186 matches found
TPTI-11-08: Adobe Shockwave iml32.dll DEMX Chunk GIF Parsing Remote Code Execution Vulnerability
TPTI-11-08: Adobe Shockwave iml32.dll DEMX Chunk GIF Parsing Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-11-08 June 15, 2011 -- CVE ID: CVE-2011-2111 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Play...
ZDI-11-212: Adobe Shockwave KEY* Chunk Invalid Size Remote Code Execution Vulnerability
ZDI-11-212: Adobe Shockwave KEY Chunk Invalid Size Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-212 June 14, 2011 -- CVE ID: CVE-2011-2111 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...
CVE-2011-2111
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116...
Memory corruption
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115...
CVE-2011-2111
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116...
CVE-2011-2116
CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...
CVE-2011-2111
Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2111 due to a memory-corruption vulnerability in IML32.dll triggered by malformed DEMX chunk GIF parsing. Exploitation can lead to arbitrary code execution or crash; vendor patch APSB11-17 addressed this in 11.6.0.626+. Connected advi...
CVE-2011-2116
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115...
Debian Security Advisory DSA 2111-1 (squid3)
The remote host is missing an update to squid3 announced via advisory DSA 2111-1. OpenVAS Vulnerability Test $Id: deb21111.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2111-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
CVE-2010-2111
CVE-2010-2111 affects Pacific Timesheet 6.74 build 363, via CSRF in user/user-set.do that allows remote attackers to hijack administrator sessions by creating a new_admin administrator account. The OpenVAS entries corroborate a Pacific Timesheet CSRF vulnerability under versions before 6.75, whil...
CVE-2009-2111
CVE-2009-2111 affects DB Top Sites 1.0, with a vulnerability in the file add_reg.php that allows static code injection . A remote attacker can inject arbitrary PHP code by supplying crafted parameters for the (1) url and (2) location, enabling code execution on the affected system. This is docume...
CVE-2009-2111
creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8951...
CVE-2008-2111
The CVE-2008-2111 entry concerns the ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier. The vulnerability is a memory corruption issue in the Ynoifier COM object that enables remote attackers to execute arbitrary code. Affected component: ActiveX/yNotifier.dll within Yahoo! Assi...
Microsoft Windows "MHTML" protocol handler fails to properly handle URL redirections
Overview Microsoft Windows "MHTML" protocol handler fails to properly interpret URL redirections, which may cause information disclosure. Description The Microsoft Windows "MHTML" protocol handler contains an information disclosure vulnerability in the way that it interprets URL redirections. The...
CVE-2007-2111
CVE-2007-2111 describes an SQL injection vulnerability in Oracle Database affecting SYS.DBMS_AQADM_SYS, with vulnerable versions 9.0.1.5, 9.2.0.7, and 10.1.0.5. The issue allows remote authenticated users to inject arbitrary SQL via unknown vectors (DB04). According to the NVD entry, the CVSS bas...
Serv-U FTP site chmod buffer overflow
Added: 07/17/2006 CVE: CVE-2004-2111 BID: 9675 OSVDB: 3713 Background Serv-U is an FTP server for Windows platforms. Problem An attacker who has logged on to the Serv-U FTP server and has a writable directory could execute arbitrary commands by sending a site chmod command with an overly long fil...
Community Link Pro webeditor login.cgi remote command execution
The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software contains a flaw in the script 'login.cgi' which may allow an attacker to execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id:...
CVE-2002-2111
The CVE-2002-2111 issue affects fwmon prior to version 1.0.10. The root cause is that the kernel can be made to process a large packet, which leads to a denial of service (crash). Impact is a local service disruption where remote input triggers a crash via a crafted large packet; exploitation det...
Community Link Pro login.cgi file Parameter Arbitrary Command Execution
The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'login.cgi' script of shell metacharacters before using it to run a command. An unauthenticated attacker can...