Security Bulletin

RISK: Medium Risk

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system.1. A memory corruption errors in the JavaScript and layout...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5468 Views

RISK: Medium Risk

Nokia PC Suite Multimedia Player Playlist Buffer Overflow Vulnerability

A vulnerability has been identified in Nokia PC Suite, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the Multimedia Player when processing playlists (e.g. ".m3u") with overly long data...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5462 Views

RISK: Medium Risk

Sun Solaris Libxml2 Data Processing Integer Overflow Vulnerabilities

Two vulnerabilities have been identified in Sun Solaris, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. An integer overflow error in the "xmlSAX2Characters()" function when processing an overly large XML file, which could cause...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5453 Views

RISK: Medium Risk

NovellGroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which can be exploited by malicious people to conduct cross-site scripting, cross-site request forgery, and script insertion attacks, bypass certain security restrictions, or compromise a vulnerable system.1. Input passed to...

Last Update Date: 28 Jan 2011 Release Date: 3 Feb 2009 5504 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.1. A heap overflow error when handling malformed RTSP URLs, which could be exploited to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 23 Jan 2009 5377 Views

RISK: Medium Risk

SymantecAppStream Client ActiveX Insecure Method Vulnerability

A vulnerability has been identified in Symantec AppStream Client, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by errors in the LaunchObj ActiveX control (launcher.dll) that contains unsafe methods e.g. "installAppMgr()", which...

Last Update Date: 28 Jan 2011 Release Date: 19 Jan 2009 5468 Views

RISK: Medium Risk

Oracle and BEA Products Multiple Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in various Oracle and BEA products, which could be exploited by remote or local attackers to cause a denial of service, read and manipulate certain data, disclose sensitive information, conduct SQL injection attacks, bypass security restrictions, or execute arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 5555 Views

RISK: Medium Risk

Winamp AIFF File Header Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Winamp, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when parsing a AIFF file with a malformed header, which could allow attackers to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 5506 Views

RISK: Medium Risk

BlackBerry Products PDF Distiller Memory Corruption Vulnerabilities

Multiple vulnerabilities have been identified in various BlackBerry products, which could be exploited by attackers to compromise a vulnerable device. These issues are caused by heap overflow and uninitialized memory errors in the PDF distiller of the BlackBerry Attachment Service component when processing malformed PDF files, which...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 5393 Views

RISK: Medium Risk

Microsoft Windows SMB Multiple Vulnerabilities( 14 January 2009 )

Multiple vulnerabilities have been identified in Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system.1. SMB Buffer Overflow Remote Code Execution VulnerabilityAn unauthenticated remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol software...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2009 5317 Views