Type confusion

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player 26.0.0.137 and prior versions...

KLA11085 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player versions earlier than 26.0.0.151. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security bypass vulnerability...

DNN (DotNetNuke) 3.0.0 < 9.1.0 SWF File Handling XSS

The version of DNN Platform formerly DotNetNuke running on the remote host is 3.0.0 or later but prior to 9.1.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input when handling SWF files. An unauthenticated, remote attacker ca...

Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)

A remote memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory read while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Libming Denial of Service Vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A denial of service vulnerability exists in the 'readString' function in the files util/old/read.c and util/read.c in version 0.4.8 of libming...

Adobe Flash Player Use After Free Code Execution (APSB17-15: CVE-2017-3071)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Type confusion

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

[SECURITY] Fedora 26 Update: ming-0.4.8-1.fc26

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

[20170407] - Core - ACL Violations

Inadequate mime type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2936)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Integer Overflow Remote Code Execution (APSB16-39: CVE-2016-7875)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

Atlassian Confluence Server 5.8.x < 5.8.6 Multiple Vulnerabilities

Binary data 9645.prm...

Foxit Reader < 8.0 Multiple Vulnerabilities

Binary data 9469.prm...

Adobe Flash Player Security Bypass (APSB16-25: CVE-2016-4178)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Foxit Reader Safe Mode Bypass Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

Adobe Flash Player Type Confusion (APSB16-18: CVE-2016-4149)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...