security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing 1 DefineConstantPool, 2 ActionJump, 3 ActionPush, 4 ActionTry, and unspecified other actions, which allows...

security flaw

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...

Adobe Flash Player/AIR Detection (Linux/Unix SSH Login)

SSH login-based detection of Adobe Flash Player/AIR. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.air-purifiers-america.com

Security researcher skathgh420, has submitted on 17/10/2008 a cross-site-scripting XSS vulnerability affecting www.air-purifiers-america.com, which at the time of submission ranked 355322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Adobe Flash Player/Flash CS/AIR/Flex Detection (Windows SMB Login)

SMB login-based detection of Adobe Flash Player/Flash CS/AIR/Flex. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

Null pointer dereference

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610 are affected by CVE-2008-4546. The issue allows a remote web server to trigger a denial of service (NULL pointer dereference, browser crash) by returning a different response on a second HTTP request,...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

CVE-2008-4546: Undefined Security Weakness

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

Adobe AIR Detection

Adobe AIR is installed on the remote host. It is a browser- independent runtime environment that supports HTML, JavaScript, and Flash code and provides for Rich Internet Applications RIAs. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32504; scriptversion"1.20";...

Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...

Command injection

servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service air-conditioning outage via an XML document containing a setRequest command...

CVE-2008-1546

servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service air-conditioning outage via an XML document containing a setRequest command...

CVE-2008-1546

servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service air-conditioning outage via an XML document containing a setRequest command...

CVE-2008-1546

The CVE-2008-1546 entry concerns Mitsubishi Electric GB-50 and GB-50A air-conditioner controllers. Affected component: servlet/MIMEReceiveServlet in the web controller. Root cause: processing of an XML document containing a setRequest command allows remote attackers to crash or otherwise cause a ...

IEA Software (Multiple Products) - POST Denial of Service

IEA Software Multiple Products - POST Denial of Service source: https://www.securityfocus.com/bid/27701/info Multiple IEA Software products are prone to a denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the affected application, denying service to...