CVE-2016-7878

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7881

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2016-7879

CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...

CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution. Recent assessments: gwillcox-r7 at November 22, 2020 3:24am UTC reported: Reported ...

Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe

Targeted attacks are typically carried out against individuals to obtain intellectual property and other valuable data from target organizations. These individuals are either directly in possession of the targeted information or are able to connect to networks where the information resides...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Flash Player Bug An Eavesdropper's Delight

Adobe yesterday patched a not-so-sweet 16 Flash Player vulnerabilities, including a zero day under attack. While not much is known about the targeted attacks using the Flash Player bug, or its victims, details have surfaced on another patched flaw that is a potential privacy nightmare...

SUSE-SU-2016:3148-1 Security update for flash-player

This update for flash-player fixes the following issues: - Security update to 24.0.0.186 bsc1015379 APSB16-39: These updates resolve use-after-free vulnerabilities that could have lead to code execution CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881,...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-12379)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise control of a system...

Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12359)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12381)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12383)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2016-12390)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the user context of an affected application. A failed explo...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:3148-1)

This update for flash-player fixes the following issues : - Security update to 24.0.0.186 bsc1015379 APSB16-39 : - These updates resolve use-after-free vulnerabilities that could have lead to code execution CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881,...