CVE-2012-4173

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273...

CVE-2012-4175

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273...

CVE-2012-4176

Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273...

CVE-2012-4173

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273...

CVE-2012-5273

CVE-2012-5273 is listed with Adobe Shockwave Player vulnerabilities (Mac OS X and Windows). The connected sources confirm a buffer overflow vulnerability in Shockwave Player that can lead to arbitrary code execution, associated with versions around 11.x (noted as

CVE-2012-4172

Adobe Shockwave Player versions affected include

CVE-2012-4173

Adobe Shockwave Player before 11.6.8.638 is vulnerable to a buffer overflow that allows arbitrary code execution via unspecified vectors (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-5273). Affected product: Shockwave Player (Windows/macOS) prior to the fixed build; base s...

CVE-2012-4175

Adobe Shockwave Player vulnerability CVE-2012-4175 (and related CVEs) affects before 11.6.8.638. A buffer overflow in Shockwave Player can allow arbitrary code execution via unspecified vectors. Connected sources (OpenVAS/Nessus plugins) confirm multiple vulnerabilities in Shockwave Player (Windo...

CVE-2012-4174

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-5273...

CVE-2012-4174

Adobe Shockwave Player before 11.6.8.638 is vulnerable to CVE-2012-4174 due to a buffer overflow in Shockwave, allowing arbitrary code execution. Connected docs corroborate this family of vulnerabilities (including CVE-2012-4172/4173/4175/5273) and list affected versions; remediation guidance in ...

CVE-2012-4176

CVE-2012-4176 affects Adobe Shockwave Player prior to 11.6.8.638. An array index error in the plugin can allow remote arbitrary code execution. The vulnerability is triggered by processing a crafted Shockwave file, with no user interaction required in the referenced descriptions. The patched vers...

USN-1615-1: Python 3.2 vulnerabilities

It was discovered that Python distutils contained a race condition when creating the /.pypirc file. A local attacker could exploit this to obtain sensitive information. CVE-2011-4944 It was discovered that SimpleXMLRPCServer did not properly validate its input when handling HTTP POST requests. A...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whi...

[SECURITY] [DSA 2563-1] viewvc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2563-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2562-1] cups-pk-helper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2562-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

Adobe Plugs Several Buffer Overflow Holes in Shockwave Player

Adobe announced today it has repaired a host of critical buffer overflow vulnerabilities and an array out of bounds vulnerability in Shockwave Player and urges users to update to the latest version of the software, version 11.6.8.638. The company said it is not aware of active exploits. Both the...

Vulnerability in AIX bind

IBM SECURITY ADVISORY First Issued: Tue Oct 23 10:13:27 CDT 2012 | Updated: Mon Jan 28 12:29:56 CDT 2013 | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL signature...

USN-1603-2: Ruby vulnerabilities

USN-1603-1 fixed vulnerabilities in Ruby. This update provides the corresponding updates for Ubuntu 12.10. Original advisory details: Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to...

USN-1614-1: Ruby vulnerabilities

Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. USN-1602-1 fixed these vulnerabilities in other Ubuntu releases. This update provides the...