Highly Criticfal Vulnerabilities

[Peaches]

Highly critical ......

Sun Java JDK / JRE Multiple Vulnerabilities

Some vulnerabilities have been reported in Sun Java, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, cause a DoS (Denial of service), or compromise a vulnerable system.

Full details Secunia .. http://secunia.com/advisories/32991/

>>>>>>>>>>>>>>>>

Trillian Multiple Vulnerabilities

Some vulnerabilities have been reported in Trillian, which can be exploited by malicious people to compromise a user's system.

1) A boundary error when generating XML tags for images can be exploited to cause a stack-based buffer overflow via an image file having an overly long filename.

2) An error when processing XML code can be exploited to corrupt an internal data structure and free a heap chunk multiple times.

3) A boundary error when processing specially crafted XML tags can be exploited to cause a heap-based buffer overflow.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 3.1.12.0.

Solution:

Update to version 3.1.12.0.

http://www.ceruleanstudios.com/downloads/

Details: http://secunia.com/advisories/33001/

Edited December 5, 2008 by Peaches