Security Bulletin

RISK: Medium Risk

Apple Safari for Windows Remote Code Execution Vulnerability

A vulnerability has been identified in Apple Safari for Windows, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by errors within the combination of the default download location in Safari and how the Windows desktop handles executables...

Last Update Date: 28 Jan 2011 Release Date: 3 Jun 2008 7570 Views

RISK: Medium Risk

CiscoWorks Common Services Remote Code Execution Vulnerability

A vulnerability has been identified in CiscoWorks Common Services, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified error when processing user-supplied data, which could allow a remote attacker to execute arbitrary code on the...

Last Update Date: 28 Jan 2011 Release Date: 30 May 2008 7888 Views

RISK: Medium Risk

Apple Mac OS XMultiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to cause a denial of service, disclose sensitive information, bypass security restrictions or compromise an affected system. These issues are caused by implementation, data validation, ...

Last Update Date: 28 Jan 2011 Release Date: 30 May 2008 7716 Views

RISK: Medium Risk

Samba "receive_smb_raw()" Remote Buffer Overflow Vulnerability

A vulnerability has been identified in Samba, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error in the "receive_smb_raw()" [lib/util_sock.c] function when processing...

Last Update Date: 28 Jan 2011 Release Date: 29 May 2008 7775 Views

RISK: Medium Risk

Adobe Flash Player Unspecified Remote Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by an unspecified memory corruption error when processing a malformed SWF file, which could be exploited by attackers to...

Last Update Date: 28 Jan 2011 Release Date: 28 May 2008 7589 Views

RISK: Medium Risk

FileZilla GnuTLS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FileZilla, which could be exploited by remote attackers to cause a denial of service or compromise an affected system.1. Due to a NULL pointer dereference error when processing TLS packets containing multiple "Client Hello" messages, which could...

Last Update Date: 28 Jan 2011 Release Date: 22 May 2008 7844 Views

RISK: Medium Risk

CA Products Code Execution and File Manipulation Vulnerabilities

Multiple vulnerabilities have been identified in various CA products, which could be exploited by remote attackers to take complete control of an affected system.1. Due to insufficient path verification by the logging service (caloggerd), which could allow a remote attacker to append data to...

Last Update Date: 28 Jan 2011 Release Date: 21 May 2008 7626 Views

RISK: Medium Risk

Debian/Ubuntu OpenSSL Random Number Generator Vulnerability

A vulnerabiliity exists in the random number generator used by the OpenSSL package included with the Debian GNU/Linux, Ubuntu, and other Debian-based operating systems. This vulnerability causes the generated numbers to be predictable.The result of this error is that certain encryption...

Last Update Date: 28 Jan 2011 Release Date: 19 May 2008 11638 Views

RISK: Medium Risk

Microsoft Word Two Vulnerabilities( 14 May 2008 )

1. Object Parsing VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Office handles specially crafted Rich Text Format (.rtf) files. The vulnerability could allow remote code execution if a user opens a specially crafted .rtf file with malformed strings in Word or...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2008 7347 Views

RISK: Medium Risk

Yahoo! Assistant "ynotifier" ActiveX Control Code Execution Vulnerability

A vulnerability has been identified in Yahoo! Assistant, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by a memory corruption error when instantiating the "ynotifier.dll" ActiveX control, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 14 May 2008 7517 Views