JDK multiple unspecified vulnerabilities

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required in that a target must visit a malicious website. The specific flaw exists within the code for parsing embedded image data within SWF files. The...

CVE-2010-2162

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

CVE-2010-2162

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

Memory corruption

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

CVE-2010-2162

CVE-2010-2162 affects Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. The vulnerability arises from improper length calculations in the STSC, STSZ, and STCO atoms, enabling heap memory corruption that could crash the process or allow ...

Integer overflow

Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via a large integer in the...

CVE-2010-2162: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

MacOS X EvoCam HTTP GET Overflow

$Id: evocamwebserver.rb 9460 2010-06-09 18:41:58Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0324-1)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

CVE-2010-2054

CVE-2010-2054 refers to an integer overflow in SBLIM SFCB (sfcb) httpAdapter.c when httpMaxContentLength is set to 0, enabling a remote attacker to trigger heap memory corruption and potentially execute arbitrary code. Connected sources confirm the issue affects sfcb versions 1.3.4–1.3.7 and desc...

CVE-2010-2054: Undefined Security Weakness

Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via a large integer in the...

Microsoft Excel WOPT Record Parsing Heap Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-1283: Out-of-bounds Write

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-088 May 11, 2010 -- CVE ID: CVE-2010-1283 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection: TippingPoin...

Adobe Shockwave Player 0xFFFFFF49 Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the code responsible for parsing 3D objec...

Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required in that a target visit a malicious website. The specific flaw exists within the code responsible for parsing Director files. The vulnerable function is...

Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

$Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...