CVE-2010-2864

CVE-2010-2864 affects Adobe Shockwave Player (pre-11.5.8.612). The vulnerability exists in IML32.dll when parsing malformed .dir media files, which can trigger a memory corruption that enables remote code execution or a denial of service. Exploitation is demonstrated by a crafted PoC with an inva...

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2864...

CA Antivirus Engine CAB Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'CA...

CVE-2009-2864

Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...

CA Antivirus Engine CAB Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust Antivirus 8.1.637. By creating a specially crafted CAB file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

CVE-2008-2864

CVE-2008-2864 affects eLineStudio Site Composer (ESC) versions 2.6 and earlier. The vulnerability allows remote attackers to obtain sensitive information via direct requests to (1) trigger.asp or (2) common2.asp in cms/include/, revealing the database path. Documented impact is exposure of backen...

CVE-2008-2864

creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5859...

[CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities

Title: CAID 35395, 35396: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities CA Vuln ID CAID: 35395, 35396 CA Advisory Date: 2007-06-05 Reported By: ZDI Impact: Remote attackers can cause a denial of service or potentially execute arbitrary code. Summary: CA Anti-Virus engine contains...

CA Products Anti-Virus Engine CAB File Handling Vulnerabilities (CVE-2007-2863, CVE-2007-2864)

...

CA Antivirus engine CAB handling buffer overflow

Added: 06/07/2007 CVE: CVE-2007-2864 BID: 24330 OSVDB: 35245 Background The CA Antivirus engine is included in multiple CA products. Problem A buffer overflow vulnerability in the CA Antivirus engine allows command execution when a CAB file containing a specially crafted "coffFiles" field is...

CA Antivirus engine CAB handling buffer overflow

Added: 06/07/2007 CVE: CVE-2007-2864 BID: 24330 OSVDB: 35245 Background The CA Antivirus engine is included in multiple CA products. Problem A buffer overflow vulnerability in the CA Antivirus engine allows command execution when a CAB file containing a specially crafted "coffFiles" field is...

CVE-2007-2864

CVE-2007-2864 describes a stack-based buffer overflow in the Computer Associates (CA) Anti-Virus engine when processing CAB archives. The vulnerability exists in the CAB file handling prior to content update 30.6, allowing a remote attacker to execute arbitrary code by delivering a specially craf...

CVE-2006-2864

CVE-2006-2864 describes multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 and earlier. An attacker could trigger arbitrary PHP code execution by supplying a URL through several APP[path] and GLOBALS[APP][path] parameters to files such as Bs_Faq.class.php, fileBrowserIn...

CVE-2005-2864

CVE-2005-2864 describes a local vulnerability in URBAN 1.5.3_1 where local users can overwrite arbitrary files through a symlink attack targeting the (1) high score or (2) save game files. The core root cause is a symlink-related file overwrite path that an unprivileged user can exploit, with a r...