Security Bulletin

RISK: Medium Risk

Winamplibsndfile.dll VOC File Processing Heap Overflow Vulnerability

A vulnerability has been identified in Winamp, which could be exploited by remote attackers to compromise a vulnerable system.This issue is caused by a buffer overflow error when processing a malformed VOC file.These issues are caused by buffer overflow errors in the "voc_read_header()" [...

Last Update Date: 28 Jan 2011 Release Date: 19 May 2009 5443 Views

RISK: Medium Risk

Google Chrome WebKit SVGList Object Memory Corruption Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a memory corruption error in WebKit when processing a specially crafted SVGList object, which could be...

Last Update Date: 28 Jan 2011 Release Date: 18 May 2009 5463 Views

RISK: Medium Risk

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities ( 14 May 2009 )

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by input validation errors, buffer...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2009 6188 Views

RISK: Medium Risk

Apple Safari for Mac and Windows Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari for Mac and Windows, which could be exploited by attackers to compromise a vulnerable system.The first issue is caused by input validation errors within the handling of "feed:" URLs, which could allow attackers to inject arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2009 5434 Views

RISK: Medium Risk

Microsoft Office PowerPoint Multiple Vulnerabilities( 13 May 2009 )

A remote code execution vulnerability exists in the way that Microsoft Office PowerPoint handles specially crafted PowerPoint files. An attacker could exploit the vulnerability by creating a specially crafted PowerPoint file that could be included as an e-mail attachment, or hosted on a specially crafted or...

Last Update Date: 28 Jan 2011 Release Date: 13 May 2009 5290 Views

RISK: Medium Risk

Google Chrome Mutliple Vulnerabilities

Two vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system.The first vulnerability is caused by an integer overflow error in the Skia 2D graphics engine when computing image sizes, which could allow attackers to crash an affected...

Last Update Date: 28 Jan 2011 Release Date: 8 May 2009 5463 Views

RISK: Medium Risk

HP OpenView Network Node Manager Remote Code Execution Vulnerability

A vulnerability has been identified in HP OpenView Network Node Manager (NNM), which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an unspecified error when processing specially crafted data, which could allow remote...

Last Update Date: 28 Jan 2011 Release Date: 6 May 2009 5477 Views

RISK: Medium Risk

Symantec Products Alert Management System 2 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various Symantec products, which could be exploited by remote attackers to compromise a vulnerable system.1. An error in the Intel LANDesk Common Base Agent (CBA) using data sent to port 12174 as an argument to "CreateProcessA()", ...

Last Update Date: 28 Jan 2011 Release Date: 30 Apr 2009 5564 Views

RISK: Medium Risk

HP OpenView NNM "ovalarmsrv" Remote Integer Overflow Vulnerability

A vulnerability has been identified in HP OpenView Network Node Manager (NNM), which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an integer overflow error in "ovalarmsrv.exe" when processing a...

Last Update Date: 28 Jan 2011 Release Date: 29 Apr 2009 5401 Views

RISK: Medium Risk

Mozilla Firefox "nsTextFrame::ClearTextRun()" Memory Corruption Vulnerability

A vulnerability has been identified in Mozilla Firefox, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a memory corruption error in "nsTextFrame::ClearTextRun()" when processing certain data, which could be...

Last Update Date: 28 Jan 2011 Release Date: 29 Apr 2009 5350 Views