Microsoft .Net Framework Web Proxy Auto-Discovery Code Execution (MS12-074; CVE-2012-4776)

A remote code execution vulnerability has been reported in the Microsoft .Net Framework. The vulnerability is due to an error in the way the .Net Framework retrieves the default web proxy settings. A remote attacker can exploit this issue by enticing a victim to use a malicious proxy auto...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

Adobe Flash Player Font Parsing Code Execution Vulnerability - (Windows)

This host is installed with Adobe Flash Player and is prone to unspecified code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerfontparsingcodeexecvulnwin.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Font Parsing Code Execution Vulnerability - Windows...

Adobe Flash Player Font Parsing Code Execution Vulnerability - (Linux)

This host is installed with Adobe Flash Player and is prone to unspecified code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerfontparsingcodeexecvulnlin.nasl 5940 2017-04-12 09:02:05Z teissa $ Adobe Flash Player Font Parsing Code Execution Vulnerability - Linux Author...

PT-2012-4393

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector appliance version 6.2.0.6244.0 HP ArcSight Logger appliance version 5.2.0.6288.0 Description A cross-site scripting XSS issue exists in the import functionality, allowing remote attackers to inject arbitrary web script or...

IBM Rational AppScan 8.x/7.x 多个安全漏洞

CVE ID:...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system...

McAfee WebShield UI Authentication Bypass (SB10026)

The version of the McAfee WebShield UI hosted on the remote web server is affected by an authentication bypass vulnerability. It is possible to get a valid session ID as the administrative user by making a specially crafted request to /cgi-bin/localadmin. A remote, unauthenticated attacker can...

Adobe Releases Security Bulletins for Multiple Products

Adobe has released security bulletins to alert users of critical vulnerabilities in multiple products. The following products are affected: Adobe Illustrator CS 5.5 and earlier versions for Windows and Macintosh Adobe Photoshop CS 5.5 and earlier versions for Windows and Macintosh Adobe Flash...

Cisco Linksys PTZ Internet Video Camera PlayerPT ActiveX Overflow

Added: 04/19/2012 BID: 52673 OSVDB: 80297 Background The Cisco WVC200 Wireless-G PTZ Internet Video Camera sends live video through the Internet to a web browser anywhere in the world. Viewers can access the video stream through an HTTP service, which requires an ActiveX client to be installed in...

Cisco Linksys PTZ Internet Video Camera PlayerPT ActiveX Overflow

Added: 04/19/2012 BID: 52673 OSVDB: 80297 Background The Cisco WVC200 Wireless-G PTZ Internet Video Camera sends live video through the Internet to a web browser anywhere in the world. Viewers can access the video stream through an HTTP service, which requires an ActiveX client to be installed in...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: Multiple Priority 2 vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system...

Security update available for Adobe Flash Player

Security update available for Adobe Flash Player Release date: March 5, 2012 Vulnerability identifier: APSB12-05 Priority: 2 CVE number: CVE-2012-0768, CVE-2012-0769 Platform: All Platforms SUMMARY These priority 2 updates address critical vulnerabilities in Adobe Flash Player 11.1.102.62 and...

Microsoft Remote Desktop Protocol (RDP) insecurely deallocates memory

Overview The Microsoft Remote Desktop Protocol RDP service contains a double-free vulnerability that could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Remote Desktop Protocol RDP provides a remote graphical interface to...

Adobe Issues Emergency Fix For Flash Player Vulnerabilities

Adobe on Monday issued two emergency fixes for critical security vulnerabilities in its Flash Player product. The vulnerabilities, if left unpatched, could allow an attacker to take control of a system running a vulnerable version of Flash Player. Adobe on Monday issued two emergency fixes for...

flash-player to 11.1.102.62 (critical)

flash-player was updated to the security update to 11.1.102.62. It fixes lots of security issues, some already exploited in the wild. Details can be found on: https://www.adobe.com/support/security/bulletins/apsb12-03.h tml These vulnerabilities could cause a crash and potentially allow an attack...

Adobe Releases Security Advisory for Adobe Flash Player

Adobe has released a security advisory to alert users of vulnerabilities affecting the following software: Adobe Flash Player 11.1.102.55 and earlier versions for Windows, Macintosh, Linux, and Solaris operating systems Adobe Flash Player 11.1.112.61 and earlier versions for Android 4.x Adobe Fla...

http://www.adobe.com/support/security/bulletins/apsb12-03.html

Security update available for Adobe Flash Player Release date: February 15, 2012 Vulnerability identifier: APSB12-03 CVE number: CVE-2012-0751, CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756, CVE-2012-0767 Platform: All Platforms SUMMARY This update addresses critical...

Microsoft Word Access Violation Code Execution (MS11-099; CVE-2011-1983)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted Word file with an affected version...