{"id": "EDB-ID:37872", "hash": "648178a019ad61931aec8fa54e5d63b1", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Adobe Flash Bad Write in XML When Callback Modifies XML Tree During Property Delete", "description": "Adobe Flash Bad Write in XML When Callback Modifies XML Tree During Property Delete. CVE-2015-5549. Dos exploits for multiple platform", "published": "2015-08-19T00:00:00", "modified": "2015-08-19T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.exploit-db.com/exploits/37872/", "reporter": "Google Security Research", "references": [], "cvelist": ["CVE-2015-5549"], "lastseen": "2016-02-04T06:45:42", "history": [], "viewCount": 1, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/37872/", "sourceData": "Source: https://code.google.com/p/google-security-research/issues/detail?id=404&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id\r\n\r\nSource file and compiled PoC attached.\r\n\r\nLooking at https://github.com/adobe-flash/avmplus/blob/master/core/XMLListObject.cpp:\r\n\r\nbool XMLListObject::delUintProperty(uint32_t index)\r\n...\r\nif (index >= _length()) [1]\r\n {\r\n return true;\r\n }\r\n...\r\n px->childChanges(core->knodeRemoved, r->atom()); [2]\r\n...\r\n m_children.removeAt(index); [3]\r\n\r\nIn [1], the passed in index is validated. In [2], the callback can run actionscript, which might shrink the size of the current XMLList. In [3], the pre-validated index is used but it might now be invalid due to shrinking at [2]. Unfortunately, removeAt() does not behave well in the presence of an out-of-bounds index.\r\n\r\nThe PoC works by triggering a wild copy in order to demonstrate the crash. But other side-effects are possible such as decrementing the refcount of an out-of-bounds index.\r\n\r\nProof of Concept:\r\nhttps://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/37872.zip\r\n\r\n", "osvdbidlist": [], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}

{"cve": [{"lastseen": "2018-01-05T11:51:46", "references": ["https://security.gentoo.org/glsa/201508-01", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388", "http://www.securitytracker.com/id/1033235", "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722", "http://rhn.redhat.com/errata/RHSA-2015-1603.html", "http://www.securityfocus.com/bid/76283", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"], "edition": 4, "description": "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.", "reporter": "NVD", "published": "2015-08-13T21:59:34", "title": "CVE-2015-5549", "type": "cve", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2015-5549"], "scanner": [], "cpe": ["cpe:/a:adobe:air_sdk:18.0.0.180", "cpe:/a:adobe:air_sdk_%26_compiler:18.0.0.180", "cpe:/a:adobe:flash_player:18.0.0.209", "cpe:/a:adobe:air:18.0.0.180", "cpe:/a:adobe:flash_player:11.2.202.491"], "modified": "2018-01-04T21:30:14", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5549", "id": "CVE-2015-5549", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2018-09-01T23:56:31", "references": ["https://security.gentoo.org/glsa/201508-01"], "pluginID": "86089", "description": "The remote host is affected by the vulnerability described in GLSA-201508-01 (Adobe Flash Player: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in Adobe Flash Player.\n Please review the CVE identifiers referenced below for details.\n Impact :\n\n A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.\n Workaround :\n\n There is no known workaround at this time.", "edition": 4, "reporter": "Tenable", "published": "2015-09-23T00:00:00", "title": "GLSA-201508-01 : Adobe Flash Player: Multiple vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2016-09-23T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:adobe-flash"], "id": "GENTOO_GLSA-201508-01.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=86089", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201508-01.\n#\n# The advisory text is Copyright (C) 2001-2016 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86089);\n script_version(\"$Revision: 2.2 $\");\n script_cvs_date(\"$Date: 2016/09/23 13:29:16 $\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5122\", \"CVE-2015-5123\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\", \"CVE-2015-5965\");\n script_xref(name:\"GLSA\", value:\"201508-01\");\n\n script_name(english:\"GLSA-201508-01 : Adobe Flash Player: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201508-01\n(Adobe Flash Player: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in Adobe Flash Player.\n Please review the CVE identifiers referenced below for details.\n \nImpact :\n\n A remote attacker could possibly execute arbitrary code with the\n privileges of the process, cause a Denial of Service condition, obtain\n sensitive information, or bypass security restrictions.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201508-01\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All Adobe Flash Player users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose\n '>=www-plugins/adobe-flash-11.2.202.508'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"metasploit_name\", value:'Adobe Flash opaqueBackground Use After Free');\n script_set_attribute(attribute:\"exploit_framework_metasploit\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:adobe-flash\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/15\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/09/23\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"www-plugins/adobe-flash\", unaffected:make_list(\"ge 11.2.202.508\"), vulnerable:make_list(\"lt 11.2.202.508\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"Adobe Flash Player\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-27T05:17:56", "references": ["https://bugzilla.opensuse.org/show_bug.cgi?id=941239"], "pluginID": "85435", "description": "- Security update to 11.2.202.508 (bsc#941239) :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563", "edition": 6, "reporter": "Tenable", "published": "2015-08-17T00:00:00", "title": "openSUSE Security Update : flash-player (openSUSE-2015-546)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-26T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:flash-player-kde4", "p-cpe:/a:novell:opensuse:flash-player-gnome", "cpe:/o:novell:opensuse:13.2", "p-cpe:/a:novell:opensuse:flash-player"], "id": "OPENSUSE-2015-546.