Security Bulletin

RISK: Medium Risk

Adobe Shockwave Player Multiple Memory Corruption Vulnerabilities

Two vulnerabilities have been identified in Adobe Shockwave Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted Shockwave content that, when loaded by the target user, will trigger a memory...

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 6487 Views

RISK: Extremely High Risk

Adobe Flash Player Integer Underflow Vulnerability

A vulnerability was identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted content that, when loaded by the target user, will trigger an integer underflow and...

Last Update Date: 7 Feb 2014 Release Date: 5 Feb 2014 7009 Views

RISK: Medium Risk

OpenLDAP Deny of Service Vulnerability

A vulnerability was identified in OpenLDAP. A remote user can cause denial of service conditions. A remote user can send specially crafted search request and then immediately unbind from the server to cause the target slapd service to crash.

Last Update Date: 6 Feb 2014 Release Date: 5 Feb 2014 6196 Views

RISK: High Risk

Mozilla Firefox / Thunderbird / SeaMonkey Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird, and SeaMonkey, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system. Errors when handling discarded images within the "RasterImage" class, terminating a...

Last Update Date: 6 Feb 2014 15:27 Release Date: 6 Feb 2014 6456 Views

RISK: High Risk

MySQL Remote Code Execution Vulnerability

A vulnerability was reported in MySQL, which can be exploited by a remote user to execute arbitrary code on the target system. A remote server can send a specially crafted server version number string to trigger a buffer overflow in 'client/mysql.cc' ...

Last Update Date: 4 Feb 2014 16:15 Release Date: 4 Feb 2014 6519 Views

RISK: Medium Risk

Schneider Electric Telvent SAGE Remote Terminal Unit DoS Vulnerability

A vulnerability has been identified in Schneider Electric Telvent SAGE Remote Terminal Unit, which can be exploited by a remote user can cause denial of service conditions. A remote user can send specially crafted DNP3 data to interrupt communications and cause the target service to temporarily consume excessive...

Last Update Date: 4 Feb 2014 16:15 Release Date: 4 Feb 2014 6091 Views

RISK: Medium Risk

cURL Information Disclosure Vulnerability

A vulnerability has been identified in libcURL, which can be exploited by a remote user to obtain information from the wrong session. When responding to an NTLM-authenticated HTTP or HTTPS request, the system may use the wrong connection (a connection authenticated with different credentials...

Last Update Date: 4 Feb 2014 16:14 Release Date: 4 Feb 2014 6089 Views

RISK: Medium Risk

VLC Media Player Buffer Overflow Vulnerability

A vulnerability has been identified in VLC Media Player, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 4 Feb 2014 16:09 Release Date: 4 Feb 2014 5980 Views

RISK: Medium Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by malicious users to disclose sensitive information, manipulate certain data, cause a DoS (Denial of Service) and compromise a vulnerable system.

Last Update Date: 4 Feb 2014 16:08 Release Date: 4 Feb 2014 6042 Views

RISK: High Risk

Yahoo Mail Account Credential Theft

On 30 Jan 2014, Yahoo has identified a coordinated effort to gain unauthorized access to Yahoo Mail accounts. Yahoo has prompted affected users to reset passwords, and issued a notice on the attack. Yahoo claimed that the list of usernames and passwords that were used to...

Last Update Date: 4 Feb 2014 11:50 Release Date: 4 Feb 2014 6306 Views