vBulletin 3.5.x/3.6.x - SWF Script Injection

source: https://www.securityfocus.com/bid/21736/info vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application. If exploited, this vulnerability may let attackers steal cookie-based authentication credentials. Other attacks are also...

Macromedia Flash Player buffer overflow

Buffer overflow on .swf files playing. Vulnerability can be used for hidden malware installation through browser...

Macromedia Flash Player SWF文件远程代码执行漏洞(MS06-020)

Macromedia Flash Player是一款非常流行的FLASH播放器。 Flash Player在处理畸形恶意SWF文件时存在缓冲区溢出漏洞，攻击者可能利用此漏洞在客户机器上执行任意指令。 如果攻击者诱骗用户使用Flash Player加载了恶意的SWF文件的话，就会完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows ME Microsoft Windows 98se Microsoft Windows 98 RedHat Linux WS 4 RedHat Linux ...

Macromedia Flash Player数组索引内存访问漏洞(MS06-020)

Macromedia Flash Player是一款非常流行的FLASH播放器。 Macromedia Flash Player用于播放SWF文件的Flash.ocx代码中存在漏洞，成功利用这个漏洞的攻击者可以远程执行任意代码。 其中的一个函数栈维护有256个元素的函数指针表，没有强制数组边界便将从SWF文件读取的帧类型标识符用作了数组索引。以下反汇编描述了受影响的代码： .text:1002714F mov eax, esi+0CA4h ; type number .text:10027155 mov ecx, esi+94h ; base of table .text:1002715...

CVE-2006-3311

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie...

CVE-2006-3311

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie...

CVE-2006-3311

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie...

CVE-2006-3311

CVE-2006-3311 describes a buffer overflow in Adobe Flash Player 8.0.24.0 and earlier (including Flash Pro 8, Flash MX 2004, and Flex 1.5) that could allow a user-assisted remote attacker to execute arbitrary code via a long, dynamically created SWF string. Connected advisories confirm this is a r...

CVE-2006-3918

httpprotocol.c in 1 IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and 2 Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site...

Flash Player Multiple Vulnerabilities (APSB06-11)

According to its version number, the instance of Flash Player on the remote Windows host is affected by arbitrary code execution and denial of service issues. By convincing a user to visit a site with a specially crafted SWF file, an attacker may be able to execute arbitrary code on the affected...

CVE-2006-3588

Unspecified vulnerability in Adobe Macromedia Flash Player 8.0.24.0 allows remote attackers to cause a denial of service browser crash via a malformed, compressed .swf file, a different issue than CVE-2006-3587...

Adobe Flash Player fails to properly handle malformed SWF files

Overview Adobe Flash Player fails to properly handle malformed SWF files resulting in a memory corruption vulnerability. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash Player is a player for the Flash media format and enables...

FreeBSD : Macromedia flash player -- swf file handling arbitrary code (aed343b4-5480-11da-b579-001125afbed7)

A Secunia Advisory reports : A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used ...

CVE-2006-1461

Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash SWF file...

CVE-2006-1461

Apple QuickTime before 7.1 is affected by multiple buffer overflows that can allow remote code execution via a crafted QuickTime SWF/file, across Windows and Mac OS X. The issues arise from various integer- and buffer-overflow vulnerabilities in QuickTime’s handling of image/media formats; exploi...

RealPlayer buffer overflow

Buffer overflow on SWF files parsing, Web pages parsing, MBC files parsing...

RealNetworks products vulnerable to buffer overflow via specially crafted flash media file

Overview Numerous RealNetworks products are vulnerable to a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...

realplayer-swf-PoC.pl.txt

!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...

RealPlayer <= 10.5 (6.0.12.1040-1348) SWF Buffer Overflow PoC

No description provided by source. !/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin...

RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)

!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...