Vulnerabilities > Adobe
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-09-12 | CVE-2006-3311 | Remote Code Execution vulnerability in Adobe Flash Player Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie. | 5.1 |
| 2006-08-03 | CVE-2006-3459 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Libtiff Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c. | 7.5 |
| 2006-07-13 | CVE-2006-3588 | Multiple vulnerability in Adobe Flash Player 8.0.24.0 Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue than CVE-2006-3587. | 2.6 |
| 2006-07-13 | CVE-2006-3587 | Multiple vulnerability in Adobe Flash Player 8.0.24.0 Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed .swf file that results in "multiple improper memory access" errors. | 5.1 |
| 2006-07-13 | CVE-2006-3453 | Remote Buffer Overflow vulnerability in Adobe Acrobat Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in a document that triggers the overflow when it is distilled to PDF. | 5.1 |
| 2006-07-12 | CVE-2006-3452 | Local Privilege Escalation vulnerability in Adobe Acrobat / Adobe Reader Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files. | 4.6 |
| 2006-06-19 | CVE-2006-3093 | Security vulnerability in Adobe Reader Multiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown impact and unknown vectors. network adobe | 6.8 |
| 2006-05-09 | CVE-2006-2042 | SQL Injection vulnerability in Adobe Dreamweaver Generated Code Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models. | 7.5 |
| 2006-04-13 | CVE-2006-1788 | Remote vulnerability in Adobe Document Server 6.0 Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks. | 2.6 |
| 2006-04-13 | CVE-2006-1787 | Remote vulnerability in Adobe Document Server 6.0 Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session. | 2.6 |