95 matches found
Adobe Flash Player - 'Button' Arbitrary Code Execution (Metasploit)
$Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Immunity Canvas: ADOBE_FLASH_BUTTON
Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...
CVE-2010-3654
CVE-2010-3654 affects Adobe Flash Player prior to 9.0.289.0 and pre-10.1.102.64 (Windows/macOS/Linux/Solaris) and Adobe Reader/Acrobat 9.x up to 9.4, with 10.1.95.1 on Android. The vulnerability allows remote code execution or memory corruption/DoS via crafted SWF content embedded in PDFs (exploi...
VulnCheck KEV: CVE-2010-3654
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or...
New Adobe Flash Bug Being Exploited
On the same day that it plans to release a patch for a critical flaw in Shockwave, Adobe confirmed on Thursday morning that there is a newly discovered bug in Flash that is being actively exploited already in attacks against Reader. The vulnerability affects Flash on all of the relevant platforms...
Adobe Reader 9 <= 9.4 (APSA10-05)
The remote Windows host contains Adobe Reader version 9.4 or earlier. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this issue by getting a user to open a maliciously crafted PDF containing SWF content, resulting in the execution of...
linux-flashplugin -- multiple vulnerabilities
Adobe Product Security Incident Response Team reports: Critical vulnerabilities have been identified in Adobe Flash Player 10.1.85.3 and earlier versions for Windows, Macintosh, Linux, and Solaris, and Adobe Flash Player 10.1.95.1 for Android. These vulnerabilities, including CVE-2010-3654...
CVE-2009-3654
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
CVE-2009-3654
The vulnerability concerns Boost for Drupal (module) prior to 6.x-1.03. It allows remote attackers to create new webroot directories via unknown attack vectors. The root cause is not specified in the provided documents, and no remediation details (patch/version fixes) are described here. Exploit ...
CVE-2008-3654
CVE-2008-3654 affects TikiWiki CMS/Groupware before 2.0. The vulnerability is described as unspecified and allows attackers to obtain the server path and PHP configuration via unknown vectors. Evidence in connected documents confirms the affected product/version and the impact on configuration ex...
CVE-2007-3654
The CVE-2007-3654 issue affects NetBSD: display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728. The root cause is improper validation in an ioctl call within the vga_allocattr path, allowing a local attacker to trigger a denial-of-service (panic) by...
CVE-2006-3654
The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...
WinProxy < 6.1a Multiple Vulnerabilities (credentialed check)
The remote host is running WinProxy, a proxy server for Windows. According to the Windows registry, the installed version of WinProxy suffers from denial of service and buffer overflow vulnerabilities in its telnet and web proxy servers. An attacker may be able to exploit these issues to crash th...