Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02103)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-02100)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can bypass security restrictio...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02101)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability, which can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can cause the application...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02096)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02098)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

Adobe Flash Player Memory Corruption (APSB16-10: CVE-2016-1012)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB16-10: CVE-2016-1011)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Remote Code Execution (APSA16-01: CVE-2016-1019)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected syst...

SWF Player - Flash File Viewer - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SWF Player - Flash File Viewer published at the 'play' market has multiple vulnerabilities...

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=715 The ActionScript parameter conversion in the fix for issue 403 https://code.google.com/p/google-security-research/issues/detail?id=403 can...

Adobe Flash - Sprite Creation Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=718 There is a use-after-free in Sprite Creation. If a Sprite is created, and then the handler for the frameConstructed event triggers a remove object action, the Sprite is then used after it has been freed. A sample swf is attache...

raybestosgarage.com XSS vulnerability

Vulnerable URL: http://raybestosgarage.com/wp-includes/js/swfupload/swfupload.swf?movieName=%22%29;catch%28e%29if%28!self.a%29self.a=!alert%28/XSSPOSED/%29;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

cisco.com XSS vulnerability

Vulnerable URL: http://www.cisco.com/web/DE/presse/bilder/flash/asaweb/flashdetection.swf?flashContentURL=javascript:alert%27XSSPOSED%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

osd.dtic.mil Open Redirect vulnerability

Vulnerable URL: http://osd.dtic.mil/home/Specials/iwojima/flashdetection.swf?flashContentURL=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.05.2017 Latest check for patch:| 16.05.2017 21:14 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Adobe Flash Player Integer Overflow (APSB16-08: CVE-2016-1010)

An integer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient boundary checking in Adobe Flash Player. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0995)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Integer Overflow Remote Code Execution (APSB16-08: CVE-2016-0963)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...