Vulnerabilidades do Adobe Flash Player Desktop Runtime

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Adobe Flash Player Desktop Runtime: 8 registro(s), com versões afetadas e correções.
cpe:2.3:a:adobe:flash_player_desktop_runtime

CVE-2018-5002 Alta · 7.8 KEV Alta · 56 CWE-787 09/07/2018

Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVE-2017-11292 Alta · 8.8 KEV Alta · 55 CWE-843 22/10/2017

Adobe Flash Player Type Confusion Vulnerability

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

CVE-2016-7892 Alta · 8.8 KEV Alta · 56 CWE-416 15/12/2016

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

CVE-2016-1019 Crítica · 9.8 KEV Urgente · 70 Ransomware 07/04/2016

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

CVE-2016-1010 Alta · 8.8 KEV Alta · 56 CWE-190 12/03/2016

Adobe Flash Player and AIR Integer Overflow Vulnerability

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.

CVE-2016-0984 Alta · 8.8 KEV Alta · 64 Exploit público CWE-416 10/02/2016

Adobe Flash Player and AIR Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.

CVE-2015-5123 Crítica · 9.8 KEV Alta · 60 CWE-416 14/07/2015

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

CVE-2015-5122 Crítica · 9.8 KEV Urgente · 80 Exploit público CWE-416 14/07/2015

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.