{"title": "CVE-2015-5564", "reporter": "NVD", "published": "2015-08-13T21:59:50", "cpe": ["cpe:/a:adobe:air_sdk:18.0.0.180", "cpe:/a:adobe:air_sdk_%26_compiler:18.0.0.180", "cpe:/a:adobe:flash_player:18.0.0.209", "cpe:/a:adobe:air:18.0.0.180", "cpe:/a:adobe:flash_player:11.2.202.491"], "cvelist": ["CVE-2015-5564"], "viewCount": 3, "objectVersion": "1.3", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5564", "bulletinFamily": "NVD", "hashmap": [{"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "54a865e48788fbb7389292e97e3f4fd2", "key": "cpe"}, {"hash": "132f6493a7a0d47c8732b83673e63a26", "key": "cvelist"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "cdddc339a84e44e33deaffb00306a55e", "key": "description"}, {"hash": "227202c8fc9fd4e1b4d7b2f869b33b23", "key": "href"}, {"hash": "d1e2347e223552f31bdab67c59217285", "key": "modified"}, {"hash": "4ade4403c16544288b7929922380c732", "key": "published"}, {"hash": "e157dc8e4790181e5b3a16e911b22166", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "66ab4e770ed0f7956b7c80f22af57bef", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}], "history": [{"bulletin": {"reporter": "NVD", "published": "2015-08-13T21:59:50", "cvelist": ["CVE-2015-5564"], "title": "CVE-2015-5564", "objectVersion": "1.3", "description": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565.", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5564", "bulletinFamily": "NVD", "id": "CVE-2015-5564", "history": [], "scanner": [], "enchantments": {"score": {"modified": "2017-09-21T17:49:44", "value": 6.0}}, "modified": "2017-09-20T21:29:12", "hash": "b7b0be797a128b7a62f56b714a71058caca6d8ed8aaf65b0616630a3eb4bde7a", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "viewCount": 2, "edition": 3, "cpe": ["cpe:/a:adobe:air_sdk:18.0.0.180", "cpe:/a:adobe:air_sdk_%26_compiler:18.0.0.180", "cpe:/a:adobe:flash_player:18.0.0.209", "cpe:/a:adobe:air:18.0.0.180", "cpe:/a:adobe:flash_player:11.2.202.491"], "references": ["https://security.gentoo.org/glsa/201508-01", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388", "http://www.securitytracker.com/id/1033235", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722", "http://www.securityfocus.com/bid/76288", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"], "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "227202c8fc9fd4e1b4d7b2f869b33b23", "key": "href"}, {"hash": "c819151318f814c88b09e056aa9022c0", "key": "references"}, {"hash": "54a865e48788fbb7389292e97e3f4fd2", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "4ade4403c16544288b7929922380c732", "key": "published"}, {"hash": "132f6493a7a0d47c8732b83673e63a26", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "66ab4e770ed0f7956b7c80f22af57bef", "key": "title"}, {"hash": "cdddc339a84e44e33deaffb00306a55e", "key": "description"}, {"hash": "e4da2de04267fe253370b0553782b3d4", "key": "modified"}], "lastseen": "2017-09-21T17:49:44", "assessment": {"name": "", "href": "", "system": ""}}, "differentElements": ["references", "modified"], "edition": 3, "lastseen": "2017-09-21T17:49:44"}, {"bulletin": {"reporter": "NVD", "published": "2015-08-13T21:59:50", "cvelist": ["CVE-2015-5564"], "title": "CVE-2015-5564", "objectVersion": "1.2", "description": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565.", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5564", "bulletinFamily": "NVD", "id": "CVE-2015-5564", "history": [], "scanner": [], "enchantments": {}, "modified": "2017-02-16T21:59:02", "hash": "63de95e0eef6c3f5a5edd3ee893f22fe833ceb377c093c56d5f669328034a25e", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "viewCount": 1, "edition": 2, "cpe": ["cpe:/a:adobe:air_sdk:18.0.0.180", "cpe:/a:adobe:air_sdk_%26_compiler:18.0.0.180", "cpe:/a:adobe:flash_player:18.0.0.209", "cpe:/a:adobe:air:18.0.0.180", "cpe:/a:adobe:flash_player:11.2.202.491"], "references": ["https://security.gentoo.org/glsa/201508-01", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722", "http://www.securityfocus.com/bid/76288", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"], "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "227202c8fc9fd4e1b4d7b2f869b33b23", "key": "href"}, {"hash": "1e23827419bd7e11c1ea75307cbdbaa4", "key": "modified"}, {"hash": "d8facb4e47404f7d8e5cd18d841a6658", "key": "references"}, {"hash": "54a865e48788fbb7389292e97e3f4fd2", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "4ade4403c16544288b7929922380c732", "key": "published"}, {"hash": "132f6493a7a0d47c8732b83673e63a26", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "66ab4e770ed0f7956b7c80f22af57bef", "key": "title"}, {"hash": "cdddc339a84e44e33deaffb00306a55e", "key": "description"}], "lastseen": "2017-04-18T15:57:35", "assessment": {"name": "", "href": "", "system": ""}}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-04-18T15:57:35"}, {"bulletin": {"reporter": "NVD", "published": "2015-08-13T21:59:50", "cvelist": ["CVE-2015-5564"], "title": "CVE-2015-5564", "objectVersion": "1.2", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5564", "bulletinFamily": "NVD", "id": "CVE-2015-5564", "history": [], "scanner": [], "cpe": ["cpe:/a:adobe:air_sdk:18.0.0.180", "cpe:/a:adobe:air_sdk_%26_compiler:18.0.0.180", "cpe:/a:adobe:flash_player:18.0.0.209", "cpe:/a:adobe:air:18.0.0.180", "cpe:/a:adobe:flash_player:11.2.202.491"], "modified": "2015-08-14T16:22:07", "hash": "03bb00bc1748dbed7498aed1c5831e97ee6615a719d77ef1919d24f38854367e", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "viewCount": 0, "edition": 1, "assessment": {"name": "", "href": "", "system": ""}, "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "227202c8fc9fd4e1b4d7b2f869b33b23", "key": "href"}, {"hash": "54a865e48788fbb7389292e97e3f4fd2", "key": "cpe"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "4ade4403c16544288b7929922380c732", "key": "published"}, {"hash": "e8ed6a942c4e67980229b718a772b29b", "key": "modified"}, {"hash": "132f6493a7a0d47c8732b83673e63a26", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6c5aa7009bb32799c39519f328b60b37", "key": "references"}, {"hash": "66ab4e770ed0f7956b7c80f22af57bef", "key": "title"}, {"hash": "cdddc339a84e44e33deaffb00306a55e", "key": "description"}], "lastseen": "2016-09-03T22:54:48", "description": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565."}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T22:54:48"}], "scanner": [], "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "modified": "2018-01-04T21:30:16", "hash": "f5721def4a3e6f7bb646d65dc49eb52d8b8b087bef6c1ba1193818840a0a9dcd", "enchantments": {"score": {"vector": "NONE", "value": 7.5}, "vulnersScore": 7.5}, "edition": 4, "description": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565.", "references": ["https://security.gentoo.org/glsa/201508-01", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388", "http://www.securitytracker.com/id/1033235", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722", "http://rhn.redhat.com/errata/RHSA-2015-1603.html", "http://www.securityfocus.com/bid/76288", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"], "id": "CVE-2015-5564", "lastseen": "2018-01-05T11:51:46", "assessment": {"name": "", "href": "", "system": ""}}

