Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.637 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2016-6992. This...

Memory corruption

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...

CVE-2016-4273

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-6982,...

Memory corruption

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...

Memory corruption

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...

CVE-2016-4273

CVE-2016-4273 affects Adobe Flash Player prior to 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows/macOS, and before 11.2.202.637 on Linux. The issue is a memory corruption vulnerability exploitable via unspecified vectors, linked to a separate group of CVEs (2016-6982…6990). The con...

SUSE SLED12 Security Update : flash-playerqemu (SUSE-SU-2016:2512-1)

flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019 : - CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypas...

CVE-2016-4273

creationtimestamp| type| source ---|---|--- 2016-10-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40510 2025-08-31 03:01:31+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption

Exploit for multiple platform in category dos / poc Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016 CVE-2016-4273 COSIG-2016-35 1...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt66

Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...

Adobe Flash Player 23.0.0.162 - .SWF ConstantPool Critical Memory Corruption

Adobe Flash Player 23.0.0.162 - .SWF ConstantPool Critical Memory Corruption Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016...

Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption

Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016 CVE-2016-4273 COSIG-2016-35 1 Introduction 2 Report Timeline 3 Technical details 4 POC...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66

Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...

Adobe Flash Player Memory Corruption (APSB16-32: CVE-2016-4273)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

htc.com XSS vulnerability

Vulnerable URL: http://www.htc.com/pt/support/search.aspx?q=okname=cenas%27%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 06.10.2016 Latest check for patch:| 06.10.2016 21:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2015-4273

CVE-2015-4273 affects the Cisco ASR 5000 Series Packet Data Network Gateway (PGW) IP stack. The vulnerability arises from improper input validation of certain fields in IP packets, allowing remote, unauthenticated attackers to cause a denial of service, specifically a Session Manager outage, on d...

CVE-2013-4273

The Drupal Entity API module (7.x-1.x) before 7.x-1.2 fails to properly enforce access restrictions for node comments when used with Views field/area plugins, allowing remote authenticated users to read restricted comments via a View (and is split from CVE-2013-4273’s View vector). The issue spec...

SA-CONTRIB-2013-068 - Entity API - Access Bypass

The Entity API module extends the entity API of Drupal core in order to provide a unified way to deal with entities and their properties. The module doesn't sufficiently enforce node access restrictions when checking for a user's access to view a comment associated with a particular node. The...

Oracle Linux 5 : systemtap (ELSA-2010-0124)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0124 advisory. - rhbz556564-2: CVE-2009-4273 cont'd aka CVE-2010-0412 - rhbz559719: CVE-2010-0411 Tenable has extracted the preceding description block directly from...