2386 matches found
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...
flash-plugin: Input validation flaw (DoS)
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a crafted Shockwave Flash aka .swf file...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...
Cross site scripting
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...
Cross site scripting
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6061
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...
CVE-2008-6060
CVE-2008-6060 describes a Cross-site Scripting (XSS) vulnerability in ActionScript within arbitrary Shockwave Flash (SWF) files generated by InfoSoft FusionCharts. The root cause is an injection vector via a URL in the SRC attribute of an IMG element in the dataURL parameter, enabling remote atta...
CVE-2008-6060
Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter...
CVE-2008-6062
CVE-2008-6062 describes an XSS vulnerability in ActionScript within arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver when the Insert Flash Video feature is used. An attacker can inject arbitrary script/HTML via an asfunction: URI in the skinName parameter. The note mentions pote...
SuSE Update for flash-player SUSE-SA:2008:059
Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse2008059.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for flash-player SUSE-SA:2008:059 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
Adobe Flash Player for Linux SWF文件处理代码执行漏洞
BUGTRAQ ID: 32896 CVECAN ID: CVE-2008-5499 Flash Player是一款非常流行的FLASH播放器。 Flash Player实现上存在漏洞,如果使用Linux版本的Adobe Flash Player打开了特制的SWF文件的话,就可能导致在用户系统上执行任意代码。 Adobe Flash Player for Linux 9.x Adobe Flash Player for Linux 10.x Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Fine to talk about hanging horse methods and techniques-vulnerability warning-the black bar safety net
Hanging horse N kind of method 1 HTML hung it to the law. Conventional HTML hang horse method is generally on a web page, insert an iframe statement, like. Check whether the site is linked, generally is to look at keywords the iframe. 2 then the hidden bit is js hung it up. Like then the...
openSUSE 10 Security Update : flash-player (flash-player-5878)
An unspecified vulnerability in flash-player allowed attackers to take control of the victim's system by having the victim load a specially crafted SWF file CVE-2008-5499. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
flash-plugin: Linux-specific code execution flaw via crafted SWF file
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file...
Adobe Flash Player for Linux SWF Processing Vulnerability
Adobe Flash Player is prone to Shockwave Flash SWF processing vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Flash Player for Linux SWF Processing Vulnerability
This host has Adobe Flash Player installed and is prone to Shockwave Flash SWF Processing vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayerswfprocvuln.nasl 6539 2017-07-05 12:02:14Z cfischer $ Adobe Flash Player for Linux SWF Processing Vulnerability Authors: Chandan S Copyright...
Code injection
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file...