Take a look at the Denial of Service Vulnerability in Video Player

Look Video is an online video player. Look Video generates a breakpoint exception when processing certain avi files, which can be exploited to cause a denial of service attack...

Adobe Flash Player Type Confusion (APSB18-05: CVE-2018-4920)

A vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

APSB18-05 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 28.0.0.161 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the curren...

Adobe Flash Player Use After Free (APSB18-05: CVE-2018-4919)

A use-after-free vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2018-16625 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 28.0.0.161 and earlier Description: The issue is a type confusion vulnerability that could lead to arbitrary code execution in the context of the current user. It allows attackers to execute code remotely...

Illegal Memory Access Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from an illegal memory access vulnerability when handling special avi files, which can be exploited by an attacker to cause a denial of service attack...

Heap Overflow Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from a heap overflow vulnerability when handling special mp4 files, which can be exploited by an attacker to cause a denial of service attack...

Solaris 10 (sparc) : 125332-24

JDS 3: Macromedia Flash Player Plugin Patch. Date this patch was last updated by Sun : May/21/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 125333-23

JDS 3x86: Macromedia Flash Player Plugin Patch. Date this patch was last updated by Sun : May/21/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

KLA11208 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability can be exploited remotely to execute arbitrary code; 2. A...

Null Pointer Reference Vulnerability in Lovecraft Universal Player

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. Aqiyi Universal Player has a null pointer reference vulnerability when handling special mp4 files, which can be exploited by an attacker to cause a denial of service attack...

Adobe Shockwave Player Remote Memory Corruption Vulnerability (CNVD-2018-05011)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A memory corruption vulnerability exists in versions prior to Adobe Shockwave Player 11.6.4.634, which could allow a remote attacker to execute arbitrary code or cause a denial of service...

Amazon Music Player Remote Code Execution Vulnerability

Amazon Music Player is a music player from Amazon USA. A security vulnerability exists in the handling of URI handlers in Amazon Music Player version 6.1.5.1213, which stems from the program not validating user-submitted strings. The vulnerability can be exploited to execute code by tricking a us...

VideoLAN VLC Media Player 2.2.5 EphemeralCockroach Heap Overflow Exploit

Exploit for windows platform in category dos / poc ================================================== Date: 02/28/2018 Title: VideoLAN VLC Media Player = 2.2.5 'EphemeralCockroach' Heap Overflow CVE: CVE-2017-8311 Exploit and Writeup: Patrick Z. SivertPL email protected Vulnerability discovery:...

CVE-2018-1169

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2018-1169

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2018-1169

CVE-2018-1169 affects Amazon Music Player 6.1.5.1213. The vulnerability is a command-injection in URI handler processing caused by insufficient validation of a user-supplied string before a system call, enabling remote code execution with the current process context. User interaction is required ...

CVE-2018-1169

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Massive Spam Campaign Targets Unpatched Systems

Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. According to cybersecurity firm Morphisec, cybercriminals are blasting spam messages that urge recipients to click a link to download a Word documen...