CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2138

The CVE-2013-2138 issue affects Gallery 3 before 3.0.8 where the uploadify and flowplayer SWF files do not properly remove query parameters and fragments, allowing an unspecified impact via a replay attack. Related entry CVE-2013-2240 notes that lib/flowplayer.swf.php in Gallery 3 before 3.0.9 al...

Mandriva Linux Security Advisory : wordpress (MDVSA-2013:239)

Updated wordpress and php-phpmailer packages fix security vulnerabilities : wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

Fedora 19 : gallery3-3.0.8-1.fc19 (2013-10032)

A security flaw was found in the way uploadify and flowplayer SWF files handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to these files certain URL...

aCMS 1.0 XSS / Content Spoofing / Information Leak

Hello list! These are Cross-Site Scripting, Content Spoofing and Information Leakage vulnerabilities in aCMS. This is commercial CMS. There are multiple vulnerabilities in aCMS and it's the first part of them. ------------------------- Affected products: ------------------------- Vulnerable are...

Adobe Flash Player ActionScript Heap Overflow (APSB13-09; CVE-2013-0646)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an improper buffer allocation while handling specially crafted SWF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Flash Player Malformed SWF File Information Disclosure (APSB13-05; CVE-2013-0637)

An information disclosure vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error while handling specially crafted SWF files. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedded malformed Flash...

Adobe Patches Two Critical Flash Player Vulnerabilities

Adobe released yet another security update for its Flash Player product, it’s third this month, earlier today. The emergency update patches three vulnerabilities, including two critical CVE-2013-0643 and CVE-2013-0648 that are targeting Flash Player in Mozilla’s Firefox browser and could let an...

ZeroClipboard 1.0.7 Cross Site Scripting

Hello list! These are Cross-Site Scripting vulnerabilities in ZeroClipboard. Last week I've made my research of these vulnerabilities and informed all developers previous and current of ZeroClipboard. When I've downloaded ZeroClipboard in September 2011, when I was writing my article Attacks via...

Adobe Flash Player SWF File Buffer Overflow (APSB13-04; CVE-2013-0633)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an improper buffer allocation while handling specially crafted SWF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

RHEL 5 : flash-plugin (RHSA-2010:0464)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0464 advisory. - flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL CVE-2008-4546 - flash-plugin: multiple...

Adobe Flash Player Flash Plugin Cross-Domain Information Leak (APSB12-19; CVE-2012-4168)

A cross-domain information leak vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Flash Player while handling specially crafted .swf files. A remote attacker can exploit this issue by enticing a target user to open a malicious website containing a...

Fedora Update for gnash FEDORA-2012-2617

Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-2617 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Blackhole Exploit Kit Adobe Flash Player

A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient boundary checking in Adobe Flash Player while handling specially crafted .swf files. A remote attacker can use the Blackhole Exploit Kit to detect this vulnerability and send speciall...

Adobe Flash Player SWF File Remote Code Execution (APSB12-18; CVE-2012-1535)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Flash Player while handling specially crafted .swf files. A remote attacker can exploit this issue by enticing a target user to open a malicious website containing a specially...

Fedora Update for gnash FEDORA-2012-4032

Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-4032 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption (CVE-2012-0768)

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption APSB12-05 / CVE-2012-0768 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based application...

Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities (CVE-2011-2453; CVE-2016-4175; CVE-2016-4179)

Multiple vulnerabilities have been discovered in Adobe Shockwave files SWF. The vulnerabilities are due to an error while parsing SWF files containing abnormally sized control and definition tags. Remote attackers could exploit these vulnerabilities by enticing target users to open SWF files...

Adobe Flash Player ActiveX Control Memory Corruption (APSB12-03; CVE-2012-0751)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way the Adobe Flash Player ActiveX Control parses tags within SWF files. A remote attacker might exploit this issue by convincing a victim to open a specially crafted SWF file...

Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability - Windows

Adobe Flex SDK is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...