CVE-2005-2628

Macromedia Flash 6 and 7 Flash.ocx allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer...

CVE-2005-2628

CVE-2005-2628 concerns a buffer overflow in Macromedia Flash Player (Flash.ocx) for Flash 6/7. The issue arises from insufficient validation of SWF data, allowing a remote attacker to execute arbitrary code via a crafted SWF file. Red Hat’s RHSA-2005:835 notes the fix in updated Macromedia Flash ...

[Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability

Macromedia Flash Player Improper Memory Access Vulnerability Release Date: November 4, 2005 Date Reported: June 27, 2005 Severity: High Vendor: Macromedia Systems Affected: Macromedia Flash 6 on all Windows platforms Macromedia Flash 7 on all Windows platforms Overview: eEye Digital Security has...

CVE-2002-1881

CVE-2002-1881 affects Macromedia Flash Player 4.0 r12–6.0.47.0. A remote attacker can cause a browser crash (DoS) by feeding malformed Flash Shockwave (.SWF) content; ROT13-encoding the body while leaving headers unchanged demonstrates the issue. No further exploit details or remediation are prov...

CVE-2002-1881

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...

Macromedia flash player -- swf file handling arbitrary code

A Secunia Advisory reports: A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used a...

CVE-2002-1625

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service bandwidth, resource, and CPU consumption via the 1 loadMovie or 2 loadSound commands, which continue to execute until the browser is closed...

CVE-2002-1625

Macromedia Flash Player 6 is affected by CVE-2002-1625. The issue arises because connections are not terminated when the user leaves the page, allowing remote attackers to cause a denial of service via the (1) loadMovie and (2) loadSound commands, which continue executing until the browser is clo...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

CVE-2002-1382

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format SWF files, a different issue than CAN-2002-0846...

CVE-2002-1382

CVE-2002-1382 affects Macromedia Flash Player prior to 6.0.65.0. The vulnerability allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash (SWF) files; this is noted as a different issue from CAN-2002-0846. The available documents specify the affect...

RHEL 2.1 : netscape (RHSA-2003:027)

Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...

Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service

source: https://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist in the 'LoadMovie' function by...

Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service

Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service source: https://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of...

CVE-2003-1017

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names...

Microsoft internet explorer local files access

Redirection with Location: file:/// allows to open local file in known location. Macromedia flash allows to store HTML text in known file...

Important: Red Hat Security Advisory: netscape security update

Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...

Important: Red Hat Security Advisory: : Updated Netscape packages are now available

Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...

CVE-2003-0208

Cross-site scripting XSS vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field...

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...