CVE-2011-4694

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4693

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)

A Cross-site scripting vulnerability has been reported in Adobe Flex SDK. The vulnerability is due to an error in the way Flex-generated SWF files accept arguments. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Flash Player Layered Animation Object Buffer Overflow (APSB11-28; CVE-2011-2460)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a buffer overrun while processing 3D coordinates in objects within layered animations. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an...

Adobe Flash Player PlaceObjectX Type Confusion Code Execution (APSB11-28; CVE-2011-2450)

A heap memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a null dereference while handling objects with the PlaceObjectX tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malforme...

Adobe Flash Player Overlapping Records Memory Corruption (APSB11-28; CVE-2011-2453)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient validation of the parsed data's length. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file. Successfu...

Adobe Flash Player AVM2 Class Change Memory Corruption (APSB11-28; CVE-2011-2451)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way AVM2 executes the bytecode. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file. Successful...

Adobe Flash Player ATF Data Buffer Overflow (APSB11-28; CVE-2011-2456)

A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking of user supplied input while loading Adobe Texture Format ATF data. A remote attacker could exploit this vulnerability by enticing a user to open a web page...

Adobe Flash Player Ambiguous Namespace Memory Corruption (APSB11-28; CVE-2011-2455)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference during type lookup by the AVM2. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Flash bug allow spying Webcam hole

Adobe Flash bug allow spying Webcam hole The flaw was disclosed in 2008 and can be exploited to turn on people's webcams or microphones without their knowledge. Attack involved putting the Adobe Flash Settings Manager page into an iFrame and masking it with a game, so that when the user clicked o...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers and Adobe Security Advisories and Bulletins reference...

Dotclear 2.3.1 Shell Upload

Exploit Title: dotclear-2.3.1 Swf File Upload Vulnerability Date: 01/09/2011 Author: T0xic Author Mail: Malik99atHotmaildotfr Software: dotclear-2.3.1 Software Link: http://dotclear.org/download/ Go0gle Dork : 'inurl:"inc/swf/swfupload.swf" Comment ================ Exploited By T0xic Wahson...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

CVE-2011-2424

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via...

CVE-2011-2424

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via...

Memory corruption

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via...

CVE-2011-2424

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via...

CVE-2011-0627

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft...