111 matches found
Memory corruption
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...
CVE-2012-4148
CVE-2012-4148 affects Adobe Reader and Acrobat: versions 9.x prior to 9.5.2 and 10.x prior to 10.1.4 on Windows and macOS are vulnerable. The issue allows attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors (distinct from CVE-2012-205...
CVE-2009-4148
CVE-2009-4148 affects DAZ Studio 2.3.3.161, 2.3.3.163 and 3.0.1.135. It enables remote code execution via malicious scripting files with extensions .ds, .dsa, .dse, or .dsb, demonstrated by code that loads the WScript.Shell ActiveX control (script injection vulnerability). Proof of concept and ad...
CORE-2009-0911: DAZ Studio Arbitrary Command Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DAZ Studio Arbitrary Command Execution 1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id: CORE-2009-0911 Advisory URL:...
CVE-2009-4148
creationtimestamp| type| source ---|---|--- 2009-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10295...
CVE-2008-4148
The CVE-2008-4148 vulnerability affects the Drupal Mailhandler module (5.x up to 5.x-1.4; 6.x up to 6.x-1.4). Root cause: SQL queries are constructed without using the Drupal database API, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact and exploit deta...
CVE-2008-4148
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API...
CVE-2007-4148
CVE-2007-4148 concerns Visionsoft Audit’s Audit on Demand Service (VSAOD). A heap-based buffer overflow in VSAOD (Visionsoft Audit 12.4.0.0) is triggered by a long filename in a "LOG." command, enabling remote attackers to cause persistent daemon crashes and, per NVD, potentially execute arbitrar...
CVE-2005-4148
CVE-2005-4148 affects Lyris ListManager 8.5 and possibly earlier than 8.8. The flaw is an information disclosure where sensitive data is exposed via an env hidden variable; a remote attacker can cause the server to return a non-existent page and read the env variable from the error page, revealin...
