RHEL 5 / 6 : flash-plugin (RHSA-2014:1173)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

openSUSE Security Update : flash-player (openSUSE-SU-2014:1110-1)

Adobe Flash Player was updated to 11.2.202.406 bnc895856 : - APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on :...

flash-player to 11.2.202.40 (important)

Adobe Flash Player was updated to 11.2.202.406 bnc895856: APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on:...

CVE-2014-0549

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...

UBUNTU-CVE-2014-0549

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...

Memory corruption

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...

CVE-2014-0549

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...

Flash Player < 15.0.0.152 Multiple Vulnerabilities (APSB14-21)

Binary data 8375.prm...

Flash Player for Mac <= 14.0.0.179 Multiple Vulnerabilities (APSB14-21)

According to its version, the installation of Flash Player installed on the remote Mac OS X host is equal or prior to 14.0.0.179. It is, therefore, affected by the following vulnerabilities : - Unspecified memory corruption issues exist that allow arbitrary code execution. CVE-2014-0547,...

CVE-2013-0549

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2013-0549

The CVE records a cross-site scripting vulnerability in IBM WebSphere Portal’s Web Content Viewer Portlet. Affected product: WebSphere Portal server (IBM Web Content Manager – Web Content Viewer Portlet). Vulnerable component: the Web Content Viewer Portlet when the IBM Portlet API is used. Root ...

CVE-2013-0549

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

Oracle AutoVue ActiveX Control SetMarkupMode Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Oracle AutoVue ActiveX Control SetMarkupMode Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Oracle AutoVue AutoVueX ActiveX Control SetMarkupMode Stack Buffer Overflow (CVE-2012-0549)

A stack buffer overflow vulnerability has been reported in Oracle AutoVue...

CVE-2012-0549

creationtimestamp| type| source ---|---|--- 2012-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20297 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/oracleautovuesetmarkupmode.rb 2025-02-06...

Oracle AutoVue - ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Oracle AutoVue SetMarkupMode ActiveX Overflow

Added: 07/17/2012 CVE: CVE-2012-0549 BID: 53077 OSVDB: 81439 Background Oracle AutoVue Enterprise Visualization is a suite of Oracle products designed to deliver a web-based capability to access, view, digitally annotate and collaborate on technical and business documents, without requiring...

CVE-2012-0549

CVE-2012-0549 covers a stack buffer overflow in the Oracle AutoVue ActiveX control SetMarkupMode (AutoVueX.ocx, CLSID {B6FCC215-D303-11D1-BC6C-0000C078797F}). Affected product family: Oracle AutoVue Desktop/AutoVue ActiveX for Windows. Root cause: insecure handling/sanitization in SetMarkupMode (...

Symantec Web Gateway forget.php Blind SQL Injection (SYM11-008)

According to its self-reported version number, the version of Symantec Web Gateway running on the remote host has a SQL injection vulnerability. Input to the 'username' parameter of the 'forget.php' script is not properly sanitized. A remote, unauthenticated attacker could exploit this to...