2664 matches found
RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
Binary data 4608.prm...
RealPlayer multiple security vulnerabilities
Buffer overflow on SWF files parsing. ActiveX memory corruption. ActiveX arbitrary files deletion...
CVE-2007-5400
Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...
CVE-2007-5400
Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...
CVE-2007-5400
CVE-2007-5400 is a heap-based buffer overflow in RealNetworks RealPlayer 10.x (SWF frame handling) that can allow remote code execution via crafted SWF files. Connected advisories confirm a design/error in Shockwave Flash handling within RealPlayer’s SWF module, with multiple vendors issuing patc...
RealNetworks RealPlayer SWF文件处理堆溢出漏洞
BUGTRAQ ID: 30370 CVECAN ID: CVE-2007-5400 RealPlayer是一款流行的多媒体播放器。 RealPlayer没有正确地处理Shockwave Flash（SWF）文件中的帧，如果用户受骗打开了恶意的SWF文件的话，就可以触发堆溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Build 6.0.12.1483 Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2007-5400: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...
RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues : - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution. CVE-2008-1309 - An unspecified local resource reference...
Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
====================================================================== Secunia Research 25/07/2008 - RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ====================================================================== Table of Contents Affected...
On the SWF that famous vulnerability-vulnerability warning-the black bar safety net
Author: zodiacsoft Source: Swan paste&&crow sauce Toooooooooooooooooold That is, the CVE-2 0 0 7-0 0 7 1, The flash9x. ocx problems, version has been the impact to the 9. 0. 1 1 5 The. The vulnerability itself is very simple, Dowd's thinking in the direction without departing from the General...
FLASH 0DAY Shellcode position with the Builder-vulnerability warning-the black bar safety net
Author: open Source: open’s Blog The first say. Even? have a look at the other version. I only I caught after the proposed version, for example. The other version I know nothing about. See comment a dear friend made a question of time. Yes. This version has real time verification problem. However...
VulnCheck KEV: CVE-2007-0071
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer...
Adobe Flash player code execution vulnerability
Overview Adobe Flash contains a vulnerability that may allow an attacker to run code on a system that has a vulnerable version of the Flash player installed. There are reports that this vulnerability is being actively exploited. Description The Adobe Flash Player is a player for the Flash media...
Adobe Flash DefineSceneAndFrameLabelData Parsing Memory Corruption Vulnerability
TippingPoint Note: This issue was originally disclosed on April 8, 2008 as ZDI-08-022 but due to an error on our behalf the original advisory was clobbered and is now being re-released as ZDI-08-032. This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the...
Open a Nday MS08-0 1 0(CVE-2 0 0 8-0 0 7 6)-vulnerability warning-the black bar safety net
The recent IE holes in a large stack,record what I know: 1. MS08-0 1 0:In addition to the VFP control of at least the TP mentioned above is able to take advantage of. 2. MS08-0 2 2:script ENCODER processing on the hole,but I see you want to use is too difficult,the hints about the patch compariso...
Adobe Flash Player integer overflow vulnerability
Overview Adobe Flash contains an integer overflow vulnerability. This vulnerability may allow an attacker to execute code on an affected system. Description The Adobe Flash Player is a player for the Flash media format and enables frame-based animations and multimedia to be viewed within a web...
Adobe Flash Player: Multiple vulnerabilities
Background The Adobe Flash Player is a renderer for the popular SWF file format, which is commonly used to provide interactive websites, digital experiences and mobile content. Description Multiple vulnerabilities have been discovered in Adobe Flash: Secunia Research and Zero Day Initiative...
Adobe Flash Player SWF文件DeclareFunction2 ActionScript标签堆溢出漏洞
BUGTRAQ ID: 28694 CVECAN ID: CVE-2007-6019 Flash Player是一款非常流行的FLASH播放器。 Flash player在试图访问没有正确实例化的嵌入Actionscript对象时存在堆溢出漏洞，如果攻击者恶意修改了SWF文件中的DeclareFunction2 Actionscript标签的话，则用户打开该文件就可能触发堆溢出，导致以当前登录用户的权限执行任意指令。 Adobe Flash Player 9.0.115.0 Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Integer overflow
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer...
Code injection
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly...