Adobe Flash ActionScript 3 BitmapData memory corruption vulnerability

🗓️ 12 Jul 2015 00:00:00Reported by CERTType

Adobe Flash AS3 BitmapData vulnerability allows code execution by remote attackers, affecting versions 9.0 to 18.0.0.204. Update to version 18.0.0.209 and consider workarounds

Reporter	Title	Published	Views	Family All 66
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt51	18 Jul 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt50	15 Jul 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt51	18 Jul 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt50	15 Jul 201500:00	–	altlinux
Tenable Nessus	Flash Player < 13.0.0.305 / 18.0.0.209 Multiple RCE (APSB15-18)	24 Jul 201500:00	–	nessus
Tenable Nessus	Google Chrome OS < 43.0.2357.132 Multiple Vulnerabilities	25 Sep 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 18.0.0.203 Multiple RCE Vulnerabilities (APSB15-18)	14 Jul 201500:00	–	nessus
Tenable Nessus	GLSA-201508-01 : Adobe Flash Player: Multiple vulnerabilities	23 Sep 201500:00	–	nessus
Tenable Nessus	Google Chrome < 43.0.2357.134 Multiple RCE Vulnerabilities	14 Jul 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 18.0.0.203 Multiple RCE Vulnerabilities (APSB15-18) (Mac OS X)	14 Jul 201500:00	–	nessus

Source	Link
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-18.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsa15-04.html
blog	www.blog.trendmicro.com/trendlabs-security-intelligence/new-zero-day-vulnerability-cve-2015-5123-in-adobe-flash-emerges-from-hacking-team-leak
help	www.help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/display/BitmapData.html
microsoft	www.microsoft.com/emet

14 Jul 2015 15:02Current

9.6High risk

Vulners AI Score9.6

CVSS 3.17.8 - 9.8

CVSS 210

EPSS0.40999

SSVC