Adobe Flash Player <= 26.0.0.131 Multiple Vulnerabilities (APSB17-21)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 26.0.0.131. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit thi...

Adobe Flash Player BitmapData applyFilter Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Flash Player for Mac <= 26.0.0.131 Multiple Vulnerabilities (APSB17-21)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.131. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can...

Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)

A remote memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory read while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player CVE-2017-3099 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to an unspecified remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

KB4025376: Security update for Adobe Flash Player (July 2017)

The remote Windows host is missing security update KB4025376. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website...

SWFTools Denial of Service Vulnerability (CNVD-2017-15104)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfFoldSprite' function in the lib/rxfswf.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreferen...

scholastic.ca XSS vulnerability

Vulnerable URL: http://www.scholastic.ca/titles/keys/wednesday/flashdetection.swf?flashContentURL=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 05:35 GMT Vulnerability type:| XSS Vulnerability status:|...

The vulnerability of the MPEG-4 AVC software platform, Flash Player, allows attackers to execute arbitrary code.

The vulnerability of the MPEG-4 AVC software platform, Flash Player, arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Actionscript 2 class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Actionscript 2 class in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the LocaleID class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the LocaleID class in the Flash Player software platform arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the PNG image analyzer in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player allows a perpetrator to execute arbitrary code.

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotel...

The vulnerability of the Adobe Texture Format (ATF) module in the Flash Player software allows attackers to execute arbitrary code.

Vulnerability of the Adobe Texture Format ATF module in the Flash Player software platform. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed, caused by multiple masking of screen objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2017-10725

Winamp 5.666 Build 3516x86 allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at inflv!winampGetInModule2+0x00000000000009a8."...

Threat Actors Target Chinese Language News Sites

A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...

reservations.donpedrolake.com XSS vulnerability

Open Bug Bounty ID: OBB-256673 Description| Value ---|--- Affected Website:| reservations.donpedrolake.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the SDK functionality for metadata related to media playback profiles of the Flash Player allows attackers to execute arbitrary code.

The vulnerability of the SDK functionality for media playback profile metadata in the Flash Player lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-12722)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...