2664 matches found
Adobe Flash Player Code Execution Vulnerability
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content...
PT-2024-37356 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problematic issue was found, affecting the swf svg add iso sample function of the src/filters/load text.c file in the MP4Box component. This issue leads to a null pointer dereferenc...
RHEL 5 : flash-plugin (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - flash-plugin: multiple code execution issues fixed in APSB17-07 CVE-2017-3003 - Unspecified vulnerability...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in swf_def_bits_jpeg
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6201254983303168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000016d1 Crash State:...
CVE-2024-30298 Adobe Animate SWF File Parsing Memory corruption
Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...
CVE-2024-30298 Adobe Animate SWF File Parsing Memory corruption
Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...
CVE-2024-28458
Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c...
CVE-2024-20796 Adobe Animation SWF File Parsing Memory Corruption
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...
CVE-2024-20796 Adobe Animation SWF File Parsing Memory Corruption
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...
CVE-2024-20764 Adobe Animate 2024 SWF File parsing memory corruption
Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
CVE-2024-20764 Adobe Animate 2024 SWF File parsing memory corruption
Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
GPAC Security Vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev921-g422b78ecf-master, which stems from the discovery of swfgetstring via scenemanager/swfparse.c:325 that contains an out-of-bounds write vulnerability...
CVE-2024-28318
gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swfgetstring at scenemanager/swfparse.c:325...
PT-2024-22388
Name of the Vulnerable Software and Affected Versions gpac version 2.3-DEV-rev921-g422b78ecf-master Description The issue is related to an out of boundary write vulnerability via the swf get string function at scene manager/swf parse.c:325. This vulnerability can be exploited by a remote attacker...
Memory Leak
libming.so is vulnerable to Memory Leak. The vulnerability is due to a failure to free allocated heap memory for SWFFILLSTYLE in the fillstyle-FillStyles member during parsing of a crafted SWF file, leading to a Denial of Service DoS...
Memory Leak
libming/libming is vulnerable to Memory Leak. The vulnerability is due to a failure to free dynamically allocated memory for gerec-GlyphIndex, resulting in a denial of service DoS when processing a crafted SWF file...
Memory Leak
libming/libming is vulnerable to Memory Leak. The vulnerability is due to heap memory allocations on Characters and Actions within the function parseSWFDEFINEBUTTON, which are not subsequently deallocated. This allows an attacker to trigger a Denial of Service DoS through a manipulated SWF file...
Memory Leak
libming/libming is vulnerable to Memory Leak. The vulnerability is due to the allocation of brec-GlyphCount into heap memory inside function parseSWFTEXTRECORD, which is never freed. This allows attackers to execute a Denial of Service DoS by exploiting the flaw with a crafted SWF file...
Memory Leak
libming.so is vulnerable to Memory Leak. The vulnerability is due to the failure to de-allocate the memory from SWFParserstruct variable in parser.c. The attacker can perform a DoS via a crafted SWF file...
