Adobe Flash: Heap overflow in AVC header slicing（CVE-2017-2935）

There is a heap overflow in the AVC header slicing. To reproduce the issue, put the attached files on a server and visit http://127.0.0.1/LoadImage.swf?img=slice.flv. Attachment: slice. flv LoadImage. swf...

Adobe Flash - ATF Thumbnailing Heap Overflow

Adobe Flash - ATF Thumbnailing Heap Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1015 The attached file causes an overflow in heap thumbnailing. To reproduce, place both attached files on a server and visit http://127.0.0.1/LoadImage.swf?img=thumb2.atf Proof of...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-04300)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash - ATF Planar Decompression Heap Overflow Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1016 The attached file causes heap corruption when decompressing a planar block. To reproduce the issue, but both attached files on a server and visit:...

Adobe Flash Player Security Updates (APSB17-07) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash - ATF Thumbnailing Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1015 The attached file causes an overflow in heap thumbnailing. To reproduce, place both attached files on a server and visit http://127.0.0.1/LoadImage.swf?img=thumb2.atf Proof of Concept:...

Adobe Flash - ATF Planar Decompression Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1016 The attached file causes heap corruption when decompressing a planar block. To reproduce the issue, but both attached files on a server and visit: http://127.0.0.1/LoadImage.swf?img=planar1.atf Proof of Concept:...

Adobe Flash - Metadata Parsing Out-of-Bounds Read

Adobe Flash - Metadata Parsing Out-of-Bounds Read Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept:...

Adobe Flash - MovieClip Attach init Object Use-After-Free Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1006 The attached file causes a use-after-free in attaching a MovieClip and applying the init object. Proof of Concept:...

Adobe Flash: Use-after-free in MovieClip attach init object (CVE-2017-2932)

The attached file causes a use-after-free in attaching a MovieClip and applying the init object. Attachment: init. swf...

Adobe Flash - AVC Header Slicing Heap Overflow

Adobe Flash - AVC Header Slicing Heap Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1017 There is a heap overflow in AVC header slicing. To reproduce the issue, put the attached files on a server and visit http://127.0.0.1/LoadImage.swf?img=slice.flv Proof of Concept:...

Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2017-04304)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2017-04302)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. Adobe Flash Player has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Adobe Flash - MovieClip Attach init Object Use-After-Free

Adobe Flash - MovieClip Attach init Object Use-After-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1006 The attached file causes a use-after-free in attaching a MovieClip and applying the init object. Proof of Concept:...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04298)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash: Out-of-Bounds Read in Metadata Parsing（CVE-2017-2931）

The attached file causes an out-of-bounds read when its metadata is parsed Attachment: meta. swf...

Adobe Flash - Metadata Parsing Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept:...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04299)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Security Updates (APSB17-07) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

CVE-2017-2998

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution...