627 matches found
CVE-2016-7856: Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...
Flash Player Bug An Eavesdropper's Delight
Adobe yesterday patched a not-so-sweet 16 Flash Player vulnerabilities, including a zero day under attack. While not much is known about the targeted attacks using the Flash Player bug, or its victims, details have surfaced on another patched flaw that is a potential privacy nightmare...
Adobe DNG Converter Memory Corruption Vulnerability
Adobe DNG Converter is a free image reading and conversion tool from Adobe USA. A memory corruption vulnerability exists in Adobe DNG Converter, which can be exploited by an attacker to execute arbitrary code in the context of a user running the affected application. A failed exploit attempt may...
Adobe Patches 31 Vulnerabilities, Flash Zero-Day Under Attack
Adobe patched 31 vulnerabilities across nine different product lines Tuesday morning, including a zero-day vulnerability in Flash Player the company claims is being used in targeted attacks against Internet Explorer users on Windows. That vulnerability CVE-2016-7892 is one of 16 bugs in Flash tha...
APSB16-41 Security update available for the Adobe DNG Converter
Adobe has released a security update for the Adobe DNG Converter for Windows and Macintosh. This update resolves a critical memory corruption vulnerability...
CVE-2016-0325
CVE-2016-0325 affects IBM Jazz-based CLM stack (Rational CLM/RQM/RRTC/RDNG/RELM/RSA DM and related) with multiple versions vulnerable prior to specific iFixes. The issue allows an authenticated remote attacker to execute arbitrary OS commands via a crafted HTTP request, impacting several CLM comp...
CVE-2016-4167
Adobe DNG Software Development Kit SDK before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-4167
Adobe DNG Software Development Kit SDK before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe DNG Software Development Kit SDK before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-4167
Adobe DNG Software Development Kit SDK before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-4167
CVE-2016-4167 affects the Adobe DNG Software Development Kit (SDK) prior to 1.4. The issue is described as a memory corruption vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The connected documents confirm this vulnerability and...
PT-2016-5862
Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions prior to 1.4 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. Recommendations For Adobe DNG Software...
CVE-2016-4167: Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe DNG Software Development Kit SDK before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Fix Coming for Flash Vulnerability Under Attack
Adobe today said it will patch Flash Player this week, addressing a vulnerability being exploited in “limited, targeted attacks.” The flaw, CVE-2016-4171, exists in versions of Flash prior to, and including, 21.0.0.242 on Windows, Macintosh, Linux and ChromeOS platforms. “Successful exploitation...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in DNG Software Development Kit SDK, Brackets, Creative Cloud Desktop Application, and Cold Fusion. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and...
APSB16-19 Security update available for the Adobe DNG SDK
Adobe has released a security update for the Adobe DNG Software Development Kit SDK for Windows and Macintosh. This update resolves a memory corruption vulnerability...
Mac OS X Image RAW解码器DNG图形解析缓冲区溢出漏洞
BUGTRAQ ID: 37869 CVECAN ID: CVE-2010-0037 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的Image RAW解码器在处理DNG文件时存在缓冲区溢出，用户受骗打开恶意的DNG图形就可以导致拒绝服务或执行任意指令。 Apple Mac OS X 10.6.2 Apple Mac OS X 10.5.8 Apple MacOS X Server 10.6.2 Apple MacOS X Server 10.5.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Buffer overflow
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted DNG image...
