105 matches found
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID 83421018-b3ef-11da-a32d-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Internet Explorer VML integer overflow
Added: 02/07/2007 CVE: CVE-2007-0024 BID: 21930 OSVDB: 31250 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem An integer overflow vulnerability in vgx.dll when processing VML elements in a web page allows arbitrary command execution. Resolution Apply the...
Internet Explorer VML integer overflow
Added: 02/07/2007 CVE: CVE-2007-0024 BID: 21930 OSVDB: 31250 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem An integer overflow vulnerability in vgx.dll when processing VML elements in a web page allows arbitrary command execution. Resolution Apply the...
Immunity Canvas: MS07_004
Name| ms07004 ---|--- CVE| CVE-2007-0024 Exploit Pack| CANVAS Description| Microsoft Windows VML recolorinfo Bug Notes| CVE Name: CVE-2007-0024 VENDOR: Microsoft MSADV: MS07-004 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx CVE Url:...
CVE-2007-0024
Microsoft Internet Explorer versions 5.01, 6, and 7 running on Windows 2000 SP4 , XP SP2 , and Server 2003/2003 SP1 are vulnerable to a buffer overflow in the Vector Markup Language (VML) implementation (vgx.dll ). The root cause is an integer overflow triggered by unspecified integer properties ...
Internet Explorer VML Buffer Overrun (MS07-004; CVE-2007-0024)
Microsoft Internet Explorer IE contains a remote code execution vulnerability. The vulnerability exists in Microsoft Vector Markup Language VML. VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. By convincing a user to visit a specially crafted Web...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
SUSE-SA:2006:015: flash-player
The remote host is missing the patch for the advisory SUSE-SA:2006:015 flash-player. A critical security vulnerability has been identified in the Adobe Macromedia Flash Player that allows an attacker who successfully exploits these vulnerabilities to take control of the application running the...
US-CERT Technical Cyber Security Alert TA06-075A -- Adobe Macromedia Flash Products Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-075A Adobe Macromedia Flash Products Contain Vulnerabilities Original release date: March 16, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows, Apple Mac OS X,...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Macromedia Flash Player package that fixes a security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in. Security...
CVE-2006-0024
CVE-2006-0024 covers multiple unspecified remote-code-execution vulnerabilities in Macromedia/Adobe Flash Player up to version 8.0.22.0 and earlier, exploitable via a crafted SWF file. Affected product: Macromedia Flash Player (Flash Player 8.x and earlier). Impact stated: remote code execution w...
KLA10254 ACE vulnerabilities in Adobe Flash Player
Multiple unspecified vulnerabilities were found in Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed SWF file. Original advisories - Exploitation Related products...
Flash Player swf Processing Multiple Unspecified Code Execution (APSB06-03)
According to its version number, the instance of Flash Player on the remote Windows host contains multiple critical and as-yet unspecified vulnerabilities that could allow an attacker to take control of the affected host. To exploit these issues, a user must load a malicious SWF file in Flash...
CVE-2003-0024
The CVE-2003-0024 entry concerns the terminal emulator aterm 0.42, where the menuBar feature can be abused by attackers who display data to the terminal to modify menu entries and trigger arbitrary command execution via a crafted character escape sequence that inserts commands into the menu. The ...
CVE-2003-0024
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu...
CVE-2002-0024
CVE-2002-0024 affects Internet Explorer 5.01, 5.5 and 6.0. The issue allows an attacker to abuse Content-Disposition and Content-Type HTML headers to alter how a downloaded file’s name is displayed, potentially deceiving users into opening unsafe files. Exploitation details are not provided in th...
CVE-2003-0024
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu...
CVE-2002-0024
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download...