Adobe Flash Player PSDKEventDispatcher Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Watch Out! First-Ever Word Macro Malware for Apple Mac OS Discovered in the Wild

After targeting Windows-based computers over the past few years, hackers are now shifting their interest to Macs as well. The emergence of the first macro-based Word document attack against Apple's macOS platform is the latest example to prove this. The concept of Macros dates back to 1990s. You...

Nested, Targeted Attacks Built for Reconnaissance

Researchers say members of the North Atlantic Treaty Organization were targeted during the holidays by a unique document-based attack that evades discovery by lying dormant when it detects a security researcher’s test environment. Characteristics of this attack, according to researchers at Cisco...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2937)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2936)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2932)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-02: CVE-2017-2930)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-02: CVE-2017-2931)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player - Integer Overflow

// Exploit Title: Adobe Flash Player - Integer Overflow // Exploit Author: Matteo Memelli ryujin@offensive-security // Date: 14/01/2017 // Original PoC: https://bugs.chromium.org/p/project-zero/issues/detail?id=323&can=1&q=Shader // CVE: CVE-2015-3104 // Reference:...

Hardening Windows 10 with zero-day exploit mitigations

Cyberattacks involving zero-day exploits happen from time to time, affecting different platforms and applications. Over the years, Microsoft security teams have been working extremely hard to address these attacks. While delivering innovative solutions like Windows Defender Application Guard, whi...

MGASA-2017-0014 Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 24.0.0.194 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for CVE-2016-7892 exists in the wild, and is being used in limite...

Adobe Flash Player Memory Corruption (APSB17-02: CVE-2017-2926)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted mp4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

openSUSE Security Update : flash-player (openSUSE-2017-71)

This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02 : - security bypass vulnerability that could lead to information disclosure CVE-2017-2938 - use-after-free vulnerabilities that could lead to code execution CVE-2017-2932, CVE-2017-2936, CVE-2017-293...

Adobe Flash Player Memory Corruption (APSB17-02: CVE-2017-2928)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:24-alt0.M70P.2

3:24-alt0.M70P.2 built Jan. 12, 2017 Sergey V Turchin in task 176069 Jan. 11, 2017 Sergey V Turchin - new version - security fixes: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:24-alt0.M70P.2

3:24-alt0.M70P.2 built Jan. 12, 2017 Sergey V Turchin in task 176070 Jan. 11, 2017 Sergey V Turchin - new version - security fixes: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936,...

RHEL 6 : flash-plugin (RHSA-2017:0057)

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Flash Player < 24.0.0.194 Multiple Vulnerabilities (APSB17-02)

Binary data 9863.prm...

Adobe Flash Player Heap Buffer Overflow (APSB17-02: CVE-2017-2927)

heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0108-1)

This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02 : - security bypass vulnerability that could lead to information disclosure CVE-2017-2938 - use-after-free vulnerabilities that could lead to code execution CVE-2017-2932, CVE-2017-2936, CVE-2017-293...