Security Bulletin

RISK: Medium Risk

Google Picasa RAW Image Parsing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Picasa, which can be exploited by malicious people to compromise a user's system.An integer underflow error within the Picasa3.exe module when parsing JPEG tags can be exploited to cause a heap-based buffer overflow via...

Last Update Date: 23 Dec 2013 12:26 Release Date: 23 Dec 2013 6183 Views

RISK: Medium Risk

Splunk Enterprise Data Processing Vulnerability

A vulnerability has been identified in Splunk Enterprise. A remote user can cause denial of service conditions. A remote user can send specially crafted data to cause the target server to become unavailable. Systems configured as data 'receivers' on the listening or receiving port...

Last Update Date: 20 Dec 2013 10:09 Release Date: 20 Dec 2013 5859 Views

RISK: Medium Risk

Asterisk Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Asterisk, which can be exploited by malicious people to escalate privileges and cause a DoS (Denial of Service). A 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. ...

Last Update Date: 19 Dec 2013 18:10 Release Date: 19 Dec 2013 5895 Views

RISK: High Risk

RealOne RMP File Heap Overflow Vulnerability

A vulnerability has been identified in RealPlayer. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted RMP file that, when loaded by the target user, will trigger a heap overflow...

Last Update Date: 19 Dec 2013 18:04 Release Date: 19 Dec 2013 5939 Views

RISK: Medium Risk

Wireshark Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).An error within the SIP dissector (epan/dissectors/packet-sip.c) can be exploited to cause an infinite loop....

Last Update Date: 19 Dec 2013 17:59 Release Date: 19 Dec 2013 5906 Views

RISK: High Risk

Apple OS X Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple OS X, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system The security issue and vulnerability is caused due to a bundled vulnerable version of Apple Safari...

Last Update Date: 18 Dec 2013 12:05 Release Date: 18 Dec 2013 6032 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.An error related to origin tracking can be exploited to autofill a form in a subframe...

Last Update Date: 18 Dec 2013 12:04 Release Date: 18 Dec 2013 6268 Views

RISK: Medium Risk

IrfanView GIF Image Processing Buffer Overflow Vulnerability

A vulnerability has been identified in IrfanView, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when handling the LZW code stream within GIF files and can be exploited to cause a...

Last Update Date: 18 Dec 2013 12:03 Release Date: 18 Dec 2013 6123 Views

RISK: Medium Risk

HP LaserJet Printers Denial of Service Vulnerability

A vulnerability has been identified in HP LaserJet Printers. which can be exploited by remote user can cause denial of service conditions. A remote user can send specially crafted data to cause partial denial of service conditions on the target printer.

Last Update Date: 16 Dec 2013 10:27 Release Date: 16 Dec 2013 6351 Views

RISK: High Risk

Microsoft Graphics Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that affected Windows components and other affected software handle specially crafted TIFF files. The vulnerability could allow remote code execution if a user views TIFF files in shared content. An attacker who successfully exploited this vulnerability could take complete...

Last Update Date: 13 Dec 2013 Release Date: 11 Dec 2013 6014 Views