[Winvulns-announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: VulnerabilitiestoWindowsSystems

[Notification of New Vulnerabilties to Windows Systems Fixlet Messages]

Fixlet Site - VulnerabilitiestoWindowsSystems
Current Version: 193	Published: Thu, 19 Nov 2009 18:28:10  GMT

New Fixlets:
============

***************************************************************
Title: Win32k NULL Pointer Dereferencing Vulnerability
Severity: Medium
Fixlet ID: 558801
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval5588.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1127
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Field Sanitization Vulnerability
Severity: High
Fixlet ID: 587801
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval5878.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3134
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Web Services on Devices API Memory Corruption Vulnerability
Severity: High
Fixlet ID: 607901
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6079.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2512
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Document Parsing Heap Overflow Vulnerability
Severity: High
Fixlet ID: 613701
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6137.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3130
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Cache Memory Corruption Vulnerability
Severity: High
Fixlet ID: 614601
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6146.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3127
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Document Parsing Memory Corruption Vulnerability
Severity: High
Fixlet ID: 626501
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6265.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3133
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Win32k Insufficient Data Validation Vulnerability
Severity: Medium
Fixlet ID: 627701
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6277.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2513
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: License Logging Server Heap Overflow Vulnerability
Severity: High
Fixlet ID: 630001
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6300.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2523
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Win32k EOT Parsing Vulnerability
Severity: High
Fixlet ID: 640601
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6406.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2514
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel SxView Memory Corruption Vulnerability
Severity: High
Fixlet ID: 647401
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6474.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3128
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Formula Parsing Memory Corruption Vulnerability
Severity: High
Fixlet ID: 651801
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6518.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3131
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Featheader Record Memory Corruption Vulnerability
Severity: High
Fixlet ID: 652101
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6521.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3129
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Excel Index Parsing Vulnerability
Severity: High
Fixlet ID: 652601
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6526.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3132
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Microsoft Office Word File Information Memory Corruption Vulnerability
Severity: High
Fixlet ID: 655501
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval6555.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3135
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.