CVE-2010-3650

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, a different vulnerability...

CVE-2010-3650

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, a different vulnerability...

CVE-2010-3650

Technical details about CVE-2010-3650 are not publicly disclosed in the provided documents; monitor for updates from official advisories.

Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)

The remote Windows host contains a version of Adobe Flash Player 9.x before 9.0.289 or 10.x earlier than 10.1.102.64. Such versions are potentially affected by multiple vulnerabilities : - A memory corruption vulnerability exists that could lead to code execution. Note that there are reports that...

CVE-2009-3650

CVE-2009-3650 is a Cross-site Scripting (XSS) vulnerability in the Dex module for Drupal. Affected software includes Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, where the module allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected document...

CVE-2008-3650

CVE-2008-3650 affects Horde Groupware Webmail prior to Edition 1.1.1 (final). The reported issue involves unescaped output that could enable cross-site scripting (XSS) in the object browser and the contact view. Documentation across multiple sources reiterates unknown impact vectors and lacks exp...

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...

CVE-2007-3650

CVE-2007-3650 affects myWebland myBloggie 2.1.6. The vulnerability enables information disclosure through three vectors: (1) invalid year parameter to calendar.php via index.php, (2) direct request to common.php, and (3) a mode array parameter in the query string to login.php. These error message...

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...

ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability

ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-034.html October 10, 2006 -- CVE ID: CVE-2006-3650 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsoft Offi...

CVE-2006-3650

CVE-2006-3650 is a remote code execution vulnerability in Microsoft Office (2000 SP3, XP SP3, 2003 SP1/SP2, and Mac variants Office 2004 for Mac and Office v.X for Mac) triggered by parsing a malformed chart record in Word documents. The flaw corrupts pointers during processing of malformed chart...

MS06-062: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)

The remote host is running a version of Microsoft Office that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Office. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Windows Media Player PNG Processing Overflow (917734)

Binary data 3650.prm...

CVE-2005-3650

The CVE-2005-3650 entry concerns the CodeSupport.ocx ActiveX control used by Sony to uninstall First4Internet XCP DRM. The vulnerability arises because the control’s “safe for scripting” setting enables remote attackers to call vulnerable methods (e.g., RebootMachine, IsAdministrator, ExecuteCode...