Microsoft Windows Media Player CVE-2017-11768 Local Information Disclosure Vulnerability

Description Microsoft Windows Media Player is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...

KLA11137 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Technical details To update Adobe Flash Player ActiveX detected as Flash.ocx on Windows 8 and higher, install latest updates from Control Panel...

KB4048951: Security update for Adobe Flash Player (November 2017)

The remote Windows host is missing security update KB4048951. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104547; scriptversion"1.13";...

Adobe Flash Player <= 27.0.0.183 (APSB17-33)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 27.0.0.183. It is therefore affected by multiple remote code execution vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Photoshop CC, Adobe Connect, DNG Converter, InDesign, Digital Editions, Shockwave Player, and Experience Manager. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affecte...

KLA11141 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA11137. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...

KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information...

Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)

An integer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11225)

An Use After Free vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player for Mac <= 27.0.0.183 (APSB17-33)

The version of Adobe Flash Player installed on the remote macOS or Mac OSX host is equal or prior to version 27.0.0.183. It is therefore affected by multiple remote code execution vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104545;...

KB4048953: Windows 10 Version 1607 and Windows Server 2016 November 2017 Cumulative Update

The remote Windows host is missing security update 4048953. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests. The vulnerability allows Microsoft Edge to bypass Cross- Origin Resource...

Adobe Flash Player APSB17-33 Multiple Remote Code Execution Vulnerabilities

Description Adobe Flash Player is prone to multiple remote code-execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3114)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

KLA11134 ACE vulnerability in Adobe Shockwave Player

A memory corruption vulnerability was found in Adobe Shockwave Player versions earlier than 12.3.1.201. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Security update available for Shockwave Player | APSB17-40 Related products Adobe-Shockwave-Play...

KB4048952: Windows 10 Version 1511 November 2017 Cumulative Update

The remote Windows host is missing security update 4048952. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

Windows 7 and Windows Server 2008 R2 November 2017 Security Updates

The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...

KB4048956: Windows 10 LTSB November 2017 Cumulative Update

The remote Windows host is missing security update 4048956. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

KB4048955: Windows 10 Version 1709 and Windows Server Version 1709 November 2017 Cumulative Update

The remote Windows host is missing security update 4048955. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

APSB17-40 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player for Windows. This update resolves a critical memory corruption vulnerability that could lead to code execution...

Flash Player -- multiple vulnerabilities

Adobe reports: These updates resolve out-of-bounds read vulnerabilities that could lead to remote code execution CVE-2017-3112, CVE-2017-3114, CVE-2017-11213. These updates resolve use after free vulnerabilities that could lead to remote code execution CVE-2017-11215, CVE-2017-11225...