Security Bulletin

RISK: Medium Risk

AppleiPhone / iPod touch Multiple Vulnerabilities

Some weaknesses, security issues, and vulnerabilities have been reported in Apple iPhone and iPod touch, which can be exploited by malicious people to bypass certain security restrictions, disclose potential sensitive information, conduct spoofing attacks, to cause a DoS (Denial of Service), or...

Last Update Date: 28 Jan 2011 Release Date: 24 Nov 2008 5539 Views

RISK: Medium Risk

Adobe AIR Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe AIR, which can be exploited by malicious people to compromise a user's system.1. Due to multiple unspecified input validation errors in the parsing of SWF files which can be exploited to potentially execute arbitrary code.2...

Last Update Date: 28 Jan 2011 Release Date: 19 Nov 2008 5585 Views

RISK: Medium Risk

Apple Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which could be exploited by attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by buffer overflow, uninitialized memory access, memory corruption, ...

Last Update Date: 28 Jan 2011 Release Date: 17 Nov 2008 5592 Views

RISK: Medium Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or take complete control of an affected system.1. An error when using the canvas...

Last Update Date: 28 Jan 2011 Release Date: 14 Nov 2008 5429 Views

RISK: Medium Risk

Trend Micro ServerProtect Multiple Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Trend Micro ServerProtect, which could be exploited by remote attackers to take complete control of an affected system.An access control error within an unspecified RPC interface could allow remote unauthenticated attackers to gain administrative access to a vulnerable server.Various...

Last Update Date: 28 Jan 2011 Release Date: 13 Nov 2008 5509 Views

RISK: Medium Risk

Apple iLife and Aperture Image Handling Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Apple iLife and Aperture, which could be exploited by remote attackers to compromise a vulnerable system. These issues are caused by uninitialized memory access and memory corruption errors in ImageIO when processing malformed LZW-encoded TIFF images or embedded ICC profiles...

Last Update Date: 28 Jan 2011 Release Date: 12 Nov 2008 5393 Views

RISK: Medium Risk

Microsoft Windows SMB Credential Reflection Vulnerability( 12 November 2008 )

A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol handles NTLM credentials when a user connects to an attacker's SMB server. This vulnerability allows an attacker to replay the user's credentials back to them and execute...

Last Update Date: 28 Jan 2011 Release Date: 12 Nov 2008 5349 Views

RISK: Medium Risk

Microsoft XML Core Services Multiple Vulnerabilities( 12 November 2008 )

1. MSXML Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that Microsoft XML Core Services parses XML content. The vulnerability could allow remote code execution if a user browses a Web site that contains specially crafted content or opens specially crafted HTML e-mail...

Last Update Date: 28 Jan 2011 Release Date: 12 Nov 2008 5258 Views

RISK: Medium Risk

Adobe Reader/Acrobat Multiple Vulnerabilities

Multiple vulnerabilities have been identified in in Adobe Reader/Acrobat, which can be exploited by malicious people to compromise a user's system.1. A memory corruption error when passing an overly long argument to an AcroJS function, which could be exploited to crash...

Last Update Date: 28 Jan 2011 Release Date: 5 Nov 2008 5449 Views

RISK: Medium Risk

Opera Command Execution and Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which could be exploited by remote attackers to conduct cross-site scripting attacks or compromise a user's system.1. Certain parameters passed to the "History Search" functionality are not properly sanitised before being used. ...

Last Update Date: 28 Jan 2011 Release Date: 31 Oct 2008 5421 Views