Security Bulletin

RISK: Medium Risk

Cisco IOS for Unified Communications Manager Express Vulnerability

A vulnerability has been identified in Cisco IOS for Unified Communications Manager Express, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error in the login section of the Extension Mobility feature...

Last Update Date: 28 Jan 2011 Release Date: 25 Sep 2009 4446 Views

RISK: Medium Risk

Apple iTunes Playlist Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Apple iTunes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing playlist ".pls" files containing malformed data, which could be exploited by attackers to crash an...

Last Update Date: 28 Jan 2011 Release Date: 23 Sep 2009 4426 Views

RISK: Medium Risk

Sun StarOffice / StarSuite XML Parsing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun StarOffice/StarSuite, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. User-after-free errors when processing an XML document with specially-crafted Notation or Enumeration attribute...

Last Update Date: 28 Jan 2011 Release Date: 22 Sep 2009 4497 Views

RISK: Medium Risk

Sun StarOffice / StarSuite Word Document Table Parsing Vulnerabilities

Two vulnerabilities have been identified in StarOffice and StarSuite, may allow a remote unprivileged user to execute arbitrary code on the system with the privileges of a local user running StarOffice/StarSuite, if the local user opens a crafted Microsoft Word document provided by the remote user...

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 4494 Views

RISK: Medium Risk

VMware Workstation 5 VMnc Codec Multiple Vulnerabilities

A vulnerabilities have been identified in VMware Workstation, which could be exploited by attackers to compromisean affected system.The vulnerabilities are caused due to multiple errors in vmnc.dll when processing specially crafted AVI files and can be exploited to cause heap-based buffer overflows.

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 4440 Views

RISK: Medium Risk

AppleMac OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X,which could be exploited by remote or local attackers to disclosesensitive information, bypass security restrictions, cause a denialof service or compromise an affected system. These vulnerabilitiesare caused by buffer overflows, integer overflows, uninitialized pointers...

Last Update Date: 28 Jan 2011 Release Date: 14 Sep 2009 4442 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, which could be exploited by attackers to manipulate certain data, bypass security restrictions or compromise a vulnerable system.1. Memory corruption errors in the JavaScript and browser engines when parsing malformed data, which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4382 Views

RISK: Medium Risk

Apple iPhone / iPod touch Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iPhone and iPod touch, which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, cause a denial of service or compromise a vulnerable system.1. A heap overflow error in CoreAudio when processing...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4535 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to take complete control of an affected system. These issues are caused by memory corruption and heap overflow errors when processing malformed H.264 movies, MPEG-4 videos, or...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4412 Views

RISK: Medium Risk

Cisco Products TCP State Remote Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in various Cisco products, which could be exploited by remote attackers to cause a denial of service.1. An errors in TCP protocol when handling the states of large numbers of established TCP connections, which could be exploited to exhaust all...

Last Update Date: 28 Jan 2011 Release Date: 10 Sep 2009 4406 Views