FreeType PostScript Type1 Font Parsing Code Execution (CVE-2011-0226)

A code execution vulnerability has been reported in the FreeType font engine. The vulnerability is due to improper validation by the application while handling specially crafted PDF or PostScript. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially...

Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)

A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...

Oracle Outside In CorelDRAW File Parser Stack Buffer Overflow (CVE-2011-2264)

A code execution vulnerability has been reported in Oracle Outside-In. The vulnerability is due to improper bounds checking of certain values while parsing malicious CorelDRAW cdr files. A remote attacker may exploit this vulnerability by sending a malicious .cdr file to a target user. Successful...

Adobe PDF file PCX Buffer Overflow (APSB11-24; CVE-2011-2437)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to buffer allocation error while parsing a PCX image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

Adobe Reader and Acrobat PDF file IFF RGBA Buffer Overflow (APSB11-24; CVE-2011-2436)

A heap buffer overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to insufficient bounds checking while parsing an IFF image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

Adobe PDF File TIFF Buffer Overflow (APSB11-24; CVE-2011-2432)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to insufficient bounds checking while parsing certain structures in a TIFF image. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF...

Adobe Reader and Acrobat PDF file PICT Memory Corruption (APSB11-24; CVE-2011-2435)

A buffer overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error when parsing the header of a PICT image. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file. Successful...

Preemptive Protection against Microsoft Internet Explorer SafeHTML Cross-Site Scripting (MS11-074)

An information disclosure vulnerability has been reported in Internet Explorer. A remote attacker may exploit this vulnerability to perform cross-site scripting attacks and run script in the security context of the logged-on user...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

Sybase M-Business Anywhere agSoap.exe Buffer Overflow

A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...

Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)

A remote code execution vulnerability has been reported in Cisco Anyconnect VPN Client. Annyconnect provides secured remote connection software solution for PCs and mobile devices. The vulnerability exists in the application VPN client's Activex control which aids in downloading and executing its...

Siemens Tecnomatix FactoryLink SCADA VRN Server Multiple Buffer Overflows

Multiple buffer overflow vulnerabilities have been reported in Siemens Tecnomatix FactoryLink VRN Server SCADA system. The vulnerabilities are due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could leverage these...

Adobe Flash Player ActionScript Image Scroll Code Execution (APSB11-21; CVE-2011-2138)

A code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript image scroll functions in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web pag...

Adobe Flash Player ActionScript LoadClip Cross Site Scripting (APSB11-21; CVE-2011-2139)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing LoadClip requests in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing...

Internet Explorer Window Open Race Condition (MS11-057; CVE-2011-1257)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue to cause a memory corruption in a way that will enable him to execute arbitrary code in the context of the logged-on user. Successful exploitation of this vulnerabili...

Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)

A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...

CGI Generic XSS (extended patterns)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected...

RealNetworks RealPlayer IVR Handling Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in RealNetworks RealPlayer. RealPlayer is a media player developed by RealNetworks, Inc. The application is capable of playing back numerous formats of multimedia files. Successful exploitation of this vulnerability may enable an attacker to...

Mambo task Parameter XSS

The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...

Oracle Java XGetSamplePtrFromSnd Memory Corruption (CVE-2010-4462)

A memory corruption vulnerability has been reported in Oracle JRE and JDK. The vulnerability is due to an input validation error within the XGetSamplePtrFromSnd function while processing user supplied Soundbank streams. The vulnerability is triggered when Java processes malicious Soundbank stream...