VulnCheck KEV: CVE-2008-2042

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function...

Adobe Reader/Acrobat远程安全绕过漏洞

Bugraq ID: 37763 CVE ID：CVE-2009-3956 Adobe Reader/Acrobat是流行的处理PDF文件的应用程序。 默认的安全加强配置存在安全问题，允许脚本注入攻击。目前没有详细漏洞细节提供。 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reade...

Microsoft warning to XP users: Update Flash Player Now

Microsoft has shipped a security advisory with an urgent message for Windows XP users: Update your Flash Player immediately. The Adobe Flash Player 6 that ships by default in Windows XP is vulnerable to multiple code execution vulnerabilities that could lead to PC takeover attacks, according to t...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Successful exploits may aid in the compromise of affected...

Adobe FlateDecode Stream Predictor 02 Integer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Adobe Doc.media.newPlayer Use After Free Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Buffer overflow

Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by the vdtversity module in VulnDisco Pack Professional 8.11. NOTE: as of 20091229, this disclosure has no actionable information. However, because the...

Buffer overflow

Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, this disclosure has no actionable information...

CVE-2009-4479

LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service heap memory corruption and daemon crash via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11. NOTE: as of 20091229, this disclosure has no actionable...

Stack overflow

Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.15 through 8.11. NOTE: some of these details are obtained from third party...

Code injection

Unspecified vulnerability in LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service daemon crash via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11. NOTE: as of 20091229, this disclosure has no actionable informatio...

Memory corruption

LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service heap memory corruption and daemon crash via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11. NOTE: as of 20091229, this disclosure has no actionable...

CVE-2009-4483

CVE-2009-4483 concerns an unspecified vulnerability in LDAP3A.exe within MailSite 8.0.4 that allows remote attackers to trigger a denial-of-service (daemon crash) via unknown vectors. The issue is demonstrated by a VulnDisco Pack Professional module (versions 7.13–8.11). Public technical details ...

CVE-2009-4482

The CVE-2009-4482 entry concerns TVersity 1.6, with MediaServer.exe vulnerable to a buffer overflow. The vulnerability allows remote code execution via unspecified vectors, as demonstrated by the vd_tversity module in VulnDisco Pack Professional 8.11. The available documents specify the affected ...

CVE-2009-4479

CVE-2009-4479 affects MailSite 8.0.4 (LDAP3A.exe). The issue allows remote denial of service via unspecified vectors, caused by heap memory corruption that can crash the daemon. Documents do not specify exploited vectors or concrete root cause details beyond the general description; no remediatio...

CVE-2009-4479

LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service heap memory corruption and daemon crash via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11. NOTE: as of 20091229, this disclosure has no actionable...

CVE-2009-4480

Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, this disclosure has no actionable information...

Adobe Doc.media.newPlayer Use After Free Vulnerability

This module exploits a use after free vulnerability in Adobe Reader and Adobe Acrobat Professional versions up to and including 9.2. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' class MetasploitModul...

Adobe Flash Player ActiveX控件信息泄漏漏洞

Bugraq ID: 37272 CVE ID：CVE-2009-3951 Adobe Flash Player是一款Flash文件处理程序。 Flash Player ActiveX控件中漏洞，允许获得windows平台本地文件名，导致敏感信息泄漏。 攻击者可以构建恶意WEB页，诱使用户访问来触发。 Adobe Flex 3.0 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe...

CVE-2009-4216

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANG parameter...