CVE-2017-3076

Summary of the finding (CVE-2017-3076) : Adobe Flash Player versions up to and including 25.0.0.171 contain a memory corruption vulnerability in the MPEG-4 AVC module that can lead to arbitrary code execution. Multiple connected advisories confirm this CVE is associated with remote code execution...

CVE-2007-5476

Technical details about CVE-2007-5476 are not publicly available in the provided documents. No concrete product/version/impact/exploit information is present. Monitor for updates from authoritative sources to obtain specifics.

CVE-2007-6246

Adobe Flash Player 7.x/8.x/9.x on Linux is affected by CVE-2007-6246, where insecure memory permissions could allow local users to gain privileges. The vulnerability is part of a family of issues reported for Flash Player (alongside CVE-2007-6242, 6243, 6244, 6245, 6246, 4324, 4768) and is cited ...

CVE-2011-0571

Adobe Flash Player prior to 10.2.152.26 is listed as vulnerable to CVE-2011-0571, with potential arbitrary code execution or memory corruption via unspecified vectors. The description notes this is a different vulnerability from a set of other CVEs (CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CV...

CVE-2011-0572

Technical details for CVE-2011-0572 are not publicly available in the provided documents; monitor for updates.

CVE-2011-0628

CVE-2011-0628 : An integer overflow in Adobe Flash Player allows remote code execution via ActionScript when handling a long array object. Affected versions are Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is triggered by proc...

CVE-2012-5285

The CVE-2012-5285 entry describes a Buffer Overflow in Adobe Flash Player and Adobe AIR. Affected products include Adobe Flash Player pre-10.3.183.29 and 11.x pre-11.4.402.287 on Windows/macOS; pre-10.3.183.29 and 11.x pre-11.2.202.243 on Linux; pre-11.1.111.19 on Android 2.x/3.x; and pre-11.1.11...

CVE-2013-5332

CVE-2013-5332 affects Adobe Flash Player prior to 11.7.700.257/11.8.x/11.9.x before 11.9.900.170 on Windows/macOS, and prior to 11.2.202.332 on Linux, as well as Adobe AIR before 3.9.0.1380 and AIR SDK/SDK & Compiler before 3.9.0.1380. Impact: arbitrary code execution or memory corruption leading...

CVE-2015-7637

Technical details about CVE-2015-7637 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-7640

Technical details about CVE-2015-7640 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8457

CVE-2015-8457 describes a stack-based buffer overflow in Adobe Flash Player and related Adobe AIR components. Affected are Flash Player versions before 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and before 11.2.202.554 on Linux; and Adobe AIR before 20.0.0.204 (including AIR SD...

CVE-2012-5673

CVE-2012-5673 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected are: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x; and Adobe AIR before...

CVE-2013-3324

Technical details for CVE-2013-3324 are not publicly available in the provided documents. Monitor for updates and gather future information from linked sources.

CVE-2015-7641

Technical details about CVE-2015-7641 are not publicly available in the provided documents; no affected products, versions, or impact are specified here. Monitor for updates from official advisories.

CVE-2007-3457

Adobe Flash Player 8.x and earlier fails to properly validate HTTP Referer headers, enabling cross‑site request forgery via a crafted SWF (CVE-2007-3457). The CVE entry is supported by multiple connected records noting updates to fix Referer validation and related Flash vulnerabilities (e.g., pat...

CVE-2009-3796

Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 are affected by CVE-2009-3796 (data injection vulnerability) that could allow remote code execution via unspecified vectors. Red Hat advisories RHSA-2009:1657/1658 and related summaries indicate upgrading Flash to 10.0.42.34 as remed...

CVE-2011-0560

Technical details for CVE-2011-0560 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-3328

Technical details about CVE-2013-3328 are not provided in the connected documents. The available sources do not disclose affected products, versions, roots, or fixes. Monitor for updates.

CVE-2012-5254

CVE-2012-5254 corresponds to a buffer overflow in Adobe Flash Player and Adobe AIR with multiple affected versions. According to the provided documents, Flash Player is vulnerable on Windows/Mac OS X to versions before 10.3.183.29 and 11.x before 11.4.402.287, on Linux to versions before 11.2.202...

