KLA10229 ACE vulnerabilities in IrfanView

A buffer overflow was found in IrfanView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed GIF file or a specially designed thumbnail in the file. Original advisories IrfanView changelog Exploitation...

KLA10217 ACE vulnerability in Ichitaro

An unspecified vulnerability was found in JustSystem Ichitaro. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document. Original advisories JustSystems bulletin Exploitation Related products...

KLA10035 Multiple ACE vulnerabilities in Adobe Shockwave Player

Multiple serious vulnerabilities have been found in Adobe Shockwave Player. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code via unspecified vectors. Original advisories Adobe bulletin Exploitation Related products Adobe-Shockwave-Player CVE...

Cisco Application Control Engine < A3(2.1) Multiple Unspecified Traversals (cisco-sa-20090225-anm)

The Cisco Application Control Engine ACE software installed on the remote Cisco IOS device is earlier than A32.1. It is, therefore, potentially affected by multiple unspecified directory traversals. An authenticated attacker could exploit these to access ACE operating system and host operating...

KLA10238 ACE vulnerability in Kingsoft Writer

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list...

KLA10403 ACE vulnerability in XnView

A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10081 ACE vulnerability in Autodesk

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories Autodesk bulletin Exploitation Related products AutoCAD...

Oracle Linux 5 : kdelibs (ELSA-2009-1127)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1127 advisory. - Resolves: 505621, CVE-2009-1687, integer overflow in KJS JavaScript garbage collector CVE-2009-1698, KHTML CSS parser - incorrect handling CSS style...

KLA10255 Multiple ACE vulnerabilities in Adobe Shockwave Player

Multiple unspecified vulnerabilities were found in Shockwave player. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely at unspecified vectors. Original advisories - Exploitation Public exploit...

KLA10076 Multiple vulnerabilities in Apple iTunes

Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...

KLA10274 ACE vulnerability in Nitro PDF

Improper memory writing was found in Nitro PDF. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF. Original advisories Microsoft research Exploitation Related products Nitro-PDF-Reader Nitro-Pro C...

Cisco ACE Log Retention Denial of Service Vulnerability

A vulnerability in the SSL logging daemon of Cisco Application Control Engine ACE could allow an unauthenticated, remote attacker to cause a denial of service condition on the affected device. The vulnerability occurs because the Cisco ACE fails to rotate logs from SSL sessions, exhausting the ha...

KLA10045 ACE vulnerability in Media Player Classic

Buffer overflow was found at mplayerc.exe in Media Player Classic & Windows Media Player. Malicious can use this vulnerability to execute arbitrary code via specially designed .mp4 file. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2007-6402 critic...

Ruijie Application Control engine of the management server can increase user-vulnerability warning-the black bar safety net

Ruijie Application Control engine of the management server, the RG-ACE series Application Control engine of the management server V3. 1. 3 6. 0 0 1, The Official Website of the connection http://www.ruijie.com.cn/service/down-search.aspx the display is the latest version according to not authorit...

KLA10105 ACE vulnerability in CISCO Secure Desktop

Improperly downloaded binaries validation was found in Cisco Secure Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to WebLaunch. Original advisories Cisco bulletin Exploitation Related...

KLA10162 ACE vulnerability in FlashFXP

Buffer overflows were found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed strings in listbox or combobox. Original advisories FlashFXP bulletin Exploitation Public exploits exist for th...

KLA10138 ACE vulnerability in DjVu Browser Plug-in

A buffer overflow was found in the DjVu Browser Plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed djvu file. Original advisories Changelog Exploitation Related products DjVu-Browser-Plug-In C...

CVE-2012-3919

The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...

Code injection

The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...

CVE-2012-3919

CVE-2012-3919 affects the Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers. The issue is that the ACE module does not properly monitor Load Balancer (LB) queues, which can lead to a denial of service via application traffic, described as an incorrect...