Flash Player < 13.0.0.302 / 18.0.0.203 Multiple Vulnerabilities (APSB15-16)

Binary data 8821.prm...

CVE-2015-4432

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

CVE-2015-4432

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

UBUNTU-CVE-2015-4432

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

Heap overflow

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

CVE-2015-4432

CVE-2015-4432 is a heap-based buffer overflow in Adobe Flash Player (before 13.0.0.302 and before 18.0.0.203 for 14.x–18.x) on Windows, OS X, and before 11.2.202.481 on Linux, and in Adobe AIR/AIR SDK before 18.0.0.180. The vulnerability allows attackers to execute arbitrary code via unspecified ...

CVE-2015-4432

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

CVE-2014-4432

CVE-2014-4432 affects Apple OS X before 10.10, specifically the fdesetup command. The vulnerability is that after a settings update but before reboot, fdesetup may display an incorrect encryption status, potentially letting a physically proximate attacker obtain cleartext data by exploiting the r...

openSUSE Security Update : optipng (openSUSE-SU-2012:1329-1)

optipng received a fix for a palette reduction use-after-free vulnerability. CVE-2012-4432 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-699. The text description of this plugi...

CVE-2013-4432

Affected software: Mahara. Vulnerable versions: Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4. Issue: improper access restrictions on folders allows remote authenticated users to read arbitrary folders via (1) an active folder tab loaded before permissions were removed or (2) t...

FreeBSD : optipng -- use-after-free vulnerability (a8818f7f-9182-11e2-9bdf-d48564727302)

Secunia reports : A vulnerability has been reported in OptiPNG, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to a use-after-free error related to the palette reduction functionality. No further information is currently...

CVE-2012-4432

CVE-2012-4432 describes a use-after-free vulnerability in the palette reduction code (opngreduc.c) of OptiPNG Hg and 0.7.x prior to 0.7.3. The issue could allow remote attackers to execute arbitrary code, as indicated by multiple sources mentioning a palette reduction use-after-free vulnerability...

CVE-2011-4432

CVE-2011-4432 affects Merethis Centreon prior to 2.3.2. The vulnerability is that the password hashing routine does not use a salt, making it easier for context-dependent attackers to recover plaintext passwords via rainbow tables. The available sources confirm this specific insecure credential h...

CVE-2010-4432

Technical details, affected products, and remediation for CVE-2010-4432 are not publicly disclosed in the provided documents. Monitor for updates from Oracle or CVE records.

CVE-2009-4432

SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action...

CVE-2009-4432

CVE-2009-4432 : This entry concerns CodeMight VideoCMS 3.1, where a flaw in index.php allows remote SQL injection via the v parameter in a video action. The underlying issue is improper sanitization/validation of user-supplied input, enabling attackers to inject arbitrary SQL commands through thi...

CVE-2008-4432

CVE-2008-4432 describes a Cross-site scripting (XSS) vulnerability in the RMSOFT MiniShop module 1.0 for Xoops, exploitable via the itemsxpag parameter in search.php. Remote attackers can inject arbitrary script/HTML. The NVD lists base CVSSv2 4.3 (Medium). The connected documents provide the vul...

CVE-2008-4432

creationtimestamp| type| source ---|---|--- 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32196...