1551 matches found
iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 02.24.09 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 24, 2009 I. BACKGROUND Adobe Flash Player is a very popular web browser plugin. It is available for multiple web browsers and platforms, including Windows,...
CVE-2008-6060
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6060
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6062
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...
GLSA-200809-03 : RealPlayer: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200809-03 RealPlayer: Buffer overflow Dyon Balding of Secunia Research reported an unspecified heap-based buffer overflow in the Shockwave Flash SWF frame handling. Impact : By enticing a user to open a specially crafted SWF...
RealPlayer SWF Frame Handling Buffer Overflow Vulnerability - Windows
RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RealPlayer SWF Frame Handling Buffer Overflow Vulnerability (Windows)
This Remote host is running with RealPlayer, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayerswfbofvuln900015.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: RealPlayer SWF Frame Handling Buffer Overflow Vulnerability Windows Authors: Chandan...
RealPlayer: SWF Frame Handling Buffer Overflow
Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...
XSS Vulnerabilities in Common Shockwave Flash Files
Hi. Recently, there has been news regarding Flash authoring tools and XSS, but the articles contained little technical information. So, I created a detailed report at: http://docs.google.com/Doc?docid=ajfxntc4dmsq14dt57ssdw An abbreviated version intended for full-disclosure, bugtraq, and...
CVE-2007-5941
Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method...
Stack overflow
Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method...
CVE-2007-5941
The CVE-2007-5941 issue is a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control of Adobe Shockwave. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long argument to the ShockwaveVersion method. Connected documents con...
CVE-2007-5941
Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method...
foxnews-xss.txt
Foxnews 0day XSS Shock Attack Demo link to send to a fish: http://www.foxnews.com/video2/launchPage.html?http://localhost/ With netcat listen on localhost : listening on any 80 ... connect to localhost 127.0.0.1 from localhost 127.0.0.1 1964 GET...
[Full-disclosure] Adobe Shockwave ShockwaveVersion() Stack Overflow
There is a stack overflow in ShockwaveVersion function. I have not been able to execute code via this overflow. PoC is as follows: ----------------------- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 768 768 s=s+s; var obj = new...
Adobe Shockwave ActiveX buffer overflow
Buffer overflow in ShockwaveVersion method...
Adobe Shockwave ShockwaveVersion() Stack Overflow PoC
No description provided by source. html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 768 768 s=s+s; var obj = new ActiveXObject"SWCtl.SWCtl"; //233C1507-6A77-46A4-9443-F871F945D258 obj.ShockwaveVersions; /script...
Adobe Shockwave ShockwaveVersion() Stack Overflow PoC
Exploit for unknown platform in category dos / poc ===================================================== Adobe Shockwave ShockwaveVersion Stack Overflow PoC ===================================================== function Check var s = "AAAA"; while s.length 0day.today 2018-01-10...
