swftools 缓冲区错误漏洞

SWFTools is a collection of utilities that work with Adobe Flash files SWF files. SWFTools has a heap buffer overflow vulnerability that can be exploited by attackers to cause code execution...

swftools 缓冲区错误漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause code execution...

swftools 代码问题漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

The software’s vulnerability allows for manipulation of Adobe Flash files, enabling a perpetrator to cause service failure.

The vulnerability of the software for manipulating Adobe Flash FLV files, flvmeta, arises due to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted file...

CloudForms: Cross Site Request Forgery in API notifications

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash fi...

Design/Logic Flaw

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

Fedora Update for ming FEDORA-2019-5139453028

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress 3.7.x < 3.7.17 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

WordPress 4.4.x < 4.4.6 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

[SECURITY] Fedora 28 Update: ming-0.4.8-8.fc28

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

Denial of Service Vulnerability in SWFTools Software swfstrings Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the SWFTools software swfstrings module. An attacker working with malformed SWF files can cause the program to crash and, if successfully exploited, can lead to arbitrary co...

Denial of Service Vulnerability in SWFTools Software swfrender Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the swfrender module of the SWFTools software. An attacker working with malformed SWF files can cause the program to crash, which could lead to arbitrary code execution if t...

Denial of service vulnerability in SWFTools software swfdump module [3]

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the SWFTools software swfdump module 3. An attacker working with malformed SWF files can cause the program to crash and, if successfully exploited, can lead to arbitrary cod...

Denial of service vulnerability in SWFTools software swfdump module [1]

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the SWFTools software swfdump module 1. An attacker working with malformed SWF files can cause the program to crash and, if successfully exploited, can lead to arbitrary cod...

Denial of Service Vulnerability in SWFTools Software swfdump Module [2]

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the SWFTools software swfdump module 2. An attacker working with malformed SWF files can cause the program to crash and, if successfully exploited, can lead to arbitrary cod...

flash-plugin: Remote Code Execution due to Type Confusion issue fixed in APSB17-23

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

SWFTools Denial of Service Vulnerability (CNVD-2017-15104)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfFoldSprite' function in the lib/rxfswf.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreferen...

Starbucks: Possible SOP bypass in www.starbucks.com due to insecure crossdomain.xml

Hello. I was penetration testing your website, and noticed that your crossdomain.xml file allowed many sites access. I went through and, for all the sites that had .website.com with them, I scanned them for subdomains. I found that a subdomain for ███████.com a site in your crossdomain.xml as...

Rapid7 AppSpider Pro 'FLAnalyzer.exe' Buffer Overflow Vulnerability

AppSpider is a DAST solution designed to help application security personnel test applications as part of DevOps and as part of a scheduled scanning program. A buffer overflow vulnerability in the FLAnalyzer.exe component of Rapid7 AppSpider Pro can be exploited by an attacker to cause a denial o...

CVE-2017-5240

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash...