Adobe Flash - Transform.colorTranform Getter Infomation Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845 There is an info leak in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will execute when fetching the constructor, which can then free the...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip befor...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Adobe Flash - MovieClip Transform Getter Use-After-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip before it is accessed. A minimal PoC is as follows: var m...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Transform object implementation in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using the reverse invocation of...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 is affected by CVE-2016-3071 due to an error in the IKEv2 aes_xcbc transform, enabling remote attackers to cause a denial of service by triggering a daemon restart. Public sources consistently describe this as a DoS in the Libreswan IKE daemon when processing crafted IKEv2 packets....

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

PT-2016-5355

Name of the Vulnerable Software and Affected Versions Libreswan version 3.16 Description The issue might allow remote attackers to cause a denial of service, resulting in a daemon restart, via an IKEv2 aes xcbc transform. Recommendations For Libreswan version 3.16, consider updating to a newer...

CVE-2016-3071: Improper Input Validation

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

UBUNTU-CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

Design/Logic Flaw

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016: Use After Free

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

flash-plugin: multiple code execution issues fixed in APSB16-10

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

PT-2016-1666 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to the implementation of the Transform object in the Flash Player platform, specifically a use-after-free vulnerability involving memory usage after it has...