flash -- multiple vulnerabilities

Adobe reports: These updates resolve a security bypass vulnerability that could lead to information disclosure CVE-2017-2938. These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2017-2932, CVE-2017-2936, CVE-2017-2937. These updates resolve heap buffer...

PT-2017-1124 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a heap overflow when processing Adobe Texture Format files, which could lead to arbitrary code execution. This is caused by a buffer overflow in memory,...

KLA10937 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10936. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

PT-2017-1126 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a memory corruption vulnerability in the JPEG XR codec of Adobe Flash Player. This vulnerability can be exploited to achieve arbitrary code execution. The...

PT-2017-1116 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a use after free vulnerability in the ActionScript FileReference class, which can be exploited by a remote attacker to execute arbitrary code...

Adobe Flash Player <= 24.0.0.186 Multiple Vulnerabilities (APSB17-02)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 24.0.0.186. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-292...

PT-2017-1123 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a memory corruption problem when setting visual mode effects, which could lead to arbitrary code execution if successfully exploited. This is caused by a...

Adobe Flash Player for Mac <= 24.0.0.186 Multiple Vulnerabilities (APSB17-02)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 24.0.0.186. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code...

PT-2017-1119 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is caused by a heap overflow in memory due to a buffer operation exceeding its boundaries. This can allow a remote attacker to execute arbitrary code. The heap overflow...

PT-2017-1120 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a use after free vulnerability in the ActionScript MovieClip class. This vulnerability could allow a remote attacker to execute arbitrary code. The...

PT-2017-1118 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a heap overflow when parsing Adobe Texture Format files, which could lead to arbitrary code execution. This is caused by a buffer overflow in memory,...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Acrobat, Reader, and Flash Player. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe Security Bulletin...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

flash-game.net XSS vulnerability

Vulnerable URL: http://www.flash-game.net/search.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 183057 VIP website status:| No Check flash-game.net SSL connection:| Grade: ...

KLA11171 OSI vulnerability in Adobe Flash Player

Out-of-bounds read vulnerability in Adobe Flash Player can be exploited locally to obtain sensitive information. Technical details To update Adobe Flash Player ActiveX detected as Flash.ocx on Windows 8 and higher, install latest updates from Control Panel Original advisories APSB18-01 Exploitati...

Intel(R) NVMUpdate -- Intel(R) Ethernet Controller X710/XL710 NVM Security Vulnerability

Intel Corporation reports: A security vulnerability in the IntelR Ethernet Controller X710 and IntelR Ethernet Controller XL710 family of products Fortville has been found in the Non-Volatile Flash Memory NVM image...

madrimasd.org XSS vulnerability

Vulnerable URL: http://www.madrimasd.org/semanaciencia/2005/images/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

turismo.serravalle.sinp.net XSS vulnerability

Vulnerable URL: http://www.turismo.serravalle.sinp.net/14 paesaggi-natura/17 pollici/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

bigideasmath.com XSS vulnerability

Vulnerable URL: https://www.bigideasmath.com/protected/content/ipena/grade 7/extrahelp/02/vh02crfiles/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

drsfostersmith.com XSS vulnerability

Vulnerable URL: http://www.drsfostersmith.com/Media/Flash/FlashCheck/flashdetection.swf?flashContentURL=//openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20627 VIP...