[Winvulns-announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Vulnerabilities to Windows Systems'

[Notification of New Vulnerabilties to Windows Systems Fixlet Messages]

Fixlet Site - 'Vulnerabilities to Windows Systems'
Current Version: 258	Published: Tue, 17 May 2011 18:27:08  GMT

New Fixlets:
============

***************************************************************
Title: Stack based buffer overflow vulnerability in Novell File Reporter (NFR) before 1.0.2
Severity: High
Fixlet ID: 1206401
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval12064.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0994
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.

***************************************************************
Title: Presentation Buffer Overrun RCE Vulnerability
Severity: High
Fixlet ID: 1225601
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval12256.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1270
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: Presentation Memory Corruption RCE Vulnerability
Severity: High
Fixlet ID: 1243801
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval12438.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1269
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.

***************************************************************
Title: WINS Service Failed Response Vulnerability
Severity: High
Fixlet ID: 1272401
Fixlet Link: http://oval.mitre.org/oval/definitions/data/oval12724.html
Fixlet Link: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1248
Fixlet Link: http://nvd.nist.gov/cvss.cfm?vectorinfo

Fixlet Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.