Adobe Reader ToolButton Use After Free

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 "Adobe Reader ToolButton Use After Free", 'Description' = %q This module exploits an use after free condition on Adobe Reader versions 11.0.2, 10.1.6 and 9.5.4 and prior. The vulnerability exists while...

Adobe Reader ToolButton - Use-After-Free (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Reader ToolButton Use After Free", 'Description' = %q This module exploits an use after free condition on Adobe Reader versions...

Microsoft released Security Patch for CVE-2013-5065 TIFF Zero-Day vulnerability

Microsoft has released 11 Security Patch this Tuesday, including one for CVE-2013-5065 zero-day vulnerability, recently discovered Local privilege escalation vulnerability that could allow a hacker to launch an attack using corrupted TIFF images to take over victims' computers. FireEye researcher...

TIFF Zero Day Patch Among December 2013 Microsoft updates

Microsoft will, next week, patch a zero-day vulnerability in its GDI+ graphics component being exploited in targeted attacks in the Middle East and Asia. The zero day has sat unpatched since it was made public Nov. 5; Microsoft did release a FixIt tool as a temporary mitigation. The patch is one ...

RHEL 5 / 6 : Adobe Reader (RHSA-2013:1402)

Updated acroread packages that disable the Adobe Reader web browser plug-in are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Adobe Reader 9 reached the end of its support cycle on June 26,...

Windows XP Zero Day Tied To Reader Flaw, Exploited in Wild

If your organization needed more incentive to move off Windows XP, a new zero-day vulnerability made public recently may be it. The bug, which is being exploited in the wild, allows local privilege escalation and kernel access. But in the bigger picture, it’s another indicator that attackers migh...

Adobe Reader And Acrobat TrueType Font Handling Remote Memory Corruption (CVE-2009-1857)

A memory corruption vulnerability has been reported in Adobe Reader and Adobe Acrobat...

CVE-2013-5065: Microsoft Windows XP and Server 2003 Privilege escalation Zero-Day exploit discovered

Researchers at FireEye have discovered a new privilege escalation vulnerability in Windows XP and Windows Server 2003. CVE-2013-5065, Local privilege escalation vulnerability is used in-the-wild in conjunction with an Adobe Reader exploit CVE-2013-3346 that appears to target a patched...

Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3351)

A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Reader and Acrobat JavaScript scheme URI Remote Code Execution (CVE-2013-5325)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Acrobat and Reader Integer Overflow (APSB13-22: CVE-2013-3357)

A integer overflow vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3355)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat...

BlackHole Toolkit v2 Adobe Reader Payload Stage Code Execution

Blackhole is a web exploit kit that operates by delivering malicious payload to the victim's computer...

Adobe Reader Remote Code Execution Vulnerability (APSB13-25) - Windows

Adobe Reader is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Code injection

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document...

CVE-2013-5325: Improper Control of Generation of Code

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document...

PT-2013-5485

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 11.0.0 through 11.0.04 Description The issue allows remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document. Recommendations For Adobe Reader and Acrobat versions...

Adobe Reader 11.0.4 Crafted PDF File Handling JavaScript Scheme URI Execution (APSB13-25)

The version of Adobe Reader installed on the remote host is 11.0.4. It is, therefore, affected by a flaw in the handling of specially crafted PDF files. This could allow an attacker to launch JavaScript URI schemes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7034...

Blackhole Exploit Kit author Paunch arrested

An out-of-the-blue tweet from a Dutch researcher kicked off an unprecedented 24-hour rumor mill yesterday concerning the arrest of Paunch, a hacker allegedly behind the notorious Blackhole Exploit Kit. The arrest, finally confirmed today by the head of the European Cybercrime Centre EC3, is likel...

Adobe Reader Multiple Unspecified Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...