Security Bulletin

RISK: Medium Risk

Adobe Flash Media Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Media Server, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system.1. Due to an unspecified memory corruption error that could lead to arbitrary code execution....

Last Update Date: 28 Jan 2011 Release Date: 11 Nov 2010 4703 Views

RISK: Medium Risk

Microsoft Office Multiple Vulnerabilities( 10 November 2010 )

1. RTF Stack Buffer Overflow VulnerabilityA remote code execution vulnerability exists in the way that affected Microsoft Office software parses specially crafted Rich Text Format (RTF) data. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 4492 Views

RISK: Medium Risk

Microsoft Office PowerPoint Multiple Vulnerabilities( 10 November 2010 )

1. PowerPoint Parsing Buffer Overflow VulnerabilityA remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint 95 files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, ...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 4545 Views

RISK: Medium Risk

Apple Mac OS X ATSServer CFF Font Parsing Vulnerability

A vulnerability has been identified in Apple Mac OS X, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the Apple Type Services (ATS) when processing embedded CFF fonts, which could allow attackers...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 4929 Views

RISK: Medium Risk

Microsoft Forefront Unified Access Gateway Multiple Vulnerabilities( 10 November 2010 )

1. UAG Redirection Spoofing VulnerabilityA spoofing vulnerability exists in Forefront Unified Access Gateway (UAG). The vulnerability could allow spoofing or redirecting of traffic intended for the UAG server if a UAG user clicks a specially crafted link. An attacker could send a specially crafted URL to...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 4616 Views

RISK: Medium Risk

Adobe Flash Player Code Execution and Information Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash and Flex, which could be exploited by attackers to disclose sensitive information or compromise a vulnerable system.These issues are caused by input validation and memory corruption errors when processing malformed Flash content, which could be exploited by attackers...

Last Update Date: 28 Jan 2011 Release Date: 8 Nov 2010 4686 Views

RISK: Medium Risk

Google Chrome Memory Corruption and Use-after-free Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by remote attackers to execute arbitrary code.1. A use-after-free related to text editing.2. A memory corruption error when handling an overly large text area.3. ...

Last Update Date: 28 Jan 2011 Release Date: 5 Nov 2010 4645 Views

RISK: Medium Risk

Adobe Acrobat and Reader "printSeps()" Heap Corruption Vulnerability

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a heap corruption error in the "EScript.api" plugin when processing the "printSeps()" function within a PDF...

Last Update Date: 28 Jan 2011 Release Date: 5 Nov 2010 4831 Views

RISK: Medium Risk

Microsoft Internet Explorer CSS Tag Parsing Code Execution Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused due to an invalid flag reference within the "mshtml.dll" module when processing a Cascading Style Sheets...

Last Update Date: 28 Jan 2011 Release Date: 4 Nov 2010 4525 Views

RISK: Medium Risk

ProFTPD Remote Buffer Overflow and Directory Traversal Vulnerabilities

Two vulnerabilities have been identified in ProFTPD, which could be exploited by remote attackers to take complete control of an affected system.The first issue is caused by a stack overflow error in the "pr_netio_telnet_gets()" [src/netio.c] function when processing input containing...

Last Update Date: 28 Jan 2011 Release Date: 3 Nov 2010 4722 Views