Adobe Flash Player ActionScript ArrayObject Memory Corruption (APSB11-12; CVE-2011-0627)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player Newobject Instruction Memory Corruption (APSB11-12; CVE-2011-0621)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a memory corruption in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player ActionScript DoABC Tag Integer Overflow (APSB11-12; CVE-2011-0618)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player AVM Bytecode Verification

$Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Flash Player SWF Embedded in Excel File Code Execution (APSA11-01; CVE-2011-0609)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Adobe Flash Player when parsing SWF files embedded in Excel files. A...

Adobe Flash Player ActionScript ActionIf Memory Corruption (APSB11-02; CVE-2011-0560)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...

Adobe Flash Player ActionConstantPool Actions Memory Corruption (APSB11-02; CVE-2011-0607)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...

Adobe Flash Player ActionScript ActionPush Memory Corruption (APSB11-02; CVE-2011-0608)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...

Researcher Publishes Method for Bypassing Flash Local-with-filesystem Sandbox

A security researcher has published a simple method for bypassing one of the sandboxes that Adobe has implemented to prevent Flash files from taking unwanted or malicious actions on users’ PCs. Billy Rios, a well-known application security researcher, developed a quick method for bypassing the...

Adobe Flash Media Server BUTTONRECORD Loop Denial of Service (APSB10-27; CVE-2010-3634)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. The vulnerability is due to an error in an Adobe Flash Media Server edge process that fails to properly parse malformed SWF files. A remote attacker might exploit this issue by convincing a victi...

YUI charts.swf / swfstore.swf / uploader.swf XSS

The version of the YUI library of JavaScript utilities and controls hosted on the remote web server includes at least one SWF file that is affected by an unspecified cross-site scripting vulnerability. An attacker can leverage this issue to inject arbitrary HTML or script code into a user's brows...

Workaround for Adobe Flash Player Flash Content Parsing Code Execution Vulnerability (APSA10-05)

A remote code execution vulnerability has been reported in Adobe Flash Player. The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote attacker may exploit this vulnerability to take complete control of the affected system...

Adobe Flash Player ActiveX Control navigateToURL Cross-Site Scripting (CVE-2007-6244)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Shockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

New Firefox Plug-In Will Defeat Flash Attacks

For years now, Adobe Flash files have been a very useful attack vector for hackers and a serious security problem for end users and IT departments. Now, a German researcher is planning to unveil a new browser plug-in designed to prevent many common types of Flash attacks. The plug-in, called...

Adobe Flash Player Embedded Image Integer Overflow (APSB10-14; CVE-2010-2170)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanitization by the Adobe Flash Player. A remote attacker might exploit thi...

Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required in that a target must visit a malicious website. The specific flaw exists within the code for parsing embedded image data within SWF files. The...

Memory corruption

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and...

CVE-2010-2171

Technical details for CVE-2010-2171 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2171: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Joomulus modjoomulus module 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action to 1 tagcloudell.swf, 2 tagcloudeng.swf, 3 tagcloudpor.swf, 4 tagcloudrus.swf, and possibl...