Flash Player Security Vulnerabilities and Issues — Flash Player CVE List

Lucene search

MacromediaFlash Player

9 matches found

CVE•added 2005/11/05 11:2 a.m.•49 views

CVE-2005-2628

Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.

5.1CVSS7.5AI score0.32699EPSS

CVE•added 2006/03/15 4:6 p.m.•47 views

CVE-2006-0024

Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.

5.1CVSS9.7AI score0.14911EPSS

CVE•added 2004/09/01 4:0 a.m.•42 views

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.

5CVSS7.2AI score0.00568EPSS

CVE•added 2003/04/22 4:0 a.m.•39 views

CVE-2002-1467

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).

5CVSS6.7AI score0.00488EPSS

CVE•added 2004/01/05 5:0 a.m.•39 views

CVE-2003-1017

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.

5CVSS6.8AI score0.10246EPSS

CVE•added 2005/03/26 5:0 a.m.•37 views

CVE-2002-1625

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.

5CVSS7.4AI score0.0782EPSS

CVE•added 2005/06/28 4:0 a.m.•36 views

CVE-2002-1881

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.

5CVSS7AI score0.04991EPSS

CVE•added 2002/08/12 4:0 a.m.•33 views

CVE-2002-0476

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.

5CVSS7.2AI score0.00638EPSS

CVE•added 2007/01/01 11:0 p.m.•33 views

CVE-2006-6827

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method.

5CVSS6.9AI score0.14488EPSS