Design/Logic Flaw

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3063

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3064

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3064

CVE-2017-3064 affects Adobe Flash Player (browser plug-in) up to version 25.0.0.127, with a memory corruption vulnerability triggered while parsing a shape outline that can lead to arbitrary code execution. The issue is confirmed in multiple CVE aggregations tied to APSB17-10; advisories note upg...

CVE-2017-3059

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2017-3058

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3060

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3061

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3058

CVE-2017-3058 concerns Adobe Flash Player: versions 25.0.0.127 and earlier are vulnerable to an exploitable use‑after‑free in the sound class, enabling arbitrary code execution. The issue is fixed by upgrading Flash Player to 25.0.0.148 (and related advisories reference APSB17-10). Affected produ...

CVE-2017-3062

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3060

Adobe Flash Player, versions 25.0.0.127 and earlier, contains a memory corruption vulnerability in the ActionScript2 parser that could lead to arbitrary code execution. Evidence across multiple connected advisories indicates updating to 25.0.0.148 mitigates the issue (APS B17-10) and patches CVE-...

SUSE-SU-2017:0990-1 Security update for flash-player

Adobe flash-player was updated to 25.0.0.148 to fix the following issues: - Vulnerabilities fixed as advised under APSB17-10: Use-after-free vulnerabilities that could lead to code execution CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063. Resolve memory corruption vulnerabilities that...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

flash-plugin: multiple code execution issues fixed in APSB17-10

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player Remote Code Execution Vulnerability (CNVD-2017-05122)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A remote code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise an affected system, resulting in arbitrary code execution...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-05119)

Adobe Flash Player is a software developed by Adobe, Incorporated, and is a widely used, proprietary multimedia program player. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code executio...

PT-2017-1808

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution. This...

CVE-2017-3063: Use After Free

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3061: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution...