CVE-2007-0065

CVE-2007-0065 is a remote code execution vulnerability described as an OLE Heap Overrun in Object Linking and Embedding (OLE) Automation. The flaw is a heap-based buffer overflow triggered by specially crafted script requests, affecting Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1/SP...

CVE-2007-5659

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...

Immunity Canvas: ACROBAT_JS

Name| acrobatjs ---|--- CVE| CVE-2007-5659 Exploit Pack| CANVAS Description| Adobe Acrobat Reader Stack Overflow 8.1.1 Notes| CVE Name: CVE-2007-5659 VENDOR: Adobe VersionsAffected: 8.1.1 and Below Repeatability: References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657...

CVE-2007-5663

CVE-2007-5663 affects Adobe Acrobat/Reader ≤ 8.1.1, where a crafted PDF can trigger an insecure JavaScript method in the EScript.api plug‑in to execute arbitrary code remotely. The issue is documented across multiple OpenVAS/Nessus sources and Red Hat advisories, which indicate that updates to at...

CVE-2007-5666

Adobe Acrobat/Reader (Windows, older than 8.1.2) is affected by an untrusted search path vulnerability where a malicious Security Provider library placed in the reader’s working directory can cause arbitrary code execution with local access. Publicly noted CVEs include CVE-2007-5666, with related...

CVE-2007-5659

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...

CVE-2007-5659

Adobe Acrobat/Reader (シリーズ 8.1.1 and earlier) contains a buffer-overflow in unspecified JavaScript methods triggered by a crafted PDF long-argument to JavaScript calls, enabling remote code execution. The vulnerability (CVE-2007-5659) is noted to potentially be subsumed by CVE-2008-0655. Exploita...

Buffer overflow

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

Sql injection

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager (versions 8.1, 9.0, 10.0) allows a user-assisted remote attacker to execute arbitrary code via a malformed XBM file. The issue arises during XBM processing and may be related to CVE-2007-6009. No remediation or exploit details are provided in the connected ...

CVE-2007-5333

Affected software: Apache Tomcat 4.1.0–4.1.36, 5.5.0–5.5.25, 6.0.0–6.0.14. The vulnerability (CVE-2007-5333) arises from improper handling of (1) double quote (" ) characters and (2) %5C-encoded backslash sequences in cookie values, which can leak session IDs and enable session hijacking. It exis...

CVE-2007-6286

Apache Tomcat 5.5.11–5.5.25 and 6.0.0–6.0.15, when using the native APR connector, fail to properly handle an empty SSL-port request, allowing remote attackers to trigger a duplicate of a recent request (e.g., via netcat). See CVE-2007-6286. NT: Affected versions are confirmed in Nessus/OpenVAS e...

CVE-2007-5333

Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle 1 double quote " characters or 2 %5C encoded backslash sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable...

CVE-2007-5659

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655. Recent assessments: Assessed Attacker Value: 0 Assess...

Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...

MS08-008: Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)

The remote host contains a version of Microsoft Windows that has a vulnerability in the OLE Automation component that can be abused by an attacker to execute arbitrary code on the remote host. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script...

AIX 5.2 TL 10 : bos.rte.console (U809761)

The remote host is missing AIX PTF U809761, which is related to the security of the package bos.rte.console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809761. The text itself is copyright C...

AIX 5.3 TL 6 : bos.rte.console (U810309)

The remote host is missing AIX PTF U810309, which is related to the security of the package bos.rte.console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U810309. The text itself is copyright C...

AIX 5.3 TL 6 : perl.rte (U814193)

The remote host is missing AIX PTF U814193, which is related to the security of the package perl.rte. A buffer overflow vulnerability exists in the 'perl.rte' fileset. A remote attacker may execute arbitrary code if a Perl script executing on the system is listening on a network port. If exploite...