73 matches found
CVE-2016-6975
Technical details about CVE-2016-6975 are not present in the provided connected documents. No concrete information on affected products/versions, root cause, exploit vectors, or remediation is available here; monitor for updates.
Adobe Reader Memory Corruption (APSB16-33: CVE-2016-6974; CVE-2016-6975; CVE-2016-6976; CVE-2016-6977)
A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
CVE-2015-6992
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...
CVE-2015-6992
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...
CVE-2015-6975
CVE-2015-6975 affects CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1. The issue allows an attacker to trigger remote arbitrary code execution or a denial of service through a crafted font file, via memory corruption in the font parsing flow. This is a font-parsing...
KLA10685 Multiple vulnerabilities at Apple iTunes
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Multiple memory corruptions at WebKit can be exploited via iTunes Store...
CVE-2014-6975
The CVE-2014-6975 entry concerns the Twin Lin (com.twinlin.twmo) Android app version 5, which fails to verify X.509 certificates when connecting to SSL servers. This improper validation enables MITM attackers to spoof servers and access sensitive data via a crafted certificate. The provided conne...
CVE-2013-6975
CVE-2013-6975 describes a directory traversal vulnerability in the Cisco NX-OS CLI. Affected software is Cisco NX-OS 6.2(2a) and earlier. The issue allows an authenticated, local user to read arbitrary files on the device via unspecified input. Multiple connected advisories reiterate the same cor...
Flickr Upload Detection
Binary data 6975.prm...
CVE-2008-6975
CVE-2008-6975: CSRF vulnerabilities in apply.cgi of DD-WRT 24 sp2 allow remote attackers to hijack administrator sessions by manipulating parameters (ping_ip, http_username/http_passwd, remote_management, and port-forward fields from/to/ip/pro). The issue is linked to a reportedly weak anti-CSRF ...
CVE-2008-6975
creationtimestamp| type| source ---|---|--- 2008-12-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7389 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9209...
CVE-2006-6975
PHP remote file inclusion vulnerability in centipaidclass.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the classpwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $classpwd is set to a static value before th...
CVE-2006-6975
CVE-2006-6975 is a PHP remote file inclusion vulnerability reported in CentiPaid 1.4.3, involving centipaid_class.php where an attacker could use a URL in the class_pwd parameter to execute arbitrary code. The issue is disputed by CVE sources and third parties, who claim that class_pwd is set to ...