jetlib.sec » Tags » adobe-systems-inc

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

17 items tagged "adobe systems inc"

Related tags: memory corruption [+], idefense [+], flash [+], vulnerability [+], reader [+], player [+], store pointers [+], security [+], memory [+], jpeg [+], flash plugin version [+], corruption [+], adobe reader [+], adobe flash player [+], integer overflow vulnerability [+], shockwave [+], safer use [+], adobe shockwave player [+], adobe [+], idefense security advisory [+]

• November 02, 2011
• 15:44

  Adobe Flash Player ActionScript Function Integer Overflow Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of an integer overflow vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  player adobe flash integer-overflow-vulnerability adobe-systems-inc adobe-flash-player  

• September 14, 2011
• 15:02

  iDefense Security Advisory 09.13.11 - Adobe Reader Use After Free

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.13.11 - Remote exploitation of a use after free vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a JPEG file embedded inside a PDF file. When processing specific JPEG markers, Adobe Reader creates an object on the stack and keeps a pointer to that object in another place. The pointer is later dereferenced after the object on the stack becomes invalid. This can lead to the execution of arbitrary code.

  Tags:  idefense reader adobe idefense-security-advisory adobe-systems-inc adobe-reader  

• 15:02

  iDefense Security Advisory 09.13.11 - Adobe Reader Use After Free

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.13.11 - Remote exploitation of a use after free vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a JPEG file embedded inside a PDF file. When processing specific JPEG markers, Adobe Reader creates an object on the stack and keeps a pointer to that object in another place. The pointer is later dereferenced after the object on the stack becomes invalid. This can lead to the execution of arbitrary code.

  Tags:  idefense reader adobe idefense-security-advisory adobe-systems-inc adobe-reader  

• 15:02

  iDefense Security Advisory 09.13.11 - Adobe Reader Use After Free

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.13.11 - Remote exploitation of a use after free vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a JPEG file embedded inside a PDF file. When processing specific JPEG markers, Adobe Reader creates an object on the stack and keeps a pointer to that object in another place. The pointer is later dereferenced after the object on the stack becomes invalid. This can lead to the execution of arbitrary code.

  Tags:  idefense reader adobe idefense-security-advisory adobe-systems-inc adobe-reader  

• August 10, 2011
• 20:59

  iDefense Security Advisory 08.09.11 - Flash Memory Corruption

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 08.09.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside an Adobe Flash file. The problem exists in a certain ActionScript function method of the built-in "flash.display" class. When malformed parameters are supplied to this function, a memory corruption will occur, leading to an exploitable condition.

  Tags:  corruption flash memory idefense-security-advisory memory-corruption adobe-systems-inc  

• 20:59

  iDefense Security Advisory 08.09.11 - Flash Memory Corruption

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 08.09.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside an Adobe Flash file. The problem exists in a certain ActionScript function method of the built-in "flash.display" class. When malformed parameters are supplied to this function, a memory corruption will occur, leading to an exploitable condition.

  Tags:  corruption flash memory idefense-security-advisory memory-corruption adobe-systems-inc  

• 20:59

  iDefense Security Advisory 08.09.11 - Flash Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 08.09.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside an Adobe Flash file. The problem exists in a certain ActionScript function method of the built-in "flash.display" class. When malformed parameters are supplied to this function, a memory corruption will occur, leading to an exploitable condition.

  Tags:  corruption flash memory idefense-security-advisory memory-corruption adobe-systems-inc  

• March 10, 2011
• 17:15

  Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  vulnerability reader adobe adobe-systems-inc memory-corruption safer-use  

• 17:15

  Adobe Shockwave Player Memory Corruption Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Shockwave Player could allow an attacker to execute arbitrary code with the privileges of the current user.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  shockwave player adobe adobe-shockwave-player memory-corruption adobe-systems-inc  

• March 09, 2011
• 20:55

  Adobe Flash Player ActionScript Memory Corruption Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  player adobe flash memory-corruption adobe-systems-inc adobe-flash-player  

• 20:55

  Adobe Flash Player ActionScript Integer Overflow Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of an integer overflow vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  player adobe flash integer-overflow-vulnerability adobe-systems-inc adobe-flash-player  

• February 09, 2011
• 6:02

  iDEFENSE Security Advisory 2011-02-08.5

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside of an Adobe Flash file. The problem exists in a certain ActionScript method. When the method is called with particular parameters, the ActionScript engine gets confused and takes a user supplied value as an object pointer which leads to an exploitable condition. iDefense has confirmed the existence of this vulnerability in the Flash Plugin version 10.1.82.76 and 10.1.85.3. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-02.

  Tags:  idefense adobe security idefense-security-advisory flash-plugin-version adobe-systems-inc  

• 6:02

  iDEFENSE Security Advisory 2011-02-08.5

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside of an Adobe Flash file. The problem exists in a certain ActionScript method. When the method is called with particular parameters, the ActionScript engine gets confused and takes a user supplied value as an object pointer which leads to an exploitable condition. iDefense has confirmed the existence of this vulnerability in the Flash Plugin version 10.1.82.76 and 10.1.85.3. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-02.

  Tags:  idefense adobe security idefense-security-advisory flash-plugin-version adobe-systems-inc  

• 6:02

  iDEFENSE Security Advisory 2011-02-08.5

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when parsing a maliciously formatted sequence of ActionScript code inside of an Adobe Flash file. The problem exists in a certain ActionScript method. When the method is called with particular parameters, the ActionScript engine gets confused and takes a user supplied value as an object pointer which leads to an exploitable condition. iDefense has confirmed the existence of this vulnerability in the Flash Plugin version 10.1.82.76 and 10.1.85.3. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-02.

  Tags:  idefense adobe security idefense-security-advisory flash-plugin-version adobe-systems-inc  

• 4:22

  iDEFENSE Security Advisory 2011-02-08.2

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. JPEG2000 (JP2K) is an image file format similar to JPEG. In addition to JPEG markers, JP2K files also provide "boxes" that define different image properties. JP2K is one of the image formats supported by Adobe Reader and Acrobat. The vulnerability occurs when parsing a JPEG2000 file embedded inside of a PDF file. Several different JP2K record types are involved in the vulnerability. It is possible to increment a buffer index beyond the allocated data, and store pointers to file data at that location. This can result in the corruption of heap structures and application data, which leads to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in Adobe Reader and Acrobat versions 9.4 and 8.2.5. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-03.

  Tags:  vulnerability jpeg adobe idefense-security-advisory store-pointers adobe-systems-inc  

• 4:22

  iDEFENSE Security Advisory 2011-02-08.2

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. JPEG2000 (JP2K) is an image file format similar to JPEG. In addition to JPEG markers, JP2K files also provide "boxes" that define different image properties. JP2K is one of the image formats supported by Adobe Reader and Acrobat. The vulnerability occurs when parsing a JPEG2000 file embedded inside of a PDF file. Several different JP2K record types are involved in the vulnerability. It is possible to increment a buffer index beyond the allocated data, and store pointers to file data at that location. This can result in the corruption of heap structures and application data, which leads to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in Adobe Reader and Acrobat versions 9.4 and 8.2.5. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-03.

  Tags:  vulnerability jpeg adobe idefense-security-advisory store-pointers adobe-systems-inc  

• 4:22

  iDEFENSE Security Advisory 2011-02-08.2

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 02.08.11 - Remote exploitation of a memory corruption vulnerability in Adobe Systems Inc.'s Reader could allow an attacker to execute arbitrary code with the privileges of the current user. JPEG2000 (JP2K) is an image file format similar to JPEG. In addition to JPEG markers, JP2K files also provide "boxes" that define different image properties. JP2K is one of the image formats supported by Adobe Reader and Acrobat. The vulnerability occurs when parsing a JPEG2000 file embedded inside of a PDF file. Several different JP2K record types are involved in the vulnerability. It is possible to increment a buffer index beyond the allocated data, and store pointers to file data at that location. This can result in the corruption of heap structures and application data, which leads to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in Adobe Reader and Acrobat versions 9.4 and 8.2.5. A full list of vulnerable Adobe products can be found in Adobe Security Bulletin APSB11-03.

  Tags:  vulnerability jpeg adobe idefense-security-advisory store-pointers adobe-systems-inc