VYPR
← Adobe Inc.

Vendor CVEs

Adobe Inc.

All CVEs

7,663 total · sorted by risk
  • CVE-2011-2131Aug 11, 2011
    Adobe Inc.
    Creative Suite
    risk 0.05cvss —epss 0.22

    Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GIF file.

  • CVE-2010-3639Nov 7, 2010
    Adobe Inc.
    Flashplayer
    risk 0.05cvss —epss 0.22

    Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-2321Jun 18, 2010
    Adobe Inc.
    Indesign
    risk 0.05cvss —epss 0.21

    Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.

  • CVE-2010-1296May 27, 2010
    Adobe Inc.
    Photoshop
    risk 0.05cvss —epss 0.20

    Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.

  • CVE-2009-3431Sep 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.05cvss —epss 0.22

    Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a…

  • CVE-2009-3244Sep 18, 2009
    Adobe Inc.
    Shockwave Player
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.

  • CVE-2009-1869Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.05cvss —epss 0.20

    Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an…

  • CVE-2009-1868Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.05cvss —epss 0.21

    Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.

  • CVE-2009-1493Apr 30, 2009
    Adobe Inc.
    Reader
    risk 0.05cvss —epss 0.22

    The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with…

  • CVE-2009-1492Apr 30, 2009
    Adobe Inc.
    Acrobat
    risk 0.05cvss —epss 0.26

    The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry…

  • CVE-2009-0520Feb 26, 2009
    Adobe Inc.
    Air
    risk 0.05cvss —epss 0.28

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."

  • CVE-2008-1765Apr 23, 2008
    Adobe Inc.
    Photoshop
    risk 0.05cvss —epss 0.20

    Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3…

  • CVE-2007-1377Mar 10, 2007
    Mozilla Corporation
    Firefox
    risk 0.05cvss —epss 0.17

    AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a…

  • CVE-2015-3112Jun 24, 2015
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.14

    Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2015-3110Jun 24, 2015
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.17

    Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2015-3081May 13, 2015
    Adobe Inc.
    Air
    risk 0.04cvss —epss 0.11

    Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to…

  • CVE-2012-4170Aug 31, 2012
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.11

    Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

  • CVE-2012-4157Aug 15, 2012
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.47

    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…

  • CVE-2012-2027May 9, 2012
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.13

    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.

  • CVE-2012-0780May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.04cvss —epss 0.15

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.

  • CVE-2011-2443Oct 4, 2011
    Adobe Inc.
    Photoshop Elements
    risk 0.04cvss —epss 0.14

    Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file, a related issue to CVE-2010-1296.

  • CVE-2011-2132Aug 11, 2011
    Adobe Inc.
    Flash Media Server
    risk 0.04cvss —epss 0.08

    Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-0614May 16, 2011
    Adobe Inc.
    Audition
    risk 0.04cvss —epss 0.14

    Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file.

  • CVE-2011-0593Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.50

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than…

  • CVE-2011-0592Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to "Texture bmp," a…

  • CVE-2011-0591Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a…

  • CVE-2010-4091Nov 7, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.19

    The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers…

  • CVE-2010-3631Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.12

    Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-3155Aug 27, 2010
    Adobe Inc.
    ExtendScript Toolkit
    risk 0.04cvss —epss 0.12

    Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file.

  • CVE-2010-3154Aug 27, 2010
    Adobe Inc.
    Extension Manager Cs5
    risk 0.04cvss —epss 0.11

    Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file.

  • CVE-2010-3153Aug 27, 2010
    Adobe Inc.
    Indesign
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL…

  • CVE-2010-3152Aug 27, 2010
    Adobe Inc.
    Illustrator
    risk 0.04cvss —epss 0.17

    Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that…

  • CVE-2010-3151Aug 27, 2010
    Adobe Inc.
    Onlocation Cs4
    risk 0.04cvss —epss 0.15

    Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.

  • CVE-2010-3150Aug 27, 2010
    Adobe Inc.
    Premier Pro Cs4
    risk 0.04cvss —epss 0.15

    Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj,…

  • CVE-2010-3149Aug 27, 2010
    Adobe Inc.
    Device Central Cs4
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in…

  • CVE-2010-2866Aug 26, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.04cvss —epss 0.13

    Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a…

  • CVE-2010-3132Aug 26, 2010
    Adobe Inc.
    Dreamweaver
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc90loc.dll or (2)…

  • CVE-2010-3127Aug 26, 2010
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or…

  • CVE-2010-2862Aug 5, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.16

    Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp) table.

  • CVE-2010-2204Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-2201Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.14

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer…

  • CVE-2010-2168Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.14

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction (0x44) operator and an "invalid pointer vulnerability" that triggers memory…

  • CVE-2010-0187Feb 15, 2010
    Adobe Inc.
    Air
    risk 0.04cvss —epss 0.16

    Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

  • CVE-2009-2994Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.19

    Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.

  • CVE-2009-2983Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.12

    Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

  • CVE-2009-1879Aug 21, 2009
    Adobe Inc.
    Flex
    risk 0.04cvss —epss 0.08

    Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or…

  • CVE-2009-1872Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.04cvss —epss 0.16

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2)…

  • CVE-2008-4546Oct 14, 2008
    Adobe Inc.
    Air
    risk 0.04cvss —epss 0.17

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as…

  • CVE-2008-4071Sep 15, 2008
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.12

    A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.

  • CVE-2007-6244Dec 20, 2007
    Adobe Inc.
    Flashplayer
    risk 0.04cvss —epss 0.13

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used…

Page 124 of 154