61 matches found
RHEL 6 : abrt and libreport (RHSA-2013:0215)
Updated abrt and libreport packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
CVE-2007-5659
creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16674 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4 2018-05-29 15:50:33+00:00| seen|...
Adobe Multiple Products PDF JavaScript Method Buffer Overflow (CVE-2007-5659)
Adobe develop products for creating, distributing, and viewing Portable Document Format PDF documents. Adobe Reader is a viewer application that allows for reading and printing of PDF documents. Adobe Acrobat provides PDF authoring functionalities in addition to those by viewer. There exists a...
Adobe Collab.collectEmailInfo() Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...
RHEL 3 / 4 / 5 : acroread (RHSA-2008:0144)
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...
Adobe Collab.collectEmailInfo() Buffer Overflow
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat Professional 8.1.1. By creating a specially crafted pdf that a contains malformed Collab.collectEmailInfo call, an attacker may be able to execute arbitrary code. This module requires Metasploit:...
CVE-2008-5659
The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...
CVE-2008-5659
The CVE-2008-5659 issue affects the GNU Classpath project’s gnu.java.security.util.PRNG class (version 0.97.2 and earlier). The vulnerability stems from a predictable seed based on the system time, enabling context‑dependent attackers to perform brute‑force attempts against cryptographic routines...
CVE-2008-5659
creationtimestamp| type| source ---|---|--- 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32673 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32674...
Adobe Acrobat and Reader JavaScript buffer overflow
Added: 11/13/2008 CVE: CVE-2007-5659 BID: 27641 OSVDB: 41495 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem Buffer overflow vulnerabilities in several JavaScript functions allow command execution when a user loads ...
Adobe Acrobat and Reader JavaScript buffer overflow
Added: 11/13/2008 CVE: CVE-2007-5659 BID: 27641 OSVDB: 41495 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem Buffer overflow vulnerabilities in several JavaScript functions allow command execution when a user loads ...
Gentoo Security Advisory GLSA 200803-01 (acroread)
The remote host is missing updates announced in advisory GLSA 200803-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200803-01 (acroread)
The remote host is missing updates announced in advisory GLSA 200803-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical: Red Hat Security Advisory: acroread security update
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...
CVE-2007-5659
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...
Immunity Canvas: ACROBAT_JS
Name| acrobatjs ---|--- CVE| CVE-2007-5659 Exploit Pack| CANVAS Description| Adobe Acrobat Reader Stack Overflow 8.1.1 Notes| CVE Name: CVE-2007-5659 VENDOR: Adobe VersionsAffected: 8.1.1 and Below Repeatability: References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657...
CVE-2007-5659
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...
CVE-2007-5659
Adobe Acrobat/Reader (シリーズ 8.1.1 and earlier) contains a buffer-overflow in unspecified JavaScript methods triggered by a crafted PDF long-argument to JavaScript calls, enabling remote code execution. The vulnerability (CVE-2007-5659) is noted to potentially be subsumed by CVE-2008-0655. Exploita...
CVE-2007-5659
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655. Recent assessments: Assessed Attacker Value: 0 Assess...
CVE-2006-5659
PVE- C03: CVE-2006-5659 affects PAM_extern prior to 0.2, where the password is passed as a command-line argument. This allows local users to read the password by listing arguments (e.g., via ps), compromising confidentiality. No remediation or patch details are provided in the supplied documents;...