CVE-2011-2434

Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2437...

CVE-2011-2434

CVE-2011-2434 is a heap-based buffer overflow in Adobe Reader/Acrobat versions: 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1, allowing arbitrary code execution via unspecified vectors. The connected advisories indicate that Adobe released fixes (e.g., Acrobat/Reader updates to 9.4.6...

CVE-2010-2434

The CVE-2010-2434 issue affects Explzh (pon Software) with Arcext.dll 2.16.1 and earlier. A crafted LHA/LZH header triggers a buffer overflow while Expanding the archive, allowing remote code execution. Affected component: Explzh’s LHA handling via Arcext.dll; root cause: unsafe handling of craft...

CVE-2009-2434

Buffer overflow in the syscall implementation of IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. AIX 5.3 TL 11 systems are affected; remediation involves applying vendor patch PTF U820270 (bos.rte.shell). If patch status is unknown in your environment, monitor for updat...

CVE-2008-2434

Trend Micro HouseCall ActiveX control (Housecall_ActiveX.dll) versions 6.51.0.1028 and 6.6.0.1278 are vulnerable due to an update server parameter that can be exploited to download an arbitrary library to a user-writable path, enabling possible code execution (e.g., via the Startup folder). Root ...

CVE-2007-2434

CVE-2007-2434 affects Aventail Connect 4.1.2.13, with a buffer overflow in asnsp.dll that can be triggered by a malformed DNS query. Exploitation could cause a denial of service (application crash) or allow arbitrary code execution . The supplied documents do not include a patch or mitigation det...

CVE-2006-2434

CVE-2006-2434 affects IBM WebSphere 5.1.1 and earlier cumulative fixes, where Common Configuration Mode together with CommonArchive and J2EE Models may expose sensitive information via trace data. The connected documents reiterate an unspecified vulnerability in WebSphere that could leak informat...

CVE-2004-2434

Microsoft Internet Explorer 6.0 SP1 is affected by CVE-2004-2434. The vulnerability arises when a user saves a link containing the string "::{" (colon colon left brace); this triggers a null dereference during error message formatting, allowing a remote attacker to cause a browser crash (denial o...

CVE-2004-2434

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service browser crash via a link with "::" colon colon left brace, which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an...