113 matches found
SuSE Update for flash-player SUSE-SA:2010:024
Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2010:024 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2010-2164
CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
iDefense Security Advisory 06.10.10: Adobe Flash Player Use-After-Free Vulnerability
iDefense Security Advisory 06.10.10 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 10, 2010 I. BACKGROUND Adobe Flash Player is a very popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, Linux and MacOS. Flash Player enables Web...
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
CVE-2009-2164
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...
CVE-2009-2164
CVE-2009-2164 describes SQL injection vulnerabilities in Kjtechforce Mailman beta1, exploitable when magic_quotes_gpc is disabled. The issues allow remote attackers to execute arbitrary SQL via (1) the code parameter in activate.php or (2) the dest parameter in index.php. Affected component is th...
CVE-2009-2164
creationtimestamp| type| source ---|---|--- 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8884 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8885...
CVE-2007-2164
CVE-2007-2164 affects Konqueror 3.5.5 (release 45.4). The issue is a denial of service caused by JavaScript that matches a regex against a long string, demonstrated with /(.)*/. The vulnerability arises in the browser’s handling of such regex patterns, potentially leading to a crash or abort. Con...
CVE-2002-2164
CVE-2002-2164 describes a buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 that allows remote attackers to cause a denial of service by sending a long link. The connected sources (Red Hat, CVE listings, and NVD) corroborate a vulnerability in handling abnormally long link reference...
CVE-2004-2164
VP-ASP 5.0 is affected by CVE-2004-2164 due to shoprestoreorder.asp not closing the database connection after restoring a previous order, enabling potential denial of service via resource exhaustion. The available sources describe the impact as a connection consumption issue but do not provide co...
CVE-2004-2164
shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service connection consumption...