Improvements to help protect against Cross-Site Scripting attacks — Mozilla

Firefox 2.0.0.2 and 1.5.0.10 contain several small changes that will make it easier for sites to protect their visitors against Cross-Site Scripting XSS attacks. Invalid trailing characters in HTML tag attributes The Mozilla parser formerly ignored invalid trailing characters in HTML tag attribut...

security flaw

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering...

Adobe Acrobat allows pointer overwrite via specially crafted PDF file

Overview Adobe Acrobat and Adobe Reader fail to properly handle a specially crafted PDF file, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Adobe Acrobat and Adobe Reader are applications designed to create and view Portable Document Format PDF...

security flaw

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering...

CVE-2006-5857

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering...

[Full-disclosure] Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite

Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite by Piotr Bania [email protected] http://www.piotrbania.com Orginal url: http://www.piotrbania.com/all/adv/adobe-acrobat-adv.txt Severity: Critical - Possible remote code execution. CVE ID: CVE-2006-5857 Time line:...

Adobe Reader < 6.0.6 / 7.0.9 Multiple Vulnerabilities

The version of Adobe Reader installed on the remote host is earlier than 7.0.9 / 8.0 and is, therefore, reportedly affected by several security issues, including one that can lead to arbitrary code execution when processing a malicious PDF file. C Tenable Network Security, Inc. include"compat.inc...

Adobe Reader buffer overflow

Heap buffer overflow on PDF parsing...

Adobe reader plugin PDF files universal crossite scripting

By using URIs like http://path/to/pdf/file.pdfwhatevernameyouwant=javascript:yourcodehere it's possible to execute code in context of any Web site where at least one PDF is stored. 2. By using "trigger action" in PDF document it's possible to execute code in context of the web page where...

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting source: https://www.securityfocus.com/bid/21858/info Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Adobe Acrobat Plug-In cross domain violation

Overview The Adobe Acrobat Plug-In fails to properly validate user-supplied content, which may allow for cross-site scripting. Description Adobe Acrobat Reader is software designed to view Portable Document Format PDF files. Adobe also distributes the Adobe Acrobat Plug-In to allow users to view...

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting

source: https://www.securityfocus.com/bid/21858/info Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

CVE-2006-5857

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering...

Adobe Reader AcroPDF.DLL ActiveX控件远程拒绝服务漏洞

Adobe Reader是非常流行的PDF文件阅读器。 IE浏览器在以畸形的参数调用Adobe Reader的AcroPDF.DLL ActiveX控件时存在漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃。 如果用户受骗打开了恶意的WEB页面的话，就会触发这个漏洞，导致浏览器崩溃。 Adobe Acrobat Reader 7.0.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com !--...

Adobe Reader 7.0.8.0 AcroPDF.dll Internet Explorer Denial of Service

No description provided by source. !-- --------------------------------------------------------------------------------- Adobe Reader 7.0.8.0 AcroPDF.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Adobe Reader 7.0.8.0 AcroPDF.dll Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ==================================================================== Adobe Reader 7.0.8.0 AcroPDF.dll Internet Explorer Denial of Service ==================================================================== argCount = 1 arg1=String2097512, "A"...

Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities

The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...