IT Information Security Office

Home

News

Latest

SANS @RISK Alert

This ia SANS Institute summary of the top 3 to 8 vulnerablities of the week updated every Thursday.

All Updates From Vol: 8 - Issue: 47

SANS 2009
More than 35 courses, SANS top instructors, all in one great place! SANS 2009 is being held in Orlando, FL on March 2-9. Register today!
(1) CRITICAL: Apple Safari Multiple Vulnerabilities
Category: Widely Deployed Software
Affected:
- Apple Safari versions prior to 4.0.4
(2) HIGH: RhinoSoft Serv-U FTP Server TEA Decoder Buffer Overflow Vulnerability
Category: Widely Deployed Software
Affected:
- RhinoSoft Serv-U 9.0 .5
- RhinoSoft Serv-U 9.0.0.1
(3) MODERATE: Microsoft Windows SMB Packet Denial of Service Vulnerability
Category: Widely Deployed Software
Affected:
- Microsoft Windows 7 for 32-bit Systems
- Microsoft Windows 7 for x64-based Systems
- Microsoft Windows Server 2008 R2 for x64-based Systems*
- Microsoft Windows Server 2008 R2 for Itanium-based Systems
(4) MODERATE: GIMP Image Parsing Integer Overflow Vulnerability
Category: Widely Deployed Software
Affected:
- GIMP version 2.6.7 and prior
09.47.17 Apple Safari Shortcut Menu Options Information Disclosure

CVEs: CVE: CVE-2009-2842
Platform: Cross Platform
09.47.18 Webkit Multiple Remote Code Execution, Denial of Service, and Information Disclosure Vulnerabilities

CVEs: CVE: CVE-2009-3384
Platform: Cross Platform
09.47.19 WebKit Resource Load Callback Information Disclosure Weakness

CVEs: CVE: CVE-2009-2841
Platform: Cross Platform
09.47.20 WebKit Preflight Request Same Origin Policy Bypass

CVEs: CVE: CVE-2009-2816
Platform: Cross Platform
09.47.21 GIMP BMP Image Parsing Integer Overflow

CVEs: CVE: CVE-2009-1570
Platform: Cross Platform

[ Back ]