Security Bulletin

RISK: Medium Risk

Microsoft Windows JScript Scripting Engine Remote Code Execution Vulnerability( 09 September 2009 )

A remote code execution vulnerability exists in the way that the JScript scripting engine processes scripts in Web pages. The vulnerability could allow remote code execution if a user opened a specially crafted file or visited a Web site that is running a specially crafted script. If a...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 5237 Views

RISK: Medium Risk

Microsoft Windows Media Multiple Vulnerabilities( 09 September 2009 )

1. Windows Media Header Parsing Invalid Free VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Windows handles specially crafted ASF format files. This vulnerability could allow remote code execution if a user opened a specially crafted file. If a user is logged on with...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 5416 Views

RISK: Medium Risk

Microsoft Windows DHTML Editing Component ActiveX Control Vulnerability( 09 September 2009 )

A remote code execution vulnerability exists in the DHTML Editing Component ActiveX Control. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 5467 Views

RISK: Medium Risk

VMware Workstation Movie Decoder VMnc Codec Vulnerabilities

Two vulnerabilities have been identified in VMware Workstation Movie Decoder, which could be exploited by attackers to potentially compromise a vulnerable system.1. A heap overflow error in the VMnc codec (vmnc.dll) when processing a video file with mismatched dimensions, which could...

Last Update Date: 28 Jan 2011 Release Date: 8 Sep 2009 5549 Views

RISK: Medium Risk

Apple Mac OS X Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service, or compromise an affected system.A stack overflow error in Java Web Start command launcher when handling...

Last Update Date: 28 Jan 2011 Release Date: 7 Sep 2009 5435 Views

RISK: Medium Risk

Novell iPrint Client Unspecified Buffer Overflow Vulnerability

A vulnerability has been identified in Novell iPrint Client, which could be exploited by attackers to compromisean affected system.The vulnerability is caused due to an unspecified error and can be exploited to cause a buffer overflow.

Last Update Date: 28 Jan 2011 Release Date: 7 Sep 2009 5478 Views

RISK: Medium Risk

OpenOffice.org Documents Parsing Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in OpenOffice.org, which could be exploited by attackers to compromise a vulnerable system.1. Due to an integer underflow error when parsing certain records in a Word document table, which could allow attackers to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 2 Sep 2009 5463 Views

RISK: Medium Risk

Google Chrome V8 Javascript Engine Memory Read Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an error in the V8 Javascript engine, which may allow a specially crafted web page to read unauthorized memory, bypassing security checks...

Last Update Date: 28 Jan 2011 Release Date: 27 Aug 2009 5567 Views

RISK: Medium Risk

Symantec Products KeyView XLS Handling Integer Overflow Vulnerability

A vulnerability has been identified in various Symantec products, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an integer overflow error in the Autonomy KeyView Viewer for Excel (xlssr.dll) when processing XLS documents containing a malformed...

Last Update Date: 28 Jan 2011 Release Date: 27 Aug 2009 5722 Views

RISK: Medium Risk

IBM Lotus Notes File Viewer for Excel Code Execution Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the File Viewer for Excel (xlssr.dll) when processing a malformed XLS document, which...

Last Update Date: 28 Jan 2011 Release Date: 26 Aug 2009 5515 Views