Vulnerabilities > Macromedia > Flash Player > Medium

DATE CVE VULNERABILITY TITLE RISK
2006-12-31 CVE-2006-6827 Remote Denial of Service vulnerability in Macromedia Flash Flash8b.OCX ActiveX Control
Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method.
network
low complexity
macromedia
5.0
2006-03-15 CVE-2006-0024 Security vulnerability in Macromedia Flash
Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
network
high complexity
macromedia
5.1
2005-11-05 CVE-2005-2628 Unspecified vulnerability in Macromedia Flash Player
Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.
network
high complexity
macromedia
5.1
2004-01-05 CVE-2003-1017 Unspecified vulnerability in Macromedia Director and Flash Player
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
network
low complexity
macromedia
5.0
2003-04-22 CVE-2002-1467 Local File Access vulnerability in Macromedia Flash Player Arbitrary
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
network
low complexity
macromedia
5.0
2003-03-31 CVE-2002-1534 Unspecified vulnerability in Macromedia Flash Player
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
network
low complexity
macromedia
5.0
2002-12-31 CVE-2002-1881 Denial Of Service vulnerability in Macromedia Flash Malformed SWF
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
network
low complexity
macromedia
5.0
2002-12-31 CVE-2002-1625 Unspecified vulnerability in Macromedia Flash Player 6.0
Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.
network
low complexity
macromedia
5.0
2002-08-12 CVE-2002-0476 Unspecified vulnerability in Macromedia Flash Player 5.0
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.
network
low complexity
macromedia
5.0