Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries

Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...

GLSA-201201-19 : Adobe Reader: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201201-19 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Reader. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open...

Adobe Reader: Multiple vulnerabilities

Background Adobe Reader is a closed-source PDF reader. Description Multiple vulnerabilities have been discovered in Adobe Reader. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted PDF file using Adobe Reader,...

Adobe Reader Integer Overflow Vulnerability (Jan 2012) - Linux

Adobe Reader is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2011-4374

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

Integer overflow

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4374

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4374

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4374

Adobe Reader for Linux (9.x) contains an integer overflow in versions prior to 9.4.6 that could allow arbitrary code execution via unspecified vectors. The vulnerability is CVE-2011-4374. Connected advisories indicate a fix to 9.4.6 available via APSB11-24 (Adobe), and Red Hat RHSA-2011:1434 docu...

CVE-2011-4374: Integer Overflow or Wraparound

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

Adobe Acrobat/Reader(CVE-2011-4374)远程整数溢出漏洞

Bugtraq ID: 51557 CVE ID：CVE-2011-4374 Adobe Reader/Acrobat是流行的处理PDF文件的应用程序。 Linux平台上的Adobe Reader 9.x存在安全漏洞，攻击者构建恶意PDF文件，诱使用户解析，可触发整数溢出，成功利用漏洞可以以应用程序上下文执行任意代码。 0 Adobe Reader 9.x on Linux only 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://www.adobe.com/support/security/bulletins/apsb11-24.html...

Adobe Reader and Acrobat Malformed JavaScript Heap Corruption (APSB12-01; CVE-2011-4371)

A heap corruption vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Reader and Acrobat Embedded BMP Memory Corruption (APSB12-01; CVE-2012-4373)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Acrobat and Reader JPEG DCT Dequantizer Memory Corruption (APSB12-01; CVE-2011-4370)

A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to a buffer overflow while loading specially crafted JPEG image resources from a PDF file. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with...

Adobe Reader - U3D Memory Corruption (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Adobe Reader U3D Memory Corruption Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Researchers Find Sykipot Trojan Variant For Hijacking DoD Smart Cards

A report from Alien Vault says that variants of the Sykipot Trojan have been found that can steal DOD smartcard credentials. The research, published in a blog post Thursday, is the latest by Alien Vault to look at Sykipot, a Trojan horse program known to be used in targeted attacks against defens...

Adobe Reader < 10.1.2 / 9.5 Multiple Vulnerabilities (APSB12-01)

The version of Adobe Reader installed on the remote host is earlier than 10.1.2 / 9.5, and therefore affected by multiple memory corruption vulnerabilities. An attacker could exploit these issues by tricking a user into opening a maliciously crafted Reader file, resulting in arbitrary code...

RHEL 5 / 6 : acroread (RHSA-2012:0011)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0011 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes two security flaws in Adobe...

acroread: U3D memory corruption vulnerability (APSB11-30)

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, as exploited in...