CVE Vulnerability Advisory Database

[Affected Scope] Oracle Java SE 7 Update 4 and earlier, 6 Update 32 and earlier, 5.0 Update 35 and earlier, and SDK 1.4.2_37 and earlier

[Impact] Remote attackers can bypass the Java sandbox environment and execute arbitrary code with the privileges of the running user via malicious Java Applets

[Mitigation] Immediately upgrade to the latest secure Java SE release, disable Java browser plugins, and restrict access to legacy Java environments

[Affected Scope] Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier

[Impact] Remote attackers can completely bypass the JVM sandbox restrictions to execute arbitrary OS commands or cause a denial of service (JVM crash) via a specially crafted Java applet

[Mitigation] Immediately upgrade to patched Java versions (Java 7 Update 3, Java 6 Update 31 or higher) and disable Java browser plugins in legacy environments

[Affected Scope] PHP versions before 5.3.12 and 5.4.x before 5.4.2, configured to run as a CGI script (php-cgi)

[Impact] Unauthenticated remote attackers can execute arbitrary code by injecting command-line options via HTTP query strings

[Mitigation] Upgrade to patched PHP versions or configure web server rewrite rules to block malicious query strings

[Affected Scope] Oracle WebCenter Forms Recognition (Designer component) in Oracle Fusion Middleware 10.1.3.5

[Impact] Unauthenticated remote attackers can compromise confidentiality, integrity, and availability, leading to complete system takeover

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict network access to the affected components

[Affected Scope] Apache Struts versions prior to 2.2.3.1

[Impact] Unauthenticated remote attackers can execute arbitrary Java code with system privileges on the target server by sending crafted HTTP request parameters.

[Mitigation] Immediately upgrade Apache Struts to version 2.2.3.1 or later secure releases.

[Affected Scope] Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted PDF document containing malicious U3D data

[Mitigation] Apply the official security patches immediately, or disable the vulnerable U3D parsing component (rt3d.dll) as a temporary workaround

[Affected Scope] Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier

[Impact] Remote untrusted Java Web Start applications and untrusted Java applets can bypass sandbox security boundaries to execute arbitrary code with full system privileges

[Mitigation] Immediately upgrade to a patched Java version, and disable Java browser plugins and Web Start execution across the enterprise

[Affected Scope] Systems running Microsoft Forefront Threat Management Gateway (TMG) 2010 Firewall Client

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges via crafted network requests

[Mitigation] Apply the official Microsoft MS11-040 security update immediately or disable the Firewall Client service

[Affected Scope] Exim Mail Transfer Agent (MTA) versions prior to 4.70

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges and fully compromise the mail server via a crafted SMTP session.

[Mitigation] Immediately upgrade Exim to the latest stable version (4.70 or higher) and restrict SMTP port access to trusted networks until patched.

[Affected Scope] Mozilla Firefox 3.5.x through 3.5.14, 3.6.x through 3.6.11, Thunderbird 3.0.x through 3.0.9, 3.1.x through 3.1.5, and SeaMonkey 2.0.x through 2.0.9 with JavaScript enabled

[Impact] Remote attackers can trigger memory corruption and execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted webpage

[Mitigation] Immediately upgrade to patched versions (Firefox 3.5.15/3.6.12, Thunderbird 3.0.10/3.1.6, SeaMonkey 2.0.10 or later) or disable JavaScript as a temporary workaround

[Affected Scope] Adobe ColdFusion 9.0.1 and earlier versions containing the CFIDE/administrator console

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system and configuration files, potentially retrieving administrator password hashes and fully compromising the server

[Mitigation] Apply the official APSB10-18 security patch, restrict external access to the CFIDE directory, or upgrade to a supported secure version

[Affected Scope] Oracle Java SE and Java for Business 6 Update 18 and earlier, 5.0 Update 23 and earlier, and 1.4.2_25 and earlier

[Impact] Remote attackers can completely bypass Java sandbox restrictions and execute arbitrary code with the privileges of the running process, compromising confidentiality, integrity, and availability

[Mitigation] Immediately upgrade to the latest patched Java SE versions, disable Java browser plugins, and decommission unsupported legacy JRE environments

[Affected Scope] phpMyAdmin versions 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1

[Impact] Unauthenticated remote attackers can inject arbitrary PHP code into the configuration file via the setup.php save action, leading to full system compromise

[Mitigation] Upgrade to patched versions immediately, or delete/restrict access to the setup.php script in production environments

[Affected Scope] Microsoft Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 Pre-Beta

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system via crafted RPC requests

[Mitigation] Apply the official Microsoft security patch (MS08-067) immediately and restrict external access to SMB ports (TCP 139/445)

[Affected Scope] Unified Maintenance Tool in Alcatel-Lucent OmniPCX Enterprise Communication Server R7.1 and earlier.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests containing shell metacharacters.

[Mitigation] Immediately upgrade to the patched firmware version and restrict external network access to the management CGI interface.

[Affected Scope] HP OpenView Network Node Manager (NNM) versions 6.2 through 7.50 are affected.

[Impact] Remote attackers can execute arbitrary system commands with web server privileges without authentication by injecting shell metacharacters into vulnerable OVPL scripts.

[Mitigation] Restrict external access to the vulnerable OVPL scripts immediately and apply official vendor patches or upgrade to a supported version.