RTMPDump librtmp AMF3 Class Member Count Remote Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0067 RTMPDump librtmp AMF3 Class Member Count Remote Code Execution Vulnerability January 7, 2016 CVE Number CVE-2015-8271 Description The vulnerability occurs within the AMF3CDAddProp function within amf.c. If an attacker sets up a malicious RTMP Media serve...

Zerodium Offers $100,000 for Flash Zero-Day Exploit that Bypasses Mitigations

A well-known company popular for buying and selling zero-day vulnerabilities is now offering up to $100,000 for providing a working zero-day exploit for bypassing the Flash Player's Heap Isolation mitigation. Few months back, Adobe deployed Heap Isolation in Flash version 18.0.0209 with an aim at...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:2401-1)

This update for flash-player fixes the following issues : - CVE-2015-8644: Type confusion vulnerability that could lead to code execution . - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-864...

openSUSE Security Update : flash-player (openSUSE-2015-975)

This update for flash-player fixes the following issues : - Security update to 11.2.202.559 boo960317 : - APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:2402-1)

This update for flash-player fixes the following issues : - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640...

openSUSE Security Update : flash-player (openSUSE-2015-882)

This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. - These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. - These updates resolve memory corruption...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00008)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory misreference vulnerability that could be...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00007)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory misreference vulnerability that could be...

Adobe Flash Playe Memory Corruption Vulnerability (CNVD-2016-00004)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory corruption vulnerability that could be...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-00003)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory corruption vulnerability that could be...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00009)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory misreference vulnerability that could be...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-00005)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory corruption vulnerability that could be...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00006)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a memory misreference vulnerability that could be...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00015)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. On Windows and OS X platforms, Adobe Flash Player versions prior to...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:2401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Playe Memory Misreference Vulnerability (CNVD-2016-000167)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. On Windows and OS X platforms, Adobe Flash Player versions prior to...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-00017)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. On Windows and OS X platforms, Adobe Flash Player versions prior to...

Security update for flash-player (important)

This update for flash-player fixes the following issues: - Security update to 11.2.202.559 boo960317: APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,...

Security update for flash-player (important)

This update for flash-player fixes the following issues: - Security update to 11.2.202.559 boo960317: APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,...

SUSE-SU-2015:2402-1 Security update for flash-player

This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640,...