CVE-2009-2676

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Java Se and 3 more

CVE-2008-1196

Buffer overflow security vulnerabilities in Java Web Start

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

CVSS 2.0 · 6.8 Medium EPSS 7.3% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Jdk and 2 more

CVE-2008-1195

Java-API calls in untrusted Javascript allow network privilege escalation

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

CVSS 2.0 · 9.3 Critical EPSS 5.7% KEV · Not listed

Vendors

Canonical Redhat Sun

Products

Ubuntu Linux Network Satellite Rhel Extras and 3 more

CVE-2007-2435

javaws vulnerabilities

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.

CVSS 2.0 · 10.0 Critical EPSS 5.0% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Java Enterprise System and 2 more

CVE-2009-2720

JDK DoS with Swing Synthcontext implementation

Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed

Vendors

Redhat Sun

Products

Rhel Extras Java Se

CVE-2009-2979

acroread: Multiple DoS fixes in 8.1.7 (APSB09-15)

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-2983

acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 12.1% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-2986

acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 8.3% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1855

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.

CVSS 2.0 · 9.3 Critical EPSS 12.4% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1493

acroread: multiple vulnerabilities in Adobe Reader 8.1.4

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.

CVSS 2.0 · 6.8 Medium EPSS 21.8% KEV · Not listed

Vendors

Adobe Linux Redhat

Products

Reader Linux Kernel Rhel Extras

CVE-2009-1856

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 13.9% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1857

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1858

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 8.8% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1859

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2009-1861

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 8.6% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2008-1654

Flash Player cross domain HTTP header flaw

Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.

CVSS 2.0 · 4.3 Medium EPSS 4.8% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2009-1863

flash-plugin: multiple code execution flaws (APSB09-10)

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Redhat

Products

Air Flash Player Flex and 1 more

CVE-2009-1864

flash-plugin: multiple code execution flaws (APSB09-10)

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 7.3% KEV · Not listed

Vendors

Adobe Redhat

Products

Air Flash Player Flex and 1 more

CVE-2009-1865

flash-plugin: multiple code execution flaws (APSB09-10)

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Redhat

Products

Air Flash Player Flex and 1 more

CVE-2008-1194

JRE image parsing library allows privilege escalation (CVE-2008-1194)

Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.

CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Jdk and 1 more