Computer Security Vulnerabilities

21.01.2012 Detailed

8! Adobe Acrobat / Reader multiple security vulnerabilities   Code execution, multiple memory corruptions. 7! Microsoft Windows multiple security vulnerabilities updated since 11.01.2012   SafeSEH protection bypass, Windows Object Packager code execution, CSRSS privilege escalation, DirectShow / Windows Media memory corruption, Windows Packager code execution, SSL/TLS information leakage. 6! Linux kernel multiple security vulnerabilities   DoS conditions, information leaks, privilege escalation.

PHP DoS   NULL pointer dereference because on unchecked zend_strndup return value.

Suhoshin buffer overflow   Buffer overflow in the transparent cookis encryption code.

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Business Availability Center / Business Service Management information leakage

NTR ActiveX security vulnerabilities   Buffer overflow, unsafe method.

GreenBrowser double free   Double free on iframe tag

HP StorageWorks P2000 security vulnerabilities updated since 16.01.2012   Default account, directory traversal.

EMC SourceOne information leakage   Information leakage via log files.

20.01.2012 Detailed

7! OpenSSL library multiple security vulnerabilities   Double free(), protection bypass, information leakages, DoS conditions. 6! Apache Tomcat security vulnerabilities   DoS, information disclosure. 6! Cisco TelePresence System Integrator / Cisco IP Video Phone E20 default account vulnereability updated since 21.11.2011   Default root account is enabled.

perl security vulnerabilities   It's possible to inject eval expression into digest module constructor. Off-by-one overflow in decode_xs.

Microsoft AntiXSS library crossite scripting updated since 11.01.2012   Crossite scripting during HTML parsing.