Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2721, CVE-2013-2722,...

CVE-2013-3339

CVE-2013-3339 affects Adobe Reader and Acrobat: 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03, enabling arbitrary code execution or memory corruption via unspecified vectors. Connected advisories indicate a vendor patch exists (e.g., RHSA-2013:0826; openSUSE openSUSE-2013:0990) an...

RHEL 5 / 6 : acroread (RHSA-2013:0826)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2011-3339

The CVE-2011-3339 entry describes an XSS vulnerability in the Admin Control Center of SafeNet Sentinel HASP/SRM, affecting HASP Run-time Environment 5.95 and earlier, with installers before 6.x and SDKs before 5.11. The issue arises from inadequate input validation in the web application, which c...

Safenet Sentinel and 7-T Input Sanitization Vulnerability

Overview ICS-CERT originally released advisory ICSA-11-314-01P on the US-CERT secure portal on November 14, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher Carlos Mario Penagos Hollman of Synapse-labs has identified an input...

CVE-2009-3339

CVE-2009-3339 affects McAfee Email and Web Security Appliance 5.1 VMtrial. The vulnerability allows remote attackers to read arbitrary files via unknown vectors (as demonstrated by VulnDisco Pack Pro 8.9–8.11). The NVD entry lists a high risk (CVSSv2 base score 7.8) with confidentiality impact fu...

Gentoo Security Advisory GLSA 200510-24 (Mantis)

The remote host is missing updates announced in advisory GLSA 200510-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3339

CVE-2008-3339 affects Jobbex JobSite’s search_result.cfm and enables remote information disclosure through an error message that reveals the installation path. The provided documents do not specify exact vectors, vulnerable components beyond this page, affected versions, or remediation/workaround...

CVE-2007-3339

CVE-2007-3339 affects FuseTalk (Basic/Standard/Enterprise/ColdFusion). The issue resides in forum/include/error/autherror.cfm (and related comfinish.cfm) where input parameters FTVAR_LINKP, FTVAR_URLP, and FTVAR_SCRIPTRUN can be injected to produce cross-site scripting. Documents corroborate the ...

CVE-2007-3339

Multiple cross-site scripting XSS vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the 1 FTVARLINKP and 2 FTVARURLP parameters to a forum/include/error/autherror.cfm, and...

CVE-2006-3339

The CVE-2006-3339 entry affects Atlassian JIRA, specifically the file path secure/ConfigureReleaseNote.jspa in version 3.6.2-#156. The underlying issue is unspecified manipulations of the projectId parameter, which leads to information disclosure by displaying the installation path and other syst...

CVE-2006-3339

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message...

CVE-2005-3339

CVE-2005-3339 affects MantisBT (Mantis) prior to version 0.19.3, where the User ID was cached longer than necessary. The connected OpenVAS and Debian/Gentoo advisories confirm that this CVE is part of a set of multiple vulnerabilities in Mantis and reference 0.19.3 as the fix version, but the pro...