Adobe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/adobe/ Sun, 26 Feb 2023 09:11:19 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Adobe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/adobe/ 32 32 CVE-2008-6062 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6062/ Sun, 26 Feb 2023 09:11:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6062/ Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637.

The post CVE-2008-6062 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637.

The post CVE-2008-6062 appeared first on CVE Vulnerability.

]]> CVE-2008-4816 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4816/ Sun, 26 Feb 2023 09:10:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4816/ Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.

The post CVE-2008-4816 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.

The post CVE-2008-4816 appeared first on CVE Vulnerability.

]]> CVE-2008-4817 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4817/ Sun, 26 Feb 2023 09:10:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4817/ The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

The post CVE-2008-4817 appeared first on CVE Vulnerability.

]]> The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

The post CVE-2008-4817 appeared first on CVE Vulnerability.

]]> CVE-2008-2641 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2641/ Sun, 26 Feb 2023 09:09:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2641/ Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an “input validation issue in a JavaScript method.”

The post CVE-2008-2641 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an “input validation issue in a JavaScript method.”

The post CVE-2008-2641 appeared first on CVE Vulnerability.

]]> CVE-2007-0044 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0044/ Sun, 26 Feb 2023 09:05:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0044/ Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka “Universal CSRF and session […]

The post CVE-2007-0044 appeared first on CVE Vulnerability.

]]> Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka “Universal CSRF and session riding.”

The post CVE-2007-0044 appeared first on CVE Vulnerability.

]]> CVE-2007-0045 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0045/ Sun, 26 Feb 2023 09:05:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0045/ Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary […]

The post CVE-2007-0045 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka “Universal XSS (UXSS).”

The post CVE-2007-0045 appeared first on CVE Vulnerability.

]]> CVE-2007-0048 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0048/ Sun, 26 Feb 2023 09:05:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0048/ Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a […]

The post CVE-2007-0048 appeared first on CVE Vulnerability.

]]> Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a “cross-site scripting issue.”

The post CVE-2007-0048 appeared first on CVE Vulnerability.

]]> CVE-2018-4991 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-4991/ Sun, 26 Feb 2023 06:50:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-4991/ Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass.

The post CVE-2018-4991 appeared first on CVE Vulnerability.

]]> Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass.

The post CVE-2018-4991 appeared first on CVE Vulnerability.

]]> CVE-2018-4992 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-4992/ Sun, 26 Feb 2023 06:50:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-4992/ Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation.

The post CVE-2018-4992 appeared first on CVE Vulnerability.

]]> Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation.

The post CVE-2018-4992 appeared first on CVE Vulnerability.

]]> CVE-2018-5003 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5003/ Sun, 26 Feb 2023 06:50:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5003/ Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

The post CVE-2018-5003 appeared first on CVE Vulnerability.

]]> Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

The post CVE-2018-5003 appeared first on CVE Vulnerability.

]]>