CVE-2005-1306

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."...

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure source: https://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target fi...

PT-2005-2309 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 7.0 through 7.0.1 Description: The issue allows remote attackers to determine the existence of files via Javascript containing XML script. This is related to the XML External Entity vulnerability...

Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure

source: https://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target file as well. Information gathered through the exploitation of this...

CVE-2004-2090

CVE-2004-2090 : Microsoft Internet Explorer 5.0.1 through 6.0 is vulnerable via the VBScript LoadPicture method, which can be used by remote attackers to determine whether arbitrary files exist by observing error codes returned when the file is missing. The description in connected documents conf...

CVE-2005-1490

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html...

CVE-2005-1490

CVE-2005-1490 (Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2) : When the mailbox.dat file does not exist, remote authenticated users can determine whether a file exists by using the folder parameter to attachment.html. The affected components are Merak Mail Server 8.0.3 and Icewarp Web Mail...

CVE-2005-1490

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html...

CVE-2005-0918

The issue concerns the NPSVG3.dll ActiveX control used by Adobe SVG Viewer (versions 3.02 and earlier) on Internet Explorer. The vulnerability allows remote attackers to infer the existence of arbitrary files by setting the control’s src property to a target filename and observing whether the pag...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

PT-2005-1945 · Adobe · Svg Viewer

Name of the Vulnerable Software and Affected Versions: Adobe SVG Viewer versions 3.02 and earlier Description: The issue allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page...

Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure

source: https://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file. Information that is harvested by...

CVE-2005-0588

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2005-0536

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

Adobe Acrobat Reader ActiveX information leak

It's possible to check file existance with LoadFile method...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0733

The CVE-2005-0733 entry concerns PY Software Active Webcam WebServer (webcam.exe) 5.5. It enables remote attackers to determine whether a full path exists by issuing HTTP requests, with differing responses based on file existence, resulting in information disclosure. Affected component: Active We...

CVE-2005-0536

CVE-2005-0536 originates from a directory traversal flaw in MediaWiki (1.3.x pre-1.3.11 and 1.4 beta pre-1.4 RC1). The issue allows remote attackers to delete arbitrary files or probe file existence via the image deletion parameter. Multiple connected sources corroborate the same vulnerable versi...

CVE-2004-1325

The CVE-2004-1325 entry concerns the ActiveX control used by Windows Media Player 9.0. The getItemInfoByAtom function returns 0 if a target file does not exist, or the file size if it exists, enabling remote attackers to determine whether files exist on the local system. The description focuses o...