flash-plugin: multiple code execution issues fixed in APSB16-08

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...

PT-2016-1481 · Adobe +3 · Flash Player +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Adobe Flash Player ESR affected versions not specified Adobe Integrated Runtime affected versions not specified Description: The issue is caused by a buffer overflow. It may allow a remote...

Adobe Flash MPEG-4 Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01527)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01525)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01519)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01524)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01517)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Flash MPEG-4 Parsing Uninitialized Pointer Remote Code Execution Vulnerability

Adobe FlashPlayer is a multimedia program player. A security vulnerability exists in Adobe Flash's MPEG-4 parsing that could force an indirect reference to an uninitialized pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01518)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

UBUNTU-CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

CVE-2015-8821

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

CVE-2015-8820

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...

CVE-2015-8657

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...

CVE-2015-8654

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...

CVE-2015-8653

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

CVE-2015-8658

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...