Security Bulletin

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, which could be exploited by attackers to manipulate certain data, bypass security restrictions or compromise a vulnerable system.1. Memory corruption errors in the JavaScript and browser engines when parsing malformed data, which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4397 Views

RISK: Medium Risk

Apple iPhone / iPod touch Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iPhone and iPod touch, which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, cause a denial of service or compromise a vulnerable system.1. A heap overflow error in CoreAudio when processing...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4550 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to take complete control of an affected system. These issues are caused by memory corruption and heap overflow errors when processing malformed H.264 movies, MPEG-4 videos, or...

Last Update Date: 28 Jan 2011 Release Date: 11 Sep 2009 4428 Views

RISK: Medium Risk

Cisco Products TCP State Remote Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in various Cisco products, which could be exploited by remote attackers to cause a denial of service.1. An errors in TCP protocol when handling the states of large numbers of established TCP connections, which could be exploited to exhaust all...

Last Update Date: 28 Jan 2011 Release Date: 10 Sep 2009 4421 Views

RISK: Medium Risk

Microsoft Windows TCP/IP Multiple Vulnerabilities( 09 September 2009 )

1. TCP/IP Zero Window Size VulnerabilityA denial of service vulnerability exists in TCP/IP processing in Microsoft Windows due to the way that Windows handles an excessive number of established TCP connections. The effect of this vulnerability can be amplified by the requirement to process...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4280 Views

RISK: Medium Risk

Microsoft Windows Wireless LAN AutoConfig Service Remote Code Execution Vulnerability( 09 September 2009 )

A remote code execution vulnerability exists in the way that the Wireless LAN AutoConfig Service (wlansvc) parses specific frames received on the wireless network. This vulnerability could allow remote code execution if a client or server with a wireless network interface enabled receives specially crafted wireless frames...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4310 Views

RISK: Medium Risk

Microsoft Windows JScript Scripting Engine Remote Code Execution Vulnerability( 09 September 2009 )

A remote code execution vulnerability exists in the way that the JScript scripting engine processes scripts in Web pages. The vulnerability could allow remote code execution if a user opened a specially crafted file or visited a Web site that is running a specially crafted script. If a...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4198 Views

RISK: Medium Risk

Microsoft Windows Media Multiple Vulnerabilities( 09 September 2009 )

1. Windows Media Header Parsing Invalid Free VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Windows handles specially crafted ASF format files. This vulnerability could allow remote code execution if a user opened a specially crafted file. If a user is logged on with...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4318 Views

RISK: Medium Risk

Microsoft Windows DHTML Editing Component ActiveX Control Vulnerability( 09 September 2009 )

A remote code execution vulnerability exists in the DHTML Editing Component ActiveX Control. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this...

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4442 Views

RISK: Medium Risk

VMware Workstation Movie Decoder VMnc Codec Vulnerabilities

Two vulnerabilities have been identified in VMware Workstation Movie Decoder, which could be exploited by attackers to potentially compromise a vulnerable system.1. A heap overflow error in the VMnc codec (vmnc.dll) when processing a video file with mismatched dimensions, which could...

Last Update Date: 28 Jan 2011 Release Date: 8 Sep 2009 4519 Views