Adobe Flash Player Memory Corruption (APSB15-04: CVE-2015-0314)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Adobe Flash Player has an unspecified memory misreference vulnerability (CNVD-2015-00953)

Adobe Flash Player is a Flash file handling program. An unspecified memory misreference vulnerability exists in Adobe Flash Player that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in an application context to execute arbitrary code...

Adobe Flash Player suffers from unspecified memory corruption vulnerability (CNVD-2015-00963)

Adobe Flash Player is a Flash file handling program. An unspecified memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to construct a malicious SWF file, trick the user into parsing it, and execute arbitrary code in the context of the application...

Adobe Flash Player suffers from unspecified memory corruption vulnerability (CNVD-2015-00954)

Adobe Flash Player is a Flash file handling program. An unspecified memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in an application context to execute arbitrary code...

PT-2015-1005

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Description The issue is related to a component called "PCRE" in Flash Player, which has insufficient data validation when handling the "c" control sequence followed by a UTF-8 encoded...

Design/Logic Flaw

ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a 1 getTicketData action to servlet/AJaxServlet or a direct request to 2 swf/flashreport.swf, 3 reports/flash/details.jsp, or 4 reports/CreateReportTable.jsp...

PT-2015-5316

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 9.0 build 9031 Description The issue allows remote authenticated users to obtain sensitive ticket information. This can be achieved through various means, including a getTicketData action to the...

Adobe Flash Player Remote Code Execution (APSA15-02: CVE-2015-0313)

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code via unknown vector. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

CVE-2015-1480: Exposure of Sensitive Information to an Unauthorized Actor

ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a 1 getTicketData action to servlet/AJaxServlet or a direct request to 2 swf/flashreport.swf, 3 reports/flash/details.jsp, or 4 reports/CreateReportTable.jsp...

PT-2015-1006

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.265 Adobe Flash Player versions 14.x through 16.0.0.296 Adobe Flash Player version 11.2.202.440 and earlier on Linux Description The issue is related to a use-after-free vulnerability in the Flash...

Vulnerability tracking: Flash critical Vulnerability（CVE-2 0 1 5-0 3 1 1 detailed technical analysis-vulnerability warning-the black bar safety net

Last week's Flash 0day vulnerability you play cool. Known for their natural also want to know its so natural, playing tired, sit down and take a look at this vulnerability causes. Trend Micro recently to the vulnerability detailed analysis, the author translated, the readers. Vulnerability contex...

Adobe Flash Player Type Confusion (APSB15-05: CVE-2015-0336)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Type Confusion (APSB15-01: CVE-2015-0305)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

PT-2015-4123

Name of the Vulnerable Software and Affected Versions IBM Social Media Analytics versions prior to 1.3 IF11 IBM Dojo Toolkit affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in various SWF files within the IBM Dojo Toolkit. These...

RHEL 5 / 6 : flash-plugin (RHSA-2015:0094)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Analysis of Flash Zero Day Shows Layers of Obfuscation

The Flash zero day that made its way into the Angler exploit kit was wrapped in multiple layers of obfuscation and has the ability to inject its malicious payload straight into users’ browsers. In the last week, since the news broke of the Adobe Flash zero-day flaw appearing in the Angler kit,...

Adobe Flash Use After Free Code Execution (APSB15-01: CVE-2015-0308)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Out of Bounds Memory Corruption (APSB15-01: CVE-2015-0307)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory read while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...