81 matches found
CVE-2011-2169
Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it...
CVE-2011-2169
Summary: CVE-2011-2169 affects Google Chrome OS prior to R12 0.12.433.38 Beta. Vulnerability: Local privilege escalation via a misused /var/lib/chromeos-aliases.conf file, where an attacker can place commands that are executed with elevated privileges by a local user. Root cause/impact: The descr...
Debian: Security Advisory (DSA-2169-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2169-1 : telepathy-gabble - insufficient input validation
It was discovered that telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, is processing google:jingleinfo updates without validating their origin. This may allow an attacker to trick telepathy-gabble into relaying streamed media data through a server of his choice a...
SuSE Update for flash-player SUSE-SA:2010:024
Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2010:024 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2010-2169
Affected software: Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. Root cause/impact: vulnerability causes pointer memory corruption that can lead to a denial of service or, potentially, arbitrary code execution via unspecified vector...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
CVE-2009-2169
CVE-2009-2169: In Edraw PDF Viewer Component, the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) before 3.2.0.126 contains an insecure method vulnerability. An attacker can remotely create and overwrite arbitrary files by passing a URL argument to FtpConnect and a target filename to Ft...
CVE-2009-2169
creationtimestamp| type| source ---|---|--- 2009-06-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8986...
CVE-2008-2169
Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...
CVE-2008-2169
The CVE-2008-2169 entry concerns Avici routers and a vulnerability that allows remote attackers to trigger a denial of service (dropped sessions) by sending crafted BGP UPDATE messages, causing route flapping. The connected Red Hat pages and vendor entries mirror the same description, confirming ...
CVE-2007-2169
CVE-2007-2169 describes a static code injection vulnerability in Mozzers SubSystem 1.0, specifically in add.php. The issue allows remote attackers to inject PHP code into subs.php via the (1) Sub-name or (2) Sub-url fields. An earlier report suggests the add action can also be reached through a r...
CVE-2006-2169
CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...
CVE-2002-2169
CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...
CVE-2004-2169
CVE-2004-2169 affects Application Access Server (A-A-S) 1.0.37 and earlier. Remote authenticated users can trigger a denial of service (application crash) by issuing a long file request. No remediation or fixes are detailed in the provided documents.
CVE-2005-2169
CVE-2005-2169 is a directory traversal vulnerability in Quick & Dirty PHPSource Printer 1.1 and earlier. The flaw allows remote attackers to read arbitrary files by supplying evil ".../...//" sequences in the file parameter, which are reduced to "../" by a regex, enabling access to parent directo...