Security Bulletin

RISK: High Risk

Microsoft Windows SMB Response Parsing Vulnerability

An unauthenticated remote code execution vulnerability exists in the way that the Microsoft Server Message Block (SMB) client implementation handles specially crafted SMB responses. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending a specially crafted...

Last Update Date: 15 Jun 2011 12:38 Release Date: 15 Jun 2011 5393 Views

RISK: High Risk

Microsoft Windows Distributed File System Memory Corruption Vulnerability

DFS Memory Corruption Vulnerability An unauthenticated remote code execution vulnerability exists in the way that the Distributed File System (DFS) client parses specially crafted DFS responses. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending...

Last Update Date: 15 Jun 2011 12:37 Release Date: 15 Jun 2011 5253 Views

RISK: High Risk

Microsoft Windows Kernel-Mode Drivers Win32k OTF Validation Vulnerability

A remote code execution vulnerability exists due to the way that the Windows kernel-mode driver improperly parses specially crafted OpenType fonts on x64-based and Itanium-based systems. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker...

Last Update Date: 15 Jun 2011 12:35 Release Date: 15 Jun 2011 5232 Views

RISK: High Risk

Microsoft Forefront Threat Management Gateway Firewall Client Memory Corruption Vulnerability

A remote code execution vulnerability exists in the TMG Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Last Update Date: 15 Jun 2011 12:32 Release Date: 15 Jun 2011 5243 Views

RISK: High Risk

Microsoft .NET Framework Array Offset Vulnerability

A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a specially crafted Microsoft .NET application to access memory in an unsafe manner. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the logged-on...

Last Update Date: 15 Jun 2011 12:29 Release Date: 15 Jun 2011 5130 Views

RISK: High Risk

Microsoft Windows OLE Automation Underflow Vulnerability

A remote code execution vulnerability exists in Object Linking and Embedding (OLE) Automation. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. If a user is logged on with administrative user rights, an attacker could...

Last Update Date: 15 Jun 2011 12:28 Release Date: 15 Jun 2011 5174 Views

RISK: High Risk

Symantec Mail Security KeyView File Processing Vulnerabilities

Multiple vulnerabilities have been reported in Symantec Mail Security, which can be exploited by malicious people to compromise a vulnerable system.An error when processing Windows Write (WRI) files can be exploited to cause a stack-based buffer overflow.Some errors when processing unspecified...

Last Update Date: 13 Jun 2011 14:34 Release Date: 13 Jun 2011 5268 Views

RISK: High Risk

Sun Java JDK / JRE / SDK Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Java, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), compromise a user's system, and compromise a vulnerable system.Errors in...

Last Update Date: 9 Jun 2011 11:30 Release Date: 9 Jun 2011 5727 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to disclose potentially sensitive information, conduct injection attacks, bypass certain security restrictions, and potentially compromise a user's system. A use-after-free error exists within the...

Last Update Date: 9 Jun 2011 10:49 Release Date: 9 Jun 2011 5475 Views

RISK: High Risk

Novell iPrint Client Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell iPrint Client, which could be exploited by remote attackers to compromise a vulnerable system. A boundary error in nipplib.dll when handling the "uri" parameter via "printer-url" can be exploited to cause a heap...

Last Update Date: 8 Jun 2011 14:17 Release Date: 8 Jun 2011 5608 Views