241 matches found
Adobe Reader Javascript API spell.customDictonaryOpen memory corruption
Added: 05/12/2009 CVE: CVE-2009-1493 BID: 34740 OSVDB: 54129 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in the Javascript API in Adobe Reader allows command execution when a user opens a specially crafted PDF file which calls the...
CVE-2009-1493
The CVE-2009-1493 issue affects Adobe Reader 9.1, 8.1.4, 7.1.1 and earlier on Linux/UNIX. It stems from the JavaScript API function customDictionaryOpen, where insufficient input validation allows a long string in the second argument to trigger memory corruption and remote code execution or a den...
CVE-2009-1493
creationtimestamp| type| source ---|---|--- 2009-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8570...
CVE-2008-1493
CVE-2008-1493 affects Cuteflow Bin 1.5.0 in login.php. The language parameter is processed insecurely, enabling directory traversal with ".." to include and execute local files. This has potential partial impact to confidentiality, integrity, and availability (CVSS v2 base score 7.5, AV:N/AC:L/Au...
CVE-2008-1493
creationtimestamp| type| source ---|---|--- 2008-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5296...
Debian Security Advisory DSA 1493-2 (sdl-image1.2)
The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-2. OpenVAS Vulnerability Test $Id: deb14932.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-2 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
Debian Security Advisory DSA 1493-1 (sdl-image1.2)
The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-1. OpenVAS Vulnerability Test $Id: deb14931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-1 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
Debian Security Advisory DSA 1493-1 (sdl-image1.2)
The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Debian DSA-1493-2 : sdl-image1.2 - buffer overflows
Several local/remote vulnerabilities have been discovered in the image loading library for the Simple DirectMedia Layer 1.2. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6697 Gynvael Coldwind discovered a buffer overflow in GIF image parsing, whi...
CVE-2003-1493
CVE-2003-1493 affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. The issue is a memory leak in NNM that can be triggered by crafted TCP packets, leading to a denial of service via memory exhaustion. Exploitation status, affected platforms beyond 6.2/6.4, and a vendor patch/fix a...
CVE-2007-1493
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172...
CVE-2007-1493
CVE-2007-1493 describes an SQL injection in nukesentinel.php for NukeSentinel 2.5.06 and earlier, caused by a permissive IP validation regex that allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header. This CVE is linked to an incomplete patch for CVE-2007-1172. C...
CVE-2006-1493
CVE-2006-1493 is a cross-site scripting vulnerability in Explorer XP’s dir.php where an attacker can inject arbitrary script via the chemin parameter. The entry notes this may be related to CVE-2006-1492. No exploitation details or fixes are provided in the documents; remediation information is n...
CVE-2005-1493
SimpleCam 1.2 is affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL. The underlying issue is improper validation of path input, enabling access to files outside the web root. Impact is information disclosur...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier is affected. The issue allows remote attackers to cause a denial of service (server crash) via multiple connections using long nicknames, possibly triggering a buffer overflow. Root cause isn’t explicitly detailed in the provided documents beyond this descrip...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...
CVE-2002-1493
Cross-site scripting XSS vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via 1 STYLE attributes or 2 SRC attributes in an IMG tag...
CVE-2003-1493
Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...