1872 matches found
Privilege escalation
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
CVE-2017-2983
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
CVE-2017-2983
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
CVE-2017-2983
Summary of CVE-2017-2983 : The vulnerability affects Adobe Shockwave Player versions up to 12.2.7.197. The issue is an insecure library loading (DLL hijacking) flaw that could allow an unauthenticated attacker to trigger arbitrary code execution and potential privilege escalation by loading a mal...
Adobe Fixes Six Code Execution Bugs in Flash
Adobe on Tuesday patched seven vulnerabilities in Flash Player, six that could lead to code execution. The company said it isn’t aware of any of the vulnerabilities being exploited in the wild but is still encouraging users to update Flash for Windows, Macintosh, Linux and Chrome OS. The...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Shockwave Player. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe Security Bulletin...
CVE-2017-2983: Untrusted Search Path
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
PT-2017-1500
Name of the Vulnerable Software and Affected Versions Adobe Shockwave versions 12.2.7.197 and earlier Description The issue is related to an insecure library loading DLL hijacking vulnerability. This vulnerability is associated with the unreliable search for critical resources. Successful...
KLA10991 Privilege escalation vulnerability in Adobe Shockwave Player
An unspecified vulnerability was found in the Adobe Shockwave Player. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a DLL hijacking. Original advisories Adobe Security Bulletin Exploitation Related products...
APSB17-08 Security update available for Adobe Shockwave Player
Adobe has released a security update for Adobe Shockwave Player for Windows. This update addresses an important vulnerability that could potentially lead to escalation of privilege...
DEBIAN-CVE-2016-6671
The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...
UBUNTU-CVE-2016-6881
The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...
ALPINE-CVE-2016-6881
The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...
Adobe Flash Player Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-10244)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player is implemented with a memory error referencing remote code execution vulnerability. This vulnerability can be exploited by remote attackers to construct a malicious SWF file that can be parsed by a...
Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2016-09443)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory error referencing arbitrary code execution vulnerability that can be exploited by remote attackers to construct a malicious SWF file, which can be parsed by the user to crash...
Neutrino EK Spotted Leveraging Patched IE Zero Day
Attackers behind the Neutrino Exploit Kit didn’t take long to co-op a recently patched Internet Explorer zero-day into its arsenal. Researchers claim the kit has been pushing CVE-2016-0189, a vulnerability that was reportedly used in targeted attacks on South Korean organizations earlier this yea...
Exploit Kits Quickly Adopt Exploit Thanks to Open Source Release
A security researcher recently published source code for a working exploit for CVE-2016-0189 and the Neutrino Exploit Kit EK quickly adopted it. CVE-2016-0189 was originally exploited as a zero-day vulnerability in targeted attacks in Asia. The vulnerability resides within scripting engines in...
Adobe AIR Data Compromise
The vulnerability exists in Adobe AIR due to an incorrect limitation on the SWF file format. Exploiting this vulnerability allows malicious actors to execute attacks on JSONP endpoints using Cross-Site Request Forgery CSRF. They can also gain access to confidential information by using specially...
Adobe Pepper Flash Data Compromise
The vulnerability exists in Adobe Pepper Flash for Google Chrome due to an incorrect limitation of the SWF file format. Exploiting this vulnerability allows malicious actors to carry out attacks on endpoints using JSONP requests through Cross-Site Request Forgery CSRF. These actors can gain acces...
Flash Player Code Execution
The Flash Player software contains a vulnerability that stems from the use of memory after decompression in the ByteArray::UncompressViaZlibVariant function. This vulnerability can be exploited by malicious actors using a specially crafted swf file. As a result of exploiting this vulnerability,...