CVE-2017-2982

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2993

CVE-2017-2993 affects Adobe Flash Player up to version 24.0.0.194 and earlier. The issue is a use-after-free in event handler handling, potentially allowing arbitrary code execution. Exploitation can occur remotely via a crafted SWF file; impact is code execution with high severity. The standard ...

CVE-2017-2994

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2990

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2993

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2996

CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...

CVE-2017-2985

CVE-2017-2985 is a use-after-free vulnerability in Adobe Flash Player’s ActionScript 3 BitmapData class affecting Flash Player versions earlier than 24.0.0.221. The underlying issue allows remote code execution, with public exploit activity noted (e.g., Exploit-DB reference). Remediation: update ...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec related to decompression. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2984

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2992

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2996

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2988

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2985

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2990

CVE-2017-2990 is an Adobe Flash Player memory corruption vulnerability in the h264 decompression routine affecting version 24.0.0.194 and earlier; exploitation could lead to arbitrary code execution. Remediation is to upgrade to 24.0.0.221 (or later) per advisories from Arch Linux and other sourc...

CVE-2017-2995

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-01791)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory misreference vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2017-01779)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. Adobe Flash Player suffers from a type-obfuscation vulnerability, which can be exploited by an attacker to execute arbitrary code via type-obfuscation...

Adobe Flash Player Integer Overflow Vulnerability (CNVD-2017-01780)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. An integer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to construct a malicious web page and trick users into parsing it, which can...