VideoLAN VLC Media Player 2.0.4 - '.swf' Crash (PoC)

Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : www.videolan.org/vlc/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh VLC media player also known as VLC is a highly...

VLC media player 2.0.4 buffer overflow PoC

buffer overflow during the handling of the swf file context-dependent Successful exploits can allow attackers to execute arbitrary code Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : http://www.videolan.org/vlc/ Impact : Med/High Contact :...

Integer overflow

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...

CVE-2012-1175

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...

CVE-2012-1175

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...

CVE-2012-1175

Removed by vendor...

CVE-2012-1175

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

JW Player 5.9 Cross Site Scripting / Content Spoofing

Exploit for multiple platform in category web applications Hello list! I want to warn you about security vulnerabilities in JW Player. These are Content Spoofing and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are JW Play...

Adobe Flash Player - ActionScript Launch Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Adobe Flash Player ActionScript Launc...

[SECURITY] Fedora 17 Update: gnash-0.8.10-2.fc17

Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...

Debian DSA-2435-1 : gnash - several vulnerabilities

Several vulnerabilities have been identified in Gnash, the GNU Flash player. - CVE-2012-1175 Tielei Wang from Georgia Tech Information Security Center discovered a vulnerability in GNU Gnash which is caused due to an integer overflow error and can be exploited to cause a heap-based buffer overflo...

Dotclear 2.4.2 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: dotclear-2.4.2 Swf File Upload Vulnerability Author: T0x!c Date: 2012/02/24 Facebook Page: www.facebook.com/DzTem E-mail: email protected Category:: webapps Google Dork: "powered by dotclear" Vendor:...

ThinkSAAS upload File Vulnerabilities-vulnerability warning-the black bar safety net

Author:Insight-D. Software Link: http://www.thinksaas.cn Useful to uploadify2. 1. 4 The program has this problem A lot of cms use this uploadify.php many programmers directly calling the swf file regardless of the uploadify. php has lead to security problems generated Download:...

Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Windows

This host is installed with Adobe Flash Player and is prone to multiple arbitrary code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayerswfmultcodeexecvulnwin.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability ...

Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Mac OS X

This host is installed with Adobe Flash Player and is prone to multiple arbitrary code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayerswfmultcodeexecvulnmacosx.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability...

Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Mac OS X

Adobe Flash Player is prone to multiple arbitrary code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4693

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

Design/Logic Flaw

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4694

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...