Vulnerabilidades de Adobe

CVE-2010-2883 Alta · 7.3 KEV Urgente · 76 Exploit público CWE-787 09/09/2010

Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

CVE-2010-2861 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-22 11/08/2010

Adobe ColdFusion Directory Traversal Vulnerability

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.

CVE-2010-1297 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-787 08/06/2010

Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

CVE-2010-0188 Alta · 7.8 KEV Urgente · 86 Exploit público Ransomware 22/02/2010

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

CVE-2009-3960 Média · 6.5 KEV Urgente · 83 Exploit público Ransomware 15/02/2010

Adobe BlazeDS Information Disclosure Vulnerability

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

CVE-2009-3953 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-787 13/01/2010

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

CVE-2009-4324 Alta · 7.8 KEV Urgente · 86 Exploit público CWE-416 15/12/2009

Adobe Acrobat and Reader Use-After-Free Vulnerability

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

CVE-2009-3459 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-119 13/10/2009

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

CVE-2009-1862 Alta · 7.8 KEV Alta · 56 CWE-787 23/07/2009

Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

CVE-2009-0927 Alta · 8.8 KEV Urgente · 86 Exploit público CWE-20 19/03/2009

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

CVE-2008-2992 Alta · 7.8 KEV Urgente · 86 Exploit público Ransomware CWE-787 04/11/2008

Adobe Reader and Acrobat Input Validation Vulnerability

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

CVE-2007-5659 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-120 12/02/2008

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

CVE-2008-0655 Alta · 8.8 KEV Alta · 56 CWE-200 07/02/2008

Adobe Acrobat and Reader Unspecified Vulnerability

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.