CVE-2017-2935

CVE-2017-2935 affects Adobe Flash Player 24.0.0.186 and earlier. Root cause: a heap overflow when processing the Flash Video container file format, leading to arbitrary code execution. Documents indicate an exploit exists (Exploit-DB link) and multiple advisories/patches recommend upgrading to ve...

CVE-2017-2935

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2935

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution...

PT-2017-1117 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is caused by a heap overflow in memory when processing Flash Video files, which can allow a remote attacker to execute arbitrary code. This can occur when handling the...

U.S. Dept Of Defense: Video player on ███ allows arbitrary remote videos to be played

Summary: A Flash video player hosted on ███████ can be provided with an arbitrary remote XML file via the url query string parameter. Description: The Flash video player http://█████/shared/widgets/popup.asp uses the url query string parameter as an address to fetch an RSS feed type XML document...

simoandreu.com XSS vulnerability

Vulnerable URL: http://www.simoandreu.com/wp-content/plugins/simple-flash-video/video.php?filename=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

blcm.org XSS vulnerability

Vulnerable URL: http://blcm.org/site/wp-content/plugins/simple-flash-video/video.php?filename=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

Adobe Flash Heap Buffer Overflow Vulnerability

Adobe Flash Player is an integrated multimedia player. A security vulnerability exists in Adobe Flash Player's parsing of FLV files, which can be exploited by an attacker to cause a buffer overflow leading to arbitrary code execution...

UBUNTU-CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

Simple Flash Video 1.7 - Cross Site Scripting

The simple-flash-video WordPress plugin was affected by a Cross Site Scripting security vulnerability...

WordPress Simple Flash Video Plugin <= 1.7 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Simple Flash Video 1.7 Cross Site Scripting

\ \ / / / | / | \ V / | | alert1; Prof: http://www.bigsportday.lv/wp-content/plugins/simple-flash-video/stats/?action= "/alert1; http://www.leblogbergamote.com/wp-content/plugins/simple-flash-video/stats/?action= "/alert1;...

CorePlayer flash video player crossite scripting

Crossite scripting via callback parameter...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

Winamp VP6内容解析栈溢出漏洞

BUGTRAQ ID: 41591 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的vp6.w5s组件在解析畸形的Flash Video数据时存在栈溢出漏洞，用户受骗打开了特制的FLV文件就会导致执行任意代码。 Nullsoft Winamp 5.x 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.winamp.com/help/VersionHistoryWinamp5.58...

Flash Video E-Cards Cross Site Scripting

========================= Author : anti-gov contact: anti-govathotmail.com ========================= script:flash video e-cards vendor:http://www.scriptjunkyard.com/2/flash-video-e-cards.html demo: http://www.scriptjunkyard.com/demo/video-greeting/index.php in the video code put this code...

Flash Video E-Cards XSS Vulnerability

No description provided by source. ========================= Author: anti-gov contact: anti-govathotmail.com ========================= script:flash video e-cards vendor:http://www.scriptjunkyard.com/2/flash-video-e-cards.html demo: http://some website/demo/video-greeting/index.php in the video co...