{"gentoo": [{"lastseen": "2016-09-06T19:46:24", "references": ["http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3107", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5563", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5122", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5564", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5551", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5546", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5545", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5130", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5553", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5125", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5123", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5544", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5541", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5965", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5129", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5133", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5561", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5132", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5540", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5556", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5134", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5131", "https://bugs.gentoo.org/show_bug.cgi?id=557342", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5548", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5124", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5552", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5560", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5554", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5550", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5555", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5127", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5549", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5562", "https://bugs.gentoo.org/show_bug.cgi?id=554882", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5558", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5539", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5547", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5557", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5559"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "11.2.202.508", "arch": "all", "packageFilename": "UNKNOWN", "packageName": "www-plugins/adobe-flash", "operator": "lt"}], "edition": 1, "description": "### Background\n\nThe Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. \n\n### Description\n\nMultiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll Adobe Flash Player users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=www-plugins/adobe-flash-11.2.202.508\"", "reporter": "Gentoo Foundation", "published": "2015-08-15T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "gentoo", "title": "Adobe Flash Player: Multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-15T00:00:00", "id": "GLSA-201508-01", "href": "https://security.gentoo.org/glsa/201508-01", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "freebsd": [{"lastseen": "2018-08-31T01:14:35", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "affectedPackage": [{"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-c6-flashplugin", "operator": "lt"}, {"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-f10-flashplugin", "operator": "lt"}, {"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-c6_64-flashplugin", "operator": "lt"}], "description": "\nAdobe reports:\n\nAdobe has released security updates for Adobe Flash Player.\n\t These updates address critical vulnerabilities that could\n\t potentially allow an attacker to take control of the affected\n\t system.\nThese updates resolve type confusion vulnerabilities that could\n\t lead to code execution (CVE-2015-5128, CVE-2015-5554,\n\t CVE-2015-5555, CVE-2015-5558, CVE-2015-5562).\nThese updates include further hardening to a mitigation\n\t introduced in version 18.0.0.209 to defend against vector\n\t length corruptions (CVE-2015-5125).\nThese updates resolve use-after-free vulnerabilities that could\n\t lead to code execution (CVE-2015-5550, CVE-2015-5551,\n\t CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134,\n\t CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n\t CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5124,\n\t CVE-2015-5564).\nThese updates resolve heap buffer overflow vulnerabilities\n\t that could lead to code execution (CVE-2015-5129,\n\t CVE-2015-5541).\nThese updates resolve buffer overflow vulnerabilities that\n\t could lead to code execution (CVE-2015-5131, CVE-2015-5132,\n\t CVE-2015-5133).\nThese updates resolve memory corruption vulnerabilities that\n\t could lead to code execution (CVE-2015-5544, CVE-2015-5545,\n\t CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n\t CVE-2015-5552, CVE-2015-5553).\nThese updates resolve an integer overflow vulnerability that\n\t could lead to code execution (CVE-2015-5560).\n\n", "edition": 3, "reporter": "FreeBSD", "published": "2015-08-11T00:00:00", "title": "Adobe Flash Player -- critical vulnerabilities", "type": "freebsd", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-11T00:00:00", "id": "F3778328-D288-4B39-86A4-65877331EAF7", "href": "https://vuxml.freebsd.org/freebsd/f3778328-d288-4b39-86a4-65877331eaf7.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2018-09-01T23:56:31", "references": ["https://security.gentoo.org/glsa/201508-01"], "pluginID": "86089", "description": "The remote host is affected by the vulnerability described in GLSA-201508-01 (Adobe Flash Player: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in Adobe Flash Player.\n Please review the CVE identifiers referenced below for details.\n Impact :\n\n A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.\n Workaround :\n\n There is no known workaround at this time.", "edition": 4, "reporter": "Tenable", "published": "2015-09-23T00:00:00", "title": "GLSA-201508-01 : Adobe Flash Player: Multiple vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2016-09-23T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:adobe-flash"], "id": "GENTOO_GLSA-201508-01.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=86089", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201508-01.\n#\n# The advisory text is Copyright (C) 2001-2016 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86089);\n script_version(\"$Revision: 2.2 $\");\n script_cvs_date(\"$Date: 2016/09/23 13:29:16 $\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5122\", \"CVE-2015-5123\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\", \"CVE-2015-5965\");\n script_xref(name:\"GLSA\", value:\"201508-01\");\n\n script_name(english:\"GLSA-201508-01 : Adobe Flash Player: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201508-01\n(Adobe Flash Player: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in Adobe Flash Player.\n Please review the CVE identifiers referenced below for details.\n \nImpact :\n\n A remote attacker could possibly execute arbitrary code with the\n privileges of the process, cause a Denial of Service condition, obtain\n sensitive information, or bypass security restrictions.