VUPEN Security Research - Adobe Flash Player "newfunction" Invalid Pointer Vulnerability (CVE-2010-2174)

VUPEN Security Research - Adobe Flash Player "newfunction" Invalid Pointer Vulnerability CVE-2010-2174 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewing of...

CVE-2010-2174

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction 0x44 operator, a different vulnerability than CVE-2010-2173...

CVE-2010-2174

CVE-2010-2174 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player for 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is an invalid pointer issue related to the newfunction (0x44) operator and is exploitable via unspecified vectors, enabling arbitrary co...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

GUPnP Message Handling Denial Of Service Vulnerability

GUPnP is prone to denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2174

CVE-2009-2174 affects GUPnP 0.12.7 and allows remote attackers to crash the service via an empty subscription or control message. The available connected documents confirm the vulnerability and its DoS impact but do not provide specific exploits, affected product versions beyond 0.12.7, or remedi...

Gentoo Security Advisory GLSA 200507-12 (bugzilla)

The remote host is missing updates announced in advisory GLSA 200507-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2174

Technical details for CVE-2008-2174 are not publicly provided in the supplied documents. Monitor for updates from NVD/other sources.

CVE-2006-2174

CVE-2006-2174 concerns multiple cross-site scripting (XSS) vulnerabilities in VHCS’s admin/server_day_stats.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying one of three parameters: day, month, or year. This is documented across multiple sources (NVD, CVE...

CVE-2002-2174

The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...

CVE-2004-2174

CVE-2004-2174 describes a cross-site scripting (XSS) vulnerability in Custva.asp within EarlyImpact ProductCart, where remote attackers can inject arbitrary JavaScript via the redirectUrl parameter. The NVD entry lists the affected product as EarlyImpact ProductCart and cites a MEDIUM severity (C...

CVE-2005-2174

CVE-2005-2174 concerns Bugzilla where Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 insert bugs before they are private, enabling a race condition that can expose bug details via buglist.cgi before MySQL replication completes. Connected references corroborate the flaw and i...

CVE-2004-2174

Cross-site scripting XSS vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter...

CVE-2002-2174

The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service memory consumption via a large number of connections...