CVE-2009-3956

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data...

CVE-2009-3956

CVE-2009-3956 refers to a script injection vulnerability in Adobe Reader/Acrobat (8.x/9.x on Windows and macOS) where the Enhanced Security feature was not enabled by default in affected versions prior to 9.3/8.2. The issue, demonstrated via Acrobat Forms Data Format (FDF) behavior, enables cross...

acroread: script injection vulnerability (APSB10-02)

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data...

acroread: script injection vulnerability (APSB10-02)

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data...

Adobe PDF Reader Gets Another Security Makeover

Adobe has released a mega-update for its Reader and Acrobat software products to fix a total of eight documented security vulnerabilities. The update comes with significant security improvements, including the on-by-default addition “Enhanced Security,” a feature that provides a set of default...

[SECURITY] Fedora 12 Update: openttd-0.7.5-1.fc12

OpenTTD is modeled after a popular transportation business simulation game by Chris Sawyer and enhances the game experience dramatically. Many features were inspired by TTDPatch while others are original...

JVN#33977065 WebCalenderC3 cross-site scripting vulnerability

WebCalenderC3 from C3 Corp. is a calender software. WebCalenderC3 contains a cross-site scripting vulnerability. According to the developer, they were not able to reproduce the vulnerability. However, to mitigate against potential security risks, the developer has released a security enhanced...

cman security update

CentOS Errata and Security Advisory CESA-2009:1341 Updated cman packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The Clust...

[SECURITY] Fedora 11 Update: ctorrent-1.3.4-10.dnh3.3.2.fc11

Enhanced CTorrent is a BitTorrent client for unix-like environments. High performance with minimal system resources and dependencies are a priority...

Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit

No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Thunderbird mail crash

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type...

[SECURITY] Fedora 9 Update: mugshot-1.2.2-10.fc9

Mugshot works with the server at mugshot.org to extend the panel, web browser, music player and other parts of the desktop with a "live social experience" and interoperation with online services you and your friends use. It's fun and easy...

Code injection

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CTorrent/Enhanced CTorrent Buffer Overflow Vulnerability

CTorrent/Enhanced CTorrent is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CTorrent/Enhanced CTorrent Buffer Overflow Vulnerability

The host is installed with CTorrent/Enhanced CTorrent and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodctorrentbofvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ CTorrent/Enhanced CTorrent Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c...

CTorrent/Enhanced CTorrent Version Detection

This script retrieves CTorrent/Enhanced CTorrent version. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

DEBIAN-CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

Stack overflow

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...