openSUSE Security Update : acroread (acroread-1426)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980,...

Adobe Reader/Acrobat Multiple Vulnerabilities (APSB09-15) - Windows

Adobe Reader/Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2991

Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2991

Technical details about CVE-2009-2991 are not publicly provided in the supplied documents. Monitor for updates.

RedHat Security Advisory RHSA-2009:1499

The remote host is missing updates announced in advisory RHSA-2009:1499. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A specially-crafted PDF file could cause Adobe Reader to crash or, potentially, execute...

n.runs-SA-2009.007 - Adobe Acrobat - Invalid pointer write could lead to arbitrary code execution

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2009.007 15-Oct-2009 Vendor: Adobe Systems Incorporated, http://www.adobe.com Affected Products: Adobe Acrobat Reader/Acrobat Version: 8.1.3 - 8.1.6 Platform: Windows Vulnerability: Invalid pointer write could lead to arbitrary code...

RHEL 5 : acroread (RHSA-2009:1499)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1499 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A...

Adobe RoboHelp Server SQL Injection (CVE-2008-2991)

Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on Help and knowledge bases. It gathers and logs data about what questions users ask, while searching content and how users navigate through topics. There exists an SQL injection vulnerability in Adobe...

CVE-2008-2991

Cross-site scripting XSS vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log...

CVE-2008-2991

Cross-site scripting XSS vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log...

CVE-2008-2991

CVE-2008-2991 is an XSS vulnerability in Adobe RoboHelp Server 6 and 7 that allows remote attackers to inject arbitrary web script or HTML via the Help Errors log. Affected software: RoboHelp Server 6 and 7. Root cause: input handling in the Help Errors log leads to script execution. Impact: arbi...

CVE-2007-2991

In CVE-2007-2991, the vulnerability is a Cross‑Site Scripting (XSS) flaw in Evenzia CMS, specifically in includes/send.inc.php, exploitable via the PATH_INFO parameter. The documented impact is remote attackers can inject arbitrary web script or HTML into the context of the affected application. ...

CVE-2006-2991

CVE-2006-2991 describes multiple XSS vulnerabilities in Ringlink 3.2. The issue arises via a JavaScript URI in the SRC attribute of an IMG element (ringid parameter) in next.cgi, stats.cgi, or list.cgi. Affected component: Ringlink 3.2; vulnerability class: cross-site scripting; impact per NVD me...

CVE-2005-2991

ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using 1 zdiff or 2 zcmp, a different vulnerability than CVE-2004-0970...

CVE-2005-2991

CVE-2005-2991 describes a local-file overwrite issue in ncompress 4.2.4 and earlier. The vulnerability arises from a symlink attack on temporary files used by (1) zdiff and (2) zcmp, allowing a local user to overwrite arbitrary files. It is noted as a different vulnerability from CVE-2004-0970. T...