CVE-2015-3113

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015...

CVE-2015-3113

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015...

CVE-2015-3113

CVE-2015-3113 is a heap-based buffer overflow in Adobe Flash Player affecting Windows/macOS Flash parsing of FLV data, exploited in the wild in June 2015. Affected versions: Flash Player before 13.0.0.296, and 14.x up to 18.x before 18.0.0.194 on Windows/macOS; before 11.2.202.468 on Linux. The f...

Operation Clandestine Wolf – Adobe Flash Zero-Day in APT3 Phishing Campaign

Adobe has already released a patch for CVE-2015-3113 with an out-of-band security bulletin . FireEye recommends that Adobe Flash Player users update to the latest version as soon as possible. FireEye MVX detects this threat as a web infection, the IPS engine reports the attack as CVE-2015-3113, a...

KLA10619 Code execution vulnerability in Adobe Flash Player

Buffer overflow was found in Adobe Flash Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via an unspecified vectors. Original advisories Adobe bulletin Exploitation Malware exists for this vulnerability. Usually suc...

VulnCheck KEV: CVE-2015-3113

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code...

CVE-2015-3113

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015. Recent assessments:...

Adobe Flash Player -- critical vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address a critical vulnerability CVE-2015-3113 that could potentially allow an attacker to take control of the affected system. Adobe is aware of reports that CVE-2015-3113 is...

Debian DSA-3113-1 : unzip - security update

Michele Spagnuolo of the Google Security Team discovered that unzip, an extraction utility for archives compressed in .zip format, is affected by heap-based buffer overflows within the CRC32 verification function CVE-2014-8139 , the testcompreb function CVE-2014-8140 and the getZip64Data function...

Debian: Security Advisory (DSA-3113-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer for Windows <= 17.0.8.22 MP4 Multiple Memory Corruptions

According to its build number, the installed version of RealPlayer on the remote Windows host is prior to or equal to 17.0.8.22. It is, therefore, affected by multiple memory corruption vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary code within the context of t...

CVE-2014-3113

RealPlayer (Windows/macOS) prior to version 17.0.10.8 is affected by multiple buffer overflows in MP4 handling, specifically in the elst and stsz atoms, allowing remote code execution. The CVE is CVE-2014-3113. Affected products include RealPlayer pre-17.0.10.8 (and related builds). Root cause: m...

KLA10450 ACE vulnerability in RealPlayer

Multiple buffer overflows was found in the RealPlayer. By using this vulnerability malicious user can execute arbitrary code. This vulnerability can be exploited remotely via specially designed MP4 file. Original advisories RealNetworks advisory Related products RealPlayer RealPlayer-Cloud CVE li...

KLA10306 ACE vulnerability in RealPlayer

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories RealPlayer bulletin Related products RealPlayer CVE list CVE-2014-3113...

CVE-2013-3113

Microsoft Internet Explorer 6–10 was affected by memory-corruption vulnerabilities leading to remote code execution or DoS via crafted web content (CVE-2013-3112/3113/3121/3139/3142). The issues affect IE6–IE10 and are tied to a memory corruption flaw described as the 'Internet Explorer Memory Co...

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...

Scientific Linux Security Update : java (jdk 1.5.0) on SL4.x, SL5.x i386/x86_64

Flaws in the JRE allowed an untrusted application or applet to elevate its privileges. This could be exploited by a remote attacker to access local files or execute local applications accessible to the user running the JRE CVE-2008-1185, CVE-2008-1186 A flaw was found in the Java XSLT processing...

CVE-2012-3113

CVE-2012-3113 affects Oracle PeopleSoft: PeopleSoft Enterprise HRMS component (9.0.20) with use of EPERF. The vulnerability allows remote authenticated users to impact confidentiality and integrity (no availability impact stated). The description does not specify the root cause details or a concr...

FreeBSD : chromium -- multiple vulnerabilities (219d0bfd-a915-11e1-b519-00262d5ed8ee)

Google Chrome Releases reports : 117409 High CVE-2011-3103: Crashes in v8 garbage collection. Credit to the Chromium development community Brett Wilson. 118018 Medium CVE-2011-3104: Out-of-bounds read in Skia. Credit to Google Chrome Security Team Inferno. 120912 High CVE-2011-3105: Use-after-fre...

CVE-2011-3113

The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...