Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
archlinuxArch LinuxASA-201511-5
HistoryNov 11, 2015 - 12:00 a.m.

flashplugin: multiple issues

2015-11-1100:00:00
Arch Linux
lists.archlinux.org
22

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.907 High

EPSS

Percentile

98.5%

JSON
  • CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654
    CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658
    CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042
    CVE-2015-8043 CVE-2015-8044 CVE-2015-8046 (arbitrary code execution)

It has been discovered that multiple use-after-free vulnerabilities
could lead to arbitrary code execution.

  • CVE-2015-7659 (arbitrary code execution)

A type confusion vulnerability has been discovered that could lead to
arbitrary code execution.

  • CVE-2015-7662 (access restriction bypass)

A security bypass vulnerability has been discovered that could be
exploited to write arbitrary data to the file system under user permissions.

OSVersionArchitecturePackageVersionFilename
anyanyanyflashplugin< 11.2.202.548-1UNKNOWN

References

Related

nessus 17
redhat 2
mageia 1
openvas 7
prion 17
cve 17
ubuntucve 17
altlinux 2
freebsd 1
kaspersky 2
checkpoint_advisories 9
gentoo 1
zdt 4
zdi 12
threatpost 1
nessus
nessus
Adobe AIR for Mac <= 19.0.0.213 Multiple Vulnerabilities (APSB15-28)
2015-11-11 00:00:00
Flash Player < 19.0.0.245 Multiple Vulnerabilities (APSB15-28)
2016-01-08 00:00:00
openSUSE Security Update : flash-player (openSUSE-2015-738)
2015-11-16 00:00:00
redhat
redhat
(RHSA-2015:2023) Critical: flash-plugin security update
2015-11-11 00:00:00
(RHSA-2015:2024) Critical: flash-plugin security update
2015-11-11 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2015-11-11 22:20:05
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0444)
2015-11-12 00:00:00
Adobe Flash Player Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-13 00:00:00
Adobe Flash Player Multiple Vulnerabilities (Nov 2015) - Mac OS X
2015-11-13 00:00:00
prion
prion
Design/Logic Flaw
2015-11-11 13:00:00
Design/Logic Flaw
2015-11-11 13:00:00
Design/Logic Flaw
2015-11-11 12:59:00
cve
cve
CVE-2015-7657
2015-11-11 12:59:00
CVE-2015-7656
2015-11-11 12:59:00
CVE-2015-7663
2015-11-11 13:00:00
ubuntucve
ubuntucve
CVE-2015-7661
2015-11-11 00:00:00
CVE-2015-8042
2015-11-11 00:00:00
CVE-2015-7656
2015-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt56
2015-11-11 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt56
2015-11-11 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2015-11-10 00:00:00
kaspersky
kaspersky
KLA10690 Multiple vulnerabilities in Adobe products
2015-11-10 00:00:00
KLA10691 Multiple vulnerabilities in Google Chrome
2015-11-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-8042; CVE-2015-8043; CVE-2015-8044; CVE-2015-8046)
2015-11-18 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7657; CVE-2015-7658)
2015-11-18 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7655; CVE-2015-7656)
2015-11-18 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-11-17 00:00:00
zdt
zdt
Adobe Flash MovieClip.lineStyle - Use-After-Frees
2015-12-17 00:00:00
Adobe Flash TextField.antiAliasType Setter - Use-After-Free
2015-12-17 00:00:00
Adobe Flash GradientFill - Use-After-Frees
2015-12-17 00:00:00
zdi
zdi
Adobe Flash AS2 MovieClip setMask Use-After-Free Remote Code Execution Vulnerability
2015-11-10 00:00:00
Adobe Flash AS2 MovieClip getBounds Use-After-Free Remote Code Execution Vulnerability
2015-11-10 00:00:00
Adobe Flash AS2 DefineFunction Invalid Free Remote Code Execution Vulnerability
2015-11-10 00:00:00
threatpost
threatpost
Exploit Writing and Exploit Mitigation
2015-11-12 13:33:09

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.907 High

EPSS

Percentile

98.5%

JSON
Related for ASA-201511-5
nessus17redhat2mageia1openvas7prion17cve17ubuntucve17altlinux2freebsd1kaspersky2checkpoint_advisories9gentoo1zdt4zdi12threatpost1