CVE-2017-3075

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3075

CVE-2017-3075 affects Adobe Flash Player: a use-after-free in the ActionScript 2 XML handling can allow remote code execution. Affected are Flash Player versions earlier than 26.0.0.126; exploitation can lead to arbitrary code execution. Public advisories (MSRC, Arch Linux) instruct upgrading to ...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2017-3081

CVE-2017-3081 affects Adobe Flash Player. A use-after-free in internal computation caused by multiple display object mask manipulations can be exploited remotely to execute arbitrary code. Affected version: Flash Player 25.0.0.171 and earlier. Several connected advisories indicate fixes in later ...

CVE-2017-3078

CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...

pco.noaa.gov XSS vulnerability

Open Bug Bounty ID: OBB-250681 Description| Value ---|--- Affected Website:| pco.noaa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rockstar Games: flash injection in http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf

In this report, the researcher found a vulnerability in one of our Flash players http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf that allowed loading of external .swf files. This in turn allowed the researcher to perform a XSS attack...

FreeBSD : Flash Player -- multiple vulnerabilities (cd944b3f-51f6-11e7-b7b2-001c25e46b1d)

Adobe reports : - These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084. - These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-3076, CVE-2017-3077,...

MGASA-2017-0172 Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 26.0.0.126 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities and memory corruption vulnerabilities that could lead to...

Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 26.0.0.126 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities and memory corruption vulnerabilities that could lead to...

DHS, FBI Warn of North Korea 'Hidden Cobra' Strikes Against US Assets

United States top cybersecurity cops warned Tuesday that North Korean government threat actors are targeting U.S. businesses with malware and botnet-related attacks that are part of concerted effort dubbed “Hidden Cobra.” According to a United States Computer Emergency Readiness Team US-CERT...

Patch Tuesday - June 2017

This month sees another spate of critical fixes from Microsoft, including patches for a number of Remote Code Execution RCE vulnerabilities. Two of these are already known to be exploited in the wild CVE-2017-8543 and CVE-2017-8464. Today's patches are so crucial that Microsoft has once again...

US Warns of 'DeltaCharlie' – A North Korean DDoS Botnet Malware

The United States government has released a rare alert about an ongoing, eight-year-long North Korean state-sponsored hacking operation. The joint report from the FBI and U.S. Department of Homeland Security DHS provided details on "DeltaCharlie," a malware variant used by "Hidden Cobra" hacking...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2017-10258)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. A remote attacker could exploit this vulnerability to execu...

Camstudio 2.0 XSS / XSF / Content Forgery

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

Adobe Flash Player Security Update (APSB17-17) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Within Google Chrome Security Update (APSB17-17) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

[ASA-201706-14] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201706-14 ========================================== Severity: Critical Date : 2017-06-14 CVE-ID : CVE-2017-3075 CVE-2017-3076 CVE-2017-3077 CVE-2017-3078 CVE-2017-3079 CVE-2017-3081 CVE-2017-3082 CVE-2017-3083 CVE-2017-3084 Package : flashplugin Type : arbitrary...

[ASA-201706-15] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201706-15 ========================================== Severity: Critical Date : 2017-06-14 CVE-ID : CVE-2017-3075 CVE-2017-3076 CVE-2017-3077 CVE-2017-3078 CVE-2017-3079 CVE-2017-3081 CVE-2017-3082 CVE-2017-3083 CVE-2017-3084 Package : lib32-flashplugin Type :...