Adobe Flash Player, which can be exploited by malicious people to bypass security features, gain knowledge of sensitive information, or compromise a user's system.
1) An unspecified error can be exploited to corrupt memory and execute arbitrary code via specially crafted SWF content.
2) The control has been built using a vulnerable version of ATL, which may be exploited to disclose memory content, bypass security features like kill-bits, and corrupt memory to execute arbitrary code when used in Internet Explorer.
For more information:
SA35967
3) An unspecified error can be exploited to gain escalated privileges.
4) A use-after-free error when parsing Shockwave Flash files may cause references to remain pointing to a deleted object, which can be exploited to corrupt memory.
5) An unspecified error may lead to a "null pointer vulnerability".
6) An unspecified error may lead to a "stack overflow vulnerability".
7) A click-jacking error can be exploited to trick a user into unknowingly click a link or dialog.
8) An error in the parsing of URLs can be exploited to cause a heap-based buffer overflow.
9) An integer overflow error in the AVM2 abcFile parser when handling the "intrf_count" value of the "instance_info" structure can be exploited to corrupt memory and execute arbitrary code.
10) An error in the local sandbox can be exploited to gain knowledge of sensitive information when a SWF is saved to the hard drive.
by
jeffrey.sabarese
2009-09-04 04:54
security
·
vulnerabilities
·
advisory
·
secunia.com
·
flash
·
macromedia flash
·
crap
·
bad idea