|
Some vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to bypass security features, gain knowledge of sensitive information, or compromise a user's system. 1) An unspecified error can be exploited to corrupt memory and execute arbitrary code via specially crafted SWF content. 2) The control has been built using a vulnerable version of ATL, which may be exploited to disclose memory content, bypass security features like kill-bits, and corrupt memory to execute arbitrary code when used in Internet Explorer. For more information:
SA35967 3) An unspecified error can be exploited to gain escalated privileges. 4) A use-after-free error when parsing Shockwave Flash files may cause references to remain pointing to a deleted object, which can be exploited to corrupt memory. 5) An unspecified error may lead to a "null pointer vulnerability". 6) An unspecified error may lead to a "stack overflow vulnerability". 7) A click-jacking error can be exploited to trick a user into unknowingly click a link or dialog. 8) An error in the parsing of URLs can be exploited to cause a heap-based buffer overflow. 9) An integer overflow error in the AVM2 abcFile parser when handling the "intrf_count" value of the "instance_info" structure can be exploited to corrupt memory and execute arbitrary code. 10) An error in the local sandbox can be exploited to gain knowledge of sensitive information when a SWF is saved to the hard drive.
|
