Security Bulletin

RISK: Medium Risk

Autonomy Keyview Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Autonomy Keyview, which can be exploited by malicious people to compromise a vulnerable system.An integer overflow error in jtdsr.dll when parsing QLST chunks within Ichitaro documents can be exploited to cause a heap-based buffer overflow.A...

Last Update Date: 10 Oct 2011 12:26 Release Date: 10 Oct 2011 5092 Views

RISK: High Risk

IBM Raditional Appscan Products Two Vulnerabilities

Two vulnerabilities have been identified in IBM Rational AppScan, which can be exploited by malicious people to compromise a user's system. An unspecified error in the import functionality can be exploited via a specially crafted ZIP file. NOTE: This only affects the Enterprise and...

Last Update Date: 7 Oct 2011 15:11 Release Date: 7 Oct 2011 5051 Views

RISK: High Risk

Cisco Firewall Services Module Security Bypass and Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Firewall Services Module (FWSM), which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service). An error in the implementation of the system log message ID 302015 when generating a log...

Last Update Date: 7 Oct 2011 15:10 Release Date: 7 Oct 2011 5049 Views

RISK: Medium Risk

Cisco Network Admission Control Directory Traversal Vulnerability

A vulnerability has been identified in Cisco Network Admission Control (NAC), which can be exploited by malicious people to disclose sensitive information. Certain input passed to the management interface via the URL is not properly verified before being used. This can be exploited to disclose the...

Last Update Date: 7 Oct 2011 15:02 Release Date: 7 Oct 2011 5090 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system. A use-after-free error exists in text line box handling and the v8 bindings. An error in...

Last Update Date: 6 Oct 2011 14:21 Release Date: 6 Oct 2011 5154 Views

RISK: Medium Risk

VMware Workstation / Player / Fusion UDF Filesystem Handling Buffer Overflow Vulnerability

A vulnerability has been identified in some VMware products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when handling UDF filesystem images. This can be exploited to cause a buffer overflow via...

Last Update Date: 6 Oct 2011 14:21 Release Date: 6 Oct 2011 5374 Views

RISK: Medium Risk

SSL/TLS Protocol Vulnerability

A vulnerability has idenitied in SSL/TLS using Cypher Block Chaining (CBC), which can be exploited by malicious people to conduct Man-in-the-middle attack to decrypt encrypted SSL/TLS traffic and obtain sensitive information. A proof of concept...

Last Update Date: 3 Oct 2011 Release Date: 30 Sep 2011 6009 Views

RISK: High Risk

Apache HTTPD Range header vulnerability

A vulnerability has been identified in Apache HTTPD, which can be exploited by remote attacker to cause Denial of Service. The vulnerability can be detected by visiting the following website:http://apache-range-exploit.com/

Last Update Date: 3 Oct 2011 Release Date: 29 Aug 2011 6630 Views

RISK: Medium Risk

Adobe Photoshop Elements 8 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Photoshop Elements 8, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 5695 Views

RISK: Medium Risk

Symantec IM Manager Administrator Console Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Symantec IM Manager, which can be exploited by malicious people to conduct Code Injection, Cross-Site Scripting and SQL Injection.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 5111 Views