PT-2017-2314

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a use-after-free vulnerability in the advertising metadata functionality of Adobe Flash Player. This vulnerability could allow an attacker to execute...

PT-2017-2315

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a use-after-free vulnerability in the Primetime SDK functionality of Adobe Flash Player, specifically concerning the profile metadata of the media stream...

PT-2017-2379

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is caused by a buffer overflow in the PNG image parser of the Flash Player platform, allowing a remote attacker to execute arbitrary code by exploiting the memory...

PT-2017-2381

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a use-after-free vulnerability in the ActionsScript 2 XML class, which can be exploited to execute arbitrary code. This can be achieved by manipulating the...

PT-2017-2380

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a memory corruption vulnerability in the MPEG-4 AVC module, which can be exploited to execute arbitrary code. This is caused by a buffer overflow in memory...

PT-2017-2378

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a memory corruption vulnerability in the Adobe Texture Format ATF module of the Flash Player platform. This vulnerability can be exploited by a remote...

PT-2017-2377

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is caused by a buffer overflow in the component responsible for the internal representation of raster data in the Flash Player platform. This can allow a remote attacker ...

Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3081)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3082)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash XML load Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XML load method...

Adobe Flash Profile Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

KLA11041 Arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. 1. A use-after-free vulnerability related to manipulating the ActionScript 2 XML class can be exploited remotely to execute arbitrary code; 2. A...

PT-2017-2375

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a memory corruption vulnerability in the LocaleID class of Adobe Flash Player. This vulnerability can be exploited to achieve arbitrary code execution. The...

Adobe Flash Player APSB17-17 Multiple Memory Corruption Vulnerabilities

Description Adobe Flash Player is prone to multiple memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologi...

Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3079)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3084)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

PT-2017-2376

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.171 and earlier Description The issue is related to a use-after-free vulnerability caused by multiple display object mask manipulations during internal computation. This could lead to arbitrary code execution...

Adobe Flash AuditudeSettings clone Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Flash Player -- multiple vulnerabilities

Adobe reports: These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084. These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-3076, CVE-2017-3077, CVE-2017-3078,...

KB4022730: Security update for Adobe Flash Player (June 2017)

The remote Windows host is missing security update KB4022730. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084 -...