CVE-2017-2936

Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...

CVE-2017-2927

CVE-2017-2927 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable heap overflow when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. The issue is confirmed in multiple advisories; a fix is available upstream in Fla...

CVE-2017-2926

CVE-2017-2926 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable memory corruption in MP4 atom processing that could lead to arbitrary code execution. Connected advisories confirm the issue across multiple packages and architectures, recommending upgrade to Flash Play...

CVE-2017-2938

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2017-00369)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security bypass vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption Exploit

Exploit for multiple platform in category dos / poc Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date...

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption (2)

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption 2 Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website:...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-00374)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-00381)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-00378)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player Security Update (APSB17-02) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Heap Buffer Overflow Vulnerability (CNVD-2017-00372)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A heap buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player 24.0.0.186 - 'ActionGetURL2' Out-of-Bounds Memory Corruption (2)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: January 10, 2017 CVE-2017-2930 COSIG-2016-35 1...

Adobe Flash Player 24.0.0.186 - 'ActionGetURL2' Out-of-Bounds Memory Corruption (1)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: January 10, 2017 CVE-2017-2930 COSIG-2016-35 1...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-00375)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player Heap Buffer Overflow Vulnerability (CNVD-2017-00370)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A heap buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player Heap Buffer Overflow Vulnerability (CNVD-2017-00373)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A heap buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

Adobe Flash Player Heap Overflow (APSB17-02: CVE-2017-2933)

A heap overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted ATF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted ATF file...

Adobe Flash Player Security Update (APSB17-02) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Security Update (APSB17-02) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...