KLA11008 Arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerability related to masking display objects can be exploited remotely to execu...

Adobe Flash Player Use After Free Code Execution (APSB17-15: CVE-2017-3071)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-15: CVE-2017-3070)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-15: CVE-2017-3068)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted FLV file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted FLV file...

PT-2017-2034 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a memory corruption vulnerability in the Graphics class. This vulnerability can be exploited to achieve arbitrary code execution. The cause of the...

PT-2017-2035 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a use after free vulnerability in the handling of mask properties of display objects, which can lead to memory corruption. Successful exploitation could...

PT-2017-2037 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a use after free vulnerability when masking display objects, which could lead to arbitrary code execution if successfully exploited. This vulnerability is...

PT-2017-2039 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a memory corruption vulnerability in the BlendMode class. This vulnerability can be exploited to achieve arbitrary code execution. The problem is caused b...

Adobe Flash Player for Mac <= 25.0.0.163 Multiple Vulnerabilities (APSB17-15)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 25.0.0.163. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-30...

KB4020821: Security update for Adobe Flash Player (May 2017)

The remote Windows host is missing security update KB4020821. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-3071 - Multiple memory corruption issues exist that allow an...

Adobe Flash Player Memory Corruption (APSB17-15: CVE-2017-3073)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-15: CVE-2017-3072)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

PT-2017-2036 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a memory corruption vulnerability in the BitmapData class of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could...

PT-2017-2038 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a memory corruption vulnerability in the ConvolutionFilter class. This vulnerability is caused by a buffer overflow in memory, which could allow a remote...

KLA11022 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11008. Original advisories ADV170006 Related products Microsoft-Windows CVE list KB list 4020821 Solution Install necessary updates from the KB section, that are listed in your Windo...

PT-2017-2040 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is caused by a buffer overflow in memory due to an operation exceeding its boundaries in the Advanced Video Coding engine of the Flash Player platform. This can allow a...

Adobe Flash Player <= 25.0.0.148 Multiple Vulnerabilities (APSB17-15)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 25.0.0.148. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-3071 -...

[ASA-201705-9] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201705-9 ========================================= Severity: Critical Date : 2017-05-09 CVE-ID : CVE-2017-3068 CVE-2017-3069 CVE-2017-3070 CVE-2017-3071 CVE-2017-3072 CVE-2017-3073 CVE-2017-3074 Package : lib32-flashplugin Type : arbitrary code execution Remote :...

CVE-2017-5240

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash...

CVE-2017-5240

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash...