Security Bulletin

RISK: Medium Risk

GnuTLS DTLS CBC Mode Plaintext Recovery Vulnerability

A vulnerability has been identified in GnuTLS, which can be exploited by malicious people to disclose potentially sensitive information.The vulnerability is caused due to the CBC mode encryption of the Datagram Transport Layer Security (DTLS) implementation exposing timing differences, which can be exploited to...

Last Update Date: 10 Jan 2012 11:32 Release Date: 10 Jan 2012 7860 Views

RISK: High Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by malicious users to disclose certain information and by malicious people to disclose potentially sensitive information, hijack a user's session, conduct DNS cache poisoning attacks, manipulate certain data, cause a DoS...

Last Update Date: 10 Jan 2012 11:27 Release Date: 10 Jan 2012 7798 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to compromise a user's system.A use-after-free error exists within the handling of animation frames.A boundary error within the "xmlStringLenDecodeEntities()" function (parser...

Last Update Date: 9 Jan 2012 12:42 Release Date: 9 Jan 2012 7821 Views

RISK: High Risk

FFmpeg Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a user's system.Errors when processing MKV and Vorbis files can be exploited to cause an out-of-bounds...

Last Update Date: 9 Jan 2012 12:41 Release Date: 9 Jan 2012 8354 Views

RISK: Medium Risk

Mozilla Firefox Drag and Drop Handling Same Origin Policy Bypass Vulnerability

A vulnerability has been identified in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions.The vulnerability is caused due to an error when handling drag and drop events and can be exploited to bypass the same origin policy and e.g...

Last Update Date: 6 Jan 2012 10:37 Release Date: 6 Jan 2012 8599 Views

RISK: High Risk

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenSSL, which can be exploited by attackers to conduct remote code execution and denial of service. The vulnerabilities can cause the following issues:DTLS Plaintext Recovery Attack (CVE-2011-4108)Double-free in Policy Checks (...

Last Update Date: 5 Jan 2012 11:57 Release Date: 5 Jan 2012 8408 Views

RISK: Medium Risk

MIT Kerberos krb5 Telnet Daemon and Client Buffer Overflow Vulnerability

A vulnerability has been identified in the telnet daemon (telnetd) and telnet client of MIT Kerberos krb5, which can be exploited by unauthenticated remote attacker to cause a buffer overflow and probably execute arbitrary code with the privileges of the telnet daemon.

Last Update Date: 4 Jan 2012 11:16 Release Date: 4 Jan 2012 8306 Views

RISK: High Risk

Multiple programming languages and frameworks Hash Table collision denial of service vulnerability

A vulnerability has been identified in multiple web programming languages and frameworks, which can be exploited by malicious people to cause a DoS (Denial of Service). A variety of programming languages and platforms suffered from a Denial of Service (DoS) condition against storage functions of...

Last Update Date: 30 Dec 2011 18:10 Release Date: 30 Dec 2011 9012 Views

RISK: High Risk

Microsoft ASP .NET Framework Multiple Vulnerabilities

Collisions in HashTable May Cause DoS Vulnerability A denial of service vulnerability exists in the way that ASP.NET Framework handles specially crafted requests, causing a hash collision. An attacker who successfully exploited this vulnerability could send a small number of specially crafted requests to an...

Last Update Date: 30 Dec 2011 18:08 Release Date: 30 Dec 2011 8685 Views

RISK: Medium Risk

WiFi Protected Setup (WPS) PIN authentication vulnerability

A vulnerability has been identified in WiFi Protected Setup (WPS), which can be exploited by malicious people to bypass security restrictions or cause a denial of service. A design flaw that exists in the WPS specification for the PIN authentication significantly reduces the time required to brute...

Last Update Date: 30 Dec 2011 12:36 Release Date: 30 Dec 2011 19443 Views