92 matches found
flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)
A use-after-free flaw was found in the Adobe Flash Player. This flaw an attacker to perform arbitrary code execution when the Flash player is used to play a specially crafted SWF file. The highest threat from this vulnerability is to confidentiality, integrity and system availability...
libming integer overflow vulnerability (CNVD-2019-22617)
libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. An integer overflow vulnerability exists in the SWFInputreadSBits function in blocks/input.c in libming 0.4.8. An attacker can exploit this vulnerability to cause a denial of service via a specially crafte...
The software for Cisco WebEx Business Suite, WebEx Meetings, and WebEx Meetings Server is vulnerable due to insufficient validation of input data. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of Cisco WebEx Business Suite, WebEx Meetings, and WebEx Meetings Server software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted flash file .swf using the...
Libming Null Pointer Dereference Vulnerability
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getInt' function of the decompile.c file in libming version 0.4.8. A remote attacker can exploit this...
Memory Misreference Vulnerability in libming 'decompileSingleArgBuiltInFunctionCall' Function
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileSingleArgBuiltInFunctionCall' function in the decompile.c file in libming version...
UBUNTU-CVE-2018-8964
In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...
UBUNTU-CVE-2018-8962
In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...
UBUNTU-CVE-2018-8807
In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...
Memory Misreference Vulnerability in libming 'decompileCALLFUNCTION' Function
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileCALLFUNCTION' function of the decompile.c file in libming version 0.4.8. A remote...
libming denial of service vulnerability (CNVD-2017-34968)
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A denial of service vulnerability exists in the 'outputSWFTEXTRECORD' function in the util/outputscript.c file in libming 0.4.8 and earlier...
D-Link DCS Cross-Site Forgery Request Vulnerability
D-Link DCS-933L and others are wireless surveillance camera devices from AUO D-Link. A security vulnerability exists in several D-Link DCS cameras. An attacker can exploit the vulnerability with the help of a specially crafted Flash file to retrieve information from Live Feeds or Camera, add new...
UBUNTU-CVE-2017-7578
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...
MS16-141: Security Update for Adobe Flash Player (3202790)
The remote Windows host is missing KB3202790. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a website containing specially crafted Flash content...
The vulnerability of the Flash Player software allows a malicious attacker to execute arbitrary code or cause a service failure.
The Flash Player software contains a vulnerability that stems from the use of memory after decompression in the ByteArray::UncompressViaZlibVariant function. This vulnerability can be exploited by malicious actors using a specially crafted swf file. As a result of exploiting this vulnerability,...
IBM Emptoris Contract Management Arbitrary Code Execution Vulnerability
IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...
Arbitrary file deletion
IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...
CVE-2015-5042
IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...
Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08258)
Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted SWF file...
