141 matches found
CVE-2010-2175
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166,...
CVE-2010-2175
Technical details about CVE-2010-2175 are not publicly available in the provided documents. Monitor for updates.
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
Apple QuickTime for Java toQTPointer Function Memory Corruption (CVE-2007-2175)
Apple QuickTime is a multi-platform, industry-standard, multimedia software architecture. It is used by software developers, hardware manufacturers, and content creators to author and publish multiple media documents. Java is an object-oriented language that includes a set of libraries that...
Apple QTJava toQTPointer() Arbitrary Memory Access
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Apple QTJava toQTPointer Arbitra...
CVE-2009-2175
CVE-2009-2175 describes a stack-based overflow in xcftools 1.0.4, triggered in the flattenIncrementally function (flatten.c) and exploitable via crafted images during conversion by xcf2pnm/xcf2png. Impact: remote denial of service (crash) and potential arbitrary code execution. The connected Open...
CVE-2008-2175
creationtimestamp| type| source ---|---|--- 2008-05-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5533...
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 2175)
A previous openssl update CVE-2006-2940 introduced another bug that can lead to a crash by providing a large prime number. An uninitialized pointer is freed during error handling. This bug allows remote attackers to crash services that use openssl. %NASLMINLEVEL 70300 C Tenable Network Security,...
Quicktime < 7.1.6 quicktime.util.QTHandleRef toQTPointer Method Arbitrary Code Execution (Mac OS X)
According to its version, the installation of Quicktime on the remote Mac OS X host which contains a bug which might allow a rogue Java program to write anywhere in the heap. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by luring a victim into...
Code injection
Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175...
CVE-2007-2176
Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175...
CVE-2007-2175
Apple QuickTime for Java (QTJava.dll) contains a heap memory corruption vulnerability in the toQTPointer function of QTHandleRef that can allow a remote, unauthenticated attacker to execute arbitrary code when Java is enabled in a browser (as demonstrated at CanSecWest 2007). The issue affects Qu...
CVE-2007-2176
CVE-2007-2176 affects Mozilla Firefox with an unspecified vulnerability involving Javascript errors that allows remote code execution. The NVD entry reports a CVSS v2 base score of 10.0 (High) with network attack vector and near-total impact (Confidentiality, Integrity, Availability). The descrip...
Apple Quicktime for Java 7 Memory Access
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2006-2175
CVE-2006-2175 describes a PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier . The issue arises when an attacker can supply a URL in the path parameter to the vulnerable scripts, specifically in (1) show.php or (2) top.php, enabling remote code execution by includi...
CVE-2002-2175
The vulnerability (CVE-2002-2175) affects phpSquidPass prior to 0.2. It stems from an incomplete regular expression used to match usernames in the database, enabling remote authenticated attackers to delete other usernames by supplying a short username that matches the end of the targeted usernam...
CVE-2004-2175
The CVE-2004-2175 entry corresponds to SQL injection flaws in ReviewPost PHP Pro. Affected: ReviewPost PHP Pro web app; vulnerable in showproduct.php (product param) and showcat.php (cat param). Cause: unsanitized user input used in database queries. Impact: potential data disclosure and, per Ope...
ReviewPost PHP Pro Multiple Script SQL Injections
ReviewPost PHP Pro, a web-based software that manages user's opinions, is installed on the remote web server. The installed version fails to sanitize user input to the 'product' parameter of the 'showproduct.php' script and the 'cat' parameter of the 'showcat.php' script before using it in a...