Security Bulletin

RISK: Medium Risk

GoogleApps "googleapps.url.mailto:" Argument Injection Vulnerability

A vulnerability has been identified in Google Apps, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in the "googleapps.exe"application when processing parameters passed to the "---renderer-path" argument via...

Last Update Date: 28 Jan 2011 Release Date: 5 Oct 2009 5443 Views

RISK: Medium Risk

Novell NetWare RPC CALLIT Buffer Overflow Vulnerability

A vulnerability has been identified in Novell NetWare, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a stack overflow error in the NFS Portmapper (PKERNEL.NLM) when processing malformed RPC CALLIT requests, which could be...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 5594 Views

RISK: Medium Risk

Google Chrome v8 Engine Floating Point Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the v8 engine when parsing strings into floating point numbers via the "dtoa()" implementation, which could...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 5512 Views

RISK: Medium Risk

IBM Installation Manager "iim:" URI Remote Library Injection Vulnerability

A vulnerability has been identified in IBM Installation Manager, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in the "IBMIM.exe" file when processing parameters passed to the "-vm" argument via the...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 5584 Views

RISK: Medium Risk

Cisco IOS for Unified Communications Manager Express Vulnerability

A vulnerability has been identified in Cisco IOS for Unified Communications Manager Express, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error in the login section of the Extension Mobility feature...

Last Update Date: 28 Jan 2011 Release Date: 25 Sep 2009 5442 Views

RISK: Medium Risk

Apple iTunes Playlist Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Apple iTunes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing playlist ".pls" files containing malformed data, which could be exploited by attackers to crash an...

Last Update Date: 28 Jan 2011 Release Date: 23 Sep 2009 5513 Views

RISK: Medium Risk

Sun StarOffice / StarSuite XML Parsing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun StarOffice/StarSuite, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. User-after-free errors when processing an XML document with specially-crafted Notation or Enumeration attribute...

Last Update Date: 28 Jan 2011 Release Date: 22 Sep 2009 5510 Views

RISK: Medium Risk

Sun StarOffice / StarSuite Word Document Table Parsing Vulnerabilities

Two vulnerabilities have been identified in StarOffice and StarSuite, may allow a remote unprivileged user to execute arbitrary code on the system with the privileges of a local user running StarOffice/StarSuite, if the local user opens a crafted Microsoft Word document provided by the remote user...

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 5591 Views

RISK: Medium Risk

VMware Workstation 5 VMnc Codec Multiple Vulnerabilities

A vulnerabilities have been identified in VMware Workstation, which could be exploited by attackers to compromisean affected system.The vulnerabilities are caused due to multiple errors in vmnc.dll when processing specially crafted AVI files and can be exploited to cause heap-based buffer overflows.

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 5436 Views

RISK: Medium Risk

AppleMac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X,which could be exploited by remote or local attackers to disclosesensitive information, bypass security restrictions, cause a denialof service or compromise an affected system. These vulnerabilitiesare caused by buffer overflows, integer overflows, uninitialized pointers...

Last Update Date: 28 Jan 2011 Release Date: 14 Sep 2009 5422 Views