CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2016-7867

CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...

CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7877

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization AFM0. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2016-7875

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7878

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7881

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7879

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution. Recent assessments: gwillcox-r7 at November 22, 2020 3:24am UTC reported: Reported ...

Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe

Targeted attacks are typically carried out against individuals to obtain intellectual property and other valuable data from target organizations. These individuals are either directly in possession of the targeted information or are able to connect to networks where the information resides...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2016-12390)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the user context of an affected application. A failed explo...

Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12358)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12384)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12383)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-12379)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise control of a system...