95 matches found
Fedora 11 : gnash-0.8.6-13.fc11 (2010-1833)
This update makes Gnash use the system version of the libltdl library instead of the bundled copy which was vulnerable to CVE-2009-3736. An update to the system libltdl fixing CVE-2009-3736 was issued on December 21, 2009. Note that Tenable Network Security has extracted the preceding description...
Fedora Update for gnash FEDORA-2010-1833
Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2010-1833 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for gnash FEDORA-2010-1820
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for gnash FEDORA-2010-1833
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for gnash FEDORA-2010-1820
Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2010-1820 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
[SECURITY] Fedora 11 Update: gnash-0.8.6-13.fc11
Gnash is capable of reading up to SWF v9 files and opcodes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
[SECURITY] Fedora 12 Update: gnash-0.8.6-13.fc12
Gnash is capable of reading up to SWF v9 files and opcodes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
openSUSE 10 Security Update : gnash (gnash-3447)
This update fixes a denial of service problem in the free flash player gnash. CVE-2007-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnash-3447. The text description of this plugin is C...
GNU Gnash Flash Player array overflow
Array overflow on large number of SHOWFRAME elements within DEFINESPRITE...
Buffer overflow
server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...
CVE-2007-2500
server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...
CVE-2007-2500
server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...
CVE-2007-2500
CVE-2007-2500 affects GNU Gnash 0.7.2 where a large number of SHOWFRAME elements inside a DEFINESPRITE in server/parser/sprite_definition.cpp triggers memory corruption and allows code execution by calling free with an arbitrary address. Public reports (NVD, SUSE, openSUSE NASL) describe memory c...
CVE-2007-2500: Undefined Security Weakness
server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...