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85435", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2015-546.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85435);\n script_version(\"2.5\");\n script_cvs_date(\"Date: 2018/11/26 11:02:16\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\");\n\n script_name(english:\"openSUSE Security Update : flash-player (openSUSE-2015-546)\");\n script_summary(english:\"Check for the openSUSE-2015-546 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\" - Security update to 11.2.202.508 (bsc#941239) :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129,\n CVE-2015-5130, CVE-2015-5131, CVE-2015-5132,\n CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5550,\n CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559,\n CVE-2015-5560, CVE-2015-5561, CVE-2015-5562,\n CVE-2015-5563\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=941239\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected flash-player packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player-kde4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:13.2\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/17\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE13\\.2)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"13.2\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE13.2\", reference:\"flash-player-11.2.202.508-2.67.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"flash-player-gnome-11.2.202.508-2.67.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"flash-player-kde4-11.2.202.508-2.67.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"flash-player / flash-player-gnome / flash-player-kde4\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-27T05:29:06", "references": ["https://bugzilla.opensuse.org/show_bug.cgi?id=941239"], "pluginID": "85434", "description": "Security update to 11.2.202.508 (bsc#941239) :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563", "edition": 6, "reporter": "Tenable", "published": "2015-08-17T00:00:00", "title": "openSUSE Security Update : flash-player (openSUSE-2015-545)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-26T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:flash-player-kde4", "p-cpe:/a:novell:opensuse:flash-player-gnome", "p-cpe:/a:novell:opensuse:flash-player", "cpe:/o:novell:opensuse:13.1"], "id": "OPENSUSE-2015-545.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85434", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2015-545.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85434);\n script_version(\"2.5\");\n script_cvs_date(\"Date: 2018/11/26 11:02:16\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\");\n\n script_name(english:\"openSUSE Security Update : flash-player (openSUSE-2015-545)\");\n script_summary(english:\"Check for the openSUSE-2015-545 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security update to 11.2.202.508 (bsc#941239) :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129,\n CVE-2015-5130, CVE-2015-5131, CVE-2015-5132,\n CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5550,\n CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559,\n CVE-2015-5560, CVE-2015-5561, CVE-2015-5562,\n CVE-2015-5563\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=941239\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected flash-player packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:flash-player-kde4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:13.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/17\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE13\\.1)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"13.1\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE13.1\", reference:\"flash-player-11.2.202.508-132.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"flash-player-gnome-11.2.202.508-132.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"flash-player-kde4-11.2.202.508-132.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"flash-player / flash-player-gnome / flash-player-kde4\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-30T07:39:43", "references": ["https://www.suse.com/security/cve/CVE-2015-5545/", "https://www.suse.com/security/cve/CVE-2015-5128/", "https://www.suse.com/security/cve/CVE-2015-5551/", "https://www.suse.com/security/cve/CVE-2015-5131/", "https://www.suse.com/security/cve/CVE-2015-5550/", "https://www.suse.com/security/cve/CVE-2015-5134/", "https://www.suse.com/security/cve/CVE-2015-5125/", "https://www.suse.com/security/cve/CVE-2015-5549/", "https://www.suse.com/security/cve/CVE-2015-5558/", "https://www.suse.com/security/cve/CVE-2015-5544/", "https://www.suse.com/security/cve/CVE-2015-5133/", "https://www.suse.com/security/cve/CVE-2015-5559/", "https://www.suse.com/security/cve/CVE-2015-5132/", "https://www.suse.com/security/cve/CVE-2015-5555/", "https://bugzilla.suse.com/show_bug.cgi?id=941239", "https://www.suse.com/security/cve/CVE-2015-5547/", "https://www.suse.com/security/cve/CVE-2015-3107/", "https://www.suse.com/security/cve/CVE-2015-5563/", "https://www.suse.com/security/cve/CVE-2015-5548/", "http://www.nessus.org/u?243a9f3c", "https://www.suse.com/security/cve/CVE-2015-5540/", "https://www.suse.com/security/cve/CVE-2015-5539/", "https://www.suse.com/security/cve/CVE-2015-5553/", "https://www.suse.com/security/cve/CVE-2015-5546/", "https://www.suse.com/security/cve/CVE-2015-5541/", "https://www.suse.com/security/cve/CVE-2015-5561/", "https://www.suse.com/security/cve/CVE-2015-5554/", "https://www.suse.com/security/cve/CVE-2015-5557/", "https://www.suse.com/security/cve/CVE-2015-5129/", "https://www.suse.com/security/cve/CVE-2015-5560/", "https://www.suse.com/security/cve/CVE-2015-5556/", "https://www.suse.com/security/cve/CVE-2015-5552/", "https://www.suse.com/security/cve/CVE-2015-5130/", "https://www.suse.com/security/cve/CVE-2015-5124/", "https://www.suse.com/security/cve/CVE-2015-5562/", "https://www.suse.com/security/cve/CVE-2015-5127/"], "pluginID": "85377", "description": "This