Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of the CoreMedia Playback component in iOS and Mac OS X operating systems arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application...

UBUNTU-CVE-2017-2992

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-2926

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the MPEG4Extractor.cpp file in the libstagefright component of the Android operating system’s media server is related to the absence of a memory allocation check. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure device freezi...

The vulnerabilities of the software platforms Flash Player and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions such as out-of-memory reading or memory corruption using special...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...

The vulnerability of the Adobe Integrated Runtime software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Adobe Integrated Runtime software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure memory access out of bounds, memory corruption using specially crafted MPEG-4 data...

Mozilla Firefox and Firefox ESR libstagefright memory leak vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended-support version of Firefox. libstagefright is one of the hard-coding support libraries. A memory leak vulnerability exists in...

DEBIAN-CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

UBUNTU-CVE-2016-1005

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...

flash-plugin: multiple code execution issues fixed in APSB16-08

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...

PT-2016-1481 · Adobe +3 · Flash Player +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Adobe Flash Player ESR affected versions not specified Adobe Integrated Runtime affected versions not specified Description: The issue is caused by a buffer overflow. It may allow a remote...

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01518)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01525)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01524)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01519)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

UBUNTU-CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

UBUNTU-CVE-2015-8821

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...