FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 78f456fd-9c87-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f456fd-9c87-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Flash Player HTML injection flaw

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing 1 DefineConstantPool, 2 ActionJump, 3 ActionPush, 4 ActionTry, and unspecified other actions, which allows...

CVE-2008-4401

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

CVE-2008-4401

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

Design/Logic Flaw

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

CVE-2008-4401

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

CVE-2008-4401

CVE-2008-4401 affects Adobe Flash Player 9.0.124.0 and earlier. The issue arises because ActionScript FileReference.browse() and FileReference.download() can be triggered without user interaction, enabling a remote SWF to cause a browse dialog to appear and potentially other impact. Connected adv...

CVE-2008-4401: Undefined Security Weakness

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

Design/Logic Flaw

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

CVE-2008-3873

A flaw exists in the System.setClipboard method of the ActionScript language in Adobe Flash Player 9.0.124.0 and earlier versions. This vulnerability allows remote attackers to populate the user's clipboard with a URL without requiring any user interaction. Such a URL can be difficult for the use...

CVE-2008-3873

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

VulnCheck KEV: CVE-2008-3873

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

CVE-2008-3873: Undefined Security Weakness

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

On the SWF that famous vulnerability-vulnerability warning-the black bar safety net

Author: zodiacsoft Source: Swan paste&&crow sauce Toooooooooooooooooold That is, the CVE-2 0 0 7-0 0 7 1, The flash9x. ocx problems, version has been the impact to the 9. 0. 1 1 5 The. The vulnerability itself is very simple, Dowd's thinking in the direction without departing from the General...

Flash Player vulnerabilities of the new use of the method-vulnerability warning-the black bar safety net

Source: Phantom maillist Two days before the recommended Mark Dowd's Paper “Exploiting Flash Reliably” Learn a little, very good very powerful. For later Flash Player exploits has opened up a new new road. Simple to say, from Flash9 to start, to achieve an ActionScript Virtual Machine AVM, the...

Adobe Flash Player SWF文件DeclareFunction2 ActionScript标签堆溢出漏洞

BUGTRAQ ID: 28694 CVECAN ID: CVE-2007-6019 Flash Player是一款非常流行的FLASH播放器。 Flash player在试图访问没有正确实例化的嵌入Actionscript对象时存在堆溢出漏洞，如果攻击者恶意修改了SWF文件中的DeclareFunction2 Actionscript标签的话，则用户打开该文件就可能触发堆溢出，导致以当前登录用户的权限执行任意指令。 Adobe Flash Player 9.0.115.0 Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly...