CVE-2015-0330

CVE-2015-0330 corresponds to a memory-corruption/remote code execution issue in Adobe Flash Player. The connected Exploit-DB entry (36420) details an Adobe Flash Player PCRE Regex vulnerability that allows arbitrary code execution via the PCRE engine when handling a specific escape sequence with ...

CVE-2015-0322

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...

CVE-2015-0314

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0316,...

CVE-2015-0322

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...

Adobe Flash Player Unspecified Null Pointer Reference Vulnerability

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified null pointer reference vulnerability that allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can execute arbitrary code in the application context...

CVE-2015-0323

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327...

CVE-2015-0320

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...

Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability (CNVD-2015-00942)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability that could allow an attacker to construct a malicious SWF file and trick a user into parsing it, which could be used in the context of an application to execute...

CVE-2015-0327

CVE-2015-0327 is a vulnerability in Adobe Flash/AS3 where redefining a Proxy object via ECMAScript redefinition can cause an overflow when enumerating value properties during a stringify operation. Project Zero notes this is a type and memory-usage bug within the AVM/ECMAScript engine that can le...

CVE-2015-0325

CVE-2015-0325 affects Adobe Flash Player on Windows, macOS, and Linux (pre-16.0.0.305; Linux pre-11.2.202.442). The root cause is a NULL pointer dereference when processing a crafted SWF, enabling denial of service (per initial) and potentially other impacts. Connected advisories confirm the issu...

Adobe Flash Player suffers from unspecified memory corruption vulnerability (CNVD-2015-00957)

Adobe Flash Player is a Flash file handling program. An unspecified memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in an application context to execute arbitrary code...

MS KB3021953: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB3021953. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322 - Several memory corruption errors exist that allow arbitrary...

CVE-2015-0321

CVE-2015-0321 maps to an Adobe Flash Player memory corruption vulnerability. Connected exploits describe a PCRE engine handling error that allows remote code execution by abusing a PCRE Bytecode path in Flash Player. The related exploit (Exploit-DB 36420) is a Metasploit module titled “Adobe Flas...

CVE-2015-0315

CVE-2015-0315 is a use-after-free vulnerability in Adobe Flash Player that can allow remote code execution via unspecified vectors. Affected products include Flash Player on Windows, macOS and Linux, with vulnerable versions cited as before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Wi...

CVE-2015-0320

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...

Adobe Flash Player suffers from an unspecified memory misreference vulnerability (CNVD-2015-00955)

Adobe Flash Player is a Flash file handling program. An unspecified memory misreference vulnerability exists in Adobe Flash Player that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in an application context to execute arbitrary code...

Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability (CNVD-2015-00952)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability that could allow an attacker to construct a malicious SWF file and trick a user into parsing it, which could be used in the context of an application to execute...

CVE-2015-0323

CVE-2015-0323 is a heap-based buffer overflow in Adobe Flash Player that allows arbitrary code execution. Affected: Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows/macOS; before 11.2.202.442 on Linux. Root cause: heap buffer overflow; vector unspecified. Remediat...

CVE-2015-0317

CVE-2015-0317 is a type-confusion, remote-code-execution vulnerability in Adobe Flash Player. Connected sources indicate this affects Flash Player on multiple platforms and is addressed by upgrading to Flash Player version 11.2.202.442 (e.g., openSUSE/RHEL updates). Other entries link CVE-2015-03...

CVE-2015-0315

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and...