161 matches found
Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service
Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44...
Microsoft Internet Explorer 6/7/8 - Shockwave Flash Object Denial of Service
Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44, 1361. to 43, 1362. 42, 1363. byte to 41 of a sample swf file, ran it and...
Adobe Flash Player
Does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a “buffer overflow issue.” Allows attackers to cause a denial of service application crash or possibly execute...
SuSE Security Advisory SUSE-SA:2009:041 (flash-player)
The remote host is missing updates announced in advisory SUSE-SA:2009:041. OpenVAS Vulnerability Test $Id: susesa2009041.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:041 flash-player Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Buffer overflow
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...
CVE-2009-0520
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...
CVE-2009-0520
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...
CVE-2009-0519
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...
CVE-2009-0520: Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...
Adobe Flash Player无效对象引用远程代码执行漏洞
BUGTRAQ ID: 33880 CVECAN ID: CVE-2009-0520 Flash Player是一款非常流行的FLASH播放器。 在处理Shockwave Flash文件时Flash Player会试图创建特定的对象及多个指向该对象的引用，之后会释放对象并删除关联的引用，但引用可能错误的仍保持指向对象。无效的对象位于未初始化的内存中，攻击者可以控制该内存区以获得执行控制权。 Adobe Flash Player 10.x 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2009-0519: Improper Input Validation
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...
flash-plugin: Input validation flaw (DoS)
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...
flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file.
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."...
iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 02.24.09 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 24, 2009 I. BACKGROUND Adobe Flash Player is a very popular web browser plugin. It is available for multiple web browsers and platforms, including Windows,...
CVE-2008-6060
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6062
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...
CVE-2008-6060
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6062: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...
GLSA-200809-03 : RealPlayer: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200809-03 RealPlayer: Buffer overflow Dyon Balding of Secunia Research reported an unspecified heap-based buffer overflow in the Shockwave Flash SWF frame handling. Impact : By enticing a user to open a specially crafted SWF...
RealPlayer SWF Frame Handling Buffer Overflow Vulnerability (Windows)
This Remote host is running with RealPlayer, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayerswfbofvuln900015.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: RealPlayer SWF Frame Handling Buffer Overflow Vulnerability Windows Authors: Chandan...