Lucene search
+L

7555 matches found

securityvulns
securityvulns
•added 2005/06/17 12:00 a.m.•35 views

Adobe Reader 7: XML External Entity (XXE) Attack

XML External Entity XXE Attack Possible in Adobe Reader 7 ----------------------------------------------------------- SHH 7, 2005-06-16 Description ----------- Recent versions of Adobe Reader previously known as Acrobat Reader are vulnerable to XML External Entity XXE Attacks. By including a...

0.6AI score
SaveExploits0
NVD
NVD
•added 2005/06/15 4:00 a.m.•28 views

CVE-2005-1306

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."...

7.5CVSS7.5AI score0.14528EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2005/06/15 4:00 a.m.•52 views

CVE-2005-1306

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."...

7.4AI score0.14528EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2005/06/15 12:00 a.m.•13 views

PT-2005-2309 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 7.0 through 7.0.1 Description: The issue allows remote attackers to determine the existence of files via Javascript containing XML script. This is related to the XML External Entity vulnerability...

7.5CVSS6.3AI score0.14528EPSS
SaveExploits2References5
FreeBSD
FreeBSD
•added 2005/06/15 12:00 a.m.•35 views

acroread -- XML External Entity vulnerability

Sverre H. Huseby discovered a vulnerability in Adobe Acrobat and Adobe Reader. Under certain circumstances, using XML scripts it is possible to discover the existence of local files...

7.5CVSS6.2AI score0.14528EPSS
SaveExploits2References3
exploitpack
exploitpack
•added 2005/06/15 12:00 a.m.•11 views

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure source: https://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target fi...

7.3AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/04/25 12:00 a.m.•37 views

Local file detection found through Adobe Reader ActiveX control

Hyperdose Security Advisory Name: Local file detection found through Adobe Reader ActiveX control Systems Affected: Adobe Reader 7.0 and earlier Severity: Low Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-06.txt --Adobe Description-- From...

6.7AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/04/05 12:00 a.m.•31 views

[SA14813] Adobe Reader Local Files Detection Weakness

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Adobe Reader Local Files Detection Weakness SECUNIA...

6.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2004/10/15 12:00 a.m.•39 views

Adobe Acrobat / Acrobat Reader local file access

SWF files embedded to document may access local files...

2.4AI score
SaveExploits0References1Affected Software2
securityvulns
securityvulns
•added 2004/10/15 12:00 a.m.•42 views

Adobe acrobat / Adobe Reader 6 can read local files

Adobe acrobat / Adobe Reader 6 can read local files Description Acrobat/ Acrobat reader is software for viewing and printing Adobe Portable Document Format PDF files. Adobe PDF files can be viewed on most major operating systems. Version 6 of this program has an issue with the way it handles...

6.6AI score
SaveExploits0
CVE
CVE
•added 2004/08/18 4:00 a.m.•82 views

CVE-2004-0629

CVE-2004-0629 concerns a buffer overflow in the ActiveX component pdf.ocx used by Adobe Acrobat 5.0.5 and Acrobat Reader (and possibly other versions). The flaw allows remote code execution when processing a PDF URI that ends with a null terminator (%00) followed by a long string, exploiting the ...

7.5CVSS8AI score0.07068EPSS
SaveExploits0References5Affected Software2
NVD
NVD
•added 2004/07/27 4:00 a.m.•30 views

CVE-2004-0632

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow...

7.5CVSS7.8AI score0.07237EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2004/07/16 4:00 a.m.•57 views

CVE-2004-0632

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow...

7.8AI score0.07237EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2004/07/13 12:00 a.m.•60 views

[Full-Disclosure] iDEFENSE Security Advisory 07.12.04: Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability

Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability iDEFENSE Security Advisory 07.12.04 www.idefense.com/application/poi/display?id=116&type=vulnerabilities July 12, 2004 I. BACKGROUND Adobe Reader is a program used to display Portable Document Format PDF documents. II. DESCRIPTION...

7.5CVSS0.5AI score0.07237EPSS
SaveExploits0
securityvulns
securityvulns
•added 2001/08/22 12:00 a.m.•53 views

Проблемы с разрешениями в Acrobate Reader под unix (weak permissions)

Файл /AdobeFnt.lst имеет разрешения 777 независимо от umask...

1.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder