Page 19 of 228 results (0.003 seconds)

CVSS: 9.3EPSS: 7%CPEs: 50EXPL: 0

CVE-2009-2981 – acroread: Trust Manager restrictions bypass fixed in 8.1.7 (APSB09-15)

https://notcve.org/view.php?id=CVE-2009-2981

19 Oct 2009 — Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors. Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no valida adecuadamente la entrada, pudiendo permitir a atacantes mediante vectores no especificados saltar las restricciones implementadas por Trust Manager. • http://securitytracker.com/id?1023007 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 1%CPEs: 50EXPL: 0

CVE-2009-2982

https://notcve.org/view.php?id=CVE-2009-2982

19 Oct 2009 — An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unknown vectors. Un certificado sin especificar en Adobe Reader y Acrobat v9.x anteriores a la v9.2, v8.x anteriores a la v8.1.7 y posiblemente v7.x hasta la v7.1.4 puede permitir a atacantes remotos llevar a cabo un "ataque por ingeniería social" a través de vectores de ataque desconocidos. • http://securitytracker.com/id?1023007 • CWE-310: Cryptographic Issues •

CVSS: 9.8EPSS: 57%CPEs: 50EXPL: 1

CVE-2009-2983 – Adobe Reader 9.1.3 / Acrobat - COM Objects Memory Corruption Remote Code Execution

https://notcve.org/view.php?id=CVE-2009-2983

19 Oct 2009 — Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors. Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) o probablemente ejecutar código de su elección mediante vectores no especificados. • https://www.exploit-db.com/exploits/33283 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 37%CPEs: 50EXPL: 0

CVE-2009-2986 – acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

https://notcve.org/view.php?id=CVE-2009-2986

19 Oct 2009 — Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors. Múltiples desbordamientos de búfer basado en memoria dinámica (heap) en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados. • http://securitytracker.com/id?1023007 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 1%CPEs: 50EXPL: 0

CVE-2009-2987

https://notcve.org/view.php?id=CVE-2009-2987

19 Oct 2009 — Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors. Vulnerabilidad no especificada en un control ActiveX en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 para Windows permite a atacantes remotos provocar una denegación de servicio mediante vectores desconocidos. • http://securitytracker.com/id?1023007 •

CVSS: 9.3EPSS: 89%CPEs: 50EXPL: 2

CVE-2009-2990 – Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow

https://notcve.org/view.php?id=CVE-2009-2990

19 Oct 2009 — Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors. Error de indice en vector en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados. • https://www.exploit-db.com/exploits/9990 • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 21%CPEs: 50EXPL: 0

CVE-2009-2991 – acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

https://notcve.org/view.php?id=CVE-2009-2991

19 Oct 2009 — Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors. Vulnerabilidad no especificada en el plug-in para Mozilla en Adobe Reader y Acrobat v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 y v9.x anteriores a v9.2, podría permitir a atacantes remotos ejecutar código de su elección mediante vectores desconocidos. • http://securitytracker.com/id?1023007 •

CVSS: 7.5EPSS: 2%CPEs: 50EXPL: 0

CVE-2009-2992

https://notcve.org/view.php?id=CVE-2009-2992

19 Oct 2009 — An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors. Un control ActiveX no especificado en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 no validan adecuadamente la entrada, permitiendo a atacantes provocar una denegación de servicio mediante vectores no especifica... • http://securitytracker.com/id?1023007 • CWE-20: Improper Input Validation •

CVSS: 9.8EPSS: 9%CPEs: 50EXPL: 0

CVE-2009-2993 – acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

https://notcve.org/view.php?id=CVE-2009-2993

19 Oct 2009 — The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file. NOTE: some of these details are obtained from third party information. JavaScript en la API de Acrobat de Adobe Reader y Acrobat v7.x a... • http://securitytracker.com/id?1023007 • CWE-20: Improper Input Validation •

CVSS: 9.8EPSS: 42%CPEs: 50EXPL: 1

CVE-2009-2994 – Adobe Acrobat Reader 7 < 9 - U3D Buffer Overflow

https://notcve.org/view.php?id=CVE-2009-2994

19 Oct 2009 — Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors. Desbordamiento de búfer en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar. • https://www.exploit-db.com/exploits/9865 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •