CveMateVulnerability intelligence

Macromedia vulnerabilities, page 5

108 vulnerabilities

Known vulnerabilities in Macromedia products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 19 products.

CVE-2004-0407macromediacoldfusion22y ago17-04-2004 04:00

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.CVE-2004-0646macromediacoldfusion+121y ago19-11-2004 05:00

Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.CVE-2002-2187macromediajrun20y ago16-11-2005 21:17

Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.CVE-2002-2186macromediajrun20y ago16-11-2005 21:17

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.CVE-2002-1025macromediajrun23y ago02-04-2003 05:00

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.CVE-2002-1855macromediajrun21y ago28-06-2005 04:00

Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").CVE-2002-1026macromediasitespring24y ago31-08-2002 04:00

Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.CVE-2002-1027macromediasitespring24y ago31-08-2002 04:00

Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.CVE-2002-1382macromediaflash_player22y ago01-09-2004 04:00

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.CVE-2002-1881macromediaflash_player21y ago28-06-2005 04:00

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.CVE-2002-1467macromediaflash_player+123y ago18-03-2003 05:00

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).CVE-2002-1309macromediacoldfusion23y ago21-11-2002 05:00

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.CVE-2002-1625macromediaflash_player21y ago26-03-2005 05:00

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.CVE-2002-1534macromediaflash_player22y ago01-09-2004 04:00

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.CVE-2002-1700macromediacoldfusion+121y ago21-06-2005 04:00

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.CVE-2002-1310macromediajrun23y ago21-11-2002 05:00

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.CVE-2002-0665macromediajrun23y ago02-04-2003 05:00

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.CVE-2002-0605macromediaflash_player23y ago02-04-2003 05:00

Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary code via a long movie parameter.CVE-2002-0937macromediajrun24y ago31-08-2002 04:00

The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).CVE-2002-0477macromediaflash_player24y ago11-06-2002 04:00

Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.