CVE-2002-1855

Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1700

Cross-site scripting vulnerability XSS in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message...

CVE-2002-2187

Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact...

CVE-2002-2186

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL...

Internet Explorer Macromedia Flash crossite scripting

It's possible to inject script into flash object URL...

CVE-2002-1382

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format SWF files, a different issue than CAN-2002-0846...

Macromedia Shockwave Flash Malformed Header Overflow #2

Macromedia Shockwave Flash Malformed Header Overflow 2 Release Date: December 16, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Flash Player versions less than 6.0.65.0 Description: While working on some pre-release Retina® CHAM tools, multiple exploitable conditions were...

Multiple bugs in Macromedia flash plugin

Buffer overflows, local file reading...

Macromedia ColdFusion crossite scripting

Crossite scripting in error message...

CVE-2002-1309

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name...

CVE-2002-1310

The CVE-2002-1310 entry affects the IIS ISAPI handler for Macromedia JRun 4.0 and earlier, where a heap-based buffer overflow in the error-handling path can be triggered by an HTTP GET with a long .jsp filename. This leads to potential remote arbitrary-code execution. The vulnerability is tied to...

CVE-2002-1310

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name...

Macromedia JRun/ColdFusion buffer overflow

Multiple buffer overlfows during URI parsing...

Macromedia Flash 6.0.47.0 - SWRemote Heap Corruption

Macromedia Flash 6.0.47.0 - SWRemote Heap Corruption source: https://www.securityfocus.com/bid/6196/info A buffer overrun condition has been discovered in the SWRemote parameter used in Macromedia Flash objects. By triggering the overrun it is possible for an attacker to corrupt sensitive heap...

Macromedia Flash 6.0.47.0 - SWRemote Heap Corruption

source: https://www.securityfocus.com/bid/6196/info A buffer overrun condition has been discovered in the SWRemote parameter used in Macromedia Flash objects. By triggering the overrun it is possible for an attacker to corrupt sensitive heap memory. Exploiting this issue may allow a remote attack...

Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

Description The Macromedia JRun IIS ISAPI handler is prone to a remotely exploitable buffer overrun condition. The issue is due to a lack of bounds checking on requested filenames. It is possible to trigger the overrun if a filename of excessive length is requested. This vulnerability has been...

Multiple vulnerabilities in Macromedia Flash ActiveX

Author: LOM lom at lom.spb.ru Product: Macromedia Flash ActiveX 6.0 6,0,47,0 Vendor: Macromedia was not contacted Risk: High Remote: Yes Exploitable: Yes Into: Macromedia flash ActiveX plugin displays .swf files under Internet Explorer. Vulnerabilities: Few vulnerabilities were identified:...

Buffer overflow in Macromedia Flash

Buffer overflow on oversized "movie" and "SWRemote" paramters for ActiveX component...

Дырки в Macromedia Flash

Привет. Нашел несколько ошибок в Macromedia Flash 6.0, вроде бы еще неизвестных. Несколько ошибок разбора файла, но несерьезных: ошибки чтения из защищенной области памяти и цикл в котором мгновенно пожирается память, но есть две достаточно серьезных: 1. Используется zlib v1.1.3 с double free не...

CVE-2002-1026

Macromedia Sitespring 1.2.0 277.1 using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service crash via a long malformed request to TCP port 2500, possibly triggering a buffer overflow...