openSUSE Security Update : Adobe Flash Player (openSUSE-2015-304)

Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed : - Memory corruption vulnerabilities that could lead to code execution...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

flash-plugin: information leaks leading to ASLR bypass (APSB15-06)

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

Microsoft Internet Explorer ASLR Bypass Vulnerability (CNVD-2015-02425)

Microsoft Internet Explorer is a popular WEB browser. An ASLR bypass vulnerability exists in Microsoft Internet Explorer versions 6 through 11, which allows attackers to bypass the ASLR protection mechanism by constructing a malicious WEB page...

CVE-2015-3040

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

CVE-2015-0357

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

CVE-2015-0357

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

CVE-2015-3040

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

Design/Logic Flaw

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

Design/Logic Flaw

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

CVE-2015-0357

CVE-2015-0357 is an Adobe Flash Player memory-discovery flaw that bypasses ASLR by improperly restricting memory address access. Affected are Windows/macOS: 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause: insecure handling of memory addresses enabling ASLR bypa...

CVE-2015-3040

CVE-2015-3040 affects Adobe Flash Player. A memory address discovery bypass vulnerability allows bypassing ASLR on Windows, OS X, and Linux. Affected versions: Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Windows/OS X); before 11.2.202.457 (Linux). Root cause: improper ...

CVE-2015-0357

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different...

CVE-2015-1661

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...

Security feature bypass

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...

CVE-2015-1661

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...

CVE-2015-1661

CVE-2015-1661 affects Internet Explorer 6–11 and is described as an ASLR bypass vulnerability triggered by visiting a crafted web page. Multiple connected sources corroborate an IE security-bypass/memory-corruption family of issues and tie CVE-2015-1661 to MS15-032 (KB 3038314) as the remediation...

April 2015 Microsoft Patch Tuesday Security Bulletins

Microsoft has patched a critical vulnerability in the Windows HTTP protocol stack, known as HTTP.sys, which could have devastating consequences once it’s inevitably publicly exploited. The bulletin, MS15-034, is one of four critical bulletins issued today by Microsoft. Experts warn that exploitin...

Adobe Flash Player <= 17.0.0.134 Multiple Vulnerabilities (APSB15-06)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 17.0.0.134. It is, therefore, affected by multiple vulnerabilities : - Multiple double-free errors exist that allow an attacker to execute arbitrary code. CVE-2015-0346, CVE-2015-0359 - Multiple...

Microsoft Internet Explorer CVE-2015-1661 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 6, 7, 8, 9, 10, and 11 are...