Security Bulletin

RISK: Medium Risk

Apple QuickTime RTSP Response "Reason-Phrase" Buffer Overflow

A vulnerability has been identified in Apple QuickTime, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error when processing RTSP response messages and displaing the "Reason...

Last Update Date: 28 Jan 2011 Release Date: 14 Jan 2008 3173 Views

RISK: Medium Risk

VMware ESX Server and VirtualCenter Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX Server and VirtualCenter, which could be exploited by attackers to bypass security restrictions, disclose sensitive information or execute arbitrary commands and scripting code. These issues are caused by errors in Tomcat, JRE, OpenPegasus, Samba, util...

Last Update Date: 28 Jan 2011 Release Date: 9 Jan 2008 3156 Views

RISK: Medium Risk

VMware ESX Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware ESX Server, which could be exploited by attackers to bypass security restrictions or execute arbitrary code.These issues are caused by errors in OpenPegasus, Samba, util-linux, Perl, and OpenSSL.

Last Update Date: 28 Jan 2011 Release Date: 9 Jan 2008 3235 Views

RISK: Medium Risk

Microsoft Windows LSASS Bypass Vulnerability( 09 January 2008 )

An elevation of privilege vulnerability exists in the Microsoft Windows Local Security Authority Subsystem Service (LSASS) due to its improper handling of local procedure call (LPC) requests. The vulnerability could allow an attacker to run code with elevated privileges. An attacker who successfully exploited...

Last Update Date: 28 Jan 2011 Release Date: 9 Jan 2008 2995 Views

RISK: Medium Risk

Microsoft Windows TCP/IP Multiple Vulnerabilities( 09 January 2008 )

1. Windows Kernel TCP/IP/IGMPv3 and MLDv2 VulnerabilityA remote code execution vulnerability exists in the Windows kernel due to the way that the Windows kernel handles TCP/IP structures storing the state of IGMPv3 and MLDv2 queries. Supported editions of Microsoft Windows XP, ...

Last Update Date: 28 Jan 2011 Release Date: 9 Jan 2008 3012 Views

RISK: Medium Risk

PHP Multiple Vulnerabilities

Some vulnerabilities have been reported in PHP, where some have unknown impact and others can be exploited by malicious users to bypass certain security restrictions.1) An integer overflow error exists in the "chunk_split()" function.2) Integer overflow errors exists in the "...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2008 3339 Views

RISK: Medium Risk

RealPlayer Data Processing Buffer Overflow Vulnerability

A vulnerability has been identified in RealPlayer, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by an unspecified buffer overflow error when processing malformed data, which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2008 3207 Views

RISK: High Risk

Novell GroupWise VCALENDAR Multiple Vulnerabilities

A vulnerability has been identified in Novell GroupWise, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a buffer overflow error in the "gwwww1.dll" module when processing the "TZID" ...

Last Update Date: 27 Jan 2011 16:05 Release Date: 27 Jan 2011 4741 Views