CVE-2017-2926

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2925

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2935

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2928

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2928

Affected software: Adobe Flash Player versions 24.0.0.186 and earlier. Vulnerability: exploitable memory corruption in the JPEG XR/visual mode handling that could enable arbitrary code execution. Impact (as stated): remote code execution on the affected host. Status in connected sources: multiple...

CVE-2017-2933

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2927

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2937

CVE-2017-2937 affects Adobe Flash Player before 24.0.0.194/24.0.0.186 and earlier. A use-after-free in the ActionScript FileReference class (when using class inheritance) can be exploited to execute arbitrary code remotely. The issue is confirmed in multiple advisories; mitigation documented as u...

CVE-2017-2927

CVE-2017-2927 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable heap overflow when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. The issue is confirmed in multiple advisories; a fix is available upstream in Fla...

CVE-2017-2938

Adobe Flash Player 24.x vulnerable: CVE-2017-2938 is a security bypass in the handling of TCP connections affecting Flash Player versions up to 24.0.0.186. Remediation per connected documents is upgrading to the patched build (24.0.0.194 or later) as part of APSB17-02/openSUSE update openSUSE-201...

CVE-2017-2925

CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...

CVE-2017-2931

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2017-2936

Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...

CVE-2017-2935

CVE-2017-2935 affects Adobe Flash Player 24.0.0.186 and earlier. Root cause: a heap overflow when processing the Flash Video container file format, leading to arbitrary code execution. Documents indicate an exploit exists (Exploit-DB link) and multiple advisories/patches recommend upgrading to ve...

CVE-2017-2938

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections...

CVE-2017-2926

CVE-2017-2926 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable memory corruption in MP4 atom processing that could lead to arbitrary code execution. Connected advisories confirm the issue across multiple packages and architectures, recommending upgrade to Flash Play...

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption (2)

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption 2 Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website:...

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption Exploit

Exploit for multiple platform in category dos / poc Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-00381)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...