CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

May 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-15: CVE-2017-3068,CVE-2017-3069,CVE-2017-3070,CVE-2017-3071,CVE-2017-3072,CVE-2017-3073,CVE-2017-3074...

[ASA-201705-8] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201705-8 ========================================= Severity: Critical Date : 2017-05-09 CVE-ID : CVE-2017-3068 CVE-2017-3069 CVE-2017-3070 CVE-2017-3071 CVE-2017-3072 CVE-2017-3073 CVE-2017-3074 Package : flashplugin Type : arbitrary code execution Remote : Yes Li...

Adobe Flash Player for Mac <= 25.0.0.163 Multiple Vulnerabilities (APSB17-15)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 25.0.0.163. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-30...

Adobe Flash Player <= 25.0.0.148 Multiple Vulnerabilities (APSB17-15)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 25.0.0.148. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-3071 -...

[ASA-201705-9] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201705-9 ========================================= Severity: Critical Date : 2017-05-09 CVE-ID : CVE-2017-3068 CVE-2017-3069 CVE-2017-3070 CVE-2017-3071 CVE-2017-3072 CVE-2017-3073 CVE-2017-3074 Package : lib32-flashplugin Type : arbitrary code execution Remote :...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3071-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3071-1 advisory. Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacker could use this to...

Ubuntu: Security Advisory (USN-3071-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 is affected by CVE-2016-3071 due to an error in the IKEv2 aes_xcbc transform, enabling remote attackers to cause a denial of service by triggering a daemon restart. Public sources consistently describe this as a DoS in the Libreswan IKE daemon when processing crafted IKEv2 packets....

Fedora 23 : libreswan-3.17-1.fc23 (2016-680a5a8ead)

Updated to 3.17 for CVE-2016-3071 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 24 : libreswan-3.17-1.fc24 (2016-711a04c964)

Updated to 3.17 for CVE-2016-3071 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Oracle: Security Advisory (ELSA-2015-3071)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3071 advisory. kernel-uek 3.8.13-98.1.2 - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628850 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the...

CVE-2007-3071

creationtimestamp| type| source ---|---|--- 2015-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37319...

Adobe Reader Multiple Vulnerabilities - 01 (May 2015) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

CVE-2015-3071

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064,...

CVE-2015-3071

Adobe Reader/Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X are affected by CVE-2015-3071, which bypasses intended JavaScript API execution restrictions via unspecified vectors. The description notes this as a different vulnerability from CVE-2015-3060/3061/3062/3063/3064...