Security Bulletin

RISK: Medium Risk

Mozilla Firefox and Seamonkey Multiple Vulnerabilities

Two vulnerability has been identified in Mozilla Firefox and Seamonkey, which could be exploited by remote attackers to cause a denial of service or potentially compromise a vulnerable system. 1. A memory corruption error within the "txMozillaXSLTProcessor::TransformToDoc()" function when processing specially crafted XSLT...

Last Update Date: 28 Jan 2011 Release Date: 27 Mar 2009 4761 Views

RISK: Medium Risk

Sun Java JDK / JRE Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Java, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service, or compromise an affected system.1. An unspecified error in the HTTP server implementation, which could allow...

Last Update Date: 28 Jan 2011 Release Date: 27 Mar 2009 4826 Views

RISK: Medium Risk

phpMyAdmin HTTP Response Splitting and File Inclusion Vulnerabilities

Two vulnerabilities have been identified in phpMyAdmin, which could be exploited by attackers to disclose sensitive information or bypass security restrictions. These issues are caused by input validation errors in the BLOB streaming feature, which could allow arbitrary file inclusion and HTTP header inject attacks.

Last Update Date: 28 Jan 2011 Release Date: 26 Mar 2009 4897 Views

RISK: Medium Risk

HP OpenView Network Node Manager Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system.1. Due to a stack overflow error in the "OvCgi/Toolbar.exe" CGI when processing an overly...

Last Update Date: 28 Jan 2011 Release Date: 25 Mar 2009 4888 Views

RISK: Medium Risk

Sun Java System Identity Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Java System Identity Manager, which could be exploited by attackers to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a vulnerable system.1. An unspecified error can lead to...

Last Update Date: 28 Jan 2011 Release Date: 23 Mar 2009 4789 Views

RISK: Medium Risk

Adobe Acrobat and Reader JavaScript Method Code Execution Vulnerability

A vulnerability has been identified in Adobe Reader and Acrobat, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an error whithin the processing of an unspecified JavaScript method, which could allow attackers to cause a vulnerable application to crash...

Last Update Date: 28 Jan 2011 Release Date: 20 Mar 2009 4775 Views

RISK: Medium Risk

Lotus Notes File Viewer "wp6sr.dll" Buffer Overflow Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the File Viewer for WordPerfect module when processing a specially crafted file attachment, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 19 Mar 2009 4845 Views

RISK: Medium Risk

Sun Solaris Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Solaris, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by errors in Flash.

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2009 4806 Views

RISK: Medium Risk

Symantec Products KeyView Module Buffer Overflow Vulnerability

A vulnerability has been identified in various Symantec products, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the Autonomy KeyView module, which could be exploited by attackers to crash an affected server or application...

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2009 4758 Views

RISK: Medium Risk

Adobe Reader/Acrobat Remote Code Execution Vulnerability

A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system.

Last Update Date: 28 Jan 2011 Release Date: 12 Mar 2009 4788 Views