flash-plugin: multiple code execution issues fixed in APSB17-07

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-04303)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

[ASA-201703-12] lib32-flashplugin: multiple issues

Arch Linux Security Advisory ASA-201703-12 ========================================== Severity: Critical Date : 2017-03-15 CVE-ID : CVE-2017-2997 CVE-2017-2998 CVE-2017-2999 CVE-2017-3000 CVE-2017-3001 CVE-2017-3002 CVE-2017-3003 Package : lib32-flashplugin Type : multiple issues Remote : Yes Lin...

Adobe Flash Player Security Updates (APSB17-07) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Security Updates (APSB17-07) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-04300)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04298)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Security Updates (APSB17-07) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2017-04302)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2017-04304)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04299)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

CVE-2017-2998

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2997

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3003

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3002

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3001

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3000

Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...

Security Update for Adobe Flash Player for Windows 10 Version 1607 (for x64-based Systems) (KB4014329)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...