Debian DSA-2208-1 : bind9 - denial of service

It was discovered that BIND, a DNS server, contains a race condition when processing zones updates in an authoritative server, either through dynamic DNS updates or incremental zone transfer IXFR. Such an update while processing a query could result in deadlock and denial of service. CVE-2011-041...

SuSE 10 Security Update : acroread (ZYPP Patch Number 7087)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...

SuSE 10 Security Update : acroread (ZYPP Patch Number 7086)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...

SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2639 / 2640)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...

SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2637 / 2641)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...

Adobe Reader Multiple Vulnerabilities (Jul 2010) - Linux

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

openSUSE Security Update : acroread (openSUSE-SU-2010:0359-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208,...

openSUSE Security Update : acroread (openSUSE-SU-2010:0359-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208,...

openSUSE Security Update : acroread (openSUSE-SU-2010:0359-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208,...

CVE-2010-2208

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-2208

CVE-2010-2208 affects Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and macOS. The flaw is a heap object dereference after deletion, enabling arbitrary code execution via unspecified vectors. The provided sources document the affected versions and patch levels, with fixes ...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS...

Adobe Reader < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)

The version of Adobe Reader installed on the remote host is earlier than 9.3.3 / 8.2.3. Such versions are reportedly affected by multiple vulnerabilities : - A social engineering attack could lead to code execution. CVE-2010-1240 - Handling of an invalid pointer could lead to code execution...

CVE-2009-2208

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFOIN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU...

CVE-2009-2208

The CVE-2009-2208 issue affects FreeBSD 6.3, 6.4, 7.1, and 7.2 where permissions are not enforced on the SIOCSIFINFO_IN6 IOCTL. This allows local users to modify or disable IPv6 network interfaces (e.g., MTU) due to improper access controls. The vulnerability is documented in FreeBSD SA-09:10 IPv...

CVE-2008-2208

SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action...

CVE-2008-2208

The data sources confirm a SQL injection vulnerability in Maian Greeting 2.1, specifically in index.php where the keywords parameter used in a search action can be exploited to execute arbitrary SQL commands remotely. Impact stated: attackers may retrieve or modify data due to this injection. The...

CVE-2008-2208

SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action...

CVE-2007-2208

CVE-2007-2208 affects Extreme PHPBB2 3.0 Pre Final. The vulnerability is a remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter to (1) functions.php or (2) functions_portal.php in the includes/ directory. Root cause: impro...

CVE-2006-2208

CVE-2006-2208 describes multiple XSS flaws in MyNews 1.6.2 (and related 1.6.x/1.6.4 variants) affecting mynews.inc.php. The vulnerability allows remote attackers to inject arbitrary scripts via the hash and page parameters (and, for some variants, via the hash parameter in an admin action to inde...