acroread (critical)

acrobat reader was updated to version 9.4.6 to fix several security issues CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442...

RHEL 6 : acroread (RHSA-2011:1434)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

Preemptive Protection against Adobe PDF File LoadImageA RMA JavaScript Multiple Code Execution Vulnerabilities (APSB11-24; CVE-2011-2439)

Multiple code execution vulnerabilities have been reported in Adobe Reader and Acrobat...

CVE-2011-2439

Adobe Reader/Acrobat products are affected by CVE-2011-2439: memory‑leakage condition allows arbitrary code execution via unspecified vectors in versions: Acrobat/Reader 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1. The issue is described as a memory leakage condition vulnerability;...

CVE-2010-2439

Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list .maf file...

CVE-2010-2439

CVE-2010-2439 describes a stack-based buffer overflow in MoreAmp that lets remote attackers run arbitrary code via a long line in a song list (.maf file). Affected component: MoreAmp (parsing the .maf song list). Root cause: overflow in handling long lines. Impact: remote code execution (per the ...

CVE-2006-2439

creationtimestamp| type| source ---|---|--- 2010-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12053 2010-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14433...

CVE-2009-2439

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9211...

CVE-2009-2439

CVE-2009-2439 affects a third-party product named Alibaba Clone (not Alibaba Group). The vulnerability is due to SQL injection in two user-supplied parameters: IndustryID in category.php and SellerID in supplier/view_contact_details.php. Remote attackers could cause arbitrary SQL execution, with ...

Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability

====================================================================== Secunia Research 02/10/2008 - Trend Micro OfficeScan Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-2439

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and...

CVE-2008-2439

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and...

CVE-2008-2439

CVE-2008-2439 describes a directory traversal vulnerability in the UpdateAgent function of TmListen.exe in Trend Micro OfficeScan/OfficeScanNT Listener service. A remote attacker can read arbitrary files via directory traversal sequences in an HTTP request. Affected products include OfficeScan 7....

SuSE 10 Security Update : w3m (ZYPP Patch Number 2439)

A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. CVE-2006-6772 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2007-2439

CVE-2007-2439 affects Caucho Resin Professional 3.1.0 and Resin 3.1.0 and earlier for Windows. The issue allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device by using a DOS device name with an arbitrary extension. This is classified with a high...

CVE-2006-2439

CVE-2006-2439 describes a stack-based buffer overflow in ZipCentral 4.01 that allows remote user-assisted attackers to execute arbitrary code when processing a ZIP archive containing a long filename. Affected component is ZipCentral 4.01; root cause is a vulnerability in handling long filenames w...

ZipCentral ZIP File Handling Buffer Overflow

According to its version, the ZipCentral program installed on the remote host is affected by a stack-based buffer overflow when handling a ZIP file with specially crafted filenames. C Tenable Network Security include"compat.inc"; if description scriptid21620; scriptversion"1.18";...

CVE-2004-2439

CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...

CVE-2005-2439

UseBB 0.5.1 and earlier contain an SQL injection via the search function when magic_quotes_gpc is disabled. The underlying issue is improper handling of user input in the search feature, enabling remote attackers to execute arbitrary SQL commands. No explicit exploitation details are provided her...