88 matches found
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7359)
Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...
SuSE 10 Security Update : acroread (ZYPP Patch Number 7358)
Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...
Adobe Reader Multiple Vulnerabilities (Feb 2011) - Linux
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Design/Logic Flaw
Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588...
CVE-2011-0588
Adobe Reader/Acrobat is affected by an untrusted search path vulnerability (CVE-2011-0588) on Windows: local users can gain privileges via a Trojan horse DLL placed in the current working directory. Affected versions include Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior t...
CVE-2010-0588
Cisco Unified Communications Manager (CUCM) versions 6.x prior to 6.1(5), 7.x prior to 7.1(3a)su1, and 8.x prior to 8.0(1) are affected by a DoS vulnerability triggered by malformed SCCP messages (RegAvailableLines or FwdStatReq) containing an invalid Line number, which can cause a process failur...
CVE-2009-0588
agent/request/op.cgi in the Registration Authority RA component in Red Hat Certificate System RHCS 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field...
CVE-2009-0588
agent/request/op.cgi in the Registration Authority RA component in Red Hat Certificate System RHCS 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field...
Moderate: Red Hat Security Advisory: rhpki-ra security update
An updated rhpki-ra package that fixes one security issue is now available for Red Hat Certificate System 7.3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat registration authority is an optional Red Hat Certificate System subsyste...
Gentoo Security Advisory GLSA 200503-10 (Firefox)
The remote host is missing updates announced in advisory GLSA 200503-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0588
CVE-2008-0588 describes a buffer overflow in the utape program within IBM AIX 5.2 and 5.3 (devices.scsi.tape.diag), enabling local users to gain privileges via unspecified vectors. The cited sources (NVD/NVD mirror entries) confirm the affected product family and the local-privilege-granting impa...
CVE-2007-0588
Apple QuickDraw in Mac OS X
CVE-2006-0588
Affected software: MyTopix 1.2.3. The vulnerability is in search.php and is caused by an SQL injection via the mid and keywords parameters, enabling remote attackers to execute arbitrary SQL commands. Consequences include potential partial confidentiality, integrity, and availability impact as in...
Mozilla Browser < 1.7.6 Multiple Vulnerabilities
The remote version of Mozilla contains multiple security issues that could allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Networ...
CVE-2005-0588
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...
CVE-2005-0588
CVE-2005-0588 affects Firefox <=1.0.0.1 and Mozilla
CVE-2004-0588
Cross-site scripting XSS vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages...
CVE-2004-0588
Cross-site scripting XSS vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages...
CVE-2004-0588
The CVE-2004-0588 entry describes an XSS vulnerability in Usermin’s web mail module (version around 1.070) that allows remote attackers to inject arbitrary HTML/script via e-mail messages. Affected software is Usermin, with the issue arising from improper sanitization of email content, enabling s...
CVE-2003-0588
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...