Adobe Flash - Out-of-Bounds Read in Getting TextField Width

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1211 The attached swf causes an out-of-bounds read in getting the width of a TextField. Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42019.zip...

flash-gamer.net XSS vulnerability

Vulnerable URL: http://www.flash-gamer.net/search?q=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1157040 VIP...

PT-2017-2769 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.4 Description: The issue is related to the sanity check ckpt function in fs/f2fs/super.c of the Linux kernel, which incorrectly checks the indexing of the blkoff and segno arrays. This can be exploited by a...

Rapid7 AppSpider Pro 'FLAnalyzer.exe' Buffer Overflow Vulnerability

AppSpider is a DAST solution designed to help application security personnel test applications as part of DevOps and as part of a scheduled scanning program. A buffer overflow vulnerability in the FLAnalyzer.exe component of Rapid7 AppSpider Pro can be exploited by an attacker to cause a denial o...

Flash Player < 25.0.0.171 Multiple RCE (APSB17-15)

Binary data 700091.prm...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:1238-1)

This update for flash-player fixes the following issues : - Security update to 25.0.0.171 bsc1038281, fixing the following vulnerabilities advised under APSB17-15 : - Use-after-free vulnerability that could lead to code execution CVE-2017-3071. - Memory corruption vulnerabilities that could lead ...

PT-2017-4654

CVE-2025-14715 - CVE-2008-4251: Adobe Flash Player Unvalidated Redirects CVE ID : CVE-2025-14715 Published : Dec. 25, 2025, 11:15 p.m. | 2 hours, 10 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...

SUSE-SU-2017:1238-1 Security update for flash-player

This update for flash-player fixes the following issues: - Security update to 25.0.0.171 bsc1038281, fixing the following vulnerabilities advised under APSB17-15: Use-after-free vulnerability that could lead to code execution CVE-2017-3071. Memory corruption vulnerabilities that could lead to cod...

Adobe Fixes Half a Dozen Flash Vulnerabilities and More

Flash has been the top target for exploit kits and we have observed that defender behavior, i.e. how fast patches are applied along with other factors in the threat landscape could have led to a decline in the number of Flash vulnerabilities being weaponized in exploit kits. In 2016, the time to...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06319)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06321)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

RHEL 6 : flash-plugin (RHSA-2017:1219)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:1219 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...

Adobe Flash Player Security Updates (APSB17-15) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Within Google Chrome Security Update (APSB17-15) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

Adobe Flash Player Security Update (APSB17-15) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06320)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06316)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Adobe Flash Player Security Updates (APSB17-15) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4020821)

This host is missing a critical security update according to Microsoft KB4020821. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06317)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code to compromise an affected system...