Adobe Flash Player Buffer Overflow (APSB15-01: CVE-2015-0304)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window Description : XSF occurs when an SWF have...

Adobe Flash Player Action Script Evasion (CVE-2015-0310; CVE-2015-0311)

Flash files can contain malicious Action Script code to exploit vulnerabilities in Adobe Flash Player. Certain evasion tools can use evasion techniques in order to circumvent inspection by security software. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability

Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

Adobe Flash Player Privilege Escalation (APSB15-01: CVE-2015-0302)

A Privilege Escalation vulnerability has been reported in Adobe Flash Player. The vulnerability exists because the isKeyDown method in Flash Player fails to validate if the window in which the swf is loaded has the focus. When loaded, the swf can listen to keystrokes across the system...

PT-2015-1007 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 13.0.0.263 Adobe Flash Player versions 14.x through 16.x prior to 16.0.0.288 Adobe Flash Player version 11.2.202.438 and earlier on Linux Description: The issue is related to a use-after-free vulnerability...

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0590)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Memory Corruption (APSB15-01: CVE-2015-0303)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

TechSmith Camtasia 7 / 8 Cross Site Scripting

Title: Reflected XSS in Flash files of TechSmith Camtasia 8 & 7 Author: Soroush Dalili @irsdl Affected Software: TechSmith Camtasia v8.4.4 latest 8.x & v7.1.1 latest 7.x Vendor URL: http://www.techsmith.com/camtasia-version-history.html Vendor Status: vulnerable CVE-ID: - Camtasia 8 v8.4.4 latest...

Unspecified Memory Corruption Vulnerability in Adobe Flash Player and AIR (CNVD-2015-00340)

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An unspecified memory corruption vulnerability exists in Adobe Flash Player/AIR that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in ...

Unspecified Vulnerability in Adobe Flash Player and AIR

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An unspecified vulnerability exists in Adobe Flash Player/AIR that allows attackers to construct malicious SWF files, trick users into parsing them, and execute arbitrary code in the context of...

Unspecified Memory Corruption Vulnerability in Adobe Flash Player and AIR (CNVD-2015-00335)

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An unspecified memory corruption vulnerability exists in Adobe Flash Player/AIR that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in ...

Adobe Flash Player Use After Free Code Execution (APSB14-27: CVE-2014-8443)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error while loading specially crafted SWF files. A remote attacker can exploit this issue by enticing the victim to open a specially crafted SWF file...

Vimeo: Misconfigured crossdomain.xml - vimeo.com

An overly permissive crossdomain.xml file on a domain that serves sensitive content is a major security risk. It exposes the domain hosting the improperly configured crossomain.xml file to information disclosure and request forgery. Attackers cannot only forge requests, they can read responses...

Adobe-Acrobat-and-Reader

Title: Adobe Acrobat and Reader "pushstring" Memory Corruption Version: Adobe Reader 9.3.2 Analysis: http://www.abysssec.com import sys class PDF: def initself: self.xrefs = self.eol = '\x0a' self.content = '' self.xrefsoffset = 0 def headerself: self.content += '%PDF-1.6' + self.eol def objself,...

Gold-MP4-Player-3.3

Exploit Title: GoldMP4Player Buffer Overflow SEH Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Date: 27.02.2014 head="http://" buff="\x41" 253 shell calc.exe buff+="ëÿÿœ¼‰áÛÖÙqôZJJJJJJJJJJJCCCCCC7RYjAXP0A0AkAAQ2AB2BB0BBABXP8"...

Adobe Flash Player Memory Corruption (APSB14-27: CVE-2014-0587)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22) - Ver2 (CVE-2012-5271)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to memory access without bounds checking while verifying certain opcodes. A remote attacker can exploit this issue by enticing the victim to open a specially crafted SWF file with an affected versi...

Adobe Flash Player Information Disclosure (APSB14-27: CVE-2014-9162)

An Information Disclosure Vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker could exploit these vulnerability by enticing a target user to open a crafted file...