6189 matches found
Microsoft Windows - URI Handler Command Execution
Microsoft Windows - URI Handler Command Execution source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows...
Microsoft Windows URI Handler Command Execution Vulnerability
Description Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicio...
Microsoft Windows - URI Handler Command Execution
source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in...
Acrobat Reader plugin DoS
Request to PDF file with large number of n causes CPU and memory exhaustion...
Adobe Acrobat/Adobe Reader信息泄露漏洞
Adobe Acrobat和Adobe Reader都是非常流行的PDF文件阅读器。 Adobe Reader或Adobe Acrobat打开恶意PDF文件时可能会启动file:// URL，这可能导致读取系统上的任意文件并发送给攻击者。 Adobe Acrobat Professional 8.0.0 Adobe Adobe Reader Professional 8.0.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com...
SUSE-SA:2007:011: acroread
The remote host is missing the patch for the advisory SUSE-SA:2007:011 acroread. The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes: CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to cod...
GLSA-200701-16 : Adobe Acrobat Reader: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-16 Adobe Acrobat Reader: Multiple vulnerabilities Adobe Acrobat Reader in stand-alone mode is vulnerable to remote code execution via heap corruption when loading a specially crafted PDF file. The browser plugin released wi...
security flaw
Multiple cross-site scripting XSS vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 23 Jan 2007 The previous acroread packages were missing dependencies on the new...
security flaw
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the 1 FDF, 2 XML, or 3 XFDF AJAX request parameters...
Adobe Acrobat Reader: Multiple vulnerabilities
Background Adobe Acrobat Reader is a PDF reader released by Adobe. Description Adobe Acrobat Reader in stand-alone mode is vulnerable to remote code execution via heap corruption when loading a specially crafted PDF file. The browser plugin released with Adobe Acrobat Reader nppdf.so does not...
MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability
Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...
MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability
Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...
Adobe Acrobat Reader畸形文档处理堆溢出漏洞
Adobe Acrobat Reader是非常流行的PDF文件阅读器。 Adobe产品在渲染特制的PDF文件时存在堆溢出漏洞，远程攻击者可能通过利用此漏洞诱骗用户打开恶意文件控制用户机器。 相关的代码段如下： ----// SNIP SNIP //------------------------------------------------- 0:000 u 08009d3f CoolType+0x9d3f: 08009d3f 83e904 sub ecx,0x4 08009d42 890da07a1d08 mov CoolType!CTCleanup+0xb393b...
security flaw
Multiple cross-site scripting XSS vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader allows users to view and print documents in portable document...
security flaw
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the 1 FDF, 2 XML, or 3 XFDF AJAX request parameters...
多个PDF阅读器远程缓冲区溢出漏洞
Adobe Portable Document Format是一款流行的PDF文件格式。 多个PDF阅读器处理特殊的PDF文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Adobe PDF把文档的对象层次树定义为"目录字典"，目录包含对组成文档内容和属性的目录和数据的必要引用。而且也指示定义怎样渲染文档如怎样显示给用户。 它可以包含不同的关键条目：Type, Pages, PageLabels, Names, Dests, ViewerPreferences, PageLayout, PageMode, Outlines, Threads, OpenAction, UR...
Acrobat Reader多个远程溢出漏洞
Acrobat Reader是非常流行的PDF文件阅读器。 PDF格式将文档对象层次的根定义为“目录词典”，目录中包含有到对象的引用、构成文档内容的数据及其属性，以及定义如何向用户显示文档的指令。 当前的PDF规范中存在设计错误，如果引用了无效的页面树节点或对象的话，目录中恶意的Pages项设置或恶意的目录词典可能会出现非预期的情况，包括内存破坏、内存泄漏或拒绝服务。 Adobe Acrobat Reader 5.0 - 7.0 目前厂商还没有提供补丁或者升级程序，SEBUG建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com...
Adobe Acrobat Reader Plugin <= 7.0.x (acroreader) XSS Vulnerability
No description provided by source. Stefano Di Paola http://www.wisec.it/ From Secunia: Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users. This can be exploited to execute arbitrary script code in a user's browser session in context o...