133 matches found
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...
openSUSE 10 Security Update : flash-player (flash-player-5747)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503, CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5757)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243 / CVE-2008-3873 / CVE-2007-4324 / CVE-2008-4401 / CVE-2008-4503 / CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID 78f456fd-9c87-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f456fd-9c87-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...
CVE-2008-3873
CVE-2008-3873 affects Adobe Flash Player (9.0.124.0 and earlier). The flaw allows a remote, unauthenticated attacker to populate the clipboard with a URL via System.setClipboard, potentially misleading users without interaction. In practice, a malicious SWF could push an attacker-controlled URL t...
CVE-2008-3873
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...
CVE-2007-3873
CVE-2007-3873 describes a stack-based buffer overflow in Trend Micro’s vstlib32.dll (1.2.0.1012) used by the SSAPI Engine in AntiSpyware 3.5 and PC-Cillin Internet Security 2007 (15.0–15.3), triggered when a long local file path is processed via a ReadDirectoryChangesW callback. Affects SSAPI Eng...
iDefense Security Advisory 08.20.07: Trend Micro SSAPI Long Path Buffer Overflow Vulnerability
Trend Micro SSAPI Long Path Buffer Overflow Vulnerability iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Trend Micro AntiSpyware is a spyware detection and removal application designed to help protect home users computers,...
CVE-2006-3873
CVE-2006-3873 describes a heap-based buffer overflow in URLMON.DLL of Microsoft Internet Explorer 6 SP1 on Windows 2000/XP SP1, exploitable via a long URL in a GZIP-compressed HTTP-redirected web page. The issue is tied to an incomplete fix for CVE-2006-3869 and is mitigated by applying the MS06-...
CVE-2005-3873
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...
CVE-2005-3873
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...
CVE-2005-3873
SQL injection vulnerability in ShockBoard topic.php affects ShockBoard 3.0 and 4.0, allowing remote attackers to inject arbitrary SQL commands via the offset parameter. The vulnerability is documented in CVE-2005-3873 with a NVD base score of 7.5 (HIGH) and network attack vector with no authentic...