Security Bulletin

RISK: Medium Risk

Microsoft SharePoint Multiple Vulnerabilities

XSS in inplview.aspx Vulnerability A cross-site scripting vulnerability exists in Microsoft SharePoint 2010 that could result in information disclosure or elevation of privilege if a user clicks a specially crafted URL containing malicious JavaScript elements. Due to the vulnerability, when the malicious JavaScript...

Last Update Date: 15 Feb 2012 12:02 Release Date: 15 Feb 2012 4353 Views

RISK: Medium Risk

Microsoft Windows Ancillary Function Driver Multiple Vulnerabilities

AfdPoll Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists where the Ancillary Function Driver (afd.sys) improperly validates input passed from user mode to the Windows kernel. The vulnerability could allow an attacker to run code with elevated privileges. A local attacker...

Last Update Date: 15 Feb 2012 12:01 Release Date: 15 Feb 2012 4421 Views

RISK: High Risk

Microsoft .NET Framework and Microsoft Silverlight Multiple Vulnerabilities

.NET Framework Unmanaged Objects Vulnerability A remote code execution vulnerability exists in Microsoft .NET Framework and Silverlight that can allow a specially crafted Microsoft .NET Framework application to access memory in an unsafe manner. An attacker who successfully exploited this vulnerability could run arbitrary code...

Last Update Date: 15 Feb 2012 11:45 Release Date: 15 Feb 2012 4206 Views

RISK: High Risk

Microsoft Windows C Run-Time Library Buffer Overflow Vulnerability

A remote code execution vulnerability exists in the way that the msvcrt DLL calculates the size of a buffer in memory, allowing data to be copied into memory that has not been properly allocated. This vulnerability could allow remote code execution if a user opens a specially crafted...

Last Update Date: 15 Feb 2012 11:44 Release Date: 15 Feb 2012 4515 Views

RISK: High Risk

Oracle Java SE Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Oracle Java SE, which can be exploited by attackers to execute arbitrary code, cause denial of service, and manipulate data. A remote user can send specially crafted data to execute arbitrary code on the target system or cause complete denial...

Last Update Date: 15 Feb 2012 10:26 Release Date: 15 Feb 2012 4677 Views

RISK: High Risk

Adobe Shockwave Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system. An unspecified error in the Shockwave 3D Asset can be exploited to corrupt memory. An unspecified error can be exploited to cause a heap...

Last Update Date: 15 Feb 2012 10:07 Release Date: 15 Feb 2012 4416 Views

RISK: High Risk

Mozilla Firefox / Thunderbird / SeaMonkey XBL Binding Use-After-Free Vulnerability

A vulnerability has been identified in multiple Mozilla products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a use-after-free error in the "nsXBLDocumentInfo::ReadPrototypeBindings()" method when handling XBL bindings...

Last Update Date: 14 Feb 2012 10:23 Release Date: 14 Feb 2012 4540 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to bypass certain security restrictions, manipulate certain data, and compromise a user's system. An unspecified error exists within clipboard monitoring after a...

Last Update Date: 10 Feb 2012 14:52 Release Date: 10 Feb 2012 4696 Views

RISK: Medium Risk

MySQL Unspecified Code Execution Vulnerability

A vulnerability has been identified in MySQL, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to an unspecified error. Successful exploitation allows execution of arbitrary code.

Last Update Date: 10 Feb 2012 14:40 Release Date: 10 Feb 2012 4408 Views

RISK: High Risk

Novell iPrint Client Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system. An unspecified error exists in nipplib.dll within the "GetDriverSettings(." function. An unspecified error exists within the "GetPrinterURLList2(." function...

Last Update Date: 10 Feb 2012 14:38 Release Date: 10 Feb 2012 4355 Views