Security Bulletin

RISK: Medium Risk

NovellGroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which can be exploited by malicious people to conduct cross-site scripting, cross-site request forgery, and script insertion attacks, bypass certain security restrictions, or compromise a vulnerable system.1. Input passed to...

Last Update Date: 28 Jan 2011 Release Date: 3 Feb 2009 4808 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.1. A heap overflow error when handling malformed RTSP URLs, which could be exploited to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 23 Jan 2009 4721 Views

RISK: Medium Risk

SymantecAppStream Client ActiveX Insecure Method Vulnerability

A vulnerability has been identified in Symantec AppStream Client, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by errors in the LaunchObj ActiveX control (launcher.dll) that contains unsafe methods e.g. "installAppMgr()", which...

Last Update Date: 28 Jan 2011 Release Date: 19 Jan 2009 4795 Views

RISK: Medium Risk

Oracle and BEA Products Multiple Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in various Oracle and BEA products, which could be exploited by remote or local attackers to cause a denial of service, read and manipulate certain data, disclose sensitive information, conduct SQL injection attacks, bypass security restrictions, or execute arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 4836 Views

RISK: Medium Risk

Winamp AIFF File Header Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Winamp, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when parsing a AIFF file with a malformed header, which could allow attackers to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 4832 Views

RISK: Medium Risk

BlackBerry Products PDF Distiller Memory Corruption Vulnerabilities

Multiple vulnerabilities have been identified in various BlackBerry products, which could be exploited by attackers to compromise a vulnerable device. These issues are caused by heap overflow and uninitialized memory errors in the PDF distiller of the BlackBerry Attachment Service component when processing malformed PDF files, which...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 4744 Views

RISK: Medium Risk

Microsoft Windows SMB Multiple Vulnerabilities( 14 January 2009 )

Multiple vulnerabilities have been identified in Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system.1. SMB Buffer Overflow Remote Code Execution VulnerabilityAn unauthenticated remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol software...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 4613 Views

RISK: Medium Risk

HP OpenView Network Node Manager Multiple Remote Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (NNM), which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. These issues are caused by buffer overflow errors in the "OpenView5.exe", "getcvdata....

Last Update Date: 28 Jan 2011 Release Date: 8 Jan 2009 4753 Views

RISK: Medium Risk

RealNetworks Helix Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealNetworks Helix Server, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. A heap overflow error when processing malformed RTSP DESCRIBE requests, which could be exploited to crash an affected server...

Last Update Date: 28 Jan 2011 Release Date: 2 Jan 2009 4837 Views

RISK: Medium Risk

Trend MicroHouseCall ActiveX Control "notifyOnLoadNative()" Vulnerability

A vulnerability has been identified in Trend Micro HouseCall, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to a use-after-free error in the HouseCall ActiveX control (Housecall_ActiveX.dll). This can...

Last Update Date: 28 Jan 2011 Release Date: 22 Dec 2008 4767 Views