CVE-2010-3959

CVE-2010-3959 affects the Microsoft OpenType Font (OTF) driver. A crafted CMAP table in an OpenType font can cause local privilege escalation on Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2, and Windows 7. Root cause: incorrect handling/parsi...

MS10-091: Vulnerabilities in the OpenType Font (OTF) Driver Could Allow Remote Code Execution (2296199)

The remote Windows host contains a version of the OpenType Font OTF Format Driver that is affected by two vulnerabilities : - The driver does not properly index an array when parsing OpenType fonts, which could allow a remote attacker to run arbitrary code in kernel mode. CVE-2010-3956 - The driv...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 1881)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...

openSUSE Security Update : acroread (acroread-1849)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324. Acrobat reader was updated to version 9.3 to fix those...

CVE-2009-3959

CVE-2009-3959 is an Adobe Acrobat/Reader remote code execution vulnerability caused by an integer overflow in the U3D handling path of the PDF parser. A malformed PDF could trigger execution of arbitrary code on Windows or macOS when using Adobe Reader or Acrobat 9.x (before 9.3) or 8.x (before 8...

CVE-2008-3959

CVE-2008-3959 affects IBM DB2 UDB. The vulnerability allows remote attackers to cause a denial of service (instance crash) by sending a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. Affected versions include DB2 UDB 8.1 before FixPak ...

WordPress < 2.1.3 'xmlrpc.php' SQLi

Binary data 3959.prm...

CVE-2006-3959

CVE-2006-3959 affects X-Scripts X-Protection 1.10, where protect.php is vulnerable to SQL injection when magic_quotes_gpc is disabled. An attacker can supply crafted values for the (1) username and (2) password parameters to trigger arbitrary SQL execution remotely via HTTP to protect.php. The ro...

CVE-2005-3959

CVE-2005-3959 affects FreeWebStat 1.0 rev37. It describes multiple cross-site scripting (XSS) vulnerabilities where user-supplied input in the (1) site, (2) jsref, (3) jsres, (4) jscolor parameters to pixel.php and (5) the search key to stat.php are echoed into logdb.html without sanitization. Th...