Security Bulletin

RISK: Medium Risk

BlackBerry Application Web Loader ActiveX Control Buffer Overflow Vulnerability

A vulnerability has been identified in BlackBerry Application Web Loader, which could be exploited by remote attackers to compromise an affected system. This issue is caused by a buffer overflow error in the RIM AxLoader ActiveX control (AxLoader.ocx or AxLoader.dll) when processing...

Last Update Date: 28 Jan 2011 Release Date: 11 Feb 2009 5807 Views

RISK: Medium Risk

Microsoft Exchange Server Multiple Vulnerabilities( 11 February 2009 )

1. Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way Microsoft Exchange Server decodes the Transport Neutral Encapsulation Format (TNEF) data for a message.2. Literal Processing VulnerabilityA denial of service vulnerability exists in the EMSMDB2 (Electronic Messaging System Microsoft Data Base...

Last Update Date: 28 Jan 2011 Release Date: 11 Feb 2009 5695 Views

RISK: Medium Risk

Microsoft SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability( 11 February 2009 )

A remote code execution vulnerability exists in the way that SQL Server checks parameters in the "sp_replwritetovarbin" extended stored procedure. The vulnerability could allow remote code execution if untrusted users have access to an affected system or if a SQL injection vulnerability exists on an affected system...

Last Update Date: 28 Jan 2011 Release Date: 11 Feb 2009 5673 Views

RISK: Medium Risk

Google Chrome URI Handler Registration Vulnerability

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise an affected system. This issue is caused due to certain URI handlers being registered in an insecure manner by the browser, which could be exploited by remote attackers to pass malicious...

Last Update Date: 28 Jan 2011 Release Date: 10 Feb 2009 5908 Views

RISK: Medium Risk

HPOpenView NNM Unspecified Remote Code Execution Vulnerability

A vulnerability has been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified error which could allow an attacker to remotely execute arbitrary code. No further details...

Last Update Date: 28 Jan 2011 Release Date: 9 Feb 2009 5837 Views

RISK: Medium Risk

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, SeaMonkey and Thunderbird, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system.1. A memory corruption errors in the JavaScript and layout...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5895 Views

RISK: Medium Risk

Nokia PC Suite Multimedia Player Playlist Buffer Overflow Vulnerability

A vulnerability has been identified in Nokia PC Suite, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the Multimedia Player when processing playlists (e.g. ".m3u") with overly long data...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5843 Views

RISK: Medium Risk

Sun Solaris Libxml2 Data Processing Integer Overflow Vulnerabilities

Two vulnerabilities have been identified in Sun Solaris, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.1. An integer overflow error in the "xmlSAX2Characters()" function when processing an overly large XML file, which could cause...

Last Update Date: 28 Jan 2011 Release Date: 5 Feb 2009 5844 Views

RISK: Medium Risk

NovellGroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which can be exploited by malicious people to conduct cross-site scripting, cross-site request forgery, and script insertion attacks, bypass certain security restrictions, or compromise a vulnerable system.1. Input passed to...

Last Update Date: 28 Jan 2011 Release Date: 3 Feb 2009 5901 Views

RISK: Medium Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.1. A heap overflow error when handling malformed RTSP URLs, which could be exploited to crash an affected application or...

Last Update Date: 28 Jan 2011 Release Date: 23 Jan 2009 5767 Views