Уязвимости в FLV Player

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Content Spoofing и Cross-Site Scripting уязвимостях в флеш видео плеере FLV Player. Content Spoofing WASC-12: Флешки плеера FLV Player принимают произвольные адреса в параметре configxml, что позволяет подделать содержимое флешки - например, указа...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...

Memory corruption

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948

RealNetworks RealPlayer vulnerability CVE-2011-2948 affects RealPlayer 11.x (11.0–11.1 and 14.0.0–14.0.5), RealPlayer SP 1.x, RealPlayer Enterprise 2.x, and Mac RealPlayer 12.0.0.1569. The issue stems from improper handling of DEFINEFONT fields in SWF files, enabling remote attackers to execute a...

CVE-2011-2948

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

CVE-2011-2948: Improper Restriction of Operations within the Bounds of a Memory Buffer

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a...

RealNetworks Realplayer multiple security vulnerabilities

QCP, AAC, MP3, SWF, SIPR parsing memory corruptions, crossite scripting, unsafe methods and buffer overflow in ActiveX...

Adobe Flash Player ActionScript 3 RegExp Memory Corruption (APSB11-21; CVE-2011-2134)

The vulnerability is due to an error in the way the application allocates memory for regular expression interpretations. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF files...

Adobe Flash Player ActionScript 3 Memory Corruption (APSB11-21; CVE-2011-2415)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript 3 Buffer Overflow (APSB11-21; CVE-2011-2136)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript 3 Movie Canvas Memory Corruption (APSB11-21; CVE-2011-2135)

The vulnerability is due an error in the way the application performs boundary checks on the ActionScript tags while loading objects to Movie Canvas in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF file...

Adobe Flash Player ActionScript 3 Integer Overflow (APSB11-21; CVE-2011-2416)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. An integer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript 3 Heap Buffer Overflow (APSB11-21; CVE-2011-2137)

Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application while executing ActionScript code. A remote...

Adobe Flash Player ActionScript 2 Record Out Of Boundary (APSB11-21; CVE-2011-2414)

The vulnerability is due to an error in the way the application performs boundary checks on the ActionScript tags in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF files...

PT-2011-4198

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer versions 14.0.0 through 14.0.5 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.0 through 2.1.5 RealPlayer version 12.0.0.1569 Description The issue arises from improper...