@RISK: The Consensus Security Alert - Part 1 http://www.sans.org/newsletters/risk/display.php All Updates From Part 1 of Vol: 7 - Issue: 35 en-us (C) SANS Institute 2008 webmaster@sans.org SANS RSS Feed http://www.sans.org/images/rss_logo.gif http://www.sans.org/newsletters/risk/display.php SANSFIRE 2008 http://www.sans.org/info/27924 http://www.sans.org/info/27924 More than 40 courses, SANS top instructors, all in one great place! SANSFIRE 2008 is being held in Washington, DC on July 22-31. Register today! (1) HIGH: JustSystems Ichitaro Remote Code Execution Vulnerability http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely1 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely1 Category: Widely Deployed Software

Affected:

  • JustSystems Ichitaro versions 2008 and possibly prior

]]> (2) HIGH: Novell iPrint Client ActiveX Control Multiple Vulnerabilities http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely2 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely2 Category: Widely Deployed Software

Affected:

  • Novell iPrint Client ActiveX Control versions 5.06 and prior

]]> (3) HIGH: Anzio Web Print Object Buffer Overflow http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely3 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely3 Category: Widely Deployed Software

Affected:

  • Anzio Web Print Object ActiveX Control versions prior to 3.2.30

]]> (4) MODERATE: LibTIFF Decoding Buffer Underflow http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely4 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely4 Category: Widely Deployed Software

Affected:

  • LibTIFF versions 3.x

]]> (5) MODERATE: OpenOffice.org Memory Allocation Remote Code Execution http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely5 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely5 Category: Widely Deployed Software

Affected:

  • OpenOffice.org versions 2.4.1 and prior

]]> (6) LOW: Red Hat Enterprise and Fedora Linux Distributions Possible Package Compromise http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely6 http://www.sans.org/newsletters/risk/display.php?v=7&i=35&rss=Y#widely6 Category: Widely Deployed Software

Affected:

  • Red Hat Enterprise Linux versions 4 and 5
  • Fedora Linux

]]>