openSUSE Security Update : acroread (acroread-1426)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980,...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

openSUSE Security Update : acroread (acroread-1426)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980,...

CVE-2009-2564

CVE-2009-2564 describes a local privilege escalation in the NOS getPlus/GetPlus Download Manager used with Adobe Reader (and possibly Corel GetPlus). The core issue is that getPlus_HelperSvc.exe is installed with insecure permissions (Everyone: Full Control), which allows a local user to replace ...

CVE-2009-2564

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9199 2009-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9223...

CVE-2008-2564

CVE-2008-2564 affects Joomla! via the JotLoader (com_jotloader) component, vulnerable in version 1.2.1.a and earlier. The root cause is an SQL injection allowing remote attackers to execute arbitrary SQL commands through the cid parameter to index.php. This is the only publicly documented detail ...

CVE-2008-2564

creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5737...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-2564

Affected software: Sienzo Digital Music Mentor (DMM) 2.6.0.4; ActiveX control DSKernel2.dll. Vulnerability: multiple stack-based buffer overflows in the control, exploited by a long argument to the (1) LockModules or (2) UnlockModule function. Impact: remote code execution potential. Exploitation...

CVE-2006-2564

CVE-2006-2564 concerns multiple XSS vulnerabilities in the index.php of AlstraSoft E-Friends. The vulnerability enables remote attackers to inject arbitrary web script or HTML by performing actions such as posting a blog, listing, event, adding comments, or sending a message. Connected records co...

CVE-2005-2564

CVE-2005-2564 affects Gravity Board X (GBX) 1.1. It is a direct static code injection vulnerability in editcss.php where the csscontent parameter is directly inserted into gbxfinal.css, allowing remote attackers to execute arbitrary PHP code, HTML, and script. The NVD entry documents a network-ex...