Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
archlinuxArch LinuxASA-201504-18
HistoryApr 17, 2015 - 12:00 a.m.

flashplugin: multiple issues

2015-04-1700:00:00
Arch Linux
lists.archlinux.org
21

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%

JSON
  • CVE-2015-0346 (arbitrary code execution)

A double-free vulnerability allows attackers to execute arbitrary code
via unspecified vectors.

  • CVE-2015-0347 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0348 (arbitrary code execution)

A buffer overflow vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-0349 (arbitrary code execution)

A use-after-free vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-0350 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0351 (arbitrary code execution)

A use-after-free vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-0352 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0353 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0354 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0355 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-0356 (arbitrary code execution)

A type confusion vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-0357 (ASLR protection bypass)

Flash does not properly restrict discovery of memory addresses, which
allows attackers to bypass the ASLR protection mechanism via unspecified
vectors.

  • CVE-2015-0358 (arbitrary code execution)

A use-after-free vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-0359 (arbitrary code execution)

A double-free vulnerability allows attackers to execute arbitrary code
via unspecified vectors.

  • CVE-2015-0360 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-3038 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-3039 (arbitrary code execution)

A use-after-free vulnerability that could lead to arbitrary code
execution via unspecified vectors.

  • CVE-2015-3040 (ASLR protection bypass)

Flash does not properly restrict discovery of memory addresses, which
allows attackers to bypass the ASLR protection mechanism via unspecified
vectors.

  • CVE-2015-3041 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-3042 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-3043 (arbitrary code execution)

Memory corruption vulnerability that could lead to arbitrary code
execution or cause a denial of service via unspecified vectors.

  • CVE-2015-3044 (information disclosure)

Attackers are able to bypass intended access restrictions and obtain
sensitive information via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
anyanyanyflashplugin< 11.2.202.457-1UNKNOWN

