US-CERT Technical Cyber Security Alert TA09-133B -- Adobe Reader and Acrobat JavaScript Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-133B Adobe Reader and Acrobat JavaScript Vulnerabilities Original release date: May 13, 2009 Last revised: -- Source: US-CERT Systems Affected Adobe Reader versions 9.1, 8.1.4, 7.1.1 and...

Adobe Reader and Acrobat customDictionaryOpen() and getAnnots() JavaScript vulnerabilities

Overview Adobe Reader and Acrobat contain vulnerabilities in the customDictionaryOpen and getAnnots JavaScript methods. Description Adobe Reader and the Adobe Acrobat family of software is designed to create, view, and edit Portable Document Format PDF files. Adobe Reader is widely deployed, and...

CVE-2009-1182

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

Microsoft Internet Explorer Denial of Service Vulnerability - Apr09

This host is installed with Internet Explorer and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiedosvulnapr09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Denial of Service Vulnerability - Apr09 Authors: Sharath S Copyright: Copyrig...

PT-2009-3199 · Microsoft · Windows Http Services +3

Name of the Vulnerable Software and Affected Versions: Windows HTTP Services versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 WinINet in Microsoft Internet Explorer versions 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Serve...

Magic ISO Maker Buffer Overflow Vulnerability

This host is running Magic ISO Maker and is prone to Heap-Based Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbmagicisomakerbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Magic ISO Maker Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...

MoziloCMS Local File Include and Cross Site Scripting Vulnerabilities

MoziloCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Horde Multiple Vulnerabilities (Apr 2009)

Horde is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

PowerZip Stack Buffer Overflow Vulnerability

This host is running PowerZip and is prone to Stack Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodpowerzipbofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PowerZip Stack Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

eZip Buffer Overflow Vulnerability

The host is installed with eZip Wizard and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodezipbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ eZip Buffer Overflow Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

BitDefender Internet Security 2009 XSS Vulnerability

This host is installed with BitDefender Internet Security and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodbitdefenderxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ BitDefender Internet Security 2009 XSS Vulnerability Authors: Sharath S Copyright: Copyrig...

Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check

Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

BitDefender Internet Security 2009 XSS Vulnerability

BitDefender Internet Security is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

PT-2009-1126 · Vmware +3 · Open-Vm-Tools +3

Name of the Vulnerable Software and Affected Versions: open-vm-tools version 2009.03.18-154848 Description: The issue is related to the mount.vmhgfs component of the open-vm-tools package, which incorrectly handles symbolic links before accessing a file. This can allow an attacker to access...

PT-2009-3421 · Elby +1 · Virtual Clonedrive +4

Name of the Vulnerable Software and Affected Versions: ElbyCDIO.sys versions 6.0.2.0 and earlier AnyDVD versions prior to 6.5.2.6 Virtual CloneDrive versions 5.4.2.3 and earlier CloneDVD versions 2.9.2.0 and earlier CloneCD versions 5.3.1.3 and earlier Description: The issue exists due to an erro...

MP Form Mail CGI vulnerability allows third party to gain administrative privileges

Overview MP Form Mail CGI from futomi's CGI Cafe contains a vulnerability that allows an attacker to gain administrative privileges. MP Form Mail CGI from futomi's CGI Cafe is a software for sending contents entered into an HTML form via email. MP Form Mail CGI contains a vulnerability that allow...

SA-CONTRIB-2009-009 Forward module can be used as a spam relay

This vulnerability allows spammers or spambots to use sites with the Forward module installed to send nearly unlimited e-mail. Due to improper use of Drupal's flood control API, it is possible for one user to send an unlimited numbers of mails using the forward module. Important note : the securi...

PT-2009-3441 · Linux +2 · Linux +2

Name of the Vulnerable Software and Affected Versions: NovaStor NovaNET version 12 Description: The issue is related to a stack-based buffer overflow in the DtbClsLogin function, allowing remote attackers to execute arbitrary code on Linux platforms or cause a denial of service on Windows platfor...

Microsoft XML Core Service Information Disclosure Vulnerability

This host is installed with Microsoft XML Core Service and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsxmlcoresvcinfodiscvuln.nasl 16112 2009-02-18 12:40:24Z feb$ Microsoft XML Core Service Information Disclosure Vulnerability Update by Antu sanadi on...

Fedora Update for net-snmp FEDORA-2008-5224

Check for the Version of net-snmp OpenVAS Vulnerability Test Fedora Update for net-snmp FEDORA-2008-5224 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...