Computer Associates Anti-Virus Engine arclib.dll < 8.1.4.0 Multiple Flaws

The antivirus engine from Computer Associates installed on the remote host is affected by multiple vulnerabilities : - Due to improper handling of certain specially crafted RAR files it may be possible for a remote attacker to trigger a heap overflow or denial of service condition. CVE-2009-3587 ...

CA杀毒引擎arclib库多个内存破坏漏洞

BUGTRAQ ID: 36653 CVE ID: CVE-2009-3587,CVE-2009-3588 Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆或栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。 Computer Associates eTrust Intrusion Detection 3.0 SP1 Computer Associates eTrust Intrusion Detection 3.0 Computer...

CA20091008-01: Security Notice for CA Anti-Virus Engine

CA20091008-01: Security Notice for CA Anti-Virus Engine Issued: October 8, 2009 CA's support is alerting customers to multiple security risks associated with CA Anti-Virus Engine. Vulnerabilities exist in the arclib component that can allow a remote attacker to cause a denial of service, or to...

Gentoo Security Advisory GLSA 200610-02 (Flash)

The remote host is missing updates announced in advisory GLSA 200610-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 7c75d48c-429b-11db-afae-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-3588

CVE-2008-3588 : Concrete details across connected sources show multiple SQL injection vulnerabilities in phsBlog, specifically in version 0.1.1 (and related 0.2 references) where remote attackers can inject via parameters (1) eid to comments.php, (2) cid to index.php, and (3) urltitle to entries....

SuSE 10 Security Update : flash-player (ZYPP Patch Number 2065)

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include...

openSUSE 10 Security Update : flash-player (flash-player-2072)

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include...

CVE-2007-3588

CVE-2007-3588 affects VBZooM 1.12 with an SQL injection in reply.php via the UserID parameter to sub-join.php, enabling remote arbitrary SQL execution. This exact entry corresponds to CVE-2007-3588 with note that it may be the same as CVE-2006-3691. The connected records corroborate the vulnerabi...

Mac OS X Multiple Vulnerabilities (Security Update 2006-006)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...

FreeBSD : linux-flashplugin7 -- arbitrary code execution vulnerabilities (7c75d48c-429b-11db-afae-000c6ec775d9)

Adobe reports : Multiple input validation errors have been identified in Flash Player 8.0.24.0 and earlier versions that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user?s web browser,...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. Security issues were...

linux-flashplugin7 -- arbitrary code execution vulnerabilities

Adobe reports: Multiple input validation errors have been identified in Flash Player 8.0.24.0 and earlier versions that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user?s web browser, ema...

CVE-2006-3588

Unspecified vulnerability in Adobe Macromedia Flash Player 8.0.24.0 allows remote attackers to cause a denial of service browser crash via a malformed, compressed .swf file, a different issue than CVE-2006-3587...

CVE-2006-3588

Unspecified vulnerability in Adobe Macromedia Flash Player 8.0.24.0 allows remote attackers to cause a denial of service browser crash via a malformed, compressed .swf file, a different issue than CVE-2006-3587...

CVE-2006-3588

CVE-2006-3588 is part of multiple Macromedia/Adobe Flash Player vulnerabilities (along with CVE-2006-3311, CVE-2006-3587, CVE-2006-4640) that could allow remote code execution via specially crafted SWF content. Technical details across connected feeds identify Flash Player in widely used releases...

CVE-2005-3588

SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field...

CVE-2005-3588

The CVE-2005-3588 entry describes an SQL injection in Advanced Guestbook 2.2, exploitable via the username field in admin.php. The vulnerability is remote and allows execution of arbitrary SQL commands and privilege escalation. Documents indicate affected software is Advanced Guestbook 2.2; no sp...