Security Bulletin

RISK: Medium Risk

Novell iPrint Client "GetDriverSettings()" Remote Stack Overflow Vulnerability

A vulnerability has been identified Novell iPrint Client, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the "ienipp.ocx" ActiveX component when processing data supplied via the "GetDriverSettings()" method, ...

Last Update Date: 28 Jan 2011 Release Date: 22 Nov 2010 5577 Views

RISK: Medium Risk

Adobe Acrobat and Reader Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Reader 9.4 (and earlier versions) for Windows, Macintosh and UNIX, and Adobe Acrobat 9.4 (and earlier 9.x versions) for Windows and Macintosh. These vulnerabilities could cause the application to crash...

Last Update Date: 28 Jan 2011 Release Date: 18 Nov 2010 5558 Views

RISK: Medium Risk

VMware ESX / ESXi Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX/ESXi, which could be exploited by attackers to cause a denial of service or execute arbitrary code. These issues are caused by errors in COS kernel, likewisekrb5, likewiseopenldap, likewiseopen, and pamkrb5.

Last Update Date: 28 Jan 2011 Release Date: 17 Nov 2010 5608 Views

RISK: Medium Risk

RealPlayer RealMedia Image Map Parsing Vulnerabilities

A vulnerability has been identified in RealPlayer which could be exploited by remote attackers to compromise a vulnerable system. The vulnerabilities are caused due to integer truncation errors when parsing image maps in RealMedia (.rm) files. This can be exploited to cause heap-based buffer...

Last Update Date: 28 Jan 2011 Release Date: 16 Nov 2010 5618 Views

RISK: Medium Risk

Apple Mac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by errors in AFP Server, ...

Last Update Date: 28 Jan 2011 Release Date: 12 Nov 2010 5762 Views

RISK: Medium Risk

Apple QuickTime Sorenson Video 3 Array-Indexing Vulnerability

A vulnerability have been identified in Apple QuickTime, could be exploited by remote attackers to compromise an affected system. An array-indexing error when parsing Sorenson Video 3 content and can be exploited to corrupt memory during decompression via a specially crafted file.

Last Update Date: 28 Jan 2011 Release Date: 12 Nov 2010 5559 Views

RISK: Medium Risk

Adobe Flash Media Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Media Server, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system.1. Due to an unspecified memory corruption error that could lead to arbitrary code execution....

Last Update Date: 28 Jan 2011 Release Date: 11 Nov 2010 5606 Views

RISK: Medium Risk

Microsoft Office Multiple Vulnerabilities( 10 November 2010 )

1. RTF Stack Buffer Overflow VulnerabilityA remote code execution vulnerability exists in the way that affected Microsoft Office software parses specially crafted Rich Text Format (RTF) data. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 5414 Views

RISK: Medium Risk

Microsoft Office PowerPoint Multiple Vulnerabilities( 10 November 2010 )

1. PowerPoint Parsing Buffer Overflow VulnerabilityA remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint 95 files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, ...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 5457 Views

RISK: Medium Risk

Apple Mac OS X ATSServer CFF Font Parsing Vulnerability

A vulnerability has been identified in Apple Mac OS X, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the Apple Type Services (ATS) when processing embedded CFF fonts, which could allow attackers...

Last Update Date: 28 Jan 2011 Release Date: 10 Nov 2010 5886 Views