openSUSE Security Update : flash-player (openSUSE-2016-870)

Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed : - CVE-2016-4172: memory...

Reverse engineering DUBNIUM –Stage 2 payload analysis

Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat APT activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident Part 1, Part 2. In this blog, we will go through the overall infection chain structure and the...

Security update for flash-player (important)

Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed: - CVE-2016-4172: memory corrupti...

Exploit Kits Quickly Adopt Exploit Thanks to Open Source Release

A security researcher recently published source code for a working exploit for CVE-2016-0189 and the Neutrino Exploit Kit EK quickly adopted it. CVE-2016-0189 was originally exploited as a zero-day vulnerability in targeted attacks in Asia. The vulnerability resides within scripting engines in...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04878)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04883)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04897)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-04886)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04892)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04877)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04891)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

RHEL 5 / 6 : flash-plugin (RHSA-2016:1423)

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04896)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04869)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Competitive Conditions Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A competitive condition vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability t...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2016-04899)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An information disclosure vulnerability exists in Adobe Flash Player. An attacker can exploit this vulnerability t...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04894)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04881)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04963)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04880)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...