SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.

Specially crafted Flash (SWF) files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code. (CVE-2009-1862 / CVE-2009-0901 / CVE-2009-2395 / CVE-2009-2493 / CVE-2009-1863 / CVE-2009-1864 / CVE-2009-1865 / CVE-2009-1866 / CVE-2009-1867 / CVE-2009-1868 / CVE-2009-1869 / CVE-2009-1870)

Specially crafted Flash (SWF) files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868, CVE-2009-1869, CVE-2009-1870).

ID	Name	Product	Family	Severity
51731	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6386)	Nessus	SuSE Local Security Checks	high
42001	openSUSE 10 Security Update : flash-player (flash-player-6387)	Nessus	SuSE Local Security Checks	high
41392	SuSE 11 Security Update : flash-player (SAT Patch Number 1149)	Nessus	SuSE Local Security Checks	high
40489	openSUSE Security Update : flash-player (flash-player-1148)	Nessus	SuSE Local Security Checks	high
40488	openSUSE Security Update : flash-player (flash-player-1148)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2009-2395

critical

Tenable Plugins

high

high

high

high

high