CVE-2010-2997

CVE-2010-2997 is tied to multiple advisories (RHSA-2010:0981, CESA-2010:0981) and OpenVAS/Nessus entries describing multiple security flaws in RealPlayer/HelixPlayer, potentially enabling arbitrary code execution via crafted media/stream content. Remediation across affected platforms centers on r...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

RHEL 4 : HelixPlayer (RHSA-2010:0094)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0094 advisory. - HelixPlayer / RealPlayer: GIF file heap overflow CVE-2009-4242 - HelixPlayer / RealPlayer: compressed GIF heap overflow CVE-2009-4245 -...

Adobe Acrobat Reader U3D CLODMeshContinuation Code Execution

Added: 11/20/2009 CVE: CVE-2009-2997 BID: 36638 OSVDB: 58926 Background Adobe Reader is free software for viewing PDF documents. Problem A heap memory corruption vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to an input validation error while parsing Universal 3D U3D file...

Adobe Acrobat Reader U3D CLODMeshContinuation Code Execution

Added: 11/20/2009 CVE: CVE-2009-2997 BID: 36638 OSVDB: 58926 Background Adobe Reader is free software for viewing PDF documents. Problem A heap memory corruption vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to an input validation error while parsing Universal 3D U3D file...

Gentoo Security Advisory GLSA 200910-03 (acroread)

The remote host is missing updates announced in advisory GLSA 200910-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE Security Advisory SUSE-SA:2009:049 (acroread, acroread_ja)

The remote host is missing updates announced in advisory SUSE-SA:2009:049. OpenVAS Vulnerability Test $Id: susesa2009049.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:049 acroread, acroreadja Authors: Thomas Reinke Copyright: Copyright c 2009...

openSUSE Security Update : acroread (acroread-1426)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980,...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

openSUSE Security Update : acroread (acroread-1426)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980,...

Adobe Reader/Acrobat Multiple Vulnerabilities (APSB09-15) - Windows

Adobe Reader/Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2997

CVE-2009-2997 is an Adobe Reader/Acrobat U3D heap overflow vulnerability. Multiple SAINT records (e.g., C6D7B175C464FAAED01654B48ACA5121) describe a heap memory corruption due to an input validation error while parsing Universal 3D (U3D) files, specifically in the CLODMeshDeclaration block. Resol...

RedHat Security Advisory RHSA-2009:1499

The remote host is missing updates announced in advisory RHSA-2009:1499. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A specially-crafted PDF file could cause Adobe Reader to crash or, potentially, execute...

RHEL 5 : acroread (RHSA-2009:1499)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1499 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A...

CVE-2008-2997

CVE-2008-2997 : XSS vulnerability in Gravity Board X (GBX) 2.0 Beta. In GBX’s index.php, the subject parameter in the postnewsubmit (create new thread) action can be exploited to inject arbitrary script/HTML. This remote vector could affect users who submit a thread, with the impact described as ...

CVE-2007-2997

CVE-2007-2997 concerns SQL injection in SalesCart Shopping Cart, specifically in the file cgi-bin/reorder2.asp . The vulnerability allows remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. The root cause is unsanitized input in reorder2.asp le...

CVE-2006-2997

The CVE-2006-2997 entry describes an XSS in ZMS 2.9 and earlier when register_globals is enabled. The vulnerability is triggered via the raw parameter in the search field, allowing remote injection of arbitrary web script/HTML. Affected product/version: ZMS 2.9 and earlier. Underlying cause: inpu...

CVE-2005-2997

CVE-2005-2997 affects PHP Advanced Transfer Manager 1.30. The vulnerability is a directory traversal flaw allowing remote attackers to read arbitrary files via .. sequences in the following parameters: currentdir to txt.php, current_dir to htm.php, or current_dir to html.php. This results in pote...