CVE-2011-4694

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4694

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4694

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4693

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vdadobefp module in VulnDisco Step Ahead SA. NOTE: as of...

CVE-2011-4694

The CVE-2011-4694 entry concerns Adobe Flash Player 11.1.102.55 on Windows and Mac OS X, where a crafted SWF file can allow remote code execution. The description notes this was tied to the second of two vulnerabilities demonstrated by Intevydis vd_adobe_fp in VulnDisco Step Ahead, but as of 2011...

CVE-2011-4693

CVE-2011-4693 refers to an unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X that enables remote code execution via a crafted SWF file, demonstrated by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead. The disclosure noted it had no actionable information...

Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)

A Cross-site scripting vulnerability has been reported in Adobe Flex SDK. The vulnerability is due to an error in the way Flex-generated SWF files accept arguments. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Fixes Flaw in Flex SDK Framework

Adobe has patched a security flaw in its Flex SDK product that could lead to cross-site scripting attacks against some applications that were built using the SDK. The vulnerability affects versions 3.6 and below and 4.5.1 and below. The Flex SDK is a free, open source application framework that...

Adobe Flash Player PlaceObjectX Type Confusion Code Execution (APSB11-28; CVE-2011-2450)

A heap memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a null dereference while handling objects with the PlaceObjectX tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malforme...

Adobe Flash Player Overlapping Records Memory Corruption (APSB11-28; CVE-2011-2453)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient validation of the parsed data's length. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file. Successfu...

Adobe Flash Player Layered Animation Object Buffer Overflow (APSB11-28; CVE-2011-2460)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a buffer overrun while processing 3D coordinates in objects within layered animations. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an...

Adobe Flash Player ATF Data Buffer Overflow (APSB11-28; CVE-2011-2456)

A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking of user supplied input while loading Adobe Texture Format ATF data. A remote attacker could exploit this vulnerability by enticing a user to open a web page...

Adobe Flash Player Ambiguous Namespace Memory Corruption (APSB11-28; CVE-2011-2455)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference during type lookup by the AVM2. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Flash Player AVM2 Class Change Memory Corruption (APSB11-28; CVE-2011-2451)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way AVM2 executes the bytecode. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file. Successful...

Adobe Flash Player Malformed ShapeRecords Memory Corruption (APSB11-28; CVE-2011-2452)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference while processing malformed ShapeRecords line segments. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an...

Adobe Flash Player Embedded Flash Object Code Execution (APSB11-28; CVE-2011-2459)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference in the Flash plugin while handling string values. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedd...

Adobe Flash bug allow spying Webcam hole

Adobe Flash bug allow spying Webcam hole The flaw was disclosed in 2008 and can be exploited to turn on people's webcams or microphones without their knowledge. Attack involved putting the Adobe Flash Settings Manager page into an iFrame and masking it with a game, so that when the user clicked o...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers and Adobe Security Advisories and Bulletins reference...

Dotclear 2.3.1 Shell Upload

Exploit Title: dotclear-2.3.1 Swf File Upload Vulnerability Date: 01/09/2011 Author: T0xic Author Mail: Malik99atHotmaildotfr Software: dotclear-2.3.1 Software Link: http://dotclear.org/download/ Go0gle Dork : 'inurl:"inc/swf/swfupload.swf" Comment ================ Exploited By T0xic Wahson...

RealNetworks RealPlayer Multiple Vulnerabilities (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011...