security update to 11.2.202.508 (bsc#941239) fixes the following issues :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 9, "reporter": "Tenable", "published": "2015-08-13T00:00:00", "title": "SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1373-1)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-29T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:flash-player-kde4", "cpe:/o:novell:suse_linux:11", "p-cpe:/a:novell:suse_linux:flash-player", "p-cpe:/a:novell:suse_linux:flash-player-gnome"], "id": "SUSE_SU-2015-1373-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85377", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2015:1373-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85377);\n script_version(\"2.19\");\n script_cvs_date(\"Date: 2018/11/29 12:03:38\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\");\n script_bugtraq_id(75087, 75959);\n\n script_name(english:\"SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1373-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This security update to 11.2.202.508 (bsc#941239) fixes the following\nissues :\n\n - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129,\n CVE-2015-5130, CVE-2015-5131, CVE-2015-5132,\n CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5550,\n CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559,\n CVE-2015-5560, CVE-2015-5561, CVE-2015-5562,\n CVE-2015-5563\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=941239\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3107/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5124/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5125/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5127/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5128/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5129/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5130/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5131/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5132/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5133/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5134/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5539/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5540/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5541/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5544/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5545/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5546/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5547/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5548/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5549/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5550/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5551/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5552/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5553/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5555/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5556/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5557/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5558/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5559/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5560/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5561/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5562/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-5563/\"\n );\n # https://www.suse.com/support/update/announcement/2015/suse-su-20151373-1.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?243a9f3c\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Desktop 11-SP4 :\n\nzypper in -t patch sledsp4-flash-player-12025=1\n\nSUSE Linux Enterprise Desktop 11-SP3 :\n\nzypper in -t patch sledsp3-flash-player-12025=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:flash-player\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:flash-player-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:flash-player-kde4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:11\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLED11)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED11\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\nif (cpu >!< \"i386|i486|i586|i686|x86_64\") audit(AUDIT_ARCH_NOT, \"i386 / i486 / i586 / i686 / x86_64\", cpu);\n\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLED11\" && (! ereg(pattern:\"^(3|4)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED11 SP3/4\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"x86_64\", reference:\"flash-player-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"x86_64\", reference:\"flash-player-gnome-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"x86_64\", reference:\"flash-player-kde4-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"i586\", reference:\"flash-player-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"i586\", reference:\"flash-player-gnome-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"4\", cpu:\"i586\", reference:\"flash-player-kde4-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"x86_64\", reference:\"flash-player-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"x86_64\", reference:\"flash-player-gnome-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"x86_64\", reference:\"flash-player-kde4-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"i586\", reference:\"flash-player-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"i586\", reference:\"flash-player-gnome-11.2.202.508-0.14.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"i586\", reference:\"flash-player-kde4-11.2.202.508-0.14.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"flash-player\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:59:38", "references": ["http://www.nessus.org/u?0cb17c10", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85326", "description": "The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.209. It is, therefore, affected by the following vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-12T00:00:00", "cpe": ["cpe:/a:adobe:flash_player"], "id