Internet Bug Bounty: Adobe Flash Player Race Condition Vulnerability

Adobe Flash Player is prone to a race condition vulnerability which leads to Use After Free. COM Object will be initialized twice and uninitialized when the count number decrement to zero by the main thread. As we could force the second initialization being called by a Worker thread, the...

Internet Bug Bounty: Adobe Flash Player ASnative(900,1).call(TextField) Use-After-Free Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to Use-After-Free. ------------------------------------------------------------------ II. Description If the ASnative900,1 is invoked with TextField instance and getter properties associated with swfRoot where the getter method...

Internet Bug Bounty: Adobe Flash Player ASnative(900,1).call(MovieClip) Use-After-Free Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to Use-After-Free. ------------------------------------------------------------------ II. Description If the ASnative900,1 is invoked with MovieClip instance and getter properties associated with swfRoot where the getter method...

Internet Bug Bounty: Adobe Flash Player ASnative(101,10) Memory Corruption Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to Memory Corruption. ------------------------------------------------------------------ II. Description When ASnative101,10 is called with a MovieClip object pointer, Flash Player is crashed due to an invalid EIP value...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0979)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0972)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted FLV file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted FLV file...

Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0982)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0983)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Type Confusion (APSB16-04: CVE-2016-0985)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0977)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Integer Overflow (APSB16-04: CVE-2016-0978)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0981)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0984)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0964)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt59

3:11-alt59 built Feb. 11, 2016 Sergey V Turchin in task 158593 Feb. 10, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt59

3:11-alt59 built Feb. 11, 2016 Sergey V Turchin in task 158592 Feb. 10, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,...

Adobe Flash Player & Compiler Memory Misreference Vulnerability (CNVD-2016-01024)

Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A memory misreference vulnerability exists in Adobe Flash Player& Compiler that could allow a...

Adobe Flash Player& Compiler Heap Buffer Overflow Vulnerability

Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A heap buffer overflow vulnerability exists in multiple Adobe products. The vulnerability...

Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01046)

Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...

Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01049)

Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...