CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Macromedia : Security Vulnerabilities (CVSS score between 5 and 5.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2006-6827 DoS 2006-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method.
2 CVE-2006-2364 XSS 2006-05-15 2008-09-05
5.8
 None Remote Medium Not required Partial Partial None
Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "_required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an error message.
3 CVE-2006-0024 Exec Code 2006-03-15 2008-09-05
5.1
 User Remote High Not required Partial Partial Partial
Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
4 CVE-2005-4473 2005-12-21 2008-09-05
5.0
 None Remote Low Not required Partial None None
Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."
5 CVE-2005-4343 2005-12-18 2008-09-05
5.0
 None Remote Low Not required None Partial None
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
6 CVE-2005-3800 +Info 2005-11-24 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia Contribute Publishing Server (CPS) before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information.
7 CVE-2005-2628 Exec Code 2005-11-05 2008-09-05
5.1
 User Remote High Not required Partial Partial Partial
Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.
8 CVE-2005-2481 +Info 2005-08-05 2008-09-05
5.0
 None Remote Low Not required Partial None None
ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.
9 CVE-2005-1022 +Info 2005-05-02 2008-09-05
5.0
 None Remote Low Not required Partial None None
ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
10 CVE-2004-2505 DoS 2004-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.
11 CVE-2004-2330 DoS 2004-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields.
12 CVE-2004-1893 Exec Code +Info 2004-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.
13 CVE-2004-1816 DoS 2004-03-15 2010-02-10
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
14 CVE-2004-1815 DoS 2004-03-15 2008-09-05
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
15 CVE-2004-0928 Bypass 2004-10-05 2008-09-05
5.0
 None Remote Low Not required Partial None None
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
16 CVE-2003-1469 200 +Info 2003-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
17 CVE-2003-1017 2004-01-05 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
18 CVE-2002-2187 2002-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.
19 CVE-2002-2186 2002-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.
20 CVE-2002-1992 DoS Overflow 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
21 CVE-2002-1881 DoS 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
22 CVE-2002-1855 2002-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
23 CVE-2002-1625 DoS Exec Code 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.
24 CVE-2002-1534 2003-03-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
25 CVE-2002-1467 Bypass 2003-04-22 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
26 CVE-2002-1026 DoS Overflow 2002-10-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.
27 CVE-2002-1025 2002-10-04 2008-09-05
5.0
 None Remote Low Not required Partial None None
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
28 CVE-2002-0937 DoS 2002-10-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
29 CVE-2002-0476 2002-08-12 2008-09-05
5.0
 None Remote Low Not required None Partial None
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.
30 CVE-2001-1545 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
31 CVE-2001-1544 Dir. Trav. 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
32 CVE-2001-1511 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570".
33 CVE-2001-1510 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
34 CVE-2001-0926 2001-11-28 2008-09-05
5.0
 None Remote Low Not required Partial None None
SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
35 CVE-2001-0179 2001-05-03 2008-09-05
5.0
 None Remote Low Not required Partial None None
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
36 CVE-2000-1052 2000-12-11 2008-09-05
5.0
 None Remote Low Not required Partial None None
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
37 CVE-2000-1051 Dir. Trav. 2000-12-11 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
38 CVE-2000-1050 2000-12-11 2008-09-05
5.0
 None Remote Low Not required Partial None None
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
39 CVE-2000-1049 DoS 2000-12-11 2008-09-05
5.0
 None Remote Low Not required None None Partial
Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
40 CVE-2000-0540 +Info 2000-06-22 2008-09-05
5.0
 None Remote Low Not required Partial None None
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information.
41 CVE-1999-1526 1999-03-11 2008-09-05
5.0
 None Remote Low Not required Partial None None
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
42 CVE-1999-1525 1997-03-14 2008-09-05
5.1
 User Remote High Not required Partial Partial Partial
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
Total number of vulnerabilities : 42   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.