Security Bulletin

RISK: Medium Risk

ICQ Personal Status Manager Vulnerability

A vulnerability has been identified in ICQ, which could be exploited by attackers to cause a denial of service or compromise an affected system. This issue is caused by a buffer overflow error in the Personal Status Manager feature when processing a specially crafted status message, which...

Last Update Date: 28 Jan 2011 Release Date: 22 Apr 2008 7620 Views

RISK: Medium Risk

Mozilla JavaScript Garbage Collector Vulnerability

A vulnerability has been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by memory corruption errors in the JavaScript Garbage Collector when processing malformed data, ...

Last Update Date: 28 Jan 2011 Release Date: 18 Apr 2008 7642 Views

RISK: Medium Risk

OpenOffice Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenOffice.org, which could be exploited by attackers to cause a denial of service or compromise an affected system. These issues are caused by heap overflow and corruption errors when processing specially crafted ODF text documents with XForms, or when...

Last Update Date: 28 Jan 2011 Release Date: 18 Apr 2008 7875 Views

RISK: Medium Risk

CA Products DSM "gui_cm_ctrls" ActiveX Vulnerability

A vulnerability has been identified in various CA products, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by input validation errors in the DSM "gui_cm_ctrls" ActiveX control when handling...

Last Update Date: 28 Jan 2011 Release Date: 18 Apr 2008 7730 Views

RISK: Medium Risk

Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which could be exploited by remote attackers to disclose sensitive information, cause a denial of service or execute arbitrary code.1. An error in WebKit when handling URLs containing a colon character in the host name, which...

Last Update Date: 28 Jan 2011 Release Date: 18 Apr 2008 7603 Views

RISK: Medium Risk

DivX Player Subtitle Parsing Client-Side Buffer Overflow Vulnerability

A vulnerability has been identified in DivX Player, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error when parsing overly long subtitles, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 17 Apr 2008 7666 Views

RISK: Medium Risk

ClamAV PeSpin and Archives Processing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in ClamAV (Clam AntiVirus), which could be exploited by attackers or malware to cause a denial of service or compromise a vulnerable system.1. Due to a heap overflow error in "libclamav/spin.c" when processing malformed...

Last Update Date: 28 Jan 2011 Release Date: 16 Apr 2008 7578 Views

RISK: Medium Risk

ClamAV Upack Executable Processing Buffer Overflow Vulnerability

A vulnerability has been identified in Clam AntiVirus (ClamAV), which could be exploited by remote attackers or malware to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error in the "cli_scanpe()" [libclamav...

Last Update Date: 28 Jan 2011 Release Date: 15 Apr 2008 7591 Views

RISK: Medium Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which could be exploited by remote attackers to bypass security restrictions, gain knowledge of sensitive information or take complete control of an affected system.1. Due to a buffer overflow error in the processing of "Declare...

Last Update Date: 28 Jan 2011 Release Date: 10 Apr 2008 7671 Views

RISK: Medium Risk

Microsoft Internet Explorer Data Stream Handling Memory Corruption Vulnerability( 09 April 2008 )

A remote code execution vulnerability exists in Internet Explorer because of the way that it processes data streams. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An...

Last Update Date: 28 Jan 2011 Release Date: 9 Apr 2008 7521 Views