CVE-2013-3335

Technical details for CVE-2013-3335 are not provided in the connected EUVD entries. The documents reference malware notes but do not specify vulnerability mechanics, affected products, or fixes. Monitor for updates from vendors/ENISA for concrete details.

CVE-2012-5286

CVE-2012-5286 is a buffer overflow in Adobe Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, prior to 10.3.183.29 and 11.x prior to 11.2.202.243 on Linux, and prior to 11.1.111.19 (Android 2.x/3.x) and 11.1.115.20 (Android 4.x); and in Adobe AIR prior to 3.4.0.27...

CVE-2013-3329

Technical details about CVE-2013-3329 are not publicly available in the provided documents; no product, version, impact or remediation information is included beyond the initial description. Monitor for updates.

CVE-2010-0378

CVE-2010-0378 is a use-after-free vulnerability in Adobe Flash Player 6.0.79 (Windows XP SP2/SP3) where unloading a Flash object that is currently being accessed by a script triggers memory corruption, enabling remote code execution. Affected software is Flash Player 6.0.79; the root cause is a u...

CVE-2016-7020

Technical details for CVE-2016-7020 are not publicly available in the provided connected documents. Monitor for updates from external sources; current records do not specify affected product versions or remediation.

CVE-2014-0544

Concrete details exist in connected advisories: CVE-2014-0544 is tied to Adobe Flash Player memory leakage (APSB14-18). The vulnerability is described as an error in parsing a specially crafted SWF file that can lead to memory leakage, enabling remote exploitation if a user opens the crafted SWF....

CVE-2009-3951

CVE-2009-3951 affects the Adobe Flash Player ActiveX control and Adobe AIR on Windows. It allows remote attackers to obtain the names of local files due to an incomplete fix for CVE-2008-4820, before versions Flash Player for Windows 10.0.42.34 and AIR 1.5.3. Practically, exploitation would revea...

CVE-2013-3331

Adobe Flash Player and Adobe AIR are affected by CVE-2013-3331, with multiple platform-specific version ranges vulnerable to arbitrary code execution or memory corruption via unspecified vectors. Affected Flash Player versions: before 10.3.183.86 and 11.x before 11.7.700.202 on Windows/Mac; befor...

CVE-2008-3872

CVE-2008-3872 affects Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0. The issue is a bypass of the allowScriptAccess parameter when handling crafted SWF files with unspecified "Filter evasion" manipulations, enabling remote attackers to bypass script access controls via manipula...

CVE-2010-0379

Mode C: The CVE-2010-0378/CVE-2010-0379 family concerns Adobe Flash Player 6.0.79 in the Macromedia Flash ActiveX control for Windows XP SP2/SP3. The use-after-free vulnerability in CVE-2010-0378 allows remote code execution when unloading a Flash object being accessed by a script, causing memory...

CVE-2015-8456

Technical details for CVE-2015-8456 are not publicly available in the provided documents. Monitor for official updates from vendors and CERT advisories.

CVE-2013-3334

Technical details about CVE-2013-3334 are not publicly available in the provided connected documents. The EUVD entries reference malware but do not specify affected products, root causes, or fixes for this CVE. Monitor for updates.

CVE-2011-4693

CVE-2011-4693 refers to an unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X that enables remote code execution via a crafted SWF file, demonstrated by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead. The disclosure noted it had no actionable information...

CVE-2010-3975

CVE-2010-3975 describes an untrusted search path vulnerability in Adobe Flash Player 9 that enables arbitrary code execution via a Trojan horse schannel.dll alongside a file processed by Flash. The issue is characterized as a DLL hijacking scenario where local users, and possibly remote attackers...

CVE-2011-4694

The CVE-2011-4694 entry concerns Adobe Flash Player 11.1.102.55 on Windows and Mac OS X, where a crafted SWF file can allow remote code execution. The description notes this was tied to the second of two vulnerabilities demonstrated by Intevydis vd_adobe_fp in VulnDisco Step Ahead, but as of 2011...