CVE-2006-3311

CVE-2006-3311 describes a buffer overflow in Adobe Flash Player 8.0.24.0 and earlier (including Flash Pro 8, Flash MX 2004, and Flex 1.5) that could allow a user-assisted remote attacker to execute arbitrary code via a long, dynamically created SWF string. Connected advisories confirm this is a r...

CVE-2011-2461

CVE-2011-2461 affects the Adobe Flex SDK (3.x and 4.x before 4.6). An XSS vulnerability arises when loading modules from different domains, allowing remote attackers to inject script/HTML. Impact is XSS; CVSSv2 base score 4.3 (medium). Remediation: update to Flex SDK 4.6 or later as referenced by...

CVE-2009-1879

The CVE-2009-1879 item covers a DOM-based XSS in Adobe Flex SDK’s express-install template index.template.html, affecting Flex SDK prior to 3.4 when the installed Flash version is older than a specified requiredMajorVersion. A remote attacker can inject arbitrary script via the query string. Open...