References

Related

nessus 27
altlinux 4
suse 7
openvas 10
mageia 2
redhat 1
freebsd 2
gentoo 2
prion 22
cve 22
ubuntucve 22
attackerkb 3
checkpoint_advisories 21
hackerone 3
zdi 3
thn 1
kaspersky 3
zdt 3
exploitpack 1
cisa_kev 1
packetstorm 2
metasploit 2
exploitdb 3
threatpost 2
googleprojectzero 1
securityvulns 1
nessus
nessus
Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-06)
2015-06-12 00:00:00
FreeBSD : Adobe Flash Player -- critical vulnerabilities (3364d497-e4e6-11e4-a265-c485083ca99c)
2015-04-20 00:00:00
Adobe Flash Player <= 17.0.0.134 Multiple Vulnerabilities (APSB15-06)
2015-04-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt43
2015-04-15 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt43
2015-04-15 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44
2015-05-15 00:00:00
suse
suse
Security update for flash-player (important)
2015-04-16 00:04:48
Security update for Adobe Flash Player (important)
2015-04-15 13:05:12
Security update for Adobe Flash Player (important)
2015-04-15 10:04:46
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities - 01 (Apr 2015) - Windows
2015-04-20 00:00:00
SUSE: Security Advisory for flash-player (SUSE-SU-2015:0723-1)
2015-10-16 00:00:00
Adobe Flash Player Multiple Vulnerabilities - 01 (Apr 2015) - Mac OS X
2015-04-20 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2015-04-15 12:01:28
Updated flash-player-plugin packages fix security vulnerabilities
2015-05-12 22:37:48
redhat
redhat
(RHSA-2015:0813) Critical: flash-plugin security update
2015-04-15 00:00:00
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-04-14 00:00:00
Adobe Flash Player -- critical vulnerabilities
2015-05-12 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-04-17 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2015-05-31 00:00:00
prion
prion
Memory corruption
2015-04-14 22:59:00
Memory corruption
2015-04-14 22:59:00
Memory corruption
2015-04-14 22:59:00
cve
cve
CVE-2015-3043
2015-04-14 22:59:00
CVE-2015-0347
2015-04-14 22:59:00
CVE-2015-3042
2015-04-14 22:59:00
ubuntucve
ubuntucve
CVE-2015-0352
2015-04-14 00:00:00
CVE-2015-0350
2015-04-14 00:00:00
CVE-2015-0355
2015-04-14 00:00:00
attackerkb
attackerkb
CVE-2015-3043
2015-04-14 00:00:00
CVE-2015-3038
2015-04-14 00:00:00
CVE-2015-0355
2015-04-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Use After Free Code Execution (APSB15-06: CVE-2015-0349; CVE-2015-3039)
2015-04-15 00:00:00
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0347)
2015-04-15 00:00:00
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0350)
2015-04-15 00:00:00
hackerone
hackerone
Internet Bug Bounty: Double free vulnerability in Flash Player Settings Manager (CVE-2015-0346)
2015-04-15 09:39:23
Internet Bug Bounty: Flash Player information disclosure (etc.) CVE-2015-3044, PSIRT-3298
2015-05-21 19:39:15
Internet Bug Bounty: Internet-based attacker can run Flash apps in local sandboxes by using special URL schemes (PSIRT-3299, CVE-2015-3079)
2015-06-30 14:33:56
zdi
zdi
Adobe Flash Player AVSource Memory Corruption Remote Code Execution Vulnerability
2015-04-15 00:00:00
Adobe Flash Player AS2 ConvolutionFilter Use-After-Free Remote Code Execution Vulnerability
2015-07-08 00:00:00
(Pwn2Own) Adobe Flash Player AS3 ConvolutionFilter Use-After-Free Remote Code Execution Vulnerability
2015-04-15 00:00:00
thn
thn
Zero-Day Flash Player Exploit Disclosed in 'Hacking Team' Data Dump
2015-07-07 05:49:00
kaspersky
kaspersky
KLA10547 Multiple vulnerabilities in Adobe Flash Player
2015-04-14 00:00:00
KLA10576 Flash Player update for Google Chrome
2015-05-12 00:00:00
KLA10574 Multiple vulnerabilities in Adobe Flash Player
2015-05-12 00:00:00
zdt
zdt
Flash PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution Exploit
2015-08-19 00:00:00
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow Exploit
2015-07-09 00:00:00
Adobe Flash Player domainMemory ByteArray Use After Free Exploit
2015-05-08 00:00:00
exploitpack
exploitpack
Adobe Flash - Heap Buffer Overflow Loading .FLV File with Nellymoser Audio Codec
2015-08-19 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Memory Corruption Vulnerability
2022-03-03 00:00:00
packetstorm
packetstorm
Adobe Flash Player domainMemory ByteArray Use After Free
2015-05-07 00:00:00
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow
2015-07-03 00:00:00
metasploit
metasploit
Adobe Flash Player domainMemory ByteArray Use After Free
2015-05-07 22:00:00
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow
2015-07-01 18:13:57
exploitdb
exploitdb
Adobe Flash - Heap Buffer Overflow Loading &#039;.FLV&#039; File with Nellymoser Audio Codec
2015-08-19 00:00:00
Adobe Flash Player - domainMemory ByteArray Use-After-Free (Metasploit)
2015-05-08 00:00:00
Adobe Flash Player - Nellymoser Audio Decoding Buffer Overflow (Metasploit)
2015-07-08 00:00:00
threatpost
threatpost
Angler Exploit Kit Exploiting New Adobe Vulnerability, Dropping Cryptowall 3.0
2015-05-28 13:57:47
April 2015 Microsoft Patch Tuesday Security Bulletins
2015-04-14 14:49:25
googleprojectzero
googleprojectzero
Attacking ECMAScript Engines with Redefinition
2015-08-17 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-05-13 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%

JSON
Related for ASA-201504-18
nessus27altlinux4suse7openvas10mageia2redhat1freebsd2gentoo2prion22cve22ubuntucve22attackerkb3checkpoint_advisories21hackerone3zdi3thn1kaspersky3zdt3exploitpack1cisa_kev1packetstorm2metasploit2exploitdb3threatpost2googleprojectzero1securityvulns1