Adobe Flash Player ActionScript ActionIf Memory Corruption (APSB11-02; CVE-2011-0560)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...

Adobe Flash Player ActionConstantPool Actions Memory Corruption (APSB11-02; CVE-2011-0607)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player when parsing SWF files that contain...

Researcher Publishes Method for Bypassing Flash Local-with-filesystem Sandbox

A security researcher has published a simple method for bypassing one of the sandboxes that Adobe has implemented to prevent Flash files from taking unwanted or malicious actions on users’ PCs. Billy Rios, a well-known application security researcher, developed a quick method for bypassing the...

Adobe Flash Media Server BUTTONRECORD Loop Denial of Service (APSB10-27; CVE-2010-3634)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. The vulnerability is due to an error in an Adobe Flash Media Server edge process that fails to properly parse malformed SWF files. A remote attacker might exploit this issue by convincing a victi...

YUI charts.swf / swfstore.swf / uploader.swf XSS

The version of the YUI library of JavaScript utilities and controls hosted on the remote web server includes at least one SWF file that is affected by an unspecified cross-site scripting vulnerability. An attacker can leverage this issue to inject arbitrary HTML or script code into a user's brows...

Workaround for Adobe Flash Player Flash Content Parsing Code Execution Vulnerability (APSA10-05)

A remote code execution vulnerability has been reported in Adobe Flash Player. The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote attacker may exploit this vulnerability to take complete control of the affected system...

Adobe Flash Player ActiveX Control navigateToURL Cross-Site Scripting (CVE-2007-6244)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Shockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

New Firefox Plug-In Will Defeat Flash Attacks

For years now, Adobe Flash files have been a very useful attack vector for hackers and a serious security problem for end users and IT departments. Now, a German researcher is planning to unveil a new browser plug-in designed to prevent many common types of Flash attacks. The plug-in, called...

Adobe Flash Player Embedded Image Integer Overflow (APSB10-14; CVE-2010-2170)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanitization by the Adobe Flash Player. A remote attacker might exploit thi...

Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required in that a target must visit a malicious website. The specific flaw exists within the code for parsing embedded image data within SWF files. The...

Memory corruption

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and...

CVE-2010-2171

Technical details for CVE-2010-2171 are not publicly available in the provided documents. Monitor for updates.

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Joomulus modjoomulus module 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action to 1 tagcloudell.swf, 2 tagcloudeng.swf, 3 tagcloudpor.swf, 4 tagcloudrus.swf, and possibl...

'Blitzableiter' Protects Against Flash Player Exploits

A German security researcher has released an open-source tool that analyses and cleans up Flash code before playback to prevent security holes in Adobe Flash Player from being exploited. The tool, called “Blitzableiter” lightning rod, is the brainchild of Felix “FX” Lindner, a well-known hacker w...

SUSE: Security Advisory for flash-player (SUSE-SA:2009:062)

The remote host is missing updates announced in advisory SUSE-SA:2009:062. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious SWF file. The specific flaw exists in the...

Adobe Flash Player for Linux ActionScript ASnative Command Execution (CVE-2008-5499)

Adobe Flash Player is a multimedia and application player. Flash Player renders Shockwave Flash SWF files, which contain various forms of multimedia content, including vector and raster graphics, video, audio, and scripts. Flash Player is available as a plug-in for a wide range of web browsers, a...

openSUSE Security Update : flash-player (flash-player-560)

Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine CVE-2009-0519, CVE-2009-0520, CVE-2009-0114, CVE-2009-0521. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

GLSA-200903-23 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-23 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player: The access scope of SystemsetClipboard allows ActionScript programs to execute the method without user...