Security Bulletin

RISK: Medium Risk

Microsoft Excel Multiple Vulnerabilities( 15 October 2008 )

1. Calendar Object Validation VulnerabilityA remote code execution vulnerability exists in the way Excel processes a VBA Performance Cache. The vulnerability could allow remote code execution if a user opens a specially crafted Excel file in a VBA Performance Cache. An attacker who successfully exploited this vulnerability...

Last Update Date: 28 Jan 2011 Release Date: 15 Oct 2008 4571 Views

RISK: Medium Risk

Microsoft Host Integration Server Command Execution Vulnerability( 15 October 2008 )

A remote code execution vulnerability exists in the SNA Remote Procedure Call (RPC) service for Host Integration Server. An attacker could exploit the vulnerability by constructing a specially crafted RPC request. The vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability...

Last Update Date: 28 Jan 2011 Release Date: 15 Oct 2008 4508 Views

RISK: Medium Risk

SunJava System Web Proxy Server FTP Heap Overflow Vulnerability

A vulnerability has been identified in Sun Java System Web Proxy Server, which could be exploited by remote or local attackers to compromise a vulnerable system. This issue is caused by a heap overflow error in the FTP subsytem when processing malformed data, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2008 4752 Views

RISK: Medium Risk

MacOS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X,which could be exploited by remote or local attackers to disclose sensitive information,bypass security restrictions, cause a denial of service or compromise an affected system.These issues are caused by buffer overflow, range checking...

Last Update Date: 28 Jan 2011 Release Date: 10 Oct 2008 4798 Views

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable system.1. Due to an error when processing page redirects to a specially crafted address (URL), which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 9 Oct 2008 4716 Views

RISK: Medium Risk

VMware ESX Server and VMware VirtualCenter Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various VMWare products, which could be exploited by remote attackers to bypass security restrictions or compromise a vulnerable system, or by local attackers to disclose sensitive information or gain elevated privileges, cause a denial of service or take complete control of...

Last Update Date: 28 Jan 2011 Release Date: 8 Oct 2008 4828 Views

RISK: Medium Risk

Novell eDirectory Heap Overflow and Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Novell eDirectory, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. Due to heap overflow errors when processing update replica verbs (Opcode 0x23 and 0x24), which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 8 Oct 2008 4746 Views

RISK: Medium Risk

AppleTV Multiple Vulnerabilities

Some vulnerabilities have been reported in Apple TV, which can be exploited by malicious people to compromise a vulnerable system.1) An error in the processing of movie atoms can be exploited to cause a stack-based buffer overflow.2) An error in the...

Last Update Date: 28 Jan 2011 Release Date: 6 Oct 2008 4790 Views

RISK: Medium Risk

Trend Micro OfficeScan Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Trend Micro OfficeScan, which could be exploited by remote attackers to gain knowledge of sensitive information, cause a denial of service or compromise a vulnerable system.1. Due to an unspecified buffer overflow error in certain CGI modules, which...

Last Update Date: 28 Jan 2011 Release Date: 3 Oct 2008 4784 Views

RISK: Medium Risk

WinZipGDI+ Library Multiple Vulnerabilities

Multiple vulnerabilities have been identified in WinZip, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused due to the application placing a vulnerable "gdiplus.dll" library in the program folder and using it on Windows...

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2008 4863 Views