CVE-2017-7578: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

marmiton.org XSS vulnerability

Vulnerable URL: http://www.marmiton.org/part/recette-pas-chere/swf/CRFCuisine-300x600.swf?clicktag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3381...

my.alfa-forex.ru XSS vulnerability

Vulnerable URL: https://my.alfa-forex.ru/storage/banners/rux18x120x240.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

guido.be XSS vulnerability

Vulnerable URL: http://www.guido.be/Portals/0/Banners/20121005GCGLEADERBOARD.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 461125 VIP...

ancestryshop.co.uk XSS vulnerability

Vulnerable URL: https://www.ancestryshop.co.uk/banners/flash/gpack3.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 918129 VIP website...

cef.es XSS vulnerability

Vulnerable URL: http://www.cef.es/files/200x200.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113455 VIP website status:| No Check cef.e...

thecasinoperla.com XSS vulnerability

Vulnerable URL: http://www.thecasinoperla.com/uploads/txricrotation/locatord01.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 903210 VIP...

economie.grandlyon.com XSS vulnerability

Vulnerable URL: http://www.economie.grandlyon.com/fileadmin/userupload/fichiers/multimedia/201010glnumeriquepubevents300x250.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

agfahealthcare.com XSS vulnerability

Vulnerable URL: http://www.agfahealthcare.com/he/france/fr/binaries/960X340DXD-500tcm583-87285.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ipn.gov.pl XSS vulnerability

Vulnerable URL: http://www.ipn.gov.pl/dokumenty/batony/2.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92720 VIP website status:| No Che...

devenircontroleur.fr XSS vulnerability

Vulnerable URL: http://www.devenircontroleur.fr/swf/boutonflashsgslanding.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9562055 VIP...

cabinet-auditeco.fr XSS vulnerability

Vulnerable URL: http://www.cabinet-auditeco.fr/fileadmin/styles/auditeco/CA2010Ban468x60v1.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4870612 VIP website status:| N...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash: Out-of-Bounds Read in Metadata Parsing（CVE-2017-2931）

The attached file causes an out-of-bounds read when its metadata is parsed Attachment: meta. swf...

Adobe Flash Player Use After Free Code Execution (APSB17-07: CVE-2017-3003)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-07: CVE-2017-3002)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2999)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2998)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Stack Buffer Overflow (APSB17-07: CVE-2017-2997)

A Stack buffer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...