DEBIAN-CVE-2009-2830

Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Common Document Format CDF file. NOTE: this might overlap CVE-2009-1515...

Security updates available for Shockwave Player

Security updates available for Shockwave Player Release date: November 3, 2009 Vulnerability identifier: APSB09-16 CVE number: CVE-2009-3244, CVE-2009-3463, CVE-2009-3464, CVE-2009-3465, CVE-2009-3466 Platform: Windows and Macintosh Summary Critical vulnerabilities have been identified in Adobe...

Adobe Warns: Unpatched PDF Vulnerability Under Attack

Adobe has confirmed a critical, unpatched vulnerability in its PDF Reader/Acrobat software is being exploited by malicious attackers. The vulnerability affects Adobe Reader and Acrobat 9.1.3 and earlier versions on Windows, Macintosh and UNIX. Adobe described the in-the wild attacks as limited an...

Adobe Acrobat Reader远程代码执行漏洞

Bugraq ID: 36600 CVE ID： CVE-2009-3459 Adobe Reader是流行的处理PDF文件的应用程序。 Windows, Macintosh和UNIX平下的Adobe Reader和Acrobat 9.1.3及之前版本存在一个严重漏洞，根据报告此漏洞已经被积极利用。攻击目标为windows平台下的Adobe Reader和Acrobat 9.1.3。Windows Vista平台下启用了DEP，Adobe Reader和Acrobat...

Mozilla Firefox XUL Frame Tree Memory Corruption (CVE-2008-5016)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on...

CVE-2008-7217

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...

Design/Logic Flaw

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...

CVE-2008-7217

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

CVE-2009-2205

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Security advisory for Adobe Reader, Acrobat and Flash Player

Security advisory for Adobe Reader, Acrobat and Flash Player Release date: July 22, 2009 Last Updated: July 23, 2009 Vulnerability identifier: APSA09-03 CVE number: CVE-2009-1862 Platform: All Platforms Summary A critical vulnerability exists in the current versions of Flash Player v9.0.159.0 and...

icu: XSS vulnerability due to improper invalid byte sequence handling

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

多个Symantec产品RAR/TAR/ZIP文件扫描绕过漏洞

Bugraq ID: 35354 多个Symantec产品对畸形或特殊格式的压缩档文件如tar/zip/rar/缺少真确处理，可导致绕过扫描产品的检测。 攻击者构建恶意的文件，发送给目标用户，可绕过检测使应用程序展开并执行。 目前没有详细漏洞细节提供。 Symantec Symantec AntiVirus Scan Engine for Microsoft ISA 4.3.12 Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Scan Engine 5.1.6.31 Symantec Scan Engine...

Adobe Patch Day set for June 9

Adobe’s first ever quarterly patch for the Reader and Acrobat product lines is set for June 9, the same day Microsoft is scheduled to deliver its batch of security updates. As previously announced, Adobe plans to deliver security updates for Adobe Reader and Acrobat versions 7.x, 8.x, and 9.x for...

freetype: multiple integer overflow vulnerabilities

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via attack vectors related to 1 bdf/bdflib.c, 2 sfnt/ttcmap.c, 3 cff/cffgload.c, and 4 the readlwfn function and a crafted LWFN file in base/ftmac.c. NOT...

Stack overflow

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

CVE-2009-1640

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

CVE-2009-1640

CVE-2009-1640 affects Nucleus Data Recovery Kernel Recovery for Macintosh v4.04. The vulnerability is a stack-based buffer overflow in the AMHH file handling that can allow a user‑assisted attacker to execute arbitrary code. The NVD entry shows a high base score (9.3, CVSS2: AV:N/AC:M/Au:N/C:C/I:...

PT-2009-4124 · Nucleus · Nucleus Data Recovery Kernel Recovery For Macintosh

Name of the Vulnerable Software and Affected Versions: Nucleus Data Recovery Kernel Recovery for Macintosh version 4.04 Description: A stack-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file. Recommendations: For version 4.04, update to ...