Adobe fixes 1 1 Flash high-risk vulnerabilities, mostly by the Google Project Zero team found-vulnerability warning-the black bar safety net

Following the Microsoft in this week's bug fix may fix the Stuxnet and FREAK vulnerability after, Adobe also ushered in a massive patch update. The Adobe update the Flash Player on the 1 1 high-risk vulnerabilities, most of which are remote arbitrary code execution vulnerability. Affected Softwar...

CVE-2015-0342

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341...

CVE-2015-0342

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341...

CVE-2015-0342

CVE-2015-0342 is a use-after-free vulnerability in Adobe Flash Player that can allow remote code execution. Affected products/versions include Flash Player on Windows and OS X prior to 13.0.0.277 and 14.x through 17.x prior to 17.0.0.134, and Linux prior to 11.2.202.451; vectors are unspecified. ...

CVE-2015-0342

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141820 --- March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

KLA10462 Multiple vulnerabilities in Adobe Flash Player

Multiple critical vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. An unspecified vulnerability can be exploited locally via type...

CVE-2014-0342

PivotX is affected by CVE-2014-0342 due to unrestricted file upload in fileupload.php. The issue occurs in PivotX before 2.3.9, where a file with a .php or .php# extension can be uploaded and then accessed via unspecified vectors, enabling remote execution of PHP code by an authenticated user. Th...

PivotX 2.3.8 contains multiple vulnerabilities

Overview PivotX 2.3.8, and possibly earlier versions, contains cross-site scripting CWE-79 and unsafe file upload CWE-434 vulnerabilities. Description PivotX 2.3.8, and possibly earlier versions, contains cross-site scripting CWE-79 and unsafe file upload CWE-434 vulnerabilities.CWE-79: Improper...

Oracle Linux 6 : wireshark (ELSA-2014-0342)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0342 advisory. - Resolves: CVE-2013-6337 - Resolves: CVE-2014-2281 CVE-2014-2283 CVE-2014-2299 Tenable has extracted the preceding description block directly from the...

RHEL 4 : kernel (RHSA-2010:0342)

Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 01/09/2011 - InduSoft ISSymbol ActiveX Control Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2011-0342

Summary (CVE-2011-0342) : InduSoft ISSymbol ActiveX control (ISSymbol.ocx 301.1104.601.0) in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 is affected. Boundary- or heap/stack-based buffer overflows occur when processing the Open, Close, or SetCurrentLanguage methods due to overly long strings, allo...

InduSoft ISSymbol ActiveX Control Buffer Overflow

Overview ICS-CERT has received a report from independent security researcher Dmitriy Pletnev of Secunia Research about ActiveX control buffer overflow vulnerabilities with proof-of-concept exploit code affecting the InduSoft ISSymbol product. Secunia has coordinated with InduSoft, who has produce...

CVE-2010-0342

The CVE-2010-0342 entry concerns TYPO3’s Reports for Job (job_reports) extension, affected in version 0.1.0 and earlier. The described vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The Red Hat/NVD/NVD-derived entries corr...

CentOS 5 : ipsec-tools (CESA-2007:0342)

Updated ipsec-tools packages that fix a denial of service flaw in racoon are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionali...

Mandrake Security Advisory MDVSA-2009:118 (kernel)

The remote host is missing an update to the kernel announced via advisory MDVSA-2009:118. OpenVAS Vulnerability Test $Id: mdksa2009118.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:118 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

CVE-2009-0834

The CVE-2009-0834 issue affects the Linux kernel up to 2.6.28.7 on x86_64, where audit_syscall_entry mishandles 32-bit processes making 64-bit syscalls or 64-bit processes making 32-bit syscalls. This can allow local users to bypass certain syscall audit configurations, and is related to CVE-2009...

CVE-2009-0342

CVE-2009-0342 is described in the connected SUSE advisories as a Linux kernel issue on x86_64 where a 32-bit process making a 64-bit syscall or a 64-bit process making a 32-bit syscall can bypass syscall auditing/access restrictions via crafted syscalls. It is a local vulnerability with impact on...

CVE-2008-0342

The CVE-2008-0342 entry affects Oracle Database Upgrade/Downgrade component in Oracle Database versions 9.2.0.8, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified with unknown impact and remote attack vectors (DB05). No explicit root-cause, exploit details, or remediation are ...