CVE-2017-1000132

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132: Improper Neutralization of Input During Web Page Generation

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

Type confusion

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106: Incorrect Type Conversion or Cast

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player 26.0.0.137 and prior versions...

KLA11085 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player versions earlier than 26.0.0.151. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security bypass vulnerability...

DNN (DotNetNuke) 3.0.0 < 9.1.0 SWF File Handling XSS

The version of DNN Platform formerly DotNetNuke running on the remote host is 3.0.0 or later but prior to 9.1.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input when handling SWF files. An unauthenticated, remote attacker ca...

Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)

A remote memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory read while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Libming Denial of Service Vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A denial of service vulnerability exists in the 'readString' function in the files util/old/read.c and util/read.c in version 0.4.8 of libming...

Adobe Flash Player Use After Free Code Execution (APSB17-15: CVE-2017-3071)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Type confusion

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

CVE-2017-7989: Unrestricted Upload of File with Dangerous Type

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

[SECURITY] Fedora 26 Update: ming-0.4.8-1.fc26

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

[20170407] - Core - ACL Violations

Inadequate mime type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2936)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Integer Overflow Remote Code Execution (APSB16-39: CVE-2016-7875)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...