CVE-2017-7680

CVE-2017-7680 affects Apache OpenMeetings 1.0.0. The issue is an overly permissive crossdomain.xml file, allowing flash content to be loaded from untrusted domains. Root cause: crossdomain policy grants loading from external domains, enabling potential cross-domain interactions. Impact is the abi...

CVE-2017-3099

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3100

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure...

CVE-2017-3080

CVE-2017-3080 is a vulnerability in Adobe Flash Player (pre-26.0.0.137) that enables information disclosure and is tied to a security bypass in the Flash API used by Internet Explorer. Connected advisories and records confirm the issue affects Flash Player

CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

CVE-2017-3100

Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...

CVE-2017-3099

Adobe Flash Player

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2017-15119)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An information disclosure vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability...

The vulnerabilities of the software platforms Flash Player for Linux, Flash Player, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release allow attackers to gain access to protected information.

The vulnerability of the Flash Player software platforms such as Flash Player for Linux, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

FreeBSD : Flash Player -- multiple vulnerabilities (a03e043a-67f1-11e7-beff-6451062f0f7a)

Adobe reports : - These updates resolve security bypass vulnerability that could lead to information disclosure CVE-2017-3080. - These updates resolve memory corruption vulnerability that could lead to remote code execution CVE-2017-3099. - These updates resolve memory corruption vulnerability th...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2017-15120)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An information disclosure vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability...

Adobe Flash Player Remote Memory Corruption Vulnerability (CNVD-2017-23470)

Adobe Flash Player is a multimedia program player. A memory corruption vulnerability exists in Adobe Flash Player that could be exploited by remote attackers to construct a malicious SWF file that could be parsed by the user, causing the application to crash or execute arbitrary code...

RHEL 6 : flash-plugin (RHSA-2017:1731)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:1731 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

flash-plugin: information disclosure issues fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

flash-plugin: information disclosure issues fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure...

flash-plugin: code execution issue fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player Security Update (APSB17-21) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash BrokerCreateFile Broker Method Information Disclosure Vulnerability

This vulnerability allows remote attackers to bypass the Enhanced Protected Mode sandbox of vulnerable installations of Adobe Flash Player and disclose file contents. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

Adobe Flash Player Within Google Chrome Security Update (APSB17-21) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...