159 matches found
flash-plugin: critical flaws fixed in APSB11-26
Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors...
Adobe Flash Player ActionScript Recursive StackOverflowError (APSB11-26; CVE-2011-2426)
The vulnerability is due to an error in the ActionScript Virtual Machine AVM while handling malicious Flash files. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a web-page containing specially crafted Flash files. Successful exploitation may allow an...
Adobe Flash Player AVM栈溢出漏洞(CVE-2011-2426)
BUGTRAQ ID: 49714 CVE ID: CVE-2011-2426 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在AVM的实现上存在栈溢出漏洞，远程攻击者可利用此漏洞执行任意代码 Adobe Flash Player 9.x Adobe Flash Player 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-26）以及相应补丁: APSB11-26：Security update available for Adobe Flash Player...
Adobe Flash Player AVM栈溢出漏洞(CVE-2011-2427)
BUGTRAQ ID: 49715 CVE ID: CVE-2011-2427 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在AVM的实现上存在栈溢出漏洞，远程攻击者可利用此漏洞执行任意代码。 Adobe Flash Player 9.x Adobe Flash Player 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-26）以及相应补丁: APSB11-26：Security update available for Adobe Flash Player...
CVE-2011-2427
Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...
Flash Player <= 10.3.183.7 Multiple Vulnerabilities (APSB11-26)
According to its version, the instance of Flash Player installed on the remote Windows host is 10.3.183.7 or earlier. It is, therefore, reportedly affected by several critical vulnerabilities : - Multiple AVM stack overflow vulnerabilities could lead to code execution. CVE-2011-2426, CVE-2011-242...
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)
A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...
Adobe Flash Player AVM Bytecode Verification vulnerability-vulnerability warning-the black bar safety net
Adobe Flash Player 9.0-10.0 not properly validate the byte stream before executing it, leading to uninitialized memory in the code is executed. Use the heap spray technique to control it is to not initialize the memory area may execute arbitrary code. +info: Adobe Flash Player AVM Bytecode...
Adobe Flash Player AVM Bytecode Verification
$Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe Flash Player AVM Bytecode Verification Vulnerability
This module exploits a vulnerability in Adobe Flash Player versions 10.2.152.33 and earlier. This issue is caused by a failure in the ActionScript3 AVM2 verification logic. This results in unsafe JITJust-In-Time code being executed. This is the same vulnerability that was used for the RSA attack ...
Adobe Flash Player AVM Bytecode验证符多个整数溢出漏洞
BUGTRAQ ID: 40779 CVE ID: CVE-2010-2160 Flash Player是一款非常流行的FLASH播放器。 Flash Player在解析Adobe的ActionScript Virtual Machine 2 bytecode中的opcode时存在整数溢出漏洞。这个opcode的运算符用作了到结构的偏移，如果设置为恶意的值就可能执行受控的数据。结构中包含有之后会被调用的函数指针，如果攻击者将受控数据修改为指向无效的偏移，这个函数指针就可能设置为指向恶意的代码，导致以运行浏览器用户的权限执行任意代码。 此外AVM...
ZDI-10-115: Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability
ZDI-10-115: Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-115 June 25, 2010 -- CVE ID: CVE-2010-2160 -- Affected Vendors: Adobe -- Affected Products: Adobe Flash Player -- TippingPointTM IPS Customer...
Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AVM...
Flash Player vulnerabilities of the new use of the method-vulnerability warning-the black bar safety net
Source: Phantom maillist Two days before the recommended Mark Dowd's Paper “Exploiting Flash Reliably” Learn a little, very good very powerful. For later Flash Player exploits has opened up a new new road. Simple to say, from Flash9 to start, to achieve an ActionScript Virtual Machine AVM, the...
Code injection
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
CVE-2007-0431 affects AVM FRITZ!Box devices (e.g., Fritz!Box 7050) with a VoIP/SIP service. The vulnerability is triggered by sending a zero-length UDP packet to the SIP port (5060), which can cause a denial-of-service (VoIP application crash). Connected sources (NVD/OpenVAS) confirm the affected...
AVM FRITZ!Box VoIP远程拒绝服务漏洞
FRITZ！Box是AVM公司开发出的无线连接电脑与音响、电视的盒子，可以通过无线局域网连接将电脑里的所有数字内容传输到高档音响设备和大型等离子电视上。 FRITZ！Box在处理某些UDP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向Fritz!Box的5060 （SIP）端口发送了0长度的UDP报文的话，就会导致VoIP电话应用程序崩溃。 AVM Fritz!Box 7050 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...