Security Bulletin

RISK: Medium Risk

Microsoft Access Snapshot Viewer Arbitrary File Download Vulnerability( 13 August 2008 )

A remote code execution vulnerability exists in the ActiveX control for the Snapshot Viewer for Microsoft Access. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker...

Last Update Date: 28 Jan 2011 Release Date: 13 Aug 2008 5408 Views

RISK: Medium Risk

Microsoft Excel Multiple Vulnerabilities( 13 August 2008 )

1. Excel Indexing Validation VulnerabilityA remote code execution vulnerability exists in the way Excel processes index values when loading Excel files into memory. An attacker could exploit the vulnerability by opening a specially crafted file which could be hosted on a Web site, or included as an...

Last Update Date: 28 Jan 2011 Release Date: 13 Aug 2008 5312 Views

RISK: Medium Risk

Microsoft Internet Explorer Multiple Vulnerabilities( 13 August 2008 )

1. HTML Objects Memory Corruption VulnerabilityA remote code execution vulnerability exists in Internet Explorer due to attempts to access uninitialized memory in certain situations. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability...

Last Update Date: 28 Jan 2011 Release Date: 13 Aug 2008 5265 Views

RISK: Medium Risk

Microsoft Windows Messenger Information Disclosure Vulnerability( 13 August 2008 )

An information disclosure vulnerability exists in supported versions of Windows Messenger. Scripting of a particular ActiveX control, Messenger.UIAutomation.1, could allow information disclosure from these programs in the context of the logged-on user. An attacker could change state, get contact...

Last Update Date: 28 Jan 2011 Release Date: 13 Aug 2008 5361 Views

RISK: Medium Risk

Sun Solaris "snoop" Utility Remote Command Execution Vulnerability

A vulnerability has been identified in Sun Solaris, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by unspecified errors in the "snoop" network utility when displaying SMB traffic, which may allow a remote attacker to execute arbitrary...

Last Update Date: 28 Jan 2011 Release Date: 7 Aug 2008 5578 Views

RISK: Medium Risk

CA ARCserve Backup LGServer Service Vulnerability

A vulnerability has been identified in CA ARCserve Backup for Laptops and Desktops, CA Desktop Management Suite and CA Protection Suites, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an integer underflow error...

Last Update Date: 28 Jan 2011 Release Date: 5 Aug 2008 5537 Views

RISK: Medium Risk

Sun Solaris Adobe Reader Multiple Vulnerabilities

A vulnerability and a security issue in Adobe Reader in Sun Solaris, which can be exploited by malicious, local users to perform certain actions with escalated privileges and potentially by malicious people to compromise a user's system.NOTE: Solaris 8, Solaris 9, ...

Last Update Date: 28 Jan 2011 Release Date: 5 Aug 2008 5527 Views

RISK: Medium Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system.1. Due to a stack buffer overflow error in...

Last Update Date: 28 Jan 2011 Release Date: 4 Aug 2008 5461 Views

RISK: Medium Risk

VMware ESX Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service, or execute arbitrary code.

Last Update Date: 28 Jan 2011 Release Date: 29 Jul 2008 5461 Views

RISK: Medium Risk

Trend Micro OfficeScan ObjRemoveCtrl Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Trend Micro OfficeScan, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. These issues are caused by buffer overflow errors in the Web-Deployment ObjRemoveCtrl Class ActiveX control (...

Last Update Date: 28 Jan 2011 Release Date: 29 Jul 2008 5436 Views