Adobe Flash Player Remote Code Execution Vulnerability (CNVD-2015-06779)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player 19.0.0.207 and earlier versions. An attacker could exploit the vulnerability to cause the affected application to crash and ta...

Adobe Flash Player/AIR Memory Misreference Vulnerability (CNVD-2015-06880)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. Adobe AIR is a technology developed for the integration of web and desktop applications. A memory misreference vulnerability exists in the implementation of Adobe Flash Player/AIR. A remote attacker can...

Adobe Flash Player/AIR Memory Misreference Vulnerability (CNVD-2015-06876)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. Adobe AIR is a technology developed for the integration of web and desktop applications. A memory misreference vulnerability exists in the implementation of Adobe Flash Player/AIR. A remote attacker can...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2015-06714)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player versions prior to 18.0.0.255, 19.x-19.0.0.226 Windows and OS X, and 11.2.202.540 Linux. A remote attacker could exploit the...

Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)

Binary data 9004.prm...

Adobe Flash Player/AIR Memory Misreference Vulnerability (CNVD-2015-06878)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. Adobe AIR is a technology developed for the integration of web and desktop applications. A memory misreference vulnerability exists in the implementation of Adobe Flash Player/AIR. A remote attacker can...

MS KB3105216: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge

The remote Windows host is missing KB3105216. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647, CVE-2015-7648 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Adobe Flash Player <= 19.0.0.207 Vulnerability (APSB15-27)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 19.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647,...

Adobe Flash - IExternalizable.writeExternal Type Confusion

Adobe Flash - IExternalizable.writeExternal Type Confusion Source: https://code.google.com/p/google-security-research/issues/detail?id=547 If IExternalizable.writeExternal is overridden with a value that is not a function, Flash assumes it is a function even though it is not one. This leads to...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt55

3:11-alt55 built Oct. 19, 2015 Sergey V Turchin in task 151823 Oct. 19, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7645, CVE-2015-7647, CVE-2015-7648...

Adobe Flash Player for Mac <= 19.0.0.207 Vulnerability (APSB15-27)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 19.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt55

3:11-alt55 built Oct. 19, 2015 Sergey V Turchin in task 151824 Oct. 19, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7645, CVE-2015-7647, CVE-2015-7648...

RHEL 6 : flash-plugin (RHSA-2015:1913)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1913 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes three vulnerabiliti...

Adobe Flash - 'IExternalizable.writeExternal' Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=547 If IExternalizable.writeExternal is overridden with a value that is not a function, Flash assumes it is a function even though it is not one. This leads to execution of a 'method' outside of the ActionScript object's...

CVE-2015-7648

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647...

CVE-2015-7647

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7648...

CVE-2015-7642

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

CVE-2015-7641

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

CVE-2015-7640

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

CVE-2015-7639

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...