Memory corruption

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer vulnerability CVE-2011-2948 affects RealPlayer 11.x (11.0–11.1 and 14.0.0–14.0.5), RealPlayer SP 1.x, RealPlayer Enterprise 2.x, and Mac RealPlayer 12.0.0.1569. The issue stems from improper handling of DEFINEFONT fields in SWF files, enabling remote attackers to execute a...

Adobe Flash Player ActionScript 3 Movie Canvas Memory Corruption (APSB11-21; CVE-2011-2135)

The vulnerability is due an error in the way the application performs boundary checks on the ActionScript tags while loading objects to Movie Canvas in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF file...

Adobe Flash Player ActionScript LoadClip Cross Site Scripting (APSB11-21; CVE-2011-2139)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing LoadClip requests in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing...

Adobe Flash Player ActionScript Image Scroll Code Execution (APSB11-21; CVE-2011-2138)

A code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript image scroll functions in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web pag...

Adobe Flash Player ActionScript 3 Integer Overflow (APSB11-21; CVE-2011-2416)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. An integer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript 3 RegExp Memory Corruption (APSB11-21; CVE-2011-2134)

The vulnerability is due to an error in the way the application allocates memory for regular expression interpretations. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF files...

Adobe Flash Player ActionScript 2 Record Out Of Boundary (APSB11-21; CVE-2011-2414)

The vulnerability is due to an error in the way the application performs boundary checks on the ActionScript tags in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF files...

Adobe Flash Player ActionScript 3 Buffer Overflow (APSB11-21; CVE-2011-2136)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript BitmapData Memory Corruption (APSB11-21; CVE-2011-2425)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript BitmapData objects in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page...

Adobe Flash Player ActionScript 3 Heap Buffer Overflow (APSB11-21; CVE-2011-2137)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player Newobject Instruction Memory Corruption (APSB11-12; CVE-2011-0621)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a memory corruption in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player ActionScript ArrayObject Memory Corruption (APSB11-12; CVE-2011-0627)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player ActionScript ActionJump Remote Code Execution (APSB11-12; CVE-2011-0624)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player. A remote attacker can exploit th...

Adobe Flash Player ActionScript DoABC Tag Integer Overflow (APSB11-12; CVE-2011-0618)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player AVM Bytecode Verification

$Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Flash Player SWF Embedded in Excel File Code Execution (APSA11-01; CVE-2011-0609)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Adobe Flash Player when parsing SWF files embedded in Excel files. A...

Adobe Flash Player ActionScript ActionPush Memory Corruption (APSB11-02; CVE-2011-0608)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...