Security Bulletin

RISK: Medium Risk

Novell GroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which could be exploited by remote attackers to bypass security restrictions, conduct phishing attacks, cause a denial of service or compromise a vulnerable system.1. A buffer overflow error in the Novell GroupWise Internet Agent (GWIA...

Last Update Date: 28 Jan 2011 Release Date: 25 May 2009 5370 Views

RISK: Medium Risk

Apple Mac OS X Java Calendar Deserialisation Code Execution Vulnerability

A vulnerability has been identified in Apple Mac OS X, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error in Java within the deserialization of Calendar objects, which could be exploited by attackers to bypass the Java...

Last Update Date: 28 Jan 2011 Release Date: 22 May 2009 5227 Views

RISK: Medium Risk

Winamplibsndfile.dll VOC File Processing Heap Overflow Vulnerability

A vulnerability has been identified in Winamp, which could be exploited by remote attackers to compromise a vulnerable system.This issue is caused by a buffer overflow error when processing a malformed VOC file.These issues are caused by buffer overflow errors in the "voc_read_header()" [...

Last Update Date: 28 Jan 2011 Release Date: 19 May 2009 5224 Views

RISK: Medium Risk

Google Chrome WebKit SVGList Object Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a memory corruption error in WebKit when processing a specially crafted SVGList object, which could be...

Last Update Date: 28 Jan 2011 Release Date: 18 May 2009 5239 Views

RISK: Medium Risk

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities ( 14 May 2009 )

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by input validation errors, buffer...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2009 5963 Views

RISK: Medium Risk

Apple Safari for Mac and Windows Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari for Mac and Windows, which could be exploited by attackers to compromise a vulnerable system.The first issue is caused by input validation errors within the handling of "feed:" URLs, which could allow attackers to inject arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2009 5212 Views

RISK: Medium Risk

Microsoft Office PowerPoint Multiple Vulnerabilities( 13 May 2009 )

A remote code execution vulnerability exists in the way that Microsoft Office PowerPoint handles specially crafted PowerPoint files. An attacker could exploit the vulnerability by creating a specially crafted PowerPoint file that could be included as an e-mail attachment, or hosted on a specially crafted or...

Last Update Date: 28 Jan 2011 Release Date: 13 May 2009 5063 Views

RISK: Medium Risk

Google Chrome Mutliple Vulnerabilities

Two vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system.The first vulnerability is caused by an integer overflow error in the Skia 2D graphics engine when computing image sizes, which could allow attackers to crash an affected...

Last Update Date: 28 Jan 2011 Release Date: 8 May 2009 5240 Views

RISK: Medium Risk

HP OpenView Network Node Manager Remote Code Execution Vulnerability

A vulnerability has been identified in HP OpenView Network Node Manager (NNM), which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an unspecified error when processing specially crafted data, which could allow remote...

Last Update Date: 28 Jan 2011 Release Date: 6 May 2009 5252 Views

RISK: Medium Risk

Symantec Products Alert Management System 2 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various Symantec products, which could be exploited by remote attackers to compromise a vulnerable system.1. An error in the Intel LANDesk Common Base Agent (CBA) using data sent to port 12174 as an argument to "CreateProcessA()", ...

Last Update Date: 28 Jan 2011 Release Date: 30 Apr 2009 5340 Views