11813 matches found
Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...
Adobe Flash Player Regular Expression Heap Overflow
This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger an memory corruption, which results in remote code execution under the context of...
Adobe Flash Player Regular Expression Heap Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...
SuSE 11.3 Security Update : flash-player (SAT Patch Number 9120)
Adobe flash-player has been updated to version 11.2.202.350 to resolve security issues and bugs. More information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-09.html The following security issues have been fixed : - a use-after-free vulnerability that could have...
Adobe Flash Player for Linux ActionScript ASnative Command Execution - Ver2 (CVE-2008-5499)
A command execution vulnerability has been reported in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Internet Explorer 10 & Adobe Flash Player (12.0.0.70, 12.0.0.77) - CMarkup Use-After-Free
Exploit for windows platform in category local exploits mxmlc.exe AsXploit.as -o AsXploit.swf E-DB Note: http://www.exploit-db.com/sploits/32851-AsXploit.as -- var garr = ; var arrLen = 0x250; function dword2datadword var d = Numberdword.toString16; while d.length 8 d = '0' + d; return unescape'%...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt28
3:11-alt28 built April 15, 2014 Sergey V Turchin in task 118324 --- April 15, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0506, CVE-2014-0507, CVE-2014-0508, CVE-2014-0509...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt28
3:11-alt28 built April 15, 2014 Sergey V Turchin in task 118325 --- April 15, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0506, CVE-2014-0507, CVE-2014-0508, CVE-2014-0509...
Microsoft Internet Explorer 10 - CMarkup Use-After-Free (MS14-012)
Microsoft Internet Explorer 10 - CMarkup Use-After-Free MS14-012 mxmlc.exe AsXploit.as -o AsXploit.swf Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/32851-AsXploit.as -- var garr = ; var arrLen = 0x250; function dword2datadword var d =...
MS14-012 Internet Explorer CMarkup Use-After-Free
mxmlc.exe AsXploit.as -o AsXploit.swf E-DB Note: http://www.exploit-db.com/sploits/32851-AsXploit.as -- var garr = ; var arrLen = 0x250; function dword2datadword var d = Numberdword.toString16; while d.length 8 d = '0' + d; return unescape'%u' + d.substr4, 8 + '%u' + d.substr0, 4; function eXpl v...
Adobe Flash Player domainMemory ByteArray Use After Free
This module exploits a use-after-free vulnerability in Adobe Flash Player. The vulnerability occurs when the ByteArray assigned to the current ApplicationDomain is freed from an ActionScript worker, when forcing a reallocation by copying more contents than the original capacity, but Flash forgets...
Microsoft Internet Explorer 10 - CMarkup Use-After-Free (MS14-012)
mxmlc.exe AsXploit.as -o AsXploit.swf Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32851-AsXploit.as -- var garr = ; var arrLen = 0x250; function dword2datadword var d = Numberdword.toString16; while d.length 8 d = '0' + d; return unescape'%u...
Adobe Flash Player Cross-Site Scripting (APSB14-09: CVE-2014-0509)
A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way the browser and the plug-in handle specially crafted URLs. A remote attacker can exploit this vulnerability by enticing an affected user to open a malicious web-page...
Adobe Flash Player Multiple Vulnerabilities - 02 (Apr 2014) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player Multiple Vulnerabilities - 02 (Apr 2014) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player/AIR未明跨站脚本漏洞
CVE ID:CVE-2014-0509 Adobe Flash Player是一款Flash文件处理程序。Adobe Air是一款Adobe公司出品的跨操作系统的运行时库。 Adobe Flash Player/AIR存在未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Adobe Flash Player 12.0.0.77 Adobe Flash Player 11.2.202.346 Adobe Flash Player 11.7.700.272 Adobe AIR 4.0.0.1628 Adobe Fla...
Adobe Flash Player/AIR未明缓冲区溢出漏洞
CVE ID:CVE-2014-0507 Adobe Flash Player是一款Flash文件处理程序。Adobe Air是一款Adobe公司出品的跨操作系统的运行时库。 Adobe Flash Player/AIR存在未明缓冲区溢出漏洞，允许远程攻击者构建恶意文件，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Adobe Flash Player 12.0.0.77 Adobe Flash Player 11.2.202.346 Adobe Flash Player 11.7.700.272 Adobe AIR 4.0.0.1628 Adobe Flash Player...
Adobe Flash Player/AIR未明安全绕过信息泄漏漏洞
CVE ID:CVE-2014-0508 Adobe Flash Player是一款Flash文件处理程序。Adobe Air是一款Adobe公司出品的跨操作系统的运行时库。 Adobe Flash Player/AIR存在未明安全漏洞，允许远程攻击者构建恶意文件，诱使用户解析，可绕过安全限制，获取敏感信息。 0 Adobe Flash Player 12.0.0.77 Adobe Flash Player 11.2.202.346 Adobe Flash Player 11.7.700.272 Adobe AIR 4.0.0.1628 Adobe Flash Player...
Adobe Flash Player Multiple Vulnerabilities - 02 (Apr 2014) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player Information Disclosure (APSB14-09: CVE-2014-0508)
An information disclosure vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted SWF files. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an...