Coldfusion MX: Java in CFM causes Crash

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess Security Advisory Name: Macromedia Coldfusion MX Systems: All platforms with jdk 1.3.1 Level 03 until 07 Risk Category: Medium Vulnerability Type: Integer Overflow Vendor URL: http://www.macromedia.com Author: Marc Schoenefeld...

Multiple bugs in Macromedia Cold Fusion MX

Path disclosure, DoS...

NII Advisory - Path Disclosure in Cold Fusion MX Server

=================================================== Path Disclosure in Macromedia ColdFusion MX Server Vendor: Macromedia http://www.macromedia.com Versions affected: ColdFusion MX Server Operating System: Windows 2000 Date: 26th April 2003 Severity: Low Network Intelligence India Pvt. Ltd...

Macromedia ColdFusion MX CFIDE/probe.cfm Direct Request Path Disclosure

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. %NASLMINLEVEL...

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure source: https://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the...

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

source: https://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is returned containing the full path of t...

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...

CVE-2003-0208

Cross-site scripting XSS vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field...

CVE-2003-0208

CVE-2003-0208 describes an XSS vulnerability in Macromedia Flash ad user tracking, exploitable via the clickTAG field to inject arbitrary JavaScript. Affected component: Flash ad-tracking capability; root cause: input in clickTAG not properly sanitized. Impact (per provided metrics): partial inte...

CVE-2002-0801

The CVE-2002-0801 issue affects Macromedia JRun 3.1 on Windows, where the ISAPI DLL filter for JRun is vulnerable to a buffer overflow via a long Host header in a request for a .jsp file. This allows a remote attacker to execute arbitrary code with SYSTEM privileges by sending a crafted request t...

CVE-2002-0801

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file...

CVE-2002-0665

CVE-2002-0665 : Macromedia JRun Administration Server has a login-bypass flaw where an extra slash in the URL allows remote attackers to bypass authentication. The entry is high severity (CVSS 2.0 base score 10.0, NETWORK attack vector, no authentication). Public technical details such as affecte...

CVE-2002-0846

CVE-2002-0846 : The vulnerability concerns the decoder for Macromedia Shockwave Flash. A malformed SWF header containing more data than the specified length can enable remote code execution. The issue is described across multiple records (CVE/DV and NVD entries) as impacting the Shockwave Flash/S...

CVE-2002-0605

CVE-2002-0605 describes a buffer overflow in the Macromedia Flash 6 Flash OCX (revision 6,0,23,0) that allows remote attackers to execute arbitrary code via a long movie parameter. The connected records corroborate: vulnerable component is the Flash OCX, with the overflow occurring when processin...

CVE-2002-0665

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

CVE-2002-1467

CVE-2002-1467 affects the Macromedia Flash Plugin prior to 6.0.47.0, allowing remote attackers to bypass the same-domain restriction and read arbitrary files via (1) HTTP redirects, (2) a file:// base in a web document, or (3) a relative URL from a web archive (mht). The primary sources in the pr...

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service (1)

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service 1 source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occur...

CVE-2002-1881

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...