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201508-01\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All Adobe Flash Player users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose\n '>=www-plugins/adobe-flash-11.2.202.508'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"metasploit_name\", value:'Adobe Flash opaqueBackground Use After Free');\n script_set_attribute(attribute:\"exploit_framework_metasploit\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:adobe-flash\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/15\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/09/23\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"www-plugins/adobe-flash\", unaffected:make_list(\"ge 11.2.202.508\"), vulnerable:make_list(\"lt 11.2.202.508\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"Adobe Flash Player\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:44:31", "references": ["http://www.nessus.org/u?0cb17c10", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85328", "description": "The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.209. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19) (Mac OS X)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "MacOS X Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-16T00:00:00", "cpe": ["cpe:/a:adobe:flash_player"], "id": "MACOSX_FLASH_PLAYER_APSB15-19.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85328", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85328);\n script_version(\"1.17\");\n script_cvs_date(\"Date: 2018/07/16 12:48:31\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19) (Mac OS X)\");\n script_summary(english:\"Checks the version of Flash Player.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Mac OS X host has a browser plugin installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Flash Player installed on the remote Mac OS X\nhost is equal or prior to version 18.0.0.209. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n # http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?0cb17c10\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Flash Player version 18.0.0.232 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:adobe:flash_player\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"macosx_flash_player_installed.nasl\");\n script_require_keys(\"MacOSX/Flash_Player/Version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"MacOSX/Flash_Player/Version\");\npath = get_kb_item_or_exit(\"MacOSX/Flash_Player/Path\");\n\ncutoff_version = \"18.0.0.209\";\nfix = \"18.0.0.232\";\n\n# nb: we're checking for versions less than *or equal to* the cutoff!\nif (ver_compare(ver:version, fix:cutoff_version, strict:FALSE) <= 0)\n{\n if (report_verbosity > 0)\n {\n report =\n '\\n Path : ' + path +\n '\\n Installed version : ' + version +\n '\\n Fixed version : ' + fix +\n '\\n';\n security_hole(port:0, extra:report);\n }\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, \"Flash Player for Mac\", version, path);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-02T00:02:08", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85325", "description": "According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 8, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-06-27T00:00:00", "cpe": ["cpe:/a:adobe:air"], "id": "ADOBE_AIR_APSB15-19.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85325", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85325);\n script_version(\"1.17\");\n script_cvs_date(\"Date: 2018/06/27 18:42:26\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)\");\n script_summary(english:\"Checks the version gathered by local check.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has a version of Adobe AIR installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to its version, the installation of Adobe AIR on the remote\nWindows host is equal or prior to 18.0.0.180. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe AIR 18.0.0.199 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:air\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"adobe_air_installed.nasl\");\n script_require_keys(\"SMB/Adobe_AIR/Version\", \"SMB/Adobe_AIR/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/Adobe_AIR/Version\");\npath = get_kb_item_or_exit(\"SMB/Adobe_AIR/Path\");\n\nversion_ui = get_kb_item(\"SMB/Adobe_AIR/Version_UI\");\nif (isnull(version_ui)) version_report = version;\nelse version_report = version_ui + ' (' + version + ')';\n\ncutoff_version = '18.0.0.180';\nfix = '18.0.0.199';\nfix_ui = '18.0';\n\nif (ver_compare(ver:version, fix:cutoff_version) <= 0)\n{\n port = get_kb_item(\"SMB/transport\");\n if (!port) port = 445;\n\n if (report_verbosity > 0)\n {\n report =\n '\\n Path : ' + path +\n '\\n Installed version : ' + version_report +\n '\\n Fixed version : ' + fix_ui + \" (\" + fix + ')' +\n '\\n';\n security_hole(port:port, extra:report);\n }\n else security_hole(port);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, \"Adobe AIR\", version_report, path);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:50:35", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85327", "description": "According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 10, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "MacOS X Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-16T00:00:00", "cpe": ["cpe:/a:adobe:air"], "id": "MACOSX_ADOBE_AIR_APSB15-19.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85327", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85327);\n script_version(\"1.19\");\n script_cvs_date(\"Date: 2018/07/16 12:48:31\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)\");\n script_summary(english:\"Checks the version gathered by local check.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Mac OS X host has a version of Adobe AIR installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to its version, the installation of Adobe AIR on the remote\nMac OS X host is equal or prior to 18.0.0.180. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe AIR 18.0.0.199 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:air\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"macosx_adobe_air_installed.nasl\");\n script_require_keys(\"MacOSX/Adobe_AIR/Version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nkb_base = \"MacOSX/Adobe_AIR\";\nversion = get_kb_item_or_exit(kb_base+\"/Version\");\npath = get_kb_item_or_exit(kb_base+\"/Path\");\n\n# nb: we're checking for versions less than *or equal to* the cutoff!\ncutoff_version = '18.0.0.180';\nfixed_version_for_report = '18.0.0.199';\n\nif (ver_compare(ver:version, fix:cutoff_version, strict:FALSE) <= 0)\n{\n if (report_verbosity > 0)\n {\n report =\n '\\n Path : ' + path +\n '\\n Installed version : ' + version +\n '\\n Fixed version : ' + fixed_version_for_report +\n '\\n';\n security_hole(port:0, extra:report);\n }\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, \"Adobe AIR\", version, path);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:59:38", "references": ["http://www.nessus.org/u?0cb17c10", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85326", "description": "The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.209. It is, therefore, affected by the following vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-12T00:00:00", "cpe": ["cpe:/a:adobe:flash_player"], "id": "FLASH_PLAYER_APSB15-19.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85326", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85326);\n script_version(\"1.18\");\n script_cvs_date(\"Date: 2018/07/12 15:01:52\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19)\");\n script_summary(english:\"Checks the version of Flash Player.