PT-2017-3425

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier Description The issue is related to a use after free vulnerability in the Primetime SDK of Adobe Flash Player. This vulnerability can provide an attacker with unintended memory access,...

Adobe Flash Player for Mac <= 27.0.0.183 (APSB17-33)

The version of Adobe Flash Player installed on the remote macOS or Mac OSX host is equal or prior to version 27.0.0.183. It is therefore affected by multiple remote code execution vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104545;...

KB4048951: Security update for Adobe Flash Player (November 2017)

The remote Windows host is missing security update KB4048951. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104547; scriptversion"1.13";...

Adobe Flash Player <= 27.0.0.183 (APSB17-33)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 27.0.0.183. It is therefore affected by multiple remote code execution vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3114)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3112)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11215)

An use after free vulnerability have been reported in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11225)

An Use After Free vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

PT-2017-3412

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier Description The issue occurs due to a computation that reads data past the end of the target buffer, which is part of providing language- and region-specific functionality. This is caused by t...

Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)

An integer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

PT-2017-3424

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier Description This issue is an example of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with...

KLA11141 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA11137. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...

KLA11137 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Technical details To update Adobe Flash Player ActiveX detected as Flash.ocx on Windows 8 and higher, install latest updates from Control Panel...

PT-2017-3413

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier Description The issue occurs due to a computation that reads data past the end of the target buffer, specifically in the AdobePSDK metadata. This happens because of an invalid pointer offset...

Adobe Flash Player APSB17-33 Multiple Remote Code Execution Vulnerabilities

Description Adobe Flash Player is prone to multiple remote code-execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

PT-2017-3426

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier Description The issue is caused by an integer overflow when creating a bitmap image, leading to an out-of-bounds access. This can allow a remote attacker to execute arbitrary code. The...

PT-2017-19449

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Description The issue concerns security vulnerabilities in Adobe Flash Player. No specific details about the nature of the vulnerabilities, affected devices, or real-world incidents are...

Bad Rabbit Ransomware – What is it and how to stay safe

Trend Micro is tracking multiple reports of ransomware infections, known as Bad Rabbit, in many countries around the world. A suspected variant of Petya, Bad Rabbit is ransomware—malicious software that infects a computer and restricts user access to the infected machine until a ransom is paid to...

Bad Rabbit: New Ransomware Attack Rapidly Spreading Across Europe

A new widespread ransomware attack is spreading like wildfire around Europe and has already affected over 200 major organisations, primarily in Russia, Ukraine, Turkey and Germany, in the past few hours. Dubbed "Bad Rabbit," is reportedly a new Petya-like targeted ransomware attack against...

GLSA-201710-22 : Adobe Flash Player: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201710-22 Adobe Flash Player: Remote execution of arbitrary code A critical type confusion vulnerability was discovered in Adobe Flash Player. Impact : A remote attacker could execute arbitrary code. Workaround : There is no known...