Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2009-10-13 CVE-2009-3587 Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
network
broadcom ca
critical
9.3
2009-10-13 CVE-2009-3459 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Acrobat, Acrobat Reader and Reader
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009.
network
adobe CWE-119
critical
9.3
2009-10-11 CVE-2009-3670 Buffer Errors vulnerability in Ksplayer KSP Sound Player 2009
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file.
network
ksplayer CWE-119
critical
9.3
2009-10-11 CVE-2009-3663 USE of Externally-Controlled Format String vulnerability in Jasper Httpdx 1.4
Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.
network
low complexity
jasper CWE-134
critical
10.0
2009-10-07 CVE-2009-3575 Buffer Overflow vulnerability in aria2 'DHTRoutingTableDeserializer::deserialize()'
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
network
low complexity
tatsuhiro-tsujikawa
critical
10.0
2009-10-06 CVE-2009-3574 Buffer Errors vulnerability in Tony Million Tuniac 090517C
Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a .pls playlist file, possibly a buffer overflow.
network
tony-million CWE-119
critical
9.3
2009-10-06 CVE-2009-3571 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openoffice Openoffice.Org
Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side exploit." NOTE: as of 20091005, this disclosure has no actionable information.
network
openoffice CWE-119
critical
9.3
2009-10-06 CVE-2009-3570 Remote Security vulnerability in OpenOffice
Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9.
network
low complexity
openoffice
critical
10.0
2009-10-06 CVE-2009-3569 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apache Openoffice.Org
Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side stack overflow exploit." NOTE: as of 20091005, this disclosure has no actionable information.
network
apache CWE-119
critical
9.3
2009-10-02 CVE-2009-3537 Buffer Errors vulnerability in Epicdjsoftware Epicdj 1.3.9.1
Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file.
network
epicdjsoftware CWE-119
critical
9.3