CVE-2018-6987

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-6987

...

CVE-2017-6987

CVE-2017-6987 is a kernel memory-read restriction bypass in Apple devices. Affected: iOS versions prior to 10.3.2, macOS prior to 10.12.5, tvOS prior to 10.2.1, and watchOS prior to 3.2.2. Description from sources: the issue lies in the Kernel component allowing a crafted app to bypass memory-rea...

Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.637 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2016-6992. This...

Adobe Flash Player Use After Free Code Execution (APSB16-32: CVE-2016-6987)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

CVE-2016-6987

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6981...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6987...

CVE-2016-6987

CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....

CVE-2016-6987

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6981...

SUSE SLED12 Security Update : flash-playerqemu (SUSE-SU-2016:2512-1)

flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019 : - CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypas...

CVE-2016-6987

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6981...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66

Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

CVE-2015-6987

CVE-2015-6987 affects Apple OS X before 10.11.1, in the File Bookmark component. The issue is an input/metadata validation vulnerability in parsing bookmark metadata, which can cause a local user to crash the application (denial of service). Connected documents corroborate this description, inclu...

CVE-2014-6987

Summary: CVE-2014-6987 affects the Mass Gaming TV Android app (1.0) and is due to the app not verifying X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The connected records confirm the s...

CVE-2013-6955 Synology DSM remote code execution

Products Affected By CVE-2013-6955 Diskstation Manager 4.0 4.2 4.3 4.3-3810 Vendor: Synology Status: Patched webman/imageSelector.cgi in Synology DiskStation Manager DSM 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary...

CVE-2013-6987

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager DSM before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. dot dot in the 1 path parameter to filedelete.cgi or 2 folderpath parameter to...

CVE-2013-6987

Synology DiskStation Manager

Synology DSM 4.3-3810 - Directory Traversal

Synology DSM 4.3-3810 - Directory Traversal Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again he...

Synology DSM 4.3-3810 - Directory Traversal

Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again here with a Synology DSM vulnerability. Synolo...