Adobe Flash Player Security Update (APSB17-32) - Linux

Adobe Flash Player is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Flash Player Within Google Chrome Security Update (APSB17-32) - Linux

Adobe Flash Player is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2017-33575)

Adobe Flash Player is a multimedia program player. An arbitrary code execution vulnerability exists in the implementation of Adobe Flash Player, which could be exploited by an attacker to execute arbitrary code in the context of an affected application...

Adobe Flash Player Type Confusion (APSB17-32: CVE-2017-11292)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

KLA11131 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Adobe Flash Player. For details look at KLA11121. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or instant message from...

KLA11121 ACE vulnerability in Adobe Flash Player

A remote code execution vulnerability was found in Adobe Flash Player. This vulnerability can be exploited via a specially designed MS Office document to execute arbitrary code. Technical details To update Adobe Flash Player ActiveX detected as Flash.ocx on Windows 8 and higher, install latest...

CVE-2017-11292

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution...

BlackOasis APT and new targeted attacks leveraging zero-day exploit

More information about BlackOasis APT is available to customers of Kaspersky Intelligence Reporting Service. Contact: [email protected] Introduction Kaspersky Lab has always worked closely with vendors to protect users. As soon as we find new vulnerabilities we immediately inform the...

Hackers Use New Flash Zero-Day Exploit to Distribute FinFisher Spyware

FinSpy—the infamous surveillance malware is back and infecting high-profile targets using a new Adobe Flash zero-day exploit delivered through Microsoft Office documents. Security researchers from Kaspersky Labs have discovered a new zero-day remote code execution vulnerability in Adobe Flash,...

Adobe Flash Player CVE-2017-11292 Type Confusion Remote Code Execution Vulnerability

Description Adobe Flash Player is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected...

[ASA-201710-21] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-21 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : lib32-flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-450 Summary ======= The package...

[ASA-201710-20] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-20 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-449 Summary ======= The package flashplug...

Equifax Credit Assistance Site Served Spyware

Big-three consumer credit bureau Equifax says it has removed third-party code from its credit report assistance Web site that prompted visitors to download spyware disguised as an update for Adobe's Flash Player software. Image: Randy-abrams.blogspot.com On Wednesday, security expert and blogger...

Adobe Flash: Out-of-bounds read in applyToRange(CVE-2017-11282)

The attached fuzzed file causes an out-of-bounds read in TextFormat.applyToRange. operator.swf...

Adobe Flash: Out-of-bounds write in MP4 Edge Processing(CVE-2017-11281)

The attached fuzzed MP4 file causes an out-of-bounds memory access when played with Adobe Flash emu.mp4 LoadMP4.swf...

Adobe Flash: Out-of-bounds memory read in MP4 parsing(CVE-2017-11281)

The attached MP4 file causes an out-of-bounds memory access when played in flash player. 7.mp4 LoadMP4.swf...

Adobe Flash - Out-of-Bounds Write in MP4 Edge Processing Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1322 The attached fuzzed MP4 file causes an out-of-bounds memory access when played with Adobe Flash 0day.today 2018-01-04...

Adobe Flash - Out-of-Bounds Read in applyToRange Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1323 The attached fuzzed file causes an out-of-bounds read in TextFormat.applyToRange. 0day.today 2018-04-01...

Adobe Flash - Out-of-Bounds Memory Read in MP4 Parsing Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1321 The attached MP4 file causes an out-of-bounds memory access when played in flash player. 0day.today 2018-01-02...

Magento 1.9.0.1 Cross-Site Scripting Vulnerability

Magento Web E-Commerce Platform is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...