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has a browser plugin installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Flash Player installed on the remote Windows host\nis equal or prior to version 18.0.0.209. It is, therefore, affected by\nthe following vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n # http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?0cb17c10\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Flash Player version 18.0.0.232 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:adobe:flash_player\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"flash_player_installed.nasl\");\n script_require_keys(\"SMB/Flash_Player/installed\");\n\n exit(0);\n}\n\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Flash_Player/installed\");\n\n# Identify vulnerable versions.\ninfo = \"\";\nvariants = make_list(\n \"Plugin\",\n \"ActiveX\",\n \"Chrome\",\n \"Chrome_Pepper\"\n);\n\n# we're checking for versions less than *or equal to* the cutoff!\nforeach variant (variants)\n{\n vers = get_kb_list(\"SMB/Flash_Player/\"+variant+\"/Version/*\");\n files = get_kb_list(\"SMB/Flash_Player/\"+variant+\"/File/*\");\n\n if(isnull(vers) || isnull(files))\n continue;\n\n foreach key (keys(vers))\n {\n ver = vers[key];\n if(isnull(ver))\n continue;\n\n vuln = FALSE;\n\n # Chrome Flash <= 18.0.0.209\n if(variant == \"Chrome_Pepper\" &&\n ver_compare(ver:ver,fix:\"18.0.0.209\",strict:FALSE) <= 0\n ) vuln = TRUE;\n\n # 14-18 <= 18.0.0.209\n if(variant != \"Chrome_Pepper\" &&\n ver =~ \"^1[4-8]\\.\" &&\n ver_compare(ver:ver,fix:\"18.0.0.209\",strict:FALSE) <= 0\n ) vuln = TRUE;\n\n if(vuln)\n {\n num = key - (\"SMB/Flash_Player/\"+variant+\"/Version/\");\n file = files[\"SMB/Flash_Player/\"+variant+\"/File/\"+num];\n if (variant == \"Plugin\")\n {\n info += '\\n Product : NPAPI Browser plugin (for Firefox / Netscape / Opera)';\n fix = \"18.0.0.232\";\n }\n else if (variant == \"ActiveX\")\n {\n info += '\\n Product : ActiveX control (for Internet Explorer)';\n fix = \"18.0.0.232\";\n }\n else if (variant == \"Chrome\")\n {\n info += '\\n Product : Browser plugin (for Google Chrome)';\n fix = \"Upgrade to the latest version of Google Chrome.\";\n }\n else if (variant == \"Chrome_Pepper\")\n {\n info += '\\n Product : PPAPI Browser plugin (for Opera and Chromium)';\n }\n info += '\\n Path : ' + file +\n '\\n Installed version : ' + ver;\n if (variant == \"Chrome_Pepper\")\n info += '\\n Fixed version : 18.0.0.232 (Chrome PepperFlash)';\n else if(!isnull(fix))\n info += '\\n Fixed version : '+fix;\n info += '\\n';\n }\n }\n}\n\nif (info)\n{\n port = get_kb_item(\"SMB/transport\");\n if (!port) port = 445;\n\n if (report_verbosity > 0) security_hole(port:port, extra:info);\n else security_hole(port);\n}\nelse\n{\n if (thorough_tests)\n exit(0, 'No vulnerable versions of Adobe Flash Player were found.');\n else\n exit(1, 'Google Chrome\\'s built-in Flash Player may not have been detected because the \\'Perform thorough tests\\' setting was not enabled.');\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:35:06", "references": ["http://www.nessus.org/u?d0a2294c", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85370", "description": "Adobe reports :\n\nAdobe has released security updates for Adobe Flash Player. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.\n\nThese updates resolve type confusion vulnerabilities that could lead to code execution (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562).\n\nThese updates include further hardening to a mitigation introduced in version 18.0.0.209 to defend against vector length corruptions (CVE-2015-5125).\n\nThese updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5124, CVE-2015-5564).\n\nThese updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5129, CVE-2015-5541).\n\nThese updates resolve buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133).\n\nThese updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553).\n\nThese updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-5560).", "edition": 5, "reporter": "Tenable", "published": "2015-08-13T00:00:00", "title": "FreeBSD : Adobe Flash Player -- critical vulnerabilities (f3778328-d288-4b39-86a4-65877331eaf7)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "FreeBSD Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-06-29T00:00:00", "cpe": ["cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:linux-f10-flashplugin", "p-cpe:/a:freebsd:freebsd:linux-c6-flashplugin", "p-cpe:/a:freebsd:freebsd:linux-c6_64-flashplugin"], "id": "FREEBSD_PKG_F3778328D2884B3986A465877331EAF7.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85370", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2018 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85370);\n script_version(\"2.8\");\n script_cvs_date(\"Date: 2018/06/29 12:01:00\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\");\n\n script_name(english:\"FreeBSD : Adobe Flash Player -- critical vulnerabilities (f3778328-d288-4b39-86a4-65877331eaf7)\");\n script_summary(english:\"Checks for updated packages in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote FreeBSD host is missing one or more security-related\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Adobe reports :\n\nAdobe has released security updates for Adobe Flash Player. These\nupdates address critical vulnerabilities that could potentially allow\nan attacker to take control of the affected system.\n\nThese updates resolve type confusion vulnerabilities that could lead\nto code execution (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555,\nCVE-2015-5558, CVE-2015-5562).\n\nThese updates include further hardening to a mitigation introduced in\nversion 18.0.0.209 to defend against vector length corruptions\n(CVE-2015-5125).\n\nThese updates resolve use-after-free vulnerabilities that could lead\nto code execution (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107,\nCVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\nCVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127,\nCVE-2015-5563, CVE-2015-5561, CVE-2015-5124, CVE-2015-5564).\n\nThese updates resolve heap buffer overflow vulnerabilities that could\nlead to code execution (CVE-2015-5129, CVE-2015-5541).\n\nThese updates resolve buffer overflow vulnerabilities that could lead\nto code execution (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133).\n\nThese updates resolve memory corruption vulnerabilities that could\nlead to code execution (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\nCVE-2015-5553).\n\nThese updates resolve an integer overflow vulnerability that could\nlead to code execution (CVE-2015-5560).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\"\n );\n # http://www.freebsd.org/ports/portaudit/f3778328-d288-4b39-86a4-65877331eaf7.