Adobe Pixel Shader

Added: 06/24/2014 CVE: CVE-2014-0515 BID: 67092 OSVDB: 106347 Background The Adobe Flash plugin provides flash content rendering for web browsers. Problem A buffer overflow exists due to an error in processing SWF files. The vulnerable function exists in the the DisplayShader class and can be...

Adobe Flash Player Shader Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Shader Buffer Overflow", 'Description' = %q This module exploits a buffer overflow vulnerability in Adobe Flash...

CVE-2014-0515

creationtimestamp| type| source ---|---|--- 2014-05-06 06:53:49+00:00| seen| MISP/53688689-7c14-4708-a50b-3470950d2109 2014-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33333 2014-09-08 07:58:27+00:00| seen| MISP/540d6156-d97c-46ec-b14f-490e950d210b 2014-09-19...

SuSE Update for update openSUSE-SU-2014:0589-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201405891.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for update openSUSE-SU-2014:0589-1 update Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program i...

openSUSE: Security Advisory for update (openSUSE-SU-2014:0589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

update for flash-player (critical)

This flash-player update fixes a critical buffer overflow vulnerability that leads to arbitrary code execution. The flash-player package was updated to version 11.2.202.356. bnc875577, APSB14-13, CVE-2014-0515...

Updated flash-player-plugin package fixes CVE-2014-0515

Adobe Flash Player 11.2.202.356 contains a fix to a critical security vulnerability found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a buffer overflow vulnerability that could result in arbitrary code execution...

update for flash-player (critical)

This flash-player update fixes a critical buffer overflow vulnerability that leads to arbitrary code execution. The flash-player package was updated to version 11.2.202.356. bnc875577, APSB14-13, CVE-2014-0515...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

CVE-2014-0515

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014...

CVE-2014-0515

CVE-2014-0515 is a buffer overflow in Adobe Flash Player that allowed remote code execution via unspecified vectors. Affected products include Windows/macOS Flash Player versions prior to 11.7.700.279 and 11.8.x up to 13.0.x before 13.0.0.206, and Linux Flash Player prior to 11.2.202.356. The vul...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt29

3:11-alt29 built April 29, 2014 Sergey V Turchin in task 118985 --- April 29, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0515...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt29

3:11-alt29 built April 29, 2014 Sergey V Turchin in task 118984 --- April 29, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0515...

Flash Zero Day Used to Target Victims in Syria

A couple days after Microsoft warned users about a new vulnerability in Internet Explorer that’s being used in targeted attacks, Adobe on Monday said that researchers have discovered a zero day in Flash, as well, which attackers are using to target victims in Syria through a watering hole attack ...

Adobe Flash Player CVE-2014-0515 Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to execute arbitrary code within the context of the affected application...

MS KB2961887: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2961887. It is, therefore, affected by a buffer overflow vulnerability due to improper user input validation in the Pixel Bender component. An attacker could cause a buffer overflow with a specially crafted SWF file, resulting in arbitrary code execution. C Tenable...

CVE-2013-0515: IBM Sterling Secure Proxy insecure cookie

IBM Sterling Secure Proxy CVE-2013-0515 concerns session/sensitive cookies not always receiving the Secure attribute, allowing potential cookie hijacking on HTTP. Affected releases include Sterling Secure Proxy 3.4.1, 3.4.0, 3.3.01, and 3.2.0. Remediation per IBM is to apply the following fixes: ...

CentOS Update for openchange CESA-2013:0515 centos6

Check for the Version of openchange OpenVAS Vulnerability Test CentOS Update for openchange CESA-2013:0515 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for evolution-mapi CESA-2013:0515 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...