Security Bulletin

RISK: Medium Risk

Nokia Multimedia Player Playlist Handling Buffer Overflow Vulnerability

A vulnerability has been identified in Nokia Multimedia Player, which could be exploited by attackers to execute arbitrary code. This issue is caused by a buffer overflow error when processing playlists (e.g. ".npl") containing overly long data, which could be exploited by...

Last Update Date: 28 Jan 2011 Release Date: 13 Jan 2011 8052 Views

RISK: Medium Risk

Microsoft Data Access Components Multiple Vulnerabilities

1. DSN Overflow VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Data Access Components validates third-party API usage. This vulnerability could allow code execution if a user visited a specially crafted Web page. If a user is logged on with administrative user...

Last Update Date: 28 Jan 2011 Release Date: 12 Jan 2011 7783 Views

RISK: Medium Risk

Microsoft Windows Backup Manager Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Windows Backup Manager handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or...

Last Update Date: 28 Jan 2011 Release Date: 12 Jan 2011 7724 Views

RISK: Medium Risk

Microsoft Internet Explorer Circular Memory References Use-after-free Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by a use-after-free error within the "mshtml.dll" library when handling circular references...

Last Update Date: 28 Jan 2011 Release Date: 6 Jan 2011 7988 Views

RISK: Medium Risk

Microsoft Windows Graphics Rendering Engine Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of a vulnerable system. This issue is caused by a stack overflow error in the "CreateSizedDIBSECTION()" function within the "shimgvw.dll" module when parsing a...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 7823 Views

RISK: Medium Risk

GIMP Multiple Vulnerabilities

Multiple vulnerabilities have been identified in GIMP, which could be exploited by attackers to execute arbitrary code. These issues are caused by buffer overflow errors in the Lighting Effects, Sphere Designer, GFIG, and PSP (Paint Shop Pro) file plugins when processing malformed files...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 8301 Views

RISK: Medium Risk

ImgBurn Insecure Library Loading Vulnerability

A vulnerability has been discovered in ImgBurn, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to the application loading libraries (e.g. dwmapi.dll) in an insecure manner. This can be...

Last Update Date: 28 Jan 2011 Release Date: 5 Jan 2011 7955 Views

RISK: Medium Risk

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerability

A vulnerability has been identified in VLC Media Player, which could be exploited by attackers to execute arbitrary code. This issue is caused by an array indexing error in the "Close()" and "DemuxAudioMethod1()" [modules/demux/real.c] functions within the...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2011 8237 Views

RISK: Medium Risk

Wireshark "dissect_enttec_dmx_data()" Buffer Overflow Vulnerability

A vulnerability has been identified in Wireshark, which could be exploited by attackers to cause a denial of service or execute arbitrary code. This issue is caused by a buffer overflow error in the "dissect_enttec_dmx_data()" [epan/dissectors/packet-enttec.c] function...

Last Update Date: 28 Jan 2011 Release Date: 4 Jan 2011 8210 Views

RISK: Medium Risk

Microsoft Windows Fax Cover Page Editor Buffer Overflow Vulnerability

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the Fax Cover Page Editor (fxscover.exe) utility when processing a cover file ".cov" containing...

Last Update Date: 28 Jan 2011 Release Date: 28 Dec 2010 8150 Views