Security Bulletin

RISK: High Risk

Mozilla Products Use-After-Free in nsHTMLSelectElement() Vulnerability

A vulnerability has been identified in Mozilla Firefox, Thunderbird and Seamonkey. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted HTML that, when loaded by the target user, will trigger...

Last Update Date: 20 Jun 2012 10:31 Release Date: 20 Jun 2012 7307 Views

RISK: Medium Risk

IBM Lotus Notes "notes" URI Handler Vulnerability

A vulnerability has been reported in IBM Lotus Notes, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error within the "notes" URI handler, which can be exploited to execute arbitrary commands...

Last Update Date: 20 Jun 2012 10:25 Release Date: 20 Jun 2012 7425 Views

RISK: Medium Risk

Microsoft Windows OpenType Font Processing Denial of Service Vulnerability

A vulnerability has been identified in Microsoft Windows, which can be exploited by malicious, local users to cause a Denial of Service.The vulnerability is caused due to an error in atmfd.dll when processing Adobe OpenType font files and can be exploited to cause a...

Last Update Date: 15 Jun 2012 17:17 Release Date: 15 Jun 2012 7396 Views

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which can be exploited by malicious people to conduct spoofing attacks and bypass certain security restrictions. An error when displaying preferences within a small window can be exploited to e.g. execute arbitrary code by tricking a user into...

Last Update Date: 15 Jun 2012 17:16 Release Date: 15 Jun 2012 7522 Views

RISK: Medium Risk

VMware Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple VMware products, which can be exploited by malicious people to cause denial of service or compromise a user's system. An input validation error when parsing Checkpoint files and can be exploited to execute arbitrary code. A user with...

Last Update Date: 15 Jun 2012 17:14 Release Date: 15 Jun 2012 7047 Views

RISK: Medium Risk

IBM Rational AppScan Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Rational AppScan, which can be exploited by malicious users to disclose certain information and by malicious people to conduct spoofing and cross-site scripting attacks, disclose potentially sensitive information, hijack a user's session, conduct DNS cache...

Last Update Date: 15 Jun 2012 17:10 Release Date: 15 Jun 2012 7322 Views

RISK: Medium Risk

Asterisk Skinny Channel Driver Vulnerability

A vulnerability has been identified in Asterisk. A remote authenticated user can cause denial of service conditions.A remote authenticated user with a valid SCCP ID can close a connection to the target Asterisk server when a station is in the 'Off Hook' call state to...

Last Update Date: 15 Jun 2012 17:07 Release Date: 15 Jun 2012 6494 Views

RISK: High Risk

Apple Mac OS X Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Java for Mac OS X, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise...

Last Update Date: 14 Jun 2012 10:15 Release Date: 14 Jun 2012 7280 Views

RISK: Extremely High Risk

Microsoft XML Core Services Uninitialised Object Vulnerability

A vulnerability has been identified in Microsoft XML Core Services, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when attempting to access an object in memory that has not been initialised. Successful...

Last Update Date: 13 Jun 2012 15:30 Release Date: 13 Jun 2012 7288 Views

RISK: Medium Risk

Microsoft Windows Kernel Multiple Vulnerabilities

User Mode Scheduler Memory Corruption Vulnerability An elevation of privilege vulnerability exists in the way that the Windows User Mode Scheduler handles system requests. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, ...

Last Update Date: 13 Jun 2012 15:28 Release Date: 13 Jun 2012 7083 Views