SuSE Security Advisory SUSE-SA:2009:041 (flash-player)

The remote host is missing updates announced in advisory SUSE-SA:2009:041. OpenVAS Vulnerability Test $Id: susesa2009041.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:041 flash-player Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0520

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...

Buffer overflow

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...

CVE-2009-0519

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...

CVE-2009-0520

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...

Adobe Flash Player无效对象引用远程代码执行漏洞

BUGTRAQ ID: 33880 CVECAN ID: CVE-2009-0520 Flash Player是一款非常流行的FLASH播放器。 在处理Shockwave Flash文件时Flash Player会试图创建特定的对象及多个指向该对象的引用，之后会释放对象并删除关联的引用，但引用可能错误的仍保持指向对象。无效的对象位于未初始化的内存中，攻击者可以控制该内存区以获得执行控制权。 Adobe Flash Player 10.x 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

flash-plugin: Input validation flaw (DoS)

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...

flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file.

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...

iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 02.24.09 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 24, 2009 I. BACKGROUND Adobe Flash Player is a very popular web browser plugin. It is available for multiple web browsers and platforms, including Windows,...

CVE-2008-6060

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...

CVE-2008-6062

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...

CVE-2008-6060

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...

GLSA-200809-03 : RealPlayer: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200809-03 RealPlayer: Buffer overflow Dyon Balding of Secunia Research reported an unspecified heap-based buffer overflow in the Shockwave Flash SWF frame handling. Impact : By enticing a user to open a specially crafted SWF...

RealPlayer SWF Frame Handling Buffer Overflow Vulnerability - Windows

RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer SWF Frame Handling Buffer Overflow Vulnerability (Windows)

This Remote host is running with RealPlayer, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayerswfbofvuln900015.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: RealPlayer SWF Frame Handling Buffer Overflow Vulnerability Windows Authors: Chandan...

RealPlayer: SWF Frame Handling Buffer Overflow

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

XSS Vulnerabilities in Common Shockwave Flash Files

Hi. Recently, there has been news regarding Flash authoring tools and XSS, but the articles contained little technical information. So, I created a detailed report at: http://docs.google.com/Doc?docid=ajfxntc4dmsq14dt57ssdw An abbreviated version intended for full-disclosure, bugtraq, and...

phpBB 2.0.21 - privmsg.php HTML Injection

phpBB 2.0.21 - privmsg.php HTML Injection source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

phpBB (privmsg.php) XSS Exploit

phpBB privmsg.php XSS Exploit By: Demential Web: http://headburn.altervista.org E-mail: [email protected] PhpBB website: http://phpbb.com Exploit tested on phpBB 2.0.21 Secunia.com said: Input passed to the form field "Message body" in privmsg.php is not properly sanitised before it is returned to...

phpBB 2.0.21 - 'privmsg.php' HTML Injection

source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of th...