Adobe Flash Profile Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Flash Player -- multiple vulnerabilities

Adobe reports: These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084. These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-3076, CVE-2017-3077, CVE-2017-3078,...

CompuLab Intense PC and MintBox 2 BIOS Privilege Vulnerability

The CompuLab Intense PC and MintBox 2 are both mini-PC devices from CompuLab Israel. the BIOS is a ROM on-chip application. A BIOS privilege vulnerability exists in CompuLab Intense PC and MintBox 2 using versions of BIOS prior to 2017-05-21, which stems from the program's failure to apply write...

Debian DLA-980-1 : ming security update

It was found that ming, a library to parse and generate SWF Flash files, is susceptible to an integer overflow that would lead into out of bound memory writes via a maliciously crafted file. For Debian 7 'Wheezy', these problems have been fixed in version 1:0.4.4-1.1+deb7u3. We recommend that you...

CVE-2017-8083

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...

CVE-2017-8083

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...

CVE-2017-8083

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the FlashPlayer libraries in Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge on the FlashPlayer software platform allows attackers to cause unpredictable effects.

The vulnerability of the Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge software platforms’ Flash Player components is related to coding errors. Exploiting this vulnerability can allow an attacker to cause unpredictable effects from a remote...

The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

53 Percent of Enterprise Flash Installs are Outdated

The number of outdated versions of Adobe Flash running on enterprise computers grew 10 percent year-over-year to 53 percent of endpoints, despite numerous devastating attacks targeting the maligned software and endless calls to deprecate it. Duo Security said in its 2017 Duo Trusted Access Report...

2xl.be XSS vulnerability

Vulnerable URL: http://www.2xl.be/modules/core/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21459112 VIP...

avisghana.com XSS vulnerability

Vulnerable URL: http://www.avisghana.com/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6754517 VIP websit...

Flash cms database insertion vulnerability

Flash Flash cms is a system developed by Zibo Flash Network Technology Co. Flash Flash cms database insertion vulnerability. Attackers can use this vulnerability to directly obtain server privileges...

SQL Injection Vulnerability in Flash cms O_id Parameter

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Oid parameter of the Flash cms /member/memberwuliu.asp page. The vulnerability stems from the program's failure to filter user-submitted data. An attacker c...

Authentication Bypass Vulnerability in the Background of FLASH Website Management System of Unicom

CFCMS is a self-service website building platform with full Flash as its core. Authentication bypass vulnerability exists in the background of CFCMS. The vulnerability exists in /xmlEditor/chkuser.asp, which can be exploited by attackers to bypass the background login authentication and launch...

Storage-based Cross-site Scripting Vulnerability in Zibo Shining Network Technology Co. Ltd.'s Flash Website Building System

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a stored cross-site scripting vulnerability in the flash CMS of Zibo Shining Network Technology Co. Attackers can use this vulnerability to insert malicious js code in the page, obtain user cookies and oth...