Heap overflow

Heap-based buffer overflow in the parseSWFRGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

Heap overflow

Heap-based buffer overflow in the parseSWFDEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

UBUNTU-CVE-2016-9829

Heap-based buffer overflow in the parseSWFDEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

UBUNTU-CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

CVE-2016-9831

CVE-2016-9831 describes a heap-based buffer overflow in the parseSWF_RGBA function of parser.c in the listswf tool from libming 0.4.7. The vulnerability enables remote attackers to trigger unspecified impact via a crafted SWF file. Related advisories show that this issue is tied to multiple CVEs ...

CVE-2016-9828

CVE-2016-9828 affects the libming project (version 0.4.7) via the listswf tool. The vulnerability is in the dumpBuffer function (read.c) and allows a crafted SWF file to trigger a denial of service through a NULL pointer dereference. The provided connected documents confirm the affected component...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

CVE-2016-9827

CVE-2016-9827 affects the Ming library (libming) up to version 0.4.7, where the _iprintf function in outputtxt.c used by the listswf tool can cause a denial of service through a crafted SWF file due to a buffer over-read. Connected advisories confirm this issue with Ming releases and note the vul...

Adobe Flash Player Type Confusion (APSB17-04: CVE-2017-2995)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an affected...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2996)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2988)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2994)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2993)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2985)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Flash File Malicious Code Execution

A code execution vulnerability exist in Flash. The vulnerability is caused by a crafted SWF file with hidden malicious code. A remote attacker can exploit this issue in order to run malicious code on the effected system...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2937)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Remote Web Code Execution

b2evolution is vulnerable to remote code execution vulnerabilities. It allows remote authenticated users to inject arbitrary web script or HTML via a .swf file in a comment frame or avatar frame of the file types table...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...

CVE-2017-5494

Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...