SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6398)

This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6331)

This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...

CVE-2010-1856

Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...

CVE-2010-1856

CVE-2010-1856 affects RepairShop2 (version 1.9.023 Trial). The vulnerability is a reflected XSS in index.php, exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary script/HTML via the prod parameter in the products.details action. The connected documents con...

CVE-2010-1856

creationtimestamp| type| source ---|---|--- 2010-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33787...

openSUSE 10 Security Update : acroread (acroread-6332)

This update of acroread fixes the following vulnerabilities : - CVE-2009-1855: stack overflow that could lead to code execution - CVE-2009-1856: integer overflow with potential to lead to arbitrary code execution - CVE-2009-1857: memory corruption with potential to lead to arbitrary code executio...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 1170)

This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

RHEL 3 / 4 / 5 : acroread (RHSA-2009:1109)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...

Debian Security Advisory DSA 1856-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 1856-1. OpenVAS Vulnerability Test $Id: deb18561.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1856-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

openSUSE Security Update : acroread (acroread-1060)

This update of acroread fixes the following vulnerabilities : - CVE-2009-1855: stack overflow that could lead to code execution - CVE-2009-1856: integer overflow with potential to lead to arbitrary code execution - CVE-2009-1857: memory corruption with potential to lead to arbitrary code executio...

openSUSE Security Update : acroread (acroread-1060)

This update of acroread fixes the following vulnerabilities : - CVE-2009-1855: stack overflow that could lead to code execution - CVE-2009-1856: integer overflow with potential to lead to arbitrary code execution - CVE-2009-1857: memory corruption with potential to lead to arbitrary code executio...

SuSE Security Advisory SUSE-SA:2009:035 (acroread)

The remote host is missing updates announced in advisory SUSE-SA:2009:035. OpenVAS Vulnerability Test $Id: susesa2009035.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:035 acroread Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1109

The remote host is missing updates announced in advisory RHSA-2009:1109. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially,...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...

iDefense Security Advisory 06.11.09: Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability

iDefense Security Advisory 06.09.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 09, 2009 I. BACKGROUND Adobe Acrobat Reader/Acrobat are programs for viewing and editing Portable Document Format PDF documents. For more information, see the vendor's site found at the following link...

CVE-2009-1856

CVE-2009-1856 is tied to an integer overflow in the FlateDecode filter of Adobe Reader 7/ Acrobat 7 up to 7.1.3, Adobe Reader 8 up to 8.1.6, and Adobe Reader 9 up to 9.1.2. The vulnerability allows a heap-based buffer overflow via a PDF containing unspecified parameters, potentially causing a den...

Adobe Reader FlateDecode Parameters Integer Overflow (APSB09-07; CVE-2009-1856; CVE-2009-3957)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. Successful exploitation of this issue will cause the application to become non-responsive, and m...

Mandriva Update for vixie-cron MDKSA-2007:234 (vixie-cron)

Check for the Version of vixie-cron OpenVAS Vulnerability Test Mandriva Update for vixie-cron MDKSA-2007:234 vixie-cron Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2008-1856

plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...