Security Bulletin

RISK: Medium Risk

UltraVNC Multiple Buffer Overflow Vulnerabilities

A vulnerability has been identified in UltraVNC, which could be exploited by attackers to cause a denial of service or take complete control of an affected system. A buffer overflow error in the [vncviewer/ClientConnection.cpp] function and multiple boundary errors within the [...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2008 4650 Views

RISK: Medium Risk

Yahoo! Music Jukebox ActiveX Multiple Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Yahoo! Music Jukebox, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. These issues are caused by buffer overflow errors in the "datagrid.dll" and "...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2008 4509 Views

RISK: Medium Risk

Facebook Photo Uploader Control Remote Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Facebook Photo Uploader, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. These issues are caused by buffer overflow errors in the "ImageUploader4.ocx" ActiveX control when...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2008 4542 Views

RISK: Medium Risk

Cisco Wireless Control System Apache Tomcat JK Web Server Connector Buffer Overflow Vulnerability

A vulnerability has been identified in Cisco Wireless Control System (WCS), which could be exploited by remote attackers to cause a denial of service or execute arbitrary code. This issue is due to a buffer overflow error in the mod_jk library when processing overly long URLs via...

Last Update Date: 28 Jan 2011 Release Date: 1 Feb 2008 4690 Views

RISK: Medium Risk

Winamp Ultravox Streaming Metadata Parsing Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in Winamp, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. These issues are caused by buffer overflow errors in "in_mp3.dll" when constructing stream titles while parsing...

Last Update Date: 28 Jan 2011 Release Date: 21 Jan 2008 4620 Views

RISK: Medium Risk

HP Oracle for OpenView Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Oracle for OpenView (OfO), which could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary data, disclose sensitive information, conduct SQL injection and cross site scripting...

Last Update Date: 28 Jan 2011 Release Date: 21 Jan 2008 4591 Views

RISK: Medium Risk

Cisco Products CTL Provider Remote Buffer Overflow Vulnerability

A vulnerability has been identified in Cisco Unified CallManager and Unified Communications Manager, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a heap overflow error in the CTL (Certificate...

Last Update Date: 28 Jan 2011 Release Date: 18 Jan 2008 4516 Views

RISK: Medium Risk

Oracle Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various Oracle products, which could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary data, disclose sensitive information, conduct SQL injection and cross site scripting attacks, or...

Last Update Date: 28 Jan 2011 Release Date: 17 Jan 2008 4651 Views

RISK: Medium Risk

Apple iPhone / iPod touch Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iPhone and iPod touch, which could be exploited by remote attackers to bypass security restrictions, disclose sensitive information, or take complete control of an affected device.The first issue is caused by a memory corruption error in Safari when...

Last Update Date: 28 Jan 2011 Release Date: 17 Jan 2008 4801 Views

RISK: Medium Risk

Microsoft Excel Remote Code Execution Vulnerability

A vulnerability has been identified in Microsoft Excel, which could be exploited by remote attackers to take complete control of an affected system or gain the same user rights as the local user by tricking a user into opening a specially crafted Excel file.

Last Update Date: 28 Jan 2011 Release Date: 16 Jan 2008 4271 Views