Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
The host is missing a critical security update according to APSB10-06. The update is required to fix multiple vulnerabilities. The flaws are present in the applications, which fail to properly handle crafted files. Successful exploitation allows remote attackers to cause a denial of service.
The host is missing a critical security update according to APSB10-06. The update is required to fix multiple vulnerabilities. The flaws are present in the applications, which fail to properly handle crafted files. Successful exploitation allows remote attackers to cause a denial of service.
The host is installed with Adobe Flash Player before 10.0.45.2 or Adobe AIR before 1.5.3.9130 and is prone to denial-of-service vulnerability. A flaw is present in the applications, which fail to handle a modified SWF file. Successful exploitation allows remote attackers to crash the application, denying service to legitimate users.
The host is missing a critical security update according to APSB10-03. The update is required to fix multiple vulnerabilities. The flaws are present in the application, which fails to properly handle memory. Successful exploitation allows remote attackers to execute arbitrary code.
The host is installed with Adobe Shockwave Player before 11.5.6.606 and is prone to multiple integer overflow vulnerabilities. The flaws are present in the application, which fails to handle a crafted Shockwave file. Successful exploitation allows remote attackers to execute remote code.
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave f ...
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.
The host is installed with Adobe Shockwave Player before 11.5.6.606 and is prone to buffer overflow vulnerability. A flaw is present in the application, which fails to properly handle a crafted 3D model in a Shockwave file. Successful exploitation allows remote attackers to execute remote code.