HKCERT Infosec Express

Apple iTunes Multiple Vulnerabilities

3 Sep 2010 03:00:00 GMT

Multiple vulnerabilities have been identified in Apple iTunes, which could be exploited by attackers to gain knowledge of sensitive information or compromise a vulnerable system.

[more detail]

VMware ESX Multiple Vulnerabilities

2 Sep 2010 01:30:00 GMT

Multiple vulnerabilities have been identified in VMware ESX, which could be exploited by remote attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system.

[more detail]

Apple QuickTime "QTPlugin.ocx" Trusted Parameter Value Vulnerability

1 Sep 2010 02:00:00 GMT

A vulnerability has been identified in Apple QuickTime, which could be exploited by remote attackers to compromise a vulnerable system.

[more detail]

RealPlayer Multiple Code Execution Vulnerabilities

30 Aug 2010 02:20:00 GMT

Multiple vulnerabilities have been identified in RealPlayer, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable system.

[more detail]

Trend Micro Internet Security Pro 2010 "UfPBCtrl.dll" ActiveX Control Vulnerability

27 Aug 2010 02:00:00 GMT

A vulnerability has been identified in Trend Micro Internet Security Pro, which could be exploited by remote attackers to compromise a vulnerable system.

[more detail]

Insecure Library Loading Vulnerabilities

26 Aug 2010 02:30:00 GMT

A remote attack vector for a class of vulnerabilities that affects how applications load external libraries has been identified in various applications, which could be exploited by attackers to remotely execute arbitrary code in the context of the user running the vulnerable application when the user opens a file from an untrusted location.

[more detail]

Adobe Shockwave Player Multiple Vulnerabilities

26 Aug 2010 02:30:00 GMT

Multiple vulnerabilities have been identified in Adobe Shockwave Player, which could be exploited by remote attackers to compromise a vulnerable system.

[more detail]

Apple Mac OS X Multiple Vulnerabilities

26 Aug 2010 02:30:00 GMT

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system.

[more detail]

SonicWALL E-Class SSL-VPN ActiveX Control Format String Vulnerability

23 Aug 2010 02:00:00 GMT

A vulnerability has been identified in SonicWALL E-Class SSL-VPN, which could be exploited by remote attackers to compromise an affected system.

[more detail]

Google Chrome Multiple Memory Corruption and Spoofing Vulnerabilities

23 Aug 2010 02:00:00 GMT

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to manipulate certain information or compromise a vulnerable system.

[more detail]

Palm Pre webOS vCard Processing Code Execution Vulnerability

16 Aug 2010 02:00:00 GMT

A vulnerability has been identified in Palm Pre webOS, which could be exploited by remote attackers to take complete control of a vulnerable device.

[more detail]

Apple QuickTime Error Logging Remote Buffer Overflow Vulnerability

16 Aug 2010 02:00:00 GMT

A vulnerability has been identified in Apple QuickTime, which could be exploited by attackers to compromise a vulnerable system.

[more detail]

Opera Multiple Vulnerabilities

13 Aug 2010 02:00:00 GMT

Multiple vulnerabilities have been identified in Opera, which could be exploited by attackers to bypass security restrictions or compromise a vulnerable system.

[more detail]

Adobe Flash Player and AIR Multiple Code Execution Vulnerabilities

12 Aug 2010 01:30:00 GMT

Multiple vulnerabilities have been identified in Adobe Flash and AIR, which could be exploited by attackers to disclose sensitive information or compromise a vulnerable system.

[more detail]

Adobe Flash Media Server Multiple Code Execution and DoS Vulnerabilities

12 Aug 2010 01:30:00 GMT

Multiple vulnerabilities have been identified in Adobe Flash Media Server, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.

[more detail]

Google Chrome Flash Plugin Vulnerabilities

12 Aug 2010 01:30:00 GMT

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by attackers to disclose sensitive information or compromise a vulnerable system.

[more detail]

Microsoft Windows Shell Shortcut Icon Loading Vulnerability (11 Aug 2010)

11 Aug 2010 02:30:00 GMT

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to compromise a vulnerable system.

[more detail]