390 matches found
CVE-2002-1534
Macromedia Flash Player contains a vulnerability where a remote attacker can read arbitrary files by manipulating XML script inside a .swf hosted on a remote SMB share. The issue arises from how the SWF processes XML data from an SMB-based source, enabling file read access without local interacti...
RHEL 2.1 : netscape (RHSA-2003:027)
Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...
MPSB04-06 - Security Patch available for ColdFusion MX 6.1 File Upload Denial of service
IMPORTANT: A security issue that may affect ColdFusion MX 6.1 customers has come to our attention recently. To learn about this new issue and what actions you can take to address it, please visit the Macromedia Security Zone: http://www.macromedia.com/security MPSB04-06 - Security Patch available...
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service
source: https://www.securityfocus.com/bid/10163/info A denial of service vulnerability has been reported in Macromedia ColdFusion MX that is reported to occur when the software attempts to write oversized error messages. These error messages will be logged by the server but may also be written in...
Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service
Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service source: https://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of...
[VulnWatch] Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B)
NGSSoftware Insight Security Research Advisory Name: Macromedia Dreamweaver Remote Database Scripts Systems Affected: IIS/Dreamweaver MX and UltraDev 4 Severity: Critical Vendor URL: http://www.macromedia.com/ Author: David Litchfield [email protected] Date Vendor Notified: 10th March 2004 Da...
Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service
source: https://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist in the 'LoadMovie' function by...
Multiple Vendor SOAP server array DoS
///////////////////////////////////////////////////////////////////// //===================== Security Advisory =====================// ///////////////////////////////////////////////////////////////////// --------------------------------------------------------------------- ----- Multiple Vendor...
CVE-2003-1017
CVE-2003-1017 affects Macromedia Flash Player before 7.0.19.0. The vulnerability arises because Flash data files are stored in a predictable location accessible to web browsers, allowing remote attackers to read restricted files via browser vulnerabilities that rely on predictable file names. The...
CVE-2003-1017
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names...
Multiple Vendor SOAP server (XML parser) attribute blowup DoS
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...
Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities
Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The...
Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The problem is said to occur due to insufficient sanitization of URI parameters that may be passed to the page...
Microsoft internet explorer local files access
Redirection with Location: file:/// allows to open local file in known location. Macromedia flash allows to store HTML text in known file...
ColdFusion SQL Error Pages XSS
---------- NOTE ABOUT COLDFUSION XSS ATTACKS Vendor: Macromedia Versions: MX 6.0 tested , older ? PROBLEM: When you access to an error page of sql you can insert xss code to be shown in the error uotput of the sql backend. example: http://target/article.cfm?id=1'scriptalertdocument.cookie;/script...
Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting
Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/8840/info It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying...
MPSB03-05 Patch and Work Around for Dreamweaver MX, DRK, and UltraDev Server Behaviors
In-Reply-To: [email protected] Thank you again for bringing this to the attention of Macromedia. The issues have been resolved. More information and the necessary patches are available at: http://www- staging.macromedia.com/devnet/security/securityzone/mpsb03-05.html MPSB03-...
Important: Red Hat Security Advisory: netscape security update
Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...
Important: Red Hat Security Advisory: : Updated Netscape packages are now available
Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...