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d0a2294c\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-c6-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-c6_64-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-f10-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"linux-c6-flashplugin<11.2r202.508\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"linux-c6_64-flashplugin<11.2r202.508\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"linux-f10-flashplugin<11.2r202.508\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-07T05:56:44", "references": ["https://www.redhat.com/security/data/cve/CVE-2015-5547.html", "https://www.redhat.com/security/data/cve/CVE-2015-5134.html", "https://www.redhat.com/security/data/cve/CVE-2015-5131.html", "https://www.redhat.com/security/data/cve/CVE-2015-5559.html", "https://www.redhat.com/security/data/cve/CVE-2015-5541.html", "https://www.redhat.com/security/data/cve/CVE-2015-5540.html", "https://www.redhat.com/security/data/cve/CVE-2015-5553.html", "https://www.redhat.com/security/data/cve/CVE-2015-5546.html", "https://www.redhat.com/security/data/cve/CVE-2015-5556.html", "https://www.redhat.com/security/data/cve/CVE-2015-5552.html", "https://www.redhat.com/security/data/cve/CVE-2015-5544.html", "https://www.redhat.com/security/data/cve/CVE-2015-5539.html", "https://www.redhat.com/security/data/cve/CVE-2015-5558.html", "https://www.redhat.com/security/data/cve/CVE-2015-5564.html", "https://www.redhat.com/security/data/cve/CVE-2015-5548.html", "https://www.redhat.com/security/data/cve/CVE-2015-5129.html", "https://www.redhat.com/security/data/cve/CVE-2015-5563.html", "https://www.redhat.com/security/data/cve/CVE-2015-5560.html", "http://rhn.redhat.com/errata/RHSA-2015-1603.html", "https://www.redhat.com/security/data/cve/CVE-2015-5545.html", "https://www.redhat.com/security/data/cve/CVE-2015-5549.html", "https://www.redhat.com/security/data/cve/CVE-2015-5127.html", "https://www.redhat.com/security/data/cve/CVE-2015-5130.html", "https://www.redhat.com/security/data/cve/CVE-2015-5550.html", "https://www.redhat.com/security/data/cve/CVE-2015-5551.html", "https://www.redhat.com/security/data/cve/CVE-2015-5566.html", "https://www.redhat.com/security/data/cve/CVE-2015-5555.html", "https://www.redhat.com/security/data/cve/CVE-2015-5132.html", "https://www.redhat.com/security/data/cve/CVE-2015-5133.html", "https://www.redhat.com/security/data/cve/CVE-2015-5562.html", "https://www.redhat.com/security/data/cve/CVE-2015-5561.html", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://www.redhat.com/security/data/cve/CVE-2015-5557.html", "https://www.redhat.com/security/data/cve/CVE-2015-5554.html", "https://www.redhat.com/security/data/cve/CVE-2015-5565.html"], "pluginID": "85372", "description": "An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player.\nThese vulnerabilities are detailed in the Adobe Security Bulletin APSB15-19 listed in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.508.", "edition": 8, "reporter": "Tenable", "published": "2015-08-13T00:00:00", "title": "RHEL 5 / 6 : flash-plugin (RHSA-2015:1603)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546"], "modified": "2018-09-06T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:6.7", "cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:flash-plugin", "cpe:/o:redhat:enterprise_linux:6"], "id": "REDHAT-RHSA-2015-1603.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85372", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:1603. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85372);\n script_version(\"2.25\");\n script_cvs_date(\"Date: 2018/09/06 11:58:20\");\n\n script_cve_id(\"CVE-2015-5127\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_xref(name:\"RHSA\", value:\"2015:1603\");\n\n script_name(english:\"RHEL 5 / 6 : flash-plugin (RHSA-2015:1603)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated Adobe Flash Player package that fixes multiple security\nissues is now available for Red Hat Enterprise Linux 5 and 6\nSupplementary.\n\nRed Hat Product Security has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe\nFlash Player web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player.\nThese vulnerabilities are detailed in the Adobe Security Bulletin\nAPSB15-19 listed in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain\nSWF content. An attacker could use these flaws to create a specially\ncrafted SWF file that would cause flash-plugin to crash or,\npotentially, execute arbitrary code when the victim loaded a page\ncontaining the malicious SWF content. (CVE-2015-5127, CVE-2015-5128,\nCVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132,\nCVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540,\nCVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550,\nCVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554,\nCVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558,\nCVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562,\nCVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package,\nwhich upgrades Flash Player to version 11.2.202.508.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2015-1603.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5127.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5129.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5564.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5563.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5562.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5561.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5560.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5541.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5540.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5545.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5544.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5547.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5546.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5549.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5548.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5130.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5131.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5132.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5133.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5134.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5552.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5553.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5550.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5551.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5556.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5557.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5554.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5555.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5558.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5559.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5539.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5565.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2015-5566.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected flash-plugin package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:flash-plugin\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.7\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(5|6)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x / 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2015:1603\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"flash-plugin-11.2.202.508-1.el5\")) flag++;\n\n\n if (rpm_check(release:\"RHEL6\", reference:\"flash-plugin-11.2.202.508-1.el6_7\")) flag++;\n\n\n if (flag)\n {\n flash_plugin_caveat = '\\n' +\n 'NOTE: This vulnerability check only applies to RedHat released\\n' +\n 'versions of the flash-plugin package. This check does not apply to\\n' +\n 'Adobe released versions of the flash-plugin package, which are\\n' +\n 'versioned similarly and cause collisions in detection.\\n\\n' +\n\n 'If you are certain you are running the Adobe released package of\\n' +\n 'flash-plugin and are running a version of it equal or higher to the\\n' +\n 'RedHat version listed above then you can consider this a false\\n' +\n 'positive.