Lucene search

K
archlinuxArch LinuxASA-201510-12
HistoryOct 18, 2015 - 12:00 a.m.

flashplugin: arbitrary code execution

2015-10-1800:00:00
Arch Linux
lists.archlinux.org
19

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

Several critical type confusion vulnerabilities (CVE-2015-7645,
CVE-2015-7647, CVE-2015-7648) have been identified in Adobe Flash Player
11.2.202.535 and earlier 11.x versions for Linux. Successful
exploitation could cause a crash and potentially allow an attacker to
take control of the affected system.

Adobe is aware of a report that an exploit for the CVE-2015-7645
vulnerability is being used in limited, targeted attacks.

OSVersionArchitecturePackageVersionFilename
anyanyanyflashplugin< 11.2.202.540-1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%