Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address a vulnerability in Flash Player. A remote attacker could exploit this vulnerability to obtain sensitive information. NCCIC/US-CERT encourages users and administrators to review Adobe Security Bulletin APSB18-01 and apply the necessary updates. This...

Adobe Flash Player Out-of-bounds Read (APSB18-01: CVE-2018-4871)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

KB4056887: Security update for Adobe Flash Player (January 2018)

The remote Windows host is missing security update KB4056887. It is, therefore, affected by a an out-of-bounds read vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105693; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/08"; scriptcveid"CVE-2018-4871";...

Flash Player -- information disclosure

Adobe reports: This update resolves an out-of-bounds read vulnerability that could lead to information disclosure CVE-2018-4871...

APSB18-01 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address an important out-of-bounds read vulnerability that could lead to information exposure...

Adobe Flash Player for Mac <= 28.0.0.126 (APSB18-01)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 28.0.0.126. It is, therefore, affected by a an out-of-bounds read vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105692; scriptversion"1.7";...

Adobe Flash Player Out-Of-Bounds Read Information Disclosure Vulnerability

Description Adobe Flash Player is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Adobe Flash Player 10 Adobe Flash Player 10.0.0.584 Adobe Flash Player 10.0.12 .35 Adobe Fla...

libming denial of service vulnerability (CNVD-2018-03975)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readSBits' function in the util/read.c file in libming version 0.4.8. A remote attacker can exploit th...

Flash Operator Panel v2.31.03 - Command Execution

Document Title: =============== Flash Operator Panel v2.31.03 - Command Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1907 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5694 CVE-ID: ======= CVE-2018-5694 Release Date: =============...

Flash Operator Panel v2.31.03 - Command Execution

Document Title: =============== Flash Operator Panel v2.31.03 - Command Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1907 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5694 CVE-ID: ======= CVE-2018-5694 Release Date: =============...

Liferay Portal CE /html/portal/flash.jsp page cross-site scripting vulnerability

Liferay Portal CE is an open source enterprise networking platform. The platform is used to build company operations, business solutions. A cross-site scripting vulnerability exists in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and earlier versions. A remote attacker can exploit...

MGASA-2017-0462 Updated flash-player-plugin packages fix security vulnerability

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data. CVE-2017-11305...

Updated flash-player-plugin packages fix security vulnerability

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data. CVE-2017-11305...

Adobe Flash Player BitmapData hitTest Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Flash LocaleID determinePreferredLocales Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

WordPress: MediaElements XSS

The reporter disclosed a reflected XSS vulnerability in MediaElement's Flash files, which are bundled in WordPress. MediaElement and WordPress released versions 4.2.8 and 4.9.2, respectively, which resolve the issue...

Adobe Flash Player Unauthorized Operation Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. A remote attacker could exploit this vulnerability to perfo...

CVE-2017-3190

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

Format string

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

CVE-2017-3190

CVE-2017-3190 affects Flash Seats Mobile App for Android (1.7.9 and earlier) and iOS (1.9.51 and earlier). Root cause is improper SSL certificate validation during HTTPS connections, enabling potential MITM attacks and exposure of sensitive data. Vendor fixes are available: Android 1.7.10 and iOS...