Security Bulletin

RISK: Medium Risk

BitDefenderfor Linux PE File Handling Memory Corruption Vulnerability

A vulnerability has been identified in BitDefender for Linux, which could be exploited by attackers or malware to cause a denial of service or potentially compromise a vulnerable system. This issue is caused by a memory corruption error in the scanning engine when processing malformed PE binaries packed...

Last Update Date: 28 Jan 2011 Release Date: 22 Dec 2008 4792 Views

RISK: Medium Risk

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or take complete control of an affected system.1. A memory corruption errors in the...

Last Update Date: 28 Jan 2011 Release Date: 18 Dec 2008 5093 Views

RISK: Medium Risk

Opera Browser Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system.1. A buffer overflow error when handling certain text-area contents, which could...

Last Update Date: 28 Jan 2011 Release Date: 18 Dec 2008 4754 Views

RISK: Medium Risk

Adobe Flash Player for Linux Remote Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player for Linux, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified error when loading a specially crafted SWF file, which could be exploited by attackers to execute arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 18 Dec 2008 4756 Views

RISK: Medium Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to execute arbitrary code, gain access to sensitive information, or cause a denial of service.

Last Update Date: 28 Jan 2011 Release Date: 16 Dec 2008 4751 Views

RISK: Medium Risk

Microsoft Visual Basic Multiple Remote Code Execution Vulnerabilities (10 December 2008)

1. DataGrid Control Memory Corruption VulnerabilityA remote code execution vulnerability exists in the DataGrid ActiveX Control for Visual Basic 6. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2008 4707 Views

RISK: Medium Risk

Microsoft Windows GDI Two Remote Code Execution Vulnerabilities (10 December 2008)

1. GDI Integer Overflow VulnerabilityA remote code execution vulnerability exists in the way that GDI handles integer calculations. The vulnerability could allow remote code execution if a user opens a specially crafted WMF image file. An attacker who successfully exploited this vulnerability could take complete control of...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2008 4511 Views

RISK: Medium Risk

Microsoft Windows WordPad Converter Code Execution Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the WordPad Text Converter when processing a specially crafted Word 97 file (.doc, .wri, or...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2008 4769 Views

RISK: Medium Risk

Microsoft Windows Search Code Execution Vulnerabilities (10 December 2008)

1. Windows Saved Search VulnerabilityA remote code execution vulnerability exists when saving a specially crafted search file within Windows Explorer. This operation causes Windows Explorer to exit and restart in an exploitable manner.2. Windows Search Parsing VulnerabilityA remote code execution vulnerability exists in Windows Explorer...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2008 4421 Views

RISK: Medium Risk

Microsoft Office Excel Multiple Code Execution Vulnerabilities (10 December 2008)

1. File Format Parsing Vulnerability - CVE-2008-4265A remote code execution vulnerability exists in Microsoft Office Excel as a result of memory corruption when loading Excel records. The vulnerability could allow remote code execution if a user opens a specially crafted Excel file that includes...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2008 4421 Views