Flash plugin DNS rebinding

The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash SWF movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes a security issue is now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. Security issues were...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2006:0618 Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...

RHEL 3 / 4 : httpd (RHSA-2006:0619)

Updated Apache httpd packages that correct security issues and resolve bugs are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server available for fre...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2006:0619 Updated Apache httpd packages that correct security issues and resolve bugs are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HT...

Important: Red Hat Security Advisory: apache security update

Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server available for free. A bug was found ...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Macromedia Flash Player package that fixes a security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in. Security...

Macromedia Flash Plugin <= 7.0.19.0 (Action) Denial of Service Exploit

No description provided by source. / Macromedia Flash Plugin - Buffer Overflow in flash.ocx Version: v7.0.19.0 PoC coded by: BassReFLeX Date: 11 Oct 2005 / include stdio.h include stdlib.h include string.h void usagechar file; / swf ... /swf / char SWF = "swf"; char SWF = "/swf";...

Macromedia Flash Plugin 7.0.19.0 - action Denial of Service

Macromedia Flash Plugin 7.0.19.0 - action Denial of Service / Macromedia Flash Plugin - Buffer Overflow in flash.ocx Version: v7.0.19.0 PoC coded by: BassReFLeX Date: 11 Oct 2005 / include include include void usagechar file; / ... / char SWF = ""; char SWF = ""; //SetBackgroundColor char...

Macromedia Flash Plugin <= 7.0.19.0 (Action) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ====================================================================== Macromedia Flash Plugin include include void usagechar file; / ... / char SWF = ""; char SWF = ""; //SetBackgroundColor char SetBackgroundColor = "\x43\x02\xff\x00\x00";...

CVE-2005-3591

CVE-2005-3591 describes a vulnerability in the Macromedia Flash plugin where Flash.ocx (Windows, 7.0.19.0 and earlier) and libflashplayer.so (Unix, before 7.0.25.0) allow a remote attacker to trigger a denial of service and potentially execute arbitrary code via parameters to the ActionDefineFunc...

CVE-2005-3591

Macromedia Flash plugin 1 Flash.ocx 7.0.19.0 Windows and earlier and 2 libflashplayer.so before 7.0.25.0 Unix allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an...

CVE-2005-3591: Improper Input Validation

Macromedia Flash plugin 1 Flash.ocx 7.0.19.0 Windows and earlier and 2 libflashplayer.so before 7.0.25.0 Unix allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an...

[Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption

SEC-CONSULT Security Advisory 20051107-1 ======================================================================================= title: Macromedia Flash Player ActionDefineFunction Memory Corruption program: Macromedia Flash Plugin vulnerable version: flash.ocx v7.0.19.0 and earlier...

CVE-2005-0232

Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."...

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...

CVE-2002-1467

CVE-2002-1467 affects the Macromedia Flash Plugin prior to 6.0.47.0, allowing remote attackers to bypass the same-domain restriction and read arbitrary files via (1) HTTP redirects, (2) a file:// base in a web document, or (3) a relative URL from a web archive (mht). The primary sources in the pr...

CVE-2002-1467: Undefined Security Weakness

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...