Adobe

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-5363 1Adobe 2Air Flash Player Apr 23, 2026 Dec 8, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure...Show more The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file.Show less
CVE-2008-5362 1Adobe 2Air Flash Player Apr 23, 2026 Dec 8, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count,...Show more The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory via a crafted PDF file.Show less
CVE-2008-5361 1Adobe 2Air Flash Player Apr 23, 2026 Dec 8, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) Acti...Show more The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified other actions, which allows remote attackers to read sensitive data from process memory via a crafted PDF file.Show less
CVE-2008-5331 1Adobe 1Acrobat Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack.
CVE-2008-5109 1Adobe 1Flash Media Server Apr 23, 2026 Nov 25, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via strea...Show more The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.Show less
CVE-2008-5108 1Adobe 1Adobe Air Apr 23, 2026 Nov 17, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.
CVE-2008-4824 1Adobe 1Flash Player Apr 23, 2026 Nov 17, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
CVE-2008-4831 1Adobe 1Coldfusion Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors.
CVE-2008-4823 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...Show more Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.Show less
CVE-2008-4822 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.
CVE-2008-4821 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.
CVE-2008-4820 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
CVE-2008-4819 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
CVE-2008-4818 1Adobe 1Flash Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
CVE-2008-4817 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, trig...Show more The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.Show less
CVE-2008-4816 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.
CVE-2008-4815 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an in...Show more Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.Show less
CVE-2008-4814 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation iss...Show more Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation issue."Show less
CVE-2008-4813 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corru...Show more Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.Show less
CVE-2008-4812 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Nov 5, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of...Show more Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.Show less

Previous 1...361362363...370 Next