CVE-2017-3079

CVE-2017-3079 affects Adobe Flash Player up to version 26.0.0.126, with a memory corruption vulnerability in the internal representation of raster data that can enable remote arbitrary code execution. Multiple connected advisories confirm this class of flaws (memory corruption/use-after-free) acr...

CVE-2017-3077

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3078

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format ATF module. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3076

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3083

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2017-3081

CVE-2017-3081 affects Adobe Flash Player. A use-after-free in internal computation caused by multiple display object mask manipulations can be exploited remotely to execute arbitrary code. Affected version: Flash Player 25.0.0.171 and earlier. Several connected advisories indicate fixes in later ...

CVE-2017-3078

CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...

CVE-2017-3075

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3075

CVE-2017-3075 affects Adobe Flash Player: a use-after-free in the ActionScript 2 XML handling can allow remote code execution. Affected are Flash Player versions earlier than 26.0.0.126; exploitation can lead to arbitrary code execution. Public advisories (MSRC, Arch Linux) instruct upgrading to ...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

pco.noaa.gov XSS vulnerability

Open Bug Bounty ID: OBB-250681 Description| Value ---|--- Affected Website:| pco.noaa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rockstar Games: flash injection in http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf

In this report, the researcher found a vulnerability in one of our Flash players http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf that allowed loading of external .swf files. This in turn allowed the researcher to perform a XSS attack...

FreeBSD : Flash Player -- multiple vulnerabilities (cd944b3f-51f6-11e7-b7b2-001c25e46b1d)

Adobe reports : - These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084. - These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-3076, CVE-2017-3077,...

MGASA-2017-0172 Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 26.0.0.126 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities and memory corruption vulnerabilities that could lead to...

Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 26.0.0.126 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities and memory corruption vulnerabilities that could lead to...

DHS, FBI Warn of North Korea 'Hidden Cobra' Strikes Against US Assets

United States top cybersecurity cops warned Tuesday that North Korean government threat actors are targeting U.S. businesses with malware and botnet-related attacks that are part of concerted effort dubbed “Hidden Cobra.” According to a United States Computer Emergency Readiness Team US-CERT...

Patch Tuesday - June 2017

This month sees another spate of critical fixes from Microsoft, including patches for a number of Remote Code Execution RCE vulnerabilities. Two of these are already known to be exploited in the wild CVE-2017-8543 and CVE-2017-8464. Today's patches are so crucial that Microsoft has once again...

US Warns of 'DeltaCharlie' – A North Korean DDoS Botnet Malware

The United States government has released a rare alert about an ongoing, eight-year-long North Korean state-sponsored hacking operation. The joint report from the FBI and U.S. Department of Homeland Security DHS provided details on "DeltaCharlie," a malware variant used by "Hidden Cobra" hacking...