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat() + flash_plugin_caveat\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"flash-plugin\");\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:42:43", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "http://www.nessus.org/u?e46da2dd"], "pluginID": "85568", "description": "The version of Google Chrome installed on the remote Mac OS X host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-20T00:00:00", "title": "Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "MacOS X Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-16T00:00:00", "cpe": ["cpe:/a:google:chrome"], "id": "MACOSX_GOOGLE_CHROME_44_0_2403_155.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85568", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85568);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2018/07/16 12:48:31\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)\");\n script_summary(english:\"Checks the version number of Google Chrome.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Mac OS X host contains a web browser that is affected by\nmultiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Google Chrome installed on the remote Mac OS X host is\nprior to 44.0.2403.155. It is, therefore, affected by multiple\nvulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n # http://googlechromereleases.blogspot.com/2015/08/stable-channel-update_11.html\n script_set_attribute(attribute:\"see_also\",value:\"http://www.nessus.org/u?e46da2dd\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to Google Chrome 44.0.2403.155 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/20\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:google:chrome\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"macosx_google_chrome_installed.nbin\");\n script_require_keys(\"MacOSX/Google Chrome/Installed\");\n\n exit(0);\n}\n\ninclude(\"google_chrome_version.inc\");\n\nget_kb_item_or_exit(\"MacOSX/Google Chrome/Installed\");\n\ngoogle_chrome_check_version(fix:'44.0.2403.155', severity:SECURITY_HOLE);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:51:51", "references": ["https://support.microsoft.com/en-us/kb/3087916", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85329", "description": "The remote Windows host is missing KB3087916. It is, therefore, affected by multiple remote code execution vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 10, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "MS KB3087916: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-30T00:00:00", "cpe": ["cpe:/a:adobe:flash_player"], "id": "SMB_KB3087916.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85329", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85329);\n script_version(\"1.18\");\n script_cvs_date(\"Date: 2018/07/30 11:55:12\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n script_xref(name:\"MSKB\", value:\"3087916\");\n\n script_name(english:\"MS KB3087916: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer\");\n script_summary(english:\"Checks the version of the ActiveX control.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has a browser plugin installed that is\naffected by multiple remote code execution vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing KB3087916. It is, therefore,\naffected by multiple remote code execution vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.microsoft.com/en-us/kb/3087916\");\n script_set_attribute(attribute:\"solution\", value:\"Install Microsoft KB3087916.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:adobe:flash_player\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"smb_hotfixes.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"SMB/WindowsVersion\");\n script_require_ports(139, 445);\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_activex_func.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(win8:'0', win81:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\nif (hotfix_check_server_core() == 1) audit(AUDIT_WIN_SERVER_CORE);\n\nif (activex_init() != ACX_OK) audit(AUDIT_FN_FAIL, \"activex_init()\");\n\n# Adobe Flash Player CLSID\nclsid = '{D27CDB6E-AE6D-11cf-96B8-444553540000}';\n\nfile = activex_get_filename(clsid:clsid);\nif (isnull(file))\n{\n activex_end();\n audit(AUDIT_FN_FAIL, \"activex_get_filename\", \"NULL\");\n}\nif (!file)\n{\n activex_end();\n audit(AUDIT_ACTIVEX_NOT_FOUND, clsid);\n}\n\n# Get its version.\nversion = activex_get_fileversion(clsid:clsid);\nif (!version)\n{\n activex_end();\n audit(AUDIT_VER_FAIL, file);\n}\n\ninfo = '';\n\niver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(iver); i++)\n iver[i] = int(iver[i]);\n\n# <= 18.0.0.209.\nif (\n (report_paranoia > 1 || activex_get_killbit(clsid:clsid) == 0) &&\n (\n iver[0] < 18 ||\n (\n iver[0] == 18 &&\n (\n (iver[1] == 0 && iver[2] == 0 && iver[3] <= 228)\n )\n )\n )\n)\n{\n info = '\\n Path : ' + file +\n '\\n Installed version : ' + version +\n '\\n Fixed version : 18.0.0.232' +\n '\\n';\n}\n\nport = kb_smb_transport();\n\nif (info != '')\n{\n if (report_verbosity > 0)\n {\n if (report_paranoia > 1)\n {\n report = info +\n '\\n' +\n 'Note, though, that Nessus did not check whether the kill bit was\\n' +\n \"set for the control's CLSID because of the Report Paranoia setting\" + '\\n' +\n 'in effect when this scan was run.\\n';\n }\n else\n {\n report = info +\n '\\n' +\n 'Moreover, its kill bit is not set so it is accessible via Internet\\n' +\n 'Explorer.\\n';\n }\n security_hole(port:port, extra:report);\n }\n else security_hole(port);\n}\nelse audit(AUDIT_HOST_NOT, 'affected');\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:37:45", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "http://www.nessus.org/u?e46da2dd"], "pluginID": "85567", "description": "The version of Google Chrome installed on the remote Windows host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-20T00:00:00", "title": "Google Chrome < 44.0.2403.155 Multiple Vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-13T00:00:00", "cpe": ["cpe:/a:google:chrome"], "id": "GOOGLE_CHROME_44_0_2403_155.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85567", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85567);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2018/07/13 15:08:46\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Google Chrome < 44.0.2403.155 Multiple Vulnerabilities\");\n script_summary(english:\"Checks the version number of Google Chrome.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host contains a web browser that is affected by\nmultiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Google Chrome installed on the remote Windows host is\nprior to 44.0.2403.155. It is, therefore, affected by multiple\nvulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n # http://googlechromereleases.blogspot.com/2015/08/stable-channel-update_11.html\n script_set_attribute(attribute:\"see_also\",value:\"http://www.nessus.org/u?e46da2dd\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to Google Chrome 44.0.2403.155 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/20\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:google:chrome\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"google_chrome_installed.nasl\");\n script_require_keys(\"SMB/Google_Chrome/Installed\");\n\n exit(0);\n}\n\ninclude(\"google_chrome_version.inc\");\n\nget_kb_item_or_exit(\"SMB/Google_Chrome/Installed\");\ninstalls = get_kb_list(\"SMB/Google_Chrome/*\");\n\ngoogle_chrome_check_version(installs:installs, fix:'44.0.2403.155', severity:SECURITY_HOLE);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2018-09-17T13:36:28", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805955", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 5, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-17T00:00:00", "id": "OPENVAS:1361412562310805955", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805955", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_macosx.nasl 11424 2018-09-17 08:03:52Z mmartin $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805955\");\n script_version(\"$Revision: 11424 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-17 10:03:52 +0200 (Mon, 17 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:53:03 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 18.0.0.232 on Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 18.0.0.232 or later. For updates refer to\n http://get.adobe.com/flashplayer\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Flash/Player/MacOSX/Version\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"18.0.0.232\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.232\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-11T11:35:26", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805954", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 6, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-10T00:00:00", "id": "OPENVAS:1361412562310805954", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805954", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_win.nasl 11296 2018-09-10 09:08:51Z mmartin $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805954\");\n script_version(\"$Revision: 11296 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-10 11:08:51 +0200 (Mon, 10 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:38:37 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\n\n Impact Level: System/Application.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 18.0.0.232 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 18.0.0.232 or later. For updates refer to\n http://get.adobe.com/flashplayer\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_win.nasl\");\n script_mandatory_keys(\"AdobeFlashPlayer/Win/Installed\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"18.0.0.232\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.232\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-10T11:35:07", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805958", "description": "This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.", "edition": 5, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-07T00:00:00", "id": "OPENVAS:1361412562310805958", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805958", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_air_mult_vuln01_aug15_macosx.nasl 11291 2018-09-07 14:48:41Z mmartin $\n#\n# Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:adobe_air\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805958\");\n script_version(\"$Revision: 11291 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-07 16:48:41 +0200 (Fri, 07 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 10:04:52 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\n\n Impact Level: System/Application.\");\n\n script_tag(name:\"affected\", value:\"Adobe Air versions before 18.0.0.199 on\n Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Air version 18.0.0.199\n or later. For updates refer to http://get.adobe.com/air\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Air/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!airVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:airVer, test_version:\"18.0.0.199\"))\n{\n report = 'Installed version: ' + airVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.199\" + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-17T13:36:27", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805957", "description": "This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.", "edition": 6, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-17T00:00:00", "id": "OPENVAS:1361412562310805957", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805957", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_air_mult_vuln01_aug15_win.nasl 11424 2018-09-17 08:03:52Z mmartin $\n#\n# Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:adobe_air\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805957\");\n script_version(\"$Revision: 11424 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-17 10:03:52 +0200 (Mon, 17 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:38:37 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Air versions before 18.0.0.199 on\n Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Air version 18.0.0.199\n or later. For updates refer to http://get.adobe.com/air\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Air/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!airVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:airVer, test_version:\"18.0.0.199\"))\n{\n report = 'Installed version: ' + airVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.199\" + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:52:50", "references": ["https://security.gentoo.org/glsa/201508-01"], "pluginID": "1361412562310121404", "description": "Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201508-01", "edition": 5, "reporter": "Eero Volotinen", "published": "2015-09-29T00:00:00", "title": "Gentoo Linux Local Check: https://security.gentoo.org/glsa/201508-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-04-06T00:00:00", "id": "OPENVAS:1361412562310121404", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121404", "sourceData": "# OpenVAS Vulnerability Test\n# Description: Gentoo Linux security check\n# $Id: glsa-201508-01.nasl 9374 2018-04-06 08:58:12Z cfischer $\n\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\nif(description)\n {\nscript_oid(\"1.3.6.1.4.1.25623.1.0.121404\");\nscript_version(\"$Revision: 9374 $\");\nscript_tag(name:\"creation_date\", value:\"2015-09-29 11:29:00 +0300 (Tue, 29 Sep 2015)\");\nscript_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 10:58:12 +0200 (Fri, 06 Apr 2018) $\");\nscript_name(\"Gentoo Linux Local Check: https://security.gentoo.org/glsa/201508-01\");\nscript_tag(name: \"insight\", value: \"Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details.\"); \nscript_tag(name : \"solution\", value : \"update software\");\nscript_tag(name : \"solution_type\", value : \"VendorFix\");\nscript_xref(name : \"URL\" , value : \"https://security.gentoo.org/glsa/201508-01\");\nscript_cve_id(\"CVE-2015-3107\",\"CVE-2015-5122\",\"CVE-2015-5123\",\"CVE-2015-5124\",\"CVE-2015-5125\",\"CVE-2015-5127\",\"CVE-2015-5129\",\"CVE-2015-5130\",\"CVE-2015-5131\",\"CVE-2015-5132\",\"CVE-2015-5133\",\"CVE-2015-5134\",\"CVE-2015-5539\",\"CVE-2015-5540\",\"CVE-2015-5541\",\"CVE-2015-5544\",\"CVE-2015-5545\",\"CVE-2015-5546\",\"CVE-2015-5547\",\"CVE-2015-5548\",\"CVE-2015-5549\",\"CVE-2015-5550\",\"CVE-2015-5551\",\"CVE-2015-5552\",\"CVE-2015-5553\",\"CVE-2015-5554\",\"CVE-2015-5555\",\"CVE-2015-5556\",\"CVE-2015-5557\",\"CVE-2015-5558\",\"CVE-2015-5559\",\"CVE-2015-5560\",\"CVE-2015-5561\",\"CVE-2015-5562\",\"CVE-2015-5563\",\"CVE-2015-5564\",\"CVE-2015-5965\");\nscript_tag(name:\"cvss_base\", value:\"10.0\");\nscript_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\nscript_tag(name:\"qod_type\", value:\"package\");\nscript_dependencies(\"gather-package-list.nasl\");\nscript_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\nscript_category(ACT_GATHER_INFO);\nscript_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201508-01\");\nscript_copyright(\"Eero Volotinen\");\nscript_family(\"Gentoo Local Security Checks\");\nexit(0);\n}\ninclude(\"revisions-lib.inc\");\n\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"www-plugins/adobe-flash\", unaffected: make_list(\"ge 11.2.202.508\"), vulnerable: make_list(\"lt 11.2.202.508\"))) != NULL) {\n\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-11T11:34:58", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805956", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 5, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-10T00:00:00", "id": "OPENVAS:1361412562310805956", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805956", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_lin.nasl 11299 2018-09-10 10:23:24Z mmartin $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805956\");\n script_version(\"$Revision: 11299 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-10 12:23:24 +0200 (Mon, 10 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:54:26 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\n\n Impact Level: System/Application.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 11.2.202.508 on Linux.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 11.2.202.508 or later. For updates refer to\n http://get.adobe.com/flashplayer\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_lin.nasl\");\n script_mandatory_keys(\"AdobeFlashPlayer/Linux/Ver\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"11.2.202.508\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"11.2.202.508\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "redhat": [{"lastseen": "2018-06-07T05:57:53", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "5", "packageVersion": "11.2.202.508-1.el5", "arch": "i386", "packageName": "flash-plugin", "packageFilename": "flash-plugin-11.2.202.508-1.el5.i386.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "11.2.202.508-1.el6_7", "arch": "i686", "packageName": "flash-plugin", "packageFilename": "flash-plugin-11.2.202.508-1.el6_7.i686.rpm", "operator": "lt"}], "description": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-19\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,\nCVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\nCVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551,\nCVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\nCVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\nCVE-2015-5562, CVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.508.\n", "reporter": "RedHat", "published": "2015-08-12T04:00:00", "type": "redhat", "title": "(RHSA-2015:1603) Critical: flash-plugin security update", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5130", "CVE-2015-5131", "CVE-2015-5132", "CVE-2015-5133", "CVE-2015-5134", "CVE-2015-5539", "CVE-2015-5540", "CVE-2015-5541", "CVE-2015-5544", "CVE-2015-5545", "CVE-2015-5546", "CVE-2015-5547", "CVE-2015-5548", "CVE-2015-5549", "CVE-2015-5550", "CVE-2015-5551", "CVE-2015-5552", "CVE-2015-5553", "CVE-2015-5554", "CVE-2015-5555", "CVE-2015-5556", "CVE-2015-5557", "CVE-2015-5558", "CVE-2015-5559", "CVE-2015-5560", "CVE-2015-5561", "CVE-2015-5562", "CVE-2015-5563", "CVE-2015-5564", "CVE-2015-5565", "CVE-2015-5566"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-06-07T09:04:25", "id": "RHSA-2015:1603", "href": "https://access.redhat.com/errata/RHSA-2015:1603", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "kaspersky": [{"lastseen": "2018-09-13T06:47:13", "references": [], "description": "### *CVSS*:\n10.0\n\n### *Detect date*:\n08/11/2015\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code.\n\n### *Affected products*:\nAdobe Flash Player for Windows and OS X versions earlier than 18.0.0.232 \nAdobe Flash Player ESR versions earlier than 18.0.0.232 \nAdobe Flash Player for Linux versions earlier than 11.2.202.508 \nAdobe flash player at Google Chrome for Linux and Chrome OS versions earlier than 18.0.0.233 \nAdobe AIR versions earlier than 18.0.0.199\n\n### *Solution*:\nUpdate to the latest version \n[Get Flash Player](<https://get.adobe.com/flashplayer/>) \n[Get AIR](<https://get.adobe.com/air/>)\n\n### *Original advisories*:\n[Adobe Security bulletin](<https://helpx.adobe.com/security/products/flash-player/apsb15-19.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Adobe Flash Player ActiveX](<https://threats.kaspersky.com/en/product/Adobe-Flash-Player-ActiveX/>)\n\n### *CVE-IDS*:\n[CVE-2015-5124](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5124>) \n[CVE-2015-5544](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5544>) \n[CVE-2015-5545](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5545>) \n[CVE-2015-5540](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5540>) \n[CVE-2015-5541](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5541>) \n[CVE-2015-5548](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5548>) \n[CVE-2015-5549](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5549>) \n[CVE-2015-5546](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5546>) \n[CVE-2015-5547](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5547>) \n[CVE-2015-5539](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5539>) \n[CVE-2015-5561](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5561>) \n[CVE-2015-5565](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5565>) \n[CVE-2015-5564](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5564>) \n[CVE-2015-5563](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5563>) \n[CVE-2015-5562](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5562>) \n[CVE-2015-5555](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5555>) \n[CVE-2015-5566](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5566>) \n[CVE-2015-5125](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5125>) \n[CVE-2015-5127](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5127>) \n[CVE-2015-5129](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5129>) \n[CVE-2015-5560](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5560>) \n[CVE-2015-5130](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5130>) \n[CVE-2015-5131](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5131>) \n[CVE-2015-5551](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5551>) \n[CVE-2015-5550](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5550>) \n[CVE-2015-5557](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5557>) \n[CVE-2015-5556](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5556>) \n[CVE-2015-5559](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5559>) \n[CVE-2015-5558](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5558>) \n[CVE-2015-5553](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5553>) \n[CVE-2015-5552](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5552>) \n[CVE-2015-5134](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5134>) \n[CVE-2015-5554](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5554>) \n[CVE-2015-5133](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5133>) \n[CVE-2015-5132](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5132>)", "edition": 12, "reporter": "Kaspersky Lab", "published": "2015-08-11T00:00:00", "title": "\r KLA10650Multiple vulnerabilities in Adobe products ", "type": "kaspersky", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "info", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-10T00:00:00", "id": "KLA10650", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10650", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}