CVE-2012-2863

Removed by vendor...

CVE-2012-2863

CVE-2012-2863 concerns Google Chrome’s PDF Viewer. The initial description identifies a vulnerability in the PDF functionality that allows a remote user to cause a denial of service (and possibly other impact) via out-of-bounds write operations. Connected OpenVAS/Nessus records corroborate multip...

Google Chrome < 21.0.1180.75 Multiple PDF Viewer Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 21.0.1180.75 and is, therefore, affected by the following vulnerabilities : - An unspecified use-after-free error exists in the PDF viewer. CVE-2012-2862 - An unspecified out-of-bounds write error exists in the PDF viewer...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...

CVE-2009-2863

CVE-2009-2863 describes a race condition in the Cisco IOS Firewall/Authentication Proxy feature (IOS 12.0–12.4) that can allow unauthenticated remote access by bypassing authentication or the consent web page when a crafted request is sent. The root cause is within the Firewall Authentication Pro...

openSUSE Security Update : bluez-audio (bluez-audio-100)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code CVE-2008-2374. Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-2863. Reason: This candidate is a reservation duplicate of CVE-2008-2863. Notes: All CVE users should reference CVE-2008-2863 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2008-2373

The CVE-2008-2373 entry is a reservation duplicate of CVE-2008-2863. Connected sources confirm a real vulnerability in eLineStudio Site Composer (ESC) 2.6: multiple absolute path traversal vulnerabilities enabling remote attackers to create or delete arbitrary directories via the inpCurrFolder pa...

CVE-2008-2863

CVE-2008-2863 describes multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6. The flaw allows remote attackers to create or delete arbitrary directories via a full pathname supplied in the inpCurrFolder parameter to cms/assetmanager/folderdel_.asp or cms/assetma...

CVE-2008-2863

creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5859...

[CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities

Title: CAID 35395, 35396: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities CA Vuln ID CAID: 35395, 35396 CA Advisory Date: 2007-06-05 Reported By: ZDI Impact: Remote attackers can cause a denial of service or potentially execute arbitrary code. Summary: CA Anti-Virus engine contains...

CA Products Anti-Virus Engine CAB File Handling Vulnerabilities (CVE-2007-2863, CVE-2007-2864)

...

CVE-2007-2863

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a long filename in a .CAB file...

CVE-2007-2863

CVE-2007-2863 is a stack-based buffer overflow in the CA Anti-Virus engine (and related CA products) caused by insufficient bounds checking on filenames in CAB archives. A remote attacker can trigger the overflow via a long filename in a CAB file, potentially executing arbitrary code. Affected pr...

CVE-2006-2863

CVE-2006-2863 affects CS-Cart 1.3.3 via a PHP remote file inclusion in class.cs_phpmailer.php, exploitable through the classes_dir parameter to execute arbitrary PHP code. The NVD entry notes a Network attack vector with authentication not required and partial confidentiality/integrity/availabili...

CVE-2005-2863

OpenWebMail contains an XSS vulnerability CVE-2005-2863 in the openwebmail-main.pl script (sessionid parameter) affecting OpenWebMail 2.41. The flaw allows remote injection of arbitrary web script/HTML. NVD notes a CVSS v2 base score of 4.3 (Medium) with network access, no authentication, and par...