Security Bulletin

RISK: Medium Risk

Microsoft Products GDI+ Multiple Vulnerabilities( 10 September 2008 )

1. GDI+ VML Buffer Overrun VulnerabilityA remote code execution vulnerability exists in the way that GDI+ handles gradient sizes. The vulnerability could allow remote code execution if a user browses to a Web site that contains specially crafted content. An attacker who successfully exploited this...

Last Update Date: 28 Jan 2011 Release Date: 10 Sep 2008 4616 Views

RISK: Medium Risk

Microsoft Windows Media Encoder Buffer Overrun Vulnerability( 10 September 2008 )

A remote code execution vulnerability exists in the WMEX.DLL ActiveX control installed by Windows Media Encoder 9 Series. The vulnerability could allow remote code execution if a user views a specially crafted Web page. If a user is logged on with administrative user rights, an...

Last Update Date: 28 Jan 2011 Release Date: 10 Sep 2008 4762 Views

RISK: Medium Risk

Apple QuickTime Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to take complete control of an affected system.1. Due to an uninitialized memory access in the third-party Indeo v5 codec (not shipped with QuickTime), which could be...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2008 4785 Views

RISK: Medium Risk

VMware Products Multiple Vulnerabilities

VMware Server 1. Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.2. An unspecified error when processing malformed requests exists within...

Last Update Date: 28 Jan 2011 Release Date: 2 Sep 2008 4775 Views

RISK: Medium Risk

Novell eDirectory Multiple Vulnerabilities

Multiple vulnerabilites have been identified in Novell eDirectory, which could be exploited by attackers to execute arbitrary scripting code, cause a denial of service or compromise a vulnerable system.1. An unspecified heap overflow error, which could allow attackers to execute arbitrary code.2...

Last Update Date: 28 Jan 2011 Release Date: 2 Sep 2008 4807 Views

RISK: Medium Risk

Novell Forum TCL Command Injection Vulnerability

A vulnerability has been reported in Novell Forum, which can be exploited by malicious people to to compromise a vulnerable system.The vulnerability is caused due to an unspecified error when handling certain requests, which can be exploited to inject and execute TCL commands by modifying the...

Last Update Date: 28 Jan 2011 Release Date: 1 Sep 2008 4769 Views

RISK: Medium Risk

AWStats Totals Code Execution and Cross Ste Scripting Vulnerabilities

Multiple vulnerabilities have been identified in AWStats Totals, which could be exploited by remote attackers to execute arbitrary commands or scripting code.1. An input validation errors when processing the "month" and "year" parameters, which could be exploited by attackers to cause...

Last Update Date: 28 Jan 2011 Release Date: 28 Aug 2008 4916 Views

RISK: Medium Risk

Opera Multiple Vulnerabilities

Some vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct spoofing and cross-site scripting attacks, bypass certain security restrictions, disclose potentially sensitive information, or potentially compromise a user's system.1. An unspecified error exists...

Last Update Date: 28 Jan 2011 Release Date: 21 Aug 2008 4886 Views

RISK: Medium Risk

Microsoft Visual Studio Masked Edit Control "Mask" Code Execution Vulnerability

A vulnerability has been identified in Microsoft Visual Studio, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error in the "Msmask32.ocx" ActiveX control...

Last Update Date: 28 Jan 2011 Release Date: 15 Aug 2008 4882 Views

RISK: Medium Risk

VMware ESX Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service, or execute arbitrary code. These issues are caused by errors in OpenSSL, net-snmp...

Last Update Date: 28 Jan 2011 Release Date: 14 Aug 2008 4807 Views