2386 matches found
linux-flashplugin -- arbitrary code execution vulnerability
Adobe reports: Critical vulnerabilities have been identified in Flash Player that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these...
GLSA-200511-21 : Macromedia Flash Player: Remote arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-200511-21 Macromedia Flash Player: Remote arbitrary code execution When handling a SWF file, the Macromedia Flash Player incorrectly validates the frame type identifier stored in the SWF file which is used as an index to reference...
Macromedia Flash Player: Remote arbitrary code execution
Background The Macromedia Flash Player is a renderer for the popular SWF filetype which is commonly used to provide interactive websites, digital experiences and mobile content. Description When handling a SWF file, the Macromedia Flash Player incorrectly validates the frame type identifier store...
CVE-2005-3591
CVE-2005-3591 describes a vulnerability in the Macromedia Flash plugin where Flash.ocx (Windows, 7.0.19.0 and earlier) and libflashplayer.so (Unix, before 7.0.25.0) allow a remote attacker to trigger a denial of service and potentially execute arbitrary code via parameters to the ActionDefineFunc...
Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file
Overview A buffer overflow vulnerability in some versions of the Macromedia Flash Player may allow a remote attacker to execute code on a vulnerable system. Description The Macromedia Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed...
SEC-20051107-1.txt
SEC-CONSULT Security Advisory 20051107-1 ======================================================================================= title: Macromedia Flash Player ActionDefineFunction Memory Corruption program: Macromedia Flash Plugin vulnerable version: flash.ocx v7.0.19.0 and earlier...
[Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption
SEC-CONSULT Security Advisory 20051107-1 ======================================================================================= title: Macromedia Flash Player ActionDefineFunction Memory Corruption program: Macromedia Flash Plugin vulnerable version: flash.ocx v7.0.19.0 and earlier...
Flash Player < 7.0.60.0 / 8.0.22.0 Multiple Vulnerabilities
According to its version number, the instance of Macromedia's Flash Player on the remote host fails to validate the frame type identifier from SWF files before using that as an index into an array of function pointers. An attacker may be able to leverage this issue using a specially crafted SWF...
CVE-2005-2628
Macromedia Flash 6 and 7 Flash.ocx allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer...
CVE-2005-2628
CVE-2005-2628 concerns a buffer overflow in Macromedia Flash Player (Flash.ocx) for Flash 6/7. The issue arises from insufficient validation of SWF data, allowing a remote attacker to execute arbitrary code via a crafted SWF file. Red Hat’s RHSA-2005:835 notes the fix in updated Macromedia Flash ...
CVE-2002-1881
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...
CVE-2002-1881
CVE-2002-1881 affects Macromedia Flash Player 4.0 r12–6.0.47.0. A remote attacker can cause a browser crash (DoS) by feeding malformed Flash Shockwave (.SWF) content; ROT13-encoding the body while leaving headers unchanged demonstrates the issue. No further exploit details or remediation are prov...
Macromedia flash player -- swf file handling arbitrary code
A Secunia Advisory reports: A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used a...
Adobe Acrobat / Acrobat Reader local file access
SWF files embedded to document may access local files...
CVE-2002-1382
CVE-2002-1382 affects Macromedia Flash Player prior to 6.0.65.0. The vulnerability allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash (SWF) files; this is noted as a different issue from CAN-2002-0846. The available documents specify the affect...
CVE-2002-0846
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length...
CVE-2002-0846
CVE-2002-0846 : The vulnerability concerns the decoder for Macromedia Shockwave Flash. A malformed SWF header containing more data than the specified length can enable remote code execution. The issue is described across multiple records (CVE/DV and NVD entries) as impacting the Shockwave Flash/S...
CVE-2002-1534
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...
CVE-2002-1382
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format SWF files, a different issue than CAN-2002-0846...