1553 matches found
DEBIAN-CVE-2014-9253
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...
Hack for adobe flash vulnerability patch-vulnerability warning-the black bar safety net
Adobe for widely-used Adobe Reader and Acrobat software releases critical security update, blocked a dangerous Flash Player vulnerabilities, and corrected in the software of 2 0 a defect. Attackers are actively to the Flash Player vulnerability is the object of the attack, Adobe warns. Researcher...
UBUNTU-CVE-2014-4671
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows...
Adobe Shockwave rcsL Memory Corruption
No description provided by source. $Id: adobeshockwavercslcorruption.rb 10784 2010-10-22 12:21:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Adobe Shockwave Director tSAC - Chunk Memory Corruption
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Adobe Shockwave Director tSAC Chunk memory corruption Version : dirapi.dll 11.5.7 Analysis : http://www.abysssec.com Vendor...
phpBB 2.0.21 Privmsg.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
Adobe Shockwave player rcsL chunk memory corruption 0day
No description provided by source...
Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack...
Adobe to Patch Vulnerable Flash Player in Shockwave
It’s bad enough that the Flash runtime bundled with Adobe’s Shockwave player is deficient in security patches going back to January 2013, but what’s worse is that the increased attack surface provided by Shockwave might make it easier to exploit. And, in the bargain, Adobe has known about the iss...
Macromedia Shockwave SWDIR.SLL ActiveX Denial of Service - Ver2 (CVE-2006-6885)
A denial-of-service vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)
A buffer overflow vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ver 2 (CVE-2007-5400)
There exists a heap buffer overflow vulnerability in the RealNetworks RealPlayer product. The vulnerability is due to a design error within the handling of frames in Shockwave Flash SWF files. A remote attacker can exploit this vulnerability to create a heap overflow condition in the target...
Adobe Shockwave Player Memory Corruption Vulnerability (Mar 2014) - Mac OS X
Adobe Shockwave Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Shockwave Player Memory Corruption Vulnerability (Mar 2014) - Windows
Adobe Shockwave Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Shockwave Player内存破坏漏洞(CVE-2014-0505)
Bugtraq ID:66182 CVE ID:CVE-2014-0505 Adobe Shockwave Player是一款用于播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player存在一个未明内存破坏漏洞，允许远程攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Adobe Shockwave Player 12.0.9.149 Adobe Shockwave Player 12.0.9.149已经修复该漏洞，建议用户下载更新： http://www.adobe.com...
CVE-2014-0505
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2014-0505
Adobe Shockwave Player is vulnerable to a memory corruption issue leading to arbitrary code execution or DoS. Affected versions include 12.0.9.149 and earlier, with the issue being exploitable via a user-tricked playback of a malicious Shockwave file; the exact vectors are not specified in the pr...
CVE-2014-0505
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
KLA10441 Vulnerability in Shockwave Player
An unspecified vulnerability was found in the Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. Original advisories APSB Related products Adobe-Shockwave-Player CVE list CVE-2014-0505 critical Solution Update to latest versio...