113 matches found
openSUSE 10 Security Update : acroread (acroread-2506)
The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes : CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to code execution. CVE-2007-0044: Universal Cross Site Request Forgery CSRF problems...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 23 Jan 2007 The previous acroread packages were missing dependencies on the new...
CVE-2007-0046
CVE-2007-0046 is a double‑free vulnerability in the Adobe Acrobat Reader Plugin used by Mozilla Firefox 1.5.0.7, enabling remote code execution via a javascript: URI causing document.write. Affected component is the Acrobat Reader plugin; impact is arbitrary code execution in the user context. Pu...
CVE-2006-0046
squidredirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service CPU consumption via a URL with a large number of trailing / forward slashes, which might produce inefficient regular expressions...
CVE-2006-0046
The CVE-2006-0046 vulnerability affects the adzapper proxy-advertisement zapper when used as a plugin in Squid’s Internet object cache. The issue stems from the squid_redirect script in adzapper (pre-2006-01-29) that can be abused by remote attackers to trigger high CPU usage and cause a denial o...
[Full-disclosure] [SECURITY] [DSA 966-1] New adzapper packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 966-1 [email protected] http://www.debian.org/security/ Martin Schulze February 9th, 2006 http://www.debian.org/security/faq -...
CVE-2004-0046
The CVE-2004-0046 entry describes an XSS vulnerability in SnapStream PVS LITE. The issue allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' character. Affected component: SnapStream PVS LITE web interface; root cause: improper handling of...
CVE-2003-0046
AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...
CVE-2002-0046
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...
CVE-2001-0046
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities...
CVE-2000-0046
CVE-2000-0046 is a buffer overflow vulnerability in the ICQ 99b 1.1.1.1 client that allows remote attackers to execute commands by sending a malformed URL contained in an ICQ message. The available connected documents confirm ICQ is installed on affected hosts and reference the CVE in multiple vu...
CVE-1999-0046
The CVE-1999-0046 entry documents a buffer overflow in the rlogin program triggered by the TERM environment variable. Red Hat/NVD entries confirm a buffer overflow affecting rlogin; no specific vulnerable versions or patches are provided in the supplied sources. Exploitation details, affected pro...