CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

Memory corruption

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

CVE-2010-4091: Improper Restriction of Operations within the Bounds of a Memory Buffer

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

PT-2010-5287

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.x through 8.2.5 Adobe Reader and Acrobat versions 9.x through 9.4.0 Adobe Reader and Acrobat versions 10.x through 10.0.0 Description The issue allows remote attackers to execute arbitrary code or cause a...

Acrobat Reader 9.4 - Memory Corruption

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15419.bin xplpdf.bin http://extraexploit.blogspot.com/2010/11/full-disclosure-xplpdf-adober-reader-94.html...

Adobe Flash Player authplay.dll库PDF文件解析远程代码执行漏洞

BUGTRAQ ID: 44504 CVE ID: CVE-2010-3654 Flash Player是一款非常流行的FLASH播放器。 Flash Player的authplay.dll库在解析畸形PDF文件时存在内存破坏漏洞，用户受骗打开了内嵌有恶意Flash内容的PDF文件时就可以触发这个漏洞，导致执行任意代码。 Adobe Acrobat 9.4 Adobe Flash Player 10.1.95.2 Adobe Flash Player 10.1.85.3 Adobe Reader 9.4 临时解决方法： 在浏览器中禁用Flash，禁止显示PDF文档。 在Adobe...

Adobe Flash Player - 'Button' Arbitrary Code Execution (Metasploit)

$Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-3654

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

CVE-2010-3654

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

Memory corruption

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

CVE-2010-3654

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

CVE-2010-3654

Adobe Flash Player and Adobe Reader/Acrobat 9.x through 9.4 are vulnerable to remote code execution or denial of service due to a failure to properly parse Flash content inside PDF files. Affected versions include Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64, as well as authpla...

CVE-2010-3654: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

PT-2010-4993

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 9.0.289.0 Adobe Flash Player versions 10.x prior to 10.1.102.64 Adobe Flash Player version 10.1.95.1 on Android Adobe Reader and Acrobat versions 9.x through 9.4 Description The issue allows remote attacker...

Adobe Reader 9 <= 9.4 (APSA10-05)

The remote Windows host contains Adobe Reader version 9.4 or earlier. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this issue by getting a user to open a maliciously crafted PDF containing SWF content, resulting in the execution of...

Adobe Flash Player "Button" Remote Code Execution

This module exploits a vulnerability in the handling of certain SWF movies within versions 9.x and 10.0 of Adobe Flash Player. Adobe Reader and Acrobat are also vulnerable, as are any other applications that may embed Flash player. Arbitrary code execution is achieved by embedding a specially...

Adobe Reader ACE.dll ICC Stream mluc Structure Integer Overflow (APSB10-21; CVE-2010-3621; CVE-2010-3622)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerability has been discovered in Adobe Reader and Acrobat. A remote...

Security Week In Review: Evercookies, SQL Slammer and a Flood of Patches

This week seemed to be all about the numbers as a handful of reports were released, disclosing new stats on phishing, information theft and spam. Evercookies, the inside story of SQL Slammer, and of course, the usual array of patches, rounded out the week. Read on for the full week in review. The...