Adobe Flash - Processing AVC Causes Stack Corruption

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

GLSA-201601-03 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201601-03 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Gentoo Security Advisory GLSA 201601-03

Gentoo Linux Local Security Checks GLSA 201601-03 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Adobe Flash BlurFilter Processing - Out-of-Bounds Memset

Adobe Flash BlurFilter Processing - Out-of-Bounds Memset Source: https://code.google.com/p/google-security-research/issues/detail?id=627 The attached swf file causes an out-of-bounds memset in BlurFilter processing. Note that Chrome aborts when processing the swf Proof of Concept:...

Adobe Flash - Use-After-Free When Setting Stage

Adobe Flash - Use-After-Free When Setting Stage Source: https://code.google.com/p/google-security-research/issues/detail?id=629 The attached file causes a use-after-free when calling the stage setter. The PoC works most consistently in Firefox for 64-bit Windows. Proof of Concept:...

Adobe Flash - Use-After-Free When Setting Stage

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=629 The attached file causes a use-after-free when calling the stage setter. The PoC works most consistently in Firefox for 64-bit Windows. Proof of Concept:...

Adobe Flash - Use-After-Free When Rendering Displays From Multiple Scripts (1)

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=628 There is a use-after-free that appears to be related to rendering the display based on multiple scripts. A PoC is attached, tested on Windows only. Note the PoC is...

Adobe Flash BlurFilter Processing - Out-of-Bounds Memset

Source: https://code.google.com/p/google-security-research/issues/detail?id=627 The attached swf file causes an out-of-bounds memset in BlurFilter processing. Note that Chrome aborts when processing the swf Proof of Concept:...

Adobe Flash - Use-After-Free When Setting Stage

Source: https://code.google.com/p/google-security-research/issues/detail?id=629 The attached file causes a use-after-free when calling the stage setter. The PoC works most consistently in Firefox for 64-bit Windows. Proof of Concept:...

Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (1)

Source: https://code.google.com/p/google-security-research/issues/detail?id=628 There is a use-after-free that appears to be related to rendering the display based on multiple scripts. A PoC is attached, tested on Windows only. Note the PoC is somewhat unreliable on some browsers, sometimes it...

Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (1)

Adobe Flash Multiple Scripts - Use-After-Free When Rendering Displays 1 Source: https://code.google.com/p/google-security-research/issues/detail?id=628 There is a use-after-free that appears to be related to rendering the display based on multiple scripts. A PoC is attached, tested on Windows onl...

VulnCheck KEV: CVE-2016-0984

Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code...

Adobe Flash BlurFilter Processing - Out-of-Bounds Memset

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=627 The attached swf file causes an out-of-bounds memset in BlurFilter processing. Note that Chrome aborts when processing the swf Proof of Concept:...

Flash Player < 20.0.0.267 Multiple Vulnerabilities (APSB16-01)

Binary data 9041.prm...

Flash Player < 19.0.0.245 Multiple Vulnerabilities (APSB15-28)

Binary data 9039.prm...

Flash Player < 20.0.0.228 Multiple Vulnerabilities (APSB15-32)

Binary data 9040.prm...

Zerodium Offers $100K for Adobe Flash Heap Isolation Bypasses

Despite calls to eliminate Adobe Flash Player, researchers inside and outside the vendor continue to invest in and build mitigations against modern attacks. As recently as three weeks ago, Adobe announced it had rewritten its memory manager, laying the groundwork for widespread heap isolation,...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00008)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory misreference vulnerability that could be...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-00003)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory corruption vulnerability that could be...