WebKit资源装载回调信息泄漏漏洞

Bugraq ID: 36996 CVE ID：CVE-2009-2841 WebKit是一款开放源代码的web浏览器引擎。 当WebKit处理指向外部资源的HTML 5媒体元素时，它不提交资源装载回调以判断资源是否已装载，结果可导致发送某些请求到远程服务器上。如HTML格式的EMAIL消息发送者可以利用这个漏洞用于判断消息是否读取。 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 0 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari...

Design/Logic Flaw

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

Removed by vendor...

'Moderate' Flaw Hits Adobe Photoshop Elements

Adobe has shipped a patch to cover a security vulnerability affecting its Photoshop Elements software product. The flaw, rated moderate, affects Adobe Photoshop Elements versions 8.0 and 7.0. It could be exploited by a hacker with valid login credentials and/or physical access to execute arbitrar...

Adobe Photoshop Elements Active File Monitor Service Local Privilege

Exploit for unknown platform in category local exploits ============================================================================================= Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability...

Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability

No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath=...

Adobe Photoshop Elements Active File Monitor Service Local Privilege

Exploit for unknown platform in category local exploits =============================================================================== Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation ===============================================================================...

Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation

No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation

To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /ad...

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor. This allows local users to (1) stop the service via stop, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath, or (3) restart the service via...

Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges

Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service is installed with an improper securi...

Adobe Photoshop Elements weak service permissions

Weak permissions for AdobeActiveFileMonitor8.0 service allow executable file spoofing...

CVE-2009-3489: Incorrect Permission Assignment for Critical Resource

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

PT-2009-5782 · Adobe · Photoshop Elements

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Elements version 8.0 Description: The issue allows local users to stop the service, execute arbitrary commands as SYSTEM by modifying the binPath variable using the config command, or restart the service. This is due to an...

Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation

Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The...

Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation

Exploit for unknown platform in category local exploits ===================================================================== Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation ===================================================================== Title: Adobe Photoshop Elements...

Adobe Photoshop Elements 8.0 Privilege Escalation

Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service is installed with an improper securi...