Adobe Reader Multiple Vulnerabilities (Feb 2011) - Linux

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2011-0563

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606...

CVE-2011-0563

Adobe Reader and Acrobat are vulnerable in multiple old branches: 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. The issue allows arbitrary code execution or memory corruption via unspecified vectors and is distinct from CVE-2011-0589 and CVE-2011-0606. Patches e...

CVE-2011-0563

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606...

Adobe Acrobat < 10.0.1 / 9.4.2 / 8.2.5 Multiple Vulnerabilities (APSB11-03)

The version of Adobe Acrobat installed on the remote host is earlier than 10.0.1 / 9.4.2 / 8.2.5. Such versions are reportedly affected by multiple vulnerabilities : - Multiple input validation vulnerability exist that could lead to code execution. CVE-2010-4091, CVE-2011-0586, CVE-2011-0587,...

CVE-2010-0563

The CVE-2010-0563 entry concerns IBM WebSphere Application Server (WAS) 7.0.0.0–7.0.0.8 where the Requires SSL configuration option is not recognized by SSO, permitting exposure of sensitive data via sniffed network sessions that were expected to be encrypted. Documents specify the affected produ...

Microsoft Word畸形记录解析栈溢出漏洞(MS09-027)

BUGTRAQ ID: 35190,35188 CVECAN ID: CVE-2009-0565,CVE-2009-0563 Word是微软Office套件中的文件处理工具。 Word在处理包含有无效长度字段或记录的特制Word文件的方式存在栈溢出漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac...

CVE-2009-0563

CVE-2009-0563 is a Stack-based buffer overflow in Microsoft Word components that allows remote code execution when a user opens a crafted Word document with an invalid length field. Affected products include Word 2002 SP3, 2003 SP3, Word 2007 SP1/SP2, Office for Mac 2004/2008, Open XML File Forma...

CVE-2009-0563

Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word,...

Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...

CVE-2008-0563

Cross-site request forgery CSRF vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in...

Symantec Web Security (SWS) Multiple Vulnerabilities

According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25446;...

Cross site scripting

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2007-0563

Symantec Web Security (SWS) is affected by CVE-2007-0563 due to multiple XSS vulnerabilities in versions prior to 3.0.1.85. The flaws allow remote attackers to inject arbitrary script or HTML via unspecified vectors related to error messages and blocked page messages produced by SWS. OpenVAS and ...

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

CVE-2005-0563

Microsoft Outlook Web Access (OWA) for Exchange Server 5.5 contains a cross-site scripting (XSS) vulnerability in the HTML encoding used in Compose New Message, allowing an attacker to cause script execution in the user’s context via a specially crafted email (encoded javascript: URL in an IMG ta...

CVE-2004-0563

The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password...

CVE-2004-0563

The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password...

CVE-2004-0563

Summary of confirmed details for CVE-2004-0563: The issue affects the freenet6 client on Debian Linux prior to version 0.9.6 and prior to 1.0, where the tspc.conf file is world-readable, enabling local users to potentially read sensitive information such as usernames and passwords. The root cause...