CVE-2017-2995

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2990

CVE-2017-2990 is an Adobe Flash Player memory corruption vulnerability in the h264 decompression routine affecting version 24.0.0.194 and earlier; exploitation could lead to arbitrary code execution. Remediation is to upgrade to 24.0.0.221 (or later) per advisories from Arch Linux and other sourc...

CVE-2017-2992

CVE-2017-2992 is a heap-based buffer overflow vulnerability in Adobe Flash Player triggered while parsing an MP4 header. It affects versions up to 24.0.0.194 (and earlier) per the CVE entry, with multiple advisories confirming a fix in 24.0.0.221 or later. The issue could allow arbitrary code exe...

CVE-2017-2988

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2994

CVE-2017-2994 affects Adobe Flash Player prior to 24.0.0.221, involving a use-after-free in the Primetime SDK event dispatch that could lead to arbitrary code execution . The vulnerability is described as remote in multiple advisories and vendor bulletins, with impact stated as the ability for a ...

CVE-2017-2985

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-01788)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory misreference vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-01784)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. The Adobe Flash Player heap buffer overflow vulnerability can be exploited by an attacker to compromise a vulnerable system, resulting in arbitrary code execution...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-01791)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory misreference vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

PT-2017-1251 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.194 and earlier Description: The issue is related to a heap overflow vulnerability in the h264 decoder routine. This vulnerability could lead to arbitrary code execution if successfully exploited. The proble...

Adobe Flash Player Integer Overflow Vulnerability (CNVD-2017-01780)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. An integer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to construct a malicious web page and trick users into parsing it, which can...

Adobe Flash Player Heap Buffer Overflow Vulnerability (CNVD-2017-01785)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A heap buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise an affected system, resulting in arbitrary code execution...

PT-2017-1246 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.194 and earlier Description: The issue is caused by a buffer overflow in the h264 decompression routine of the Flash Player software platform. This can allow a remote attacker to execute arbitrary code,...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2017-01779)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. Adobe Flash Player suffers from a type-obfuscation vulnerability, which can be exploited by an attacker to execute arbitrary code via type-obfuscation...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-01789)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory misreference vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-01790)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory misreference vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

PT-2017-1252 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.194 and earlier Description: The issue is related to a use after free vulnerability in a routine associated with player shutdown. Successful exploitation could lead to arbitrary code execution. The...

PT-2017-1248 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.194 and earlier Description: The issue is related to an integer overflow vulnerability in Flash Broker COM, which could lead to arbitrary code execution if successfully exploited. Recommendations: For Adobe...