Adobe Acrobat and Reader JavaScript buffer overflow

Added: 11/13/2008 CVE: CVE-2007-5659 BID: 27641 OSVDB: 41495 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem Buffer overflow vulnerabilities in several JavaScript functions allow command execution when a user loads ...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 5757)

This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243 / CVE-2008-3873 / CVE-2007-4324 / CVE-2008-4401 / CVE-2008-4503 / CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000...

MS08-069: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)

The remote host is running a version of Windows that contains a flaw in the Windows XML Core Services. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a specially crafted email message. C...

openSUSE 10 Security Update : flash-player (flash-player-5747)

This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503, CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Sun Solaris DHCP请求处理漏洞

CVE ID：CVE-2007-5365 Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理DHCP请求存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 -处理DHCP请求时in.dhcpd存在边界错误，可导致缓冲区溢出。 -处理DHCP请求时in.dhcpd存在一个未明错误，可导致DHCP服务器守护程序崩溃或以root权限执行任意代码。 Sun Solaris 10 Sun Solaris 8 Sun Solaris 9 可参考如下补丁： -- SPARC Platform -- Solaris 8:...

USN-669-1: gnome-screensaver vulnerabilities

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

MS08-069: Description of the security update for the 2007 Office suite: November 11, 2008

None None...

Adobe PageMaker key strings buffer overflow

Added: 11/10/2008 CVE: CVE-2007-6432 BID: 31999 OSVDB: 50055 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in AldFs32.dll allows command execution when a user opens a specially crafted PMD file. Resolution See the solution referenced in APSA08-10...

Adobe PageMaker key strings buffer overflow

Added: 11/10/2008 CVE: CVE-2007-6432 BID: 31999 OSVDB: 50055 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in AldFs32.dll allows command execution when a user opens a specially crafted PMD file. Resolution See the solution referenced in APSA08-10...

Adobe PageMaker key strings buffer overflow

Added: 11/10/2008 CVE: CVE-2007-6432 BID: 31999 OSVDB: 50055 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in AldFs32.dll allows command execution when a user opens a specially crafted PMD file. Resolution See the solution referenced in APSA08-10...

openSUSE 10 Security Update : apache2 (apache2-5648)

Missing sanity checks of FTP URLs allowed cross site scripting XSS attacks via the modproxyftp module CVE-2008-2939. Missing precautions allowed cross site request forgery CSRF via the modproxybalancer interface CVE-2007-6420. A memory leak in the ssl module could crash apache CVE-2008-1678...

CVE-2007-6586

creationtimestamp| type| source ---|---|--- 2008-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6979...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 78f456fd-9c87-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f456fd-9c87-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1646-2 (squid)

The remote host is missing an update to squid announced via advisory DSA 1646-2. OpenVAS Vulnerability Test $Id: deb16462.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1646-2 squid Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1653-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1653-1. OpenVAS Vulnerability Test $Id: deb16531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1653-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1653-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6432

Adobe PageMaker 7.0.1/7.0.2 is affected by a stack-based buffer overflow in AldFs32.dll when parsing PMD files, enabling arbitrary code execution via a crafted PMD file. The issue is described as a remote code execution vulnerability with user-assisted access (the attacker must entice the user to...

CVE-2008-4864

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...

CVE-2007-6021

CVE-2007-6021 affects Adobe PageMaker 7.0.1 and 7.0.2. The issue is a heap-based buffer overflow in PMD file processing, triggered by a crafted font structure inside a PMD, enabling user-assisted remote code execution. Multiple connected sources (NVD, Secunia, Nessus/OpenVAS entries) corroborate ...