft Whale Communications Intelligent Application Gateway (IAG) 2007, which could be exploited by remote attackers to comrpromise an affected system. These issues are caused by buffer overflow errors in the "WhlMgr.dll" ActiveX control when processing a...

Last Update Date: 28 Jan 2011 Release Date: 17 Apr 2009 4638 Views

RISK: Medium Risk

Novell Kerberos KDC Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell Kerberos KDC, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. These issues are caused by errors in Kerberos.1. A NULL pointer dereference error in the "spnego_gss_accept_sec_context()" [...

Last Update Date: 28 Jan 2011 Release Date: 17 Apr 2009 4668 Views

RISK: Medium Risk

DivX Web Player Stream Format Chunk Buffer Overflow Vulnerability

A vulnerability has been identified in DivX Web Player, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a signedness error in the processing of "STRF" (Stream Format) chunks within a DivX file, which could be...

Last Update Date: 28 Jan 2011 Release Date: 16 Apr 2009 4795 Views

RISK: Medium Risk

Oracle and BEA Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various Oracle and BEA products, which could be exploited by remote or local attackers to cause a denial of service, read and manipulate certain data, disclose sensitive information, conduct SQL injection attacks, bypass security restrictions, or execute arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 16 Apr 2009 4711 Views

RISK: Medium Risk

Sun Solaris Adobe Reader Multiple Vulnerabilities

Multiple vulnerability have been identified in Sun Solaris, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by errors in Adobe Reader.

Last Update Date: 28 Jan 2011 Release Date: 15 Apr 2009 4881 Views

RISK: Medium Risk

Microsoft Internet Explorer Multiple Vulnerabilities( 15 April 2009 )

1. Blended Threat Remote Code Execution VulnerabilityA blended threat remote code execution vulnerability exists in the way that Internet Explorer locates and opens files on the system. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page...

Last Update Date: 28 Jan 2011 Release Date: 15 Apr 2009 4574 Views

RISK: Medium Risk

Microsoft Windows Multiple Privilege Escalation Vulnerabilities( 15 April 2009 )

1. Windows MSDTC Service Isolation VulnerabilityAn elevation of privilege vulnerability exists in the Microsoft Distributed Transaction Coordinator (MSDTC) transaction facility in Microsoft Windows platforms. MSDTC leaves a NetworkService token that can be impersonated by any process that calls into it. The vulnerability allows a process...

Last Update Date: 28 Jan 2011 Release Date: 15 Apr 2009 4732 Views

RISK: Medium Risk

Microsoft Windows HTTP Services Multiple Vulnerabilities( 15 April 2009 )

1. Windows HTTP Services Integer Underflow VulnerabilityA remote code execution vulnerability exists in the way that Windows HTTP Services handle specific values that are returned by a remote Web server. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker...

Last Update Date: 28 Jan 2011 Release Date: 15 Apr 2009 4621 Views