Mac OS X 10.6.x < 10.6.1 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.1. Mac OS X 10.6.1 contains security fixes for the following product : - Flash Player plug-in C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'compat.inc'; if description scriptid40946;...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

Gentoo Security Advisory GLSA 200908-04 (adobe-flash acroread)

The remote host is missing updates announced in advisory GLSA 200908-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE Security Update : flash-player (flash-player-1148)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868,...

openSUSE Security Update : flash-player (flash-player-1148)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868,...

CVE-2009-1867

CVE-2009-1867: Adobe Flash Player (before 9.0.246.0 and before 10.0.32.18 for 10.x) and Adobe AIR before 1.5.2 are affected by a clickjacking vulnerability. The issue can trick a user into (1) selecting a link or (2) completing a dialog. Remediation is to update Flash Player to a newer version (e...

Adobe Flash Player和AIR存在多个安全漏洞

Bugraq ID: 35890 CVE ID：CVE-2009-1863 CVE-2009-1864 CVE-2009-1865 CVE-2009-1866 CVE-2009-1867 CVE-2009-1868 CVE-2009-1869 CVE-2009-1870 CNCVE ID：CNCVE-20091863 CNCVE-20091864 CNCVE-20091865 CNCVE-20091866 CNCVE-20091867 CNCVE-20091868 CNCVE-20091869 CNCVE-20091870 Adobe Flash...

CVE-2008-1867

CVE-2008-1867 describes a SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion). The issue allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, potentially related to include/requetesIndex.php. The vulnerability affects the affected...

CVE-2008-1867

creationtimestamp| type| source ---|---|--- 2008-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5382...

CVE-2007-1867

CVE-2007-1867 applies to IrfanView 3.99. A buffer overflow in the handling of animated cursor (ANI) files can be triggered by a crafted ANI, allowing remote attackers to execute arbitrary code. The vulnerability is described in both the initial CVE entry and connected records as a stack/heap over...

CVE-2006-1867

Technical details for CVE-2006-1867 are not publicly available in the provided documents. The entries reference Oracle 9.2.0.6 Advanced Replication with unknown impact and attack vectors. Monitor for authoritative updates and vendor advisories.

CVE-2002-1867

The CVE-2002-1867 entry concerns BizDesign ImageFolio versions 2.23–2.26 where default configuration fails to restrict access to admin/setup.cgi and admin/nph-build.cgi. This allows remote attackers to (1) create an administrative account and (2) trigger a denial of service (CPU consumption). The...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

CVE-2004-1867

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2004-1867

Cross-site scripting XSS vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field...

php -- vulnerability in RFC 1867 file upload processing

Stefano Di Paola discovered an issue with PHP that could allow someone to upload a file to any directory writeable by the httpd process. Any sanitizing performed on the prepended directory path is ignored. This bug can only be triggered if the $FILES element name contains an underscore...