Security Bulletin

RISK: Medium Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Thunderbird, which could be exploited by attackers to bypass security restrictions, execute arbitrary scripting code, cause a denial of service or take complete control of an affected system.1. Due to an error in the handling of "...

Last Update Date: 28 Jan 2011 Release Date: 27 Mar 2008 4763 Views

RISK: Medium Risk

Mozilla Firefox and SeaMonkey Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox and SeaMonkey, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or take complete control of an affected system.1. Due to an error in the handling of...

Last Update Date: 28 Jan 2011 Release Date: 27 Mar 2008 4693 Views

RISK: Medium Risk

Novell eDirectory LDAP Extended Request Buffer Overflow Vulnerability

A vulnerability has been identified in Novell eDirectory, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error when processing overly large LDAP Extended Request messages, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 26 Mar 2008 4794 Views

RISK: Medium Risk

Apple Safari Memory Corruption and Address Bar Spoofing Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari for Windows, which could be exploited by remote attackers to spoof arbitrary web sites, cause a denial of service or compromise a vulnerable system.1. Due to a memory corruption error when handling overly long filenames, which...

Last Update Date: 28 Jan 2011 Release Date: 26 Mar 2008 4738 Views

RISK: Medium Risk

Mac OS X Multiple Vulnerabilities

Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.1. Multiple boundary errors in AFP client when processing "afp://" URLs can be exploited to cause stack-based buffer overflows when a user connects to a malicious AFP server....

Last Update Date: 28 Jan 2011 Release Date: 20 Mar 2008 4779 Views

RISK: Medium Risk

MIT Kerberos Updates for Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Kerberos, which could be exploited by attackers to gain knowledge of sensitive information, cause a denial of service or take complete control of an affected system.1. Due to an errors in KDC when handling krb4 messages, which could...

Last Update Date: 28 Jan 2011 Release Date: 20 Mar 2008 4717 Views

RISK: Medium Risk

Apple Safari Command Execution and Cross Site Scripting Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which could be exploited by remote attackers to bypass security restrictions, cause a denial of service, disclose sensitive information, or execute arbitrary code.1. Due to an error in the validation of certificates, which could...

Last Update Date: 28 Jan 2011 Release Date: 19 Mar 2008 4787 Views

RISK: Medium Risk

CA BrightStor ARCserve Backup List Control Code Execution Vulnerability

A vulnerability has been identified in CA BrightStor ARCserve Backup, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error in the "ListCtrl.ocx" ActiveX...

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2008 4789 Views

RISK: Medium Risk

F-Secure Products Archive Handling Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in various F-Secure products, which could be exploited by attackers or malware to cause a denial of service or take complete control of an affected system. These issues are caused by memory corruption errors when processing malformed archives, which could...

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2008 4775 Views

RISK: Medium Risk

Cisco User-Changeable Password Remote Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Cisco User-Changeable Password (UCP), which could be exploited by remote attackers to execute arbitrary scripting code, cause a denial of service or take complete control of an affected system.1. Due to a buffer overflow errors in...

Last Update Date: 28 Jan 2011 Release Date: 14 Mar 2008 4810 Views