Name: NGSSoftware Insight Security Research Advisory (NISR) E-mail: NISR_(at)_ngssoftware.com

• Critical Vulnerability in Apple Quicktime’s Indeo Codec
• Critical Vulnerability in SNMPc
• Heap overflow in RealPlayer ID3 tag parser
• Memory overwrites in JVM via malformed TrueType font
• Untrusted Java applet can connect to localhost
• Oracle audit issue with XMLDB ftp service
• Multiple SQL Injection Flaws in Oracle CTX_DOC package
• Oracle RDBMS TNS Data packet DoS
• Oracle TNS Listener DoS and/or remote memory inspection
• Local privilege escalation vulnerability in Cisco VPN client
• Low Risk Vulnerability in Active Directory
• Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c
• Buffer overflow in HP Instant Support Driver Check (SDD) ActiveX control
• High Risk Flaw in Sun's Java Web Start
• Ingres Unauthenticated Pointer Overwrite 2
• Ingres stack overflow in uuid_from_char function
• Ingres Unauthenticated Pointer Overwrite 1
• Ingres verifydb local stack overflow
• Ingres wakeup setuid(ingres) file truncation
• High risk vulnerability in OpenOffice RTF parser
• Mac OS X vpnd local format string
• High Risk Vulnerability in OpenOffice
• Jetty Session ID Prediction
• Medium Risk Vulnerability in PGP Desktop
• High Risk Vulnerability in Microsoft Excel
• Critical Risk Vulnerability in L-Soft Listserv
• High Risk Vulnerability in Lexmark Printer Sharing Service
• High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server
• High Risk Vulnerability in Sun Directory Server
• High Risk Vulnerability in L-Soft's LISTSERV Server
• Sybase ASE 12.5.2 vulnerabilities
• Medium Risk Vulnerability in WinRAR
• High Risk Vulnerability in Quicktime for Windows
• MSN Gaming Heartbeat Component Buffer Overflow
• Microsoft Internet Explorer Install Engine Control Buffer Overflow
• Microsoft WordPerfect 5.x Converter Heap Overflow
• WildTangent Web Driver Long FileName Stack Overflow
• Oracle Reports Server Buffer Overflow (#NISR12062002B)
• Buffer Overrun in Talentsoft's Web+ (3) (#NISR17042002B)
• Back Office Web Administrator Authentication Bypass (#NISR17042002A)
• WebTrends Reporting Center
• Fw: Multiple Vulnerabilties in Sambar Server