CVE-2016-4211

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font .ttf Memory Corruption (4)

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font .ttf Memory Corruption 4 Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE:...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (4)

Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4208 COSIG-2016-27 1 Introduction 2 Report Timeline 3 Technical details ...

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)

The version of Adobe Acrobat installed on the remote Mac OS X host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An...

CVE-2016-4208

creationtimestamp| type| source ---|---|--- 2016-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40098...

Gentoo Security Advisory GLSA 201309-08

Gentoo Linux Local Security Checks GLSA 201309-08 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

CVE-2015-4208

The connected documents provide concrete details for CVE-2015-4208 affecting Cisco WebEx Meeting Center . The vulnerability arises from inadequate restriction of the content of URLs in GET requests , allowing remote, unauthenticated attackers to either obtain sensitive information or perform SQL ...

RHEL 7 : java-1.7.0-oracle (RHSA-2014:0902)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0902 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes severa...

AIX Java Advisory : java_jul2014_advisory.asc

The version of Java SDK installed on the remote host is affected by the following vulnerabilities : - A privilege escalation vulnerability in IBM Java Virtual Machine allows remote attackers to execute code to increase access in the context of a security manager. CVE-2014-3086 - Data integrity...

Puppet Enterprise 3.3.0 Bundled Oracle Java Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 3.3.0. Therefore, it contains a bundled version of Oracle Java that is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Mon Aug 18 14:04:26 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc...

RHEL 7 : java-1.7.1-ibm (RHSA-2014:1042)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1042 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes sever...

RHEL 5 / 6 : java-1.7.0-ibm (RHSA-2014:1041)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1041 advisory. IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2014) - Windows

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4208

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220...

CVE-2014-4208

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220...

CVE-2014-4208

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220...

CVE-2014-4208

CVE-2014-4208 is an unspecified vulnerability in the Oracle Java/JVM Deployment component (Java SE 7u60/8u5) with no confidentiality impact, partial integrity impact, and no availability impact (base score 2.6). Related IBM/SUSE advisories document multiple IBM Java SDK vulnerabilities from the J...