Security Bulletin

RISK: High Risk

Apple iTunes WebKit Multiple Vulnerabilities

Two vulnerabilities have been identified in Apple iTunes, which could be exploited by remote attackers to compromise a vulnerable system. Due to a use-after-free error in WebKit when handling text nodes, which could be exploited to execute arbitrary code via a malicious web...

Last Update Date: 21 Apr 2011 12:22 Release Date: 21 Apr 2011 5666 Views

RISK: High Risk

Wireshark Multiple Code Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Wireshark, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. A buffer overflow error in the DECT dissector when processing malformed data, which could allow code execution via malformed packets or a malicious...

Last Update Date: 20 Apr 2011 10:27 Release Date: 20 Apr 2011 5633 Views

RISK: High Risk

Google Chrome GPU Process Vulnerability

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by remote attackers to compromise a vulnerable system. An off-by-three error in the GPU process, which could be exploited by remote attackers to execute arbitrary code via a malicious web page...

Last Update Date: 19 Apr 2011 11:31 Release Date: 19 Apr 2011 5712 Views

RISK: High Risk

Apple iOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS for iPhone, iPod and iPad, which could be exploited by remote attackers to bypass restrictions, gain knowledge of sensitive information, or compromise a vulnerable device. 1. A use-after-free error in WebKit when...

Last Update Date: 19 Apr 2011 Release Date: 15 Apr 2011 5724 Views

RISK: Medium Risk

VLC Media Player "MP4_ReadBox_skcr()" Heap Corruption Vulnerability

A vulnerability has been identified in VLC Media Player, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a heap corruption error in the "MP4_ReadBox_skcr()" [modules/demux/mp4/libmp4.c] function when processing...

Last Update Date: 19 Apr 2011 Release Date: 12 Apr 2011 5098 Views

RISK: High Risk

Apple Safari WebKit Multiple Vulnerabilities

Two vulnerabilities have been identified in Apple Safari, which could be exploited by remote attackers to compromise a vulnerable system.A use-after-free error in WebKit when handling text nodes, which could be exploited to execute arbitrary code via a malicious web page...

Last Update Date: 19 Apr 2011 Release Date: 15 Apr 2011 5587 Views

RISK: Medium Risk

RealNetworks RealPlayer "OpenURLInDefaultBrowser()" Vulnerability

A vulnerability has been identified in RealNetworks RealPlayer, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error within the "OpenURLInDefaultBrowser()" method when processing user-supplied parameters, which could allow an attacker to execute arbitrary...

Last Update Date: 19 Apr 2011 Release Date: 15 Apr 2011 5630 Views

RISK: Extremely High Risk

Google Chrome Flash Content Processing Code Execution Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by an error in Flash. This vulnerability is exploited in the wild. For additional information, please refer to Adobe Flash Player Content...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5192 Views

RISK: Extremely High Risk

Adobe Acrobat and Reader "authplay.dll" Code Execution Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error in the "authplay.dll" module when processing malformed Flash content within a PDF document, ...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5446 Views

RISK: Extremely High Risk

Adobe Flash Player Content Processing Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a memory corruption error when processing malformed Flash content, which could be exploited by attackers to compromise a vulnerable system by tricking...

Last Update Date: 18 Apr 2011 Release Date: 13 Apr 2011 5226 Views