CVE-2017-3064

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution...

April 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-10: CVE-2017-3058, CVE-2017-3059, CVE-2017-3060, CVE-2017-3061, CVE-2017-3062, CVE-2017-3063, CVE-2017-3064...

Security update for Adobe Flash Player: April 11, 2017

None None...

KB4018483: Security update for Adobe Flash Player (April 2017)

The remote Windows host is missing security update KB4018483. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to - execute arbitrary code. CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063 -...

PT-2017-1809

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to a use after free vulnerability in the ActionScript2 component of the Flash Player platform, specifically when creating getter/setter properties. This could...

PT-2017-1812

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to a use after free vulnerability in the internal script object of Adobe Flash Player. This could lead to arbitrary code execution if successfully exploited. T...

Adobe Flash ByteArray Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2017-1811

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is caused by a buffer overflow in memory when parsing ActionScript2 code, potentially allowing a remote attacker to execute arbitrary code, resulting in memory damage. Th...

Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within SWF parsing. The iss...

Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within SWF parsing. The iss...

Adobe Flash AS2 New Opcode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

(Pwn2Own) Adobe Flash TextField Attribute Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

PT-2017-1819

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to a use after free vulnerability in the sound class of the Flash Player platform, which can be exploited by a remote attacker to execute arbitrary code...

Adobe Flash Player for Mac <= 25.0.0.127 Multiple Vulnerabilities (APSB17-10)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 25.0.0.127. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code...

KLA11021 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10993. Original advisories ADV170004 Exploitation Related products Microsoft-Windows CVE list KB list 4018483 Solution Install necessary updates from the KB section, that are listed ...

KLA10993 Arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitary code. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities in the sound class, in the internal script object and in the...

Adobe Flash Player <= 25.0.0.127 Multiple Vulnerabilities (APSB17-10)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 25.0.0.127. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-3058,...

Adobe Flash Player Use After Free Code Execution (APSB17-10: CVE-2017-3058)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

X (Formerly Twitter): [Gnip Blogs] Reflected XSS via "plupload.flash.swf" component vulnerable to SOME

Hi, The following endpoints are exposed to reflected cross-site scripting by way of a vulnerable "plupload.flash.swf" component on WordPress. A comprehensive explanation of this vulnerability can be found on resolved report 134738: WordPress is vulnerable against a Same-Origin Method Execution SO...

Adobe Flash BitmapData Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...