CVE-2017-3061: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution...

PT-2017-1810

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to a memory corruption vulnerability in the SWF parser of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could allow a...

Adobe Flash Player Use After Free Code Execution (APSB17-10: CVE-2017-3062)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

CVE-2017-3061

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution...

Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within SWF parsing. The iss...

libming parser.c file heap buffer overflow vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A heap buffer overflow vulnerability exists in the parser.c file in libming version 0.4.7. A remote attacker can exploit this vulnerability to cause a denial of service listswf application cra...

Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within SWF parsing. The iss...

Adobe Flash Player Use After Free Code Execution (APSB17-10: CVE-2017-3058)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

pcgames.de XSS vulnerability

Vulnerable URL: http://www.pcgames.de/bcommon/swf/saturnwinterkatalog20102011.swf?clicktag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13633 VIP...

pnp.de XSS vulnerability

Vulnerable URL: http://www.pnp.de/np-intern/a/ooetourismus/sky20110225.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41932 VIP website...

cellesche-zeitung.de XSS vulnerability

Open Bug Bounty ID: OBB-223720 Description| Value ---|--- Affected Website:| cellesche-zeitung.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

love.3vozrast.ru XSS vulnerability

Vulnerable URL: http://love.3vozrast.ru/promo/bannerhelper/728x90/3tooold.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

my.alfaforex.com XSS vulnerability

Vulnerable URL: https://my.alfaforex.com/storage/banners/rux13x240x80.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

gambling-affiliation.com XSS vulnerability

Vulnerable URL: https://www.gambling-affiliation.com/tracking/visuels/1970.swf?clickTAG=http://www.gambling-affiliation.com/tracking/parrainage.php?idsup=7914 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Heap overflow

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

CVE-2017-7578

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

CVE-2017-7578

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

CVE-2017-7578

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

CVE-2017-7578

CVE-2017-7578 is a set of multiple heap-based buffer overflows in the parser.c module of libming 0.4.7. The vulnerability allows remote attackers to trigger a denial of service (listswf application crash) or potentially cause unspecified other impact via a crafted SWF file; it is noted to exist d...

PT-2017-17813

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue is related to multiple heap-based buffer overflows in the parser.c file of libming, which can be triggered by remote attackers using a crafted SWF file. This can cause a denial of service, resulting ...