390 matches found
Macromedia ColdFusion MX 6.0 Error Message Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is...
Macromedia Flash Player 6.0.x Flash Cookie Predictable File Location Weakness
No description provided by source. source: http://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store content on a system in a predictable...
MKPortal 1.0/1.1 Admin.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25515/info MKPortal is prone to an authentication-bypass vulnerability because it fails to restrict access to certain administrative functions. Attackers can exploit this issue to gain unauthorized access to the...
Macromedia Flash 6.0.47 .0 SWRemote Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6196/info A buffer overrun condition has been discovered in the SWRemote parameter used in Macromedia Flash objects. By triggering the overrun it is possible for an attacker to corrupt sensitive heap memory. Exploiting th...
Macromedia ColdFusion MX 6.0 SQL Error Message Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8840/info It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying database. This problem may be...
Macromedia JRun 4.0 build 61650 Administrative Interface Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The problem is said to occur due to insufficient sanitization of URI...
Macromedia Flash Plugin <= 7.0.19.0 (Action) Denial of Service Exploit
No description provided by source. / Macromedia Flash Plugin - Buffer Overflow in flash.ocx Version: v7.0.19.0 PoC coded by: BassReFLeX Date: 11 Oct 2005 / include stdio.h include stdlib.h include string.h void usagechar file; / swf ... /swf / char SWF = swf; char SWF = /swf; //SetBackgroundColor...
Microsoft Internet Explorer 6.0 Macromedia Flash Player Plug-in Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist...
Macromedia Sitespring 1.2 Default Error Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in...
Macromedia ColdFusion MX 6.0 Oversized Error Message Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10163/info A denial of service vulnerability has been reported in Macromedia ColdFusion MX that is reported to occur when the software attempts to write oversized error messages. These error messages will be logged by the...
Macromedia Dreamweaver MX 6.0 PHP User Authentication Suite Cross-Site-Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8339/info It is possible to create an authentication or access control page, using Dreamweaver MX PHP Authentication Suite. This script will generate an error page that contains dynamic content when a user fails to...
Macromedia JRun 3/4 JSP Engine Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4997/info A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page. The following snippet of code i...
Macromedia ColdFusion MX 6.1 Template Handling Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with...
Macromedia JRun 3/4 Administrative Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a request for the administrative...
Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)
A buffer overflow vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Macromedia Shockwave SWDIR.SLL ActiveX Denial of Service - Ver2 (CVE-2006-6885)
A denial-of-service vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Adobe Shockwave Player内存破坏漏洞(CVE-2014-0500)
BUGTRAQ ID: 65490 CVECAN ID: CVE-2014-0500 Adobe Shockwave Player是播放使用Macromedia和Adobe Director制作的网页内容的软件。 Adobe Shockwave Player 12.0.7.148及之前版本在实现上存在远程内存破坏漏洞，攻击者可利用此漏洞在受影响应用用户上下文中执行任意代码。 0 Adobe Shockwave Player 12.0.7.148 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb14-06）以及相应补丁: apsb14-06：Adobe...
Coldfusion 8.0.1 文件上传漏洞
Coldfusion 最早是由 Macromedia公司的一种应用服务器平台，其coldfusion8.0.1版本存在文件上传漏洞，攻击者可以利用该漏洞上传Shell文件，从而控制整个站点。 Coldfusion 8.0.1...
RHEL 3 / 4 : flash-plugin (RHSA-2006:0268)
An updated Macromedia Flash Player package that fixes a security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in. Security...