120 matches found
RedHat Security Advisory RHSA-2009:1657
The remote host is missing updates announced in advisory RHSA-2009:1657. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...
RedHat Security Advisory RHSA-2009:1657
The remote host is missing updates announced in advisory RHSA-2009:1657. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...
CVE-2009-3796
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."...
CVE-2009-3796
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 are affected by CVE-2009-3796 (data injection vulnerability) that could allow remote code execution via unspecified vectors. Red Hat advisories RHSA-2009:1657/1658 and related summaries indicate upgrading Flash to 10.0.42.34 as remed...
FreeBSD : linux-flashplugin -- multiple vulnerabilities (3c1a672e-e508-11de-9f4a-001b2134ef46)
Adobe Product Security Incident Response Team reports : Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.32.18 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 Extras and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...
Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
Binary data 5256.prm...
ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
Security updates available for Adobe Flash Player Release date: December 8, 2009 Vulnerability identifier: APSB09-19 CVE numbers: CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800, CVE-2009-3951 Platform: All Platforms Summary Critical vulnerabilities have...
Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3. Such versions are potentially affected by multiple vulnerabilities : - A vulnerability in the parsing of JPEG data could lead to code execution. CVE-2009-3794 - A data injection vulnerability could lead to code...
openSUSE Security Update : swfdec (swfdec-524)
The free Flash decoder engine 'swfdec' was updated to version 0.6.8 to fix lots of crashers which are likely security relevant and could be exploited to remotely execute code. CVE-2008-3796 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2008-3796
CVE-2008-3796 concerns the Flash decoder engine swfdec . The vulnerability affects swfdec 0.6 and older, with versions before 0.6.8 allowing remote attackers to crash the application (denial of service) by presenting a crafted 1x1 JPEG image. Public descriptions in multiple sources (NVD, SUSE/SUS...
[Full-disclosure] [Sec-1 Ltd] Advisory: MailMarshal Spam Quarantine Password Retrieval Vulnerability
SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: MailMarshal Spam Quarantine Password Retrieval Vulnerability Release Date: 17-06-2007 Application: MailMarshal SMTP 6.2.0.x Platform: Microsoft Windows Severity: Password Retrieval Author: Gary O'leary-Steele Reported: See time line sectio...
CVE-2007-3796
CVE-2007-3796 affects MailMarshal SMTP’s Spam Quarantine HTTP interface. The vulnerability stems from the password reset feature, where a UserId value with excessive trailing whitespace followed by a malicious value can trigger SQL buffer truncation due to length inconsistencies, potentially allo...
KLA10247 Vulnerability in MailMArshal SMTP
An unspecified vulnerability was found in MailMarshal SMTP. By exploiting this vulnerability malicious users can modify arbitrary account information. This vulnerability can be exploited remotely via a specially designed UserId variable. Original advisories - Related products M86-MailMarshal-SMTP...
CVE-2006-3796
CVE-2006-3796 affects DeluxeBB 1.07 and earlier. The vulnerability arises from improper handling of a username consisting of a single space, allowing remote authenticated users to log in as the 'space' user, post as a guest, and prevent the administrator from banning that user. The description do...
CVE-2005-3796
Direct static code injection vulnerability in adminoptionsmanage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this doe...
CVE-2005-3796
CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...
