28117 matches found
Amazon Music Player URI parsing Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...
Adobe Flash Player Use After Free Remote Code Execution Vulnerability(CVE-2018-4878)
EXECUTIVE SUMMARY The 1st of February, Adobe published an advisory concerning a Flash vulnerability CVE-2018-4878. This vulnerability is a use after free that allows Remote Code Execute through a malformed Flash object. Additionally KISA Korean CERT published an advisory about a Flash 0-day used ...
Adobe Flash Player QOSProvider attachMediaPlayerItemLoader Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Memory corruption
Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-0759...
CVE-2012-0771
Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-0759...
CVE-2012-0771
Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-0759...
CVE-2012-0771
Technical details about CVE-2012-0771 are not provided in the supplied documents. The connected entries reference related items but do not describe affected products, root cause, impact, or fixes for this CVE. Monitor for updates.
CVE-2018-6373
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
CVE-2018-6373
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software is related to the reading of data outside the buffer in memory during the processing of AdobePSDK metadata. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Flash Player software, caused by a full overflow of data, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software arises from a numerical overflow that occurs during the creation of raster images. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Video Player All Format - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Video Player All Format published at the 'play' market has multiple vulnerabilities...
Microsoft Patch Tuesday, February 2018 Edition
Microsoft today released a bevy of security updates to tackle more than 50 serious weaknesses in Windows, Internet Explorer/Edge, Microsoft Office and Adobe Flash Player, among other products. A good number of the patches issued today ship with Microsoft's "critical" rating, meaning the problems...
February 13, 2018—KB4074590 (OS Build 14393.2068)
None None...
[ASA-201802-7] mpv: arbitrary code execution
Arch Linux Security Advisory ASA-201802-7 ========================================= Severity: High Date : 2018-02-13 CVE-ID : CVE-2018-6360 Package : mpv Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-605 Summary ======= The package mpv before version...
A week in security (February 5 – February 11)
Last week on Malwarebytes Labs, we featured a new Flash Player zero-day that has been found in recent targeted attacks. And we talked about a new trick to cripple browsers that came out of the hat of tech support scammers. We also covered several methods of stealing cryptocurrencies, including on...
PT-2018-10632 · Videolan +1 · Vlc Media Player +1
Name of the Vulnerable Software and Affected Versions: VideoLAN VLC media player version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, resulting in heap corruption and application crash, or possibly have other unspecified impacts. This can be achieved via a...