Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-03156)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player/AIR's handling of swf...

Adobe Flash Player Authentication Bypass Arbitrary Data Write Vulnerability (CNVD-2015-03208)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A vulnerability exists in Adobe Flash Player/AIR's handling of swf content, which can ...

Unspecified Integer Overflow Vulnerability in Adobe Flash Player

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. An integer overflow vulnerability exists in Adobe Flash Player/AIR's handling of swf...

Adobe Flash Player Denial of Service Vulnerability (CNVD-2015-02529)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A denial of service vulnerability exists in Adobe Flash Player. The vulnerability can be exploited to construct...

Adobe Flash Player Information Disclosure Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An information disclosure vulnerability exists in Adobe Flash Player. The vulnerability can be exploited to...

Adobe Flash Player Denial of Service Vulnerability (CNVD-2015-02527)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A denial of service vulnerability exists in Adobe Flash Player. The vulnerability can be exploited to construct...

Adobe Flash Player Denial of Service Vulnerability (CNVD-2015-02526)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A denial of service vulnerability exists in Adobe Flash Player. The vulnerability can be exploited to construct...

Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

chromium-browser: Use-after-free in pepper plugins

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's...

CVE-2014-7906

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's...

CVE-2014-7906

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's...

CVE-2014-7906

CVE-2014-7906 describes a use-after-free in the Pepper plugins of Google Chrome prior to 39.0.2171.65. A crafted Flash content exploit can trigger a PepperMediaDeviceManager access outside of the object’s lifetime, potentially causing a denial of service and other impacts. The remediation is to u...

CVE-2014-7906

Removed by vendor...

Adobe Flash Player and AIR String Concatenation Integer Overflow (CVE-2014-0550)

An integer overflow vulnerability exists in Adobe Flash Player. Successful exploitation could result in arbitrary code execution in the context of the currently logged in user. The vulnerability is due to an error while concatenating large strings. A remote attacker could exploit this vulnerabili...

Uzbey: Flash Content-Type Sniffing Vulnerability

Hello, There's a Flash Content-Type Sniffing vulnerability. Using this vulnerability I can read the client side source code of your website from a different origin say prakharprasad.com and then look for potentially sensitive data in those pages for example - CSRF prevention tokens and then...

Flash content-type sniffing allows Cross Site Data Hijacking

As documented at http://blog.detectify.com/post/86298380233/the-pitfalls-of-allowing-file-uploads-on-your-website it is possible to upload a flash file to confluence with a different content-type than for flash and when embedded on an attacker's domain will be able to make requests to the...

VulnCheck KEV: CVE-2013-0648

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content...

PT-2012-1237 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 11.3.300.271 on Windows and Mac OS X Adobe Flash Player versions prior to 11.2.202.238 on Linux Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service...

Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Mac OS X)

This host is installed with Adobe Flash Player and is prone to object confusion remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerobjcodeexecvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Adobe Flash Player Object Confusion Remote Code Execution...

Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Linux)

This host is installed with Adobe Flash Player and is prone to object confusion remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerobjcodeexecvulnlin.nasl 5956 2017-04-14 09:02:12Z teissa $ Adobe Flash Player Object Confusion Remote Code Execution Vulnerability...