CA杀毒引擎arclib库多个内存破坏漏洞

BUGTRAQ ID: 36653 CVE ID: CVE-2009-3587,CVE-2009-3588 Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆或栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。 Computer Associates eTrust Intrusion Detection 3.0 SP1 Computer Associates eTrust Intrusion Detection 3.0 Computer...

CA20091008-01: Security Notice for CA Anti-Virus Engine

CA20091008-01: Security Notice for CA Anti-Virus Engine Issued: October 8, 2009 CA's support is alerting customers to multiple security risks associated with CA Anti-Virus Engine. Vulnerabilities exist in the arclib component that can allow a remote attacker to cause a denial of service, or to...

Gentoo Security Advisory GLSA 200610-02 (Flash)

The remote host is missing updates announced in advisory GLSA 200610-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 7c75d48c-429b-11db-afae-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3587

Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-3587

The CVE-2008-3587 entry documents a Cross-site Scripting (XSS) vulnerability in the result.php page of Chris Bunting Homes 4 Sale, exploitable by supplying arbitrary web script or HTML via the r parameter. Affected software/URL entries point to a user-facing web application and the issue arises f...

CVE-2008-3587

creationtimestamp| type| source ---|---|--- 2008-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32141...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 2065)

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include...

openSUSE 10 Security Update : flash-player (flash-player-2072)

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include...

Mac OS X Multiple Vulnerabilities (Security Update 2006-006)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...

FreeBSD : linux-flashplugin7 -- arbitrary code execution vulnerabilities (7c75d48c-429b-11db-afae-000c6ec775d9)

Adobe reports : Multiple input validation errors have been identified in Flash Player 8.0.24.0 and earlier versions that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user?s web browser,...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. Security issues were...

linux-flashplugin7 -- arbitrary code execution vulnerabilities

Adobe reports: Multiple input validation errors have been identified in Flash Player 8.0.24.0 and earlier versions that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user?s web browser, ema...

CVE-2006-3587

CVE-2006-3587 is one of several remote-code-execution vulnerabilities in Macromedia/Adobe Flash Player, arising from memory-corruption in handling SWF files. Affected versions include Flash Player 8.0.24.0; exploitation could occur via specially crafted SWF files delivered over the web or via ema...

Mandrake Linux Security Advisory : clamav (MDKSA-2005:205)

A number of vulnerabilities were discovered in ClamAV versions prior to 0.87.1 : The OLE2 unpacker in clamd allows remote attackers to cause a DoS segfault via a DOC file with an invalid property tree CVE-2005-3239 The FSG unpacker allows remote attackers to cause 'memory corruption' and execute...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

CVE-2005-3587

CVE-2005-3587 affects ClamAV up to version 0.87.1. The issue is an improper boundary check in petite.c that could allow attackers to perform unknown attacks via unknown vectors. Public mentions anchor the vulnerability in advisories (Mandrake MDKSA-2005:205; GLSA-200511-04) and the OSV/DEBIAN/NVD...

CVE-2021-3587

CVE-2021-3587 is a reservation duplicate of CVE-2021-38208. The underlying issue affects the Linux kernel NFC LLCP implementation (net/nfc/llcp_sock.c) and allows a local unprivileged user to cause denial of service via a NULL pointer dereference after a bind failure; CVE-2021-38208 documents the...