Security Bulletin

RISK: Medium Risk

Novell iManager eDirectory Plugin Schema Buffer Overflow Vulnerability

A vulnerability has been identified in Novell iManager, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the eDirectory plugin when importing or exporting data from the schema, which could be exploited to crash an...

Last Update Date: 28 Jan 2011 Release Date: 11 Jan 2010 4421 Views

RISK: Medium Risk

VMware ESX and vMA Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX and vMA, which could be exploited by attackers to manipulate or disclose certain data, bypass security restrictions or compromise a vulnerable system. These issues are caused by errors in NSS and NSPR.

Last Update Date: 28 Jan 2011 Release Date: 8 Jan 2010 4502 Views

RISK: Medium Risk

Adobe Flash Media Server Directory Traversal and DoS Vulnerabilities

Two vulnerabilities have been identified in Adobe Flash Media Server, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.1. An unspecified directory traversal error which could lead to FMS loading arbitrary DLLs present on the server....

Last Update Date: 28 Jan 2011 Release Date: 22 Dec 2009 4486 Views

RISK: Medium Risk

Winamp Module Decoder Plug-in Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Winamp, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by buffer and integer overflow errors in the Module Decoder Plug-in (IN_MOD.DLL) when processing malformed Impulse Tracker, Ultratracker or...

Last Update Date: 28 Jan 2011 Release Date: 18 Dec 2009 4426 Views

RISK: Medium Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird which could be exploited by attackers to manipulate or disclose certain data, bypass security restrictions or compromise a vulnerable system.1. A memory corruption errors in the JavaScript and browser engines when parsing malformed data...

Last Update Date: 28 Jan 2011 Release Date: 17 Dec 2009 4446 Views

RISK: Medium Risk

Adobe Reader and Acrobat Unspecified Code Execution Vulnerability

A vulnerability has been identified in Adobe Reader and Acrobat, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified memory corruption error, which could be exploited by attackers to execute arbitrary code by tricking a user into...

Last Update Date: 28 Jan 2011 Release Date: 15 Dec 2009 4422 Views

RISK: Medium Risk

Sun Solaris Gnome PDF Viewer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Solaris, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. These issues are caused by errors in the Solaris GNOME PDF rendering libraries.1. Multiple integer overflows in "SplashBitmap::...

Last Update Date: 28 Jan 2011 Release Date: 15 Dec 2009 4562 Views

RISK: Medium Risk

Adobe Flash Player and AIR Multiple Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player and AIR, which could be exploited by remote attackers to disclose sensitive information or compromise a vulnerable system.1. Due to a memory corruption error when parsing JPEG data, which could be exploited by attackers to execute...

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2009 4421 Views

RISK: Medium Risk

Novell iPrint Client Remote Buffer Overflow Vulnerabilities

Two vulnerabilities have been identified in Novell iPrint Client, which could be exploited by remote attackers to compromise a vulnerable system.1. Due to a buffer overflow error in "ienipp.ocx" when processing an overly long "target-frame" parameter, which...

Last Update Date: 28 Jan 2011 Release Date: 9 Dec 2009 4375 Views

RISK: Medium Risk

Microsoft Windows Active Directory Federation Services (ADFS) Multiple Vulnerabilities( 09 December 2009 )

1. Single Sign On Spoofing in ADFS Vulnerabilityspoofing vulnerability in Active Directory Federation Services could allow an attacker to impersonate an authenticated user if the attacker has access to a workstation and Web browser recently used by the targeted user to access a Web site that offers single sign...

Last Update Date: 28 Jan 2011 Release Date: 9 Dec 2009 4195 Views