CVE-2017-3346

CVE-2017-3346 describes a vulnerability in the Oracle Marketing subcomponent of Oracle E-Business Suite. Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The flaw is exploitable via HTTP over a network and, despite being in Oracle Marketing, may impact additional O...

CVE-2016-3346

CVE-2016-3346 affects Microsoft Windows 10 Gold, 1511 and 1607. The vulnerability stems from improper enforcement of permissions when loading crafted DLLs, enabling a local attacker to escalate privileges to SYSTEM/Administrator. The issue is related to Windows Permissions Enforcement Elevation o...

MS16-110: Security Update for Microsoft Windows (3178467)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists due to a failure to properly enforce permissions when loading specially crafted DLLs. A local attacker can exploit this vulnerability to...

Gentoo Security Advisory GLSA 201309-10

Gentoo Linux Local Security Checks GLSA 201309-10 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Debian: Security Advisory (DSA-3346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3346

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-3346

The CVE-2015-3346 entry documents an SQL injection vulnerability in the Drupal WikiWiki module for 6.x-1.x before 6.x-1.2, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue affects the WikiWiki module (Drupal contrib) and is tied to improper input sani...

CVE-2014-3346

CVE-2014-3346 affects the web framework in Cisco Transport Gateway for Smart Call Home (TG-SCH). The issue stems from missing validation of an unspecified parameter, allowing remote authenticated users to trigger a denial of service (service crash) via a crafted string. Impact per CVSS: Network v...

openSUSE Security Update : kvm (openSUSE-2011-95)

fix for CVE-2011-3346 bnc728664 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-95. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

BELL-CVE-2011-3346 CVE-2011-3346 does not affect BellSoft software

Bulletin has no description...

CVE-2011-3346

CVE-2011-3346 affects QEMU up to version 0.15.2 (SCSI subsystem, hw/scsi-disk.c) when used with Xen. A crafted SAI READ CAPACITY command could cause a local guest denial of service (guest crash) for users with access to the CD-ROM, and is conditioned on root having modified certain permissions/AC...

Adobe Acrobat and Reader ToolButton Use After Free (APSB13-15; CVE-2013-3346)

A use after free vulnerability exists in Adobe Acrobat and Reader...

CVE-2013-3346

creationtimestamp| type| source ---|---|--- 2013-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30394 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobetoolbutton.rb 2018-05-29 15:50:33+00:00|...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

CVE-2013-3346

CVE-2013-3346 affects Adobe Reader and Acrobat where the ToolButton use-after-free in the ToolButton callback enables memory corruption leading to arbitrary code execution or Denial of Service. Affected product versions are Adobe Reader/Acrobat 9.x <= 9.5.4, 10.x <= 10.1.6, and 11.x

CVE-2013-3346

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...

CVE-2013-3346

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...

KLA10457 Adobe Acrobat & Reader multiple vulnerabilities

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security, obtain sensitive information or arbitrary code execution. Below is a complete list of vulnerabilities 1. An unspecified...

Adobe Reader Multiple Unspecified Vulnerabilities -01 (May 2013) - Mac OS X

Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CentOS 5 : xen (CESA-2011:1401)

Updated xen packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...