Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

AwingSoft Winds3D Player SceneURL Code Execution (CVE-2009-4850)

A code execution vulnerability has been reported in AwingSoft's Winds3D player, a browser plug-in for IE, Firefox and Opera. The vulnerability is due to an error in the way the application handles files with specially crafted parameters. An attacker could exploit this vulnerability by enticing a...

CentOS Update for xmlsec1 CESA-2011:0486 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for xmlsec1 CESA-2011:0486 centos4 i386

Check for the Version of xmlsec1 OpenVAS Vulnerability Test CentOS Update for xmlsec1 CESA-2011:0486 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2011-2789

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

CVE-2011-2789

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

CVE-2011-2789

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

CVE-2011-2789

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

CVE-2011-2789

Removed by vendor...

CVE-2011-2789

CVE-2011-2789 : Use-after-free in Google Chrome prior to 13.0.782.107 allows remote attackers to cause a denial of service or other unspecified impact via vectors related to Pepper plug-in instantiation. A remediation exists: upgrade to Chrome 13.0.782.107 or later.

CVE-2011-2789: Use After Free

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in...

PT-2011-4092

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors related to instantiation of the Pepper plug-in...

On firefox 2 Plug-in vulnerability-vulnerability warning-the black bar safety net

Text/superhei 2 0 1 1 year 0 6 month 2 2 day One, Firefox magic mirror 1. Exp: http://www.80vul.com/firefox/firefox-cn-nday.html !-- var file = Components. classes"@mozilla.org/file/local;1". createInstanceComponents. interfaces. nsILocalFile; file. initWithPath"C:\\WINDOWS\\system32\\calc.exe";...

PT-2011-3617

Name of the Vulnerable Software and Affected Versions Adobe Shockwave NPAPI Plug-in affected versions not specified Description The issue is related to a remote code execution vulnerability in the Adobe Shockwave NPAPI Plug-in, specifically involving drag and drop functionality. Recommendations A...

RHEL 5 / 6 : flash-plugin (RHSA-2011:0869)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

RHEL 4 : gimp (RHSA-2011:0837)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0837 advisory. - Gimp: Integer overflow in the BMP image file plugin CVE-2009-1570 - Gimp: Stack-based buffer overflow in SphereDesigner plug-in...

Moderate: Red Hat Security Advisory: gimp security update

Updated gimp packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Gimp: Stack-based buffer overflow in Lighting plug-in

Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field...

Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...