118 matches found
CVE-2007-5659
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655. Recent assessments: Assessed Attacker Value: 0 Assess...
CVE-2008-0667
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655...
CVE-2008-0667
CVE-2008-0667 concerns Adobe Acrobat/Reader and the DOC.print API in the JavaScript layer. The vulnerability arises from a design/logic flaw that allows a PDF to silently trigger printing of any number of copies without user interaction, potentially enabling abuse of the printer. Affected product...
CVE-2008-0655
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...
CVE-2008-0655
CVE-2008-0655 affects Adobe Acrobat/Reader (before 8.1.2). Connected advisories confirm multiple vulnerabilities in Adobe Reader/Acrobat, including JS API DOC.print could silently trigger printing, and PDF processing flaws that could enable arbitrary code execution. Red Hat RHSA-2008:0144 documen...
CVE-2007-0655
The CVE concerns the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1 (and possibly other versions). Affected component: MWAGENT.EXE running as a service. Vulnerability: remote or local attackers can gain privileges and execute arbitrary commands by connecting dir...
CVE-2006-0655
CVE-2006-0655 describes multiple cross-site scripting (XSS) vulnerabilities in Hinton Design phpht Topsites 1.3, specifically in the link_edited.php and link_added.php scripts. The provided descriptions indicate remote attackers can inject arbitrary web script or HTML via unspecified vectors. The...
CVE-2005-0655
The vulnerability CVE-2005-0655 affects auraCMS 1.5. An attacker can trigger an information disclosure by issuing an HTTP request with an invalid id parameter to one of three PHP endpoints (teman.php, hal.php, arsip.php), causing a PHP error message that reveals the file path. The NVD page report...
CVE-2004-0655
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...
CVE-2004-0655
CVE-2004-0655 affects esearch = 0.6.2. If upgrading is not immediately possible, there is no workaround noted in the public documents. Exploitation details or live in-the-wild status are not provided beyond the advisory content in the connected documents.
CVE-2004-0655
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...
CVE-2003-0655
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges...
CVE-2003-0655
The CVE-2003-0655 entry affects rscsi in cdrtools 2.01 and earlier. The root cause is that a local user can cause arbitrary files to be overwritten and obtain root privileges by supplying the target file as a command-line argument, which is altered while rscsi runs with privileges. The connected ...
CVE-2003-0655
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges...
CVE-2002-0655
OpenSSL CVE-2002-0655 affects 0.9.6d and earlier and 0.9.7-beta2 and earlier; on 64-bit platforms it mishandles ASCII representations of integers, enabling denial of service and potentially arbitrary code execution. Public sources in the connected docs corroborate multiple related CVEs (0655, 065...
CVE-2002-0655
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2000-0655
CVE-2000-0655 affects Netscape Communicator 4.73 and earlier. The vulnerability allows remote attackers to cause a denial of service or execute arbitrary commands through a JPEG image containing a comment with an illegal field length of 1. The connected documents corroborate the affected software...