flashplugin: arbitrary code execution

CVE-2016-0963 CVE-2016-0993 CVE-2016-1010 arbitrary code execution Integer overflow vulnerabilities that could lead to code execution. - CVE-2016-0987 CVE-2016-0988 CVE-2016-0990 CVE-2016-0991 CVE-2016-0994 CVE-2016-0995 CVE-2016-0996 CVE-2016-0997 CVE-2016-0998 CVE-2016-0999 CVE-2016-1000...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt60

3:11-alt60 built March 11, 2016 Sergey V Turchin in task 161197 March 11, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988, CVE-2016-0989, CVE-2016-0990, CVE-2016-0991, CVE-2016-0992,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt60

3:11-alt60 built March 11, 2016 Sergey V Turchin in task 161198 March 11, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988, CVE-2016-0989, CVE-2016-0990, CVE-2016-0991, CVE-2016-0992,...

Adobe Air Security Update (APSB16-08) - Mac OS X

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

MS16-036: Security Update for Adobe Flash Player (3144756)

The remote Windows host is missing KB3144756. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2016-0963, CVE-2016-0993, CVE-2016-1010 - Multiple use-after-free errors exist that allow an...

Adobe Flash Player for Mac <= 20.0.0.306 Multiple Vulnerabilities (APSB16-08)

The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 20.0.0.306. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2016-0963, CVE-2016-0993,...

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 11.2.202.577 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves integer overflow vulnerabilities that could lead to code execution CVE-2016-0963,...

flash -- multiple vulnerabilities

Adobe reports: These updates resolve integer overflow vulnerabilities that could lead to code execution CVE-2016-0963, CVE-2016-0993, CVE-2016-1010. These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991,...

Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0994)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

CVE-2015-0994

In Inductive Automation Ignition, CVE-2015-0994 impacts Ignition 7.7.2, where remote authenticated users can bypass the built-in brute-force protection by manipulating session ID values across a sequence of HTTP requests. The underlying issue involves session handling and credentials management t...

[CORE-2014-0006] - Delphi and C++ Builder VCL library Heap Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Delphi and C++ Builder VCL library Heap Buffer Overflow 1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:...

CVE-2014-0994

CVE-2014-0994 affects Embarcadero Delphi XE6 and C++ Builder XE6 (VCL Graphics, ReadDIB in TPicture.Bitmap). A heap-based buffer overflow occurs when processing malformed BMP files, specifically via BITMAPINFOHEADER.biClrUsed, after an incomplete fix for CVE-2014-0993. The result is potential arb...

Delphi and C++ Builder VCL library Heap Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-heap-buffer-overflow Date published: 2014-09-16 Date of last update: 2014-09-16 Vendors...

Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

KLA10076 Multiple vulnerabilities in Apple iTunes

Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...

CVE-2013-0994

CVE-2013-0994 : A WebKit vulnerability in Apple iTunes prior to 11.0.3 allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. Root cause: memory corruption in WebKit. Impact...

CVE-2012-0994

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

CVE-2012-0994

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

CVE-2012-0994

Zenphoto 1.4.2 is affected by a SQL injection via the sortableList parameter in zp-core/admin-albumsort.php (CVE-2012-0994). The vulnerability requires the attacker to be authenticated and have access to the Manage Albums function; remote SQL commands can be executed by manipulating the POST sort...