CVE-2010-3614

The CVE-2010-3614 issue affects ISC BIND 9.x where DNSKEY algorithm rollover can cause the server to misdetermine the NS RRset security status, potentially triggering DNSSEC validation errors and a denial of service. Public advisories and vendor notes (e.g., Debian DSA-2130-1, CentOS/RH advisorie...

CVE-2010-3898

CVE-2010-3898 affects IBM OmniFind Enterprise Edition 8.x and 9.x. The issue is that administrator (ESAdmin) cookies do not have a properly restricted cookie path, which may allow remote attackers to bypass authentication by accessing other pages within the web site. The connected documents confi...

Code injection

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3620...

CVE-2010-3628

Adobe Reader/Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and macOS is vulnerable to arbitrary code execution or memory corruption via unspecified vectors (CVE-2010-3628). Connected sources describe that specially crafted PDFs could crash Acrobat/Acrobat Reader or lead to arbitrary code...

CVE-2010-3622

CVE-2010-3622 affects Adobe Reader/Acrobat on Windows and macOS (AcroRead/Acrobat 9.x before 9.4 and 8.x before 8.2.5). The vulnerability is exploitable via specially crafted PDFs that trigger memory corruption, allowing arbitrary code execution or a denial of service. Connected sources confirm t...

CVE-2010-2887

Adobe Reader and Acrobat 9.x on Linux are affected by multiple vulnerabilities, including CVE-2010-2887, that can allow privilege escalation via unspecified vectors. The issue is tied to older 9.x builds prior to 9.4; remediation involves upgrading to a newer version (e.g., acroread-9.4.1 or late...

CVE-2010-3622

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621, CVE-2010-3628,...

CVE-2010-2883

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

CVE-2010-2204

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Heap overflow

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2210,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210,...

CVE-2010-2203

Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Adobe Products Remote Code Execution Vulnerability (Jun 2010) - Linux

Adobe products is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player authplay.dll Component Code Execution (APSA10-01; CVE-2010-1297)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to the authplay.dll component that ships with Adobe Reader and Acrobat 9.x. A remote attack...

Buffer overflow

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

CVE-2010-1278 describes a buffer overflow in the gp.ocx ActiveX control (Atlcom.get_atlcom) used by Adobe Download Manager, affecting Adobe Reader/Acrobat 8.x before 8.2 and 9.x before 9.3. During initialization, two parameters are copied into a fixed-length buffer; oversized values can overflow ...

Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities - Linux

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service memory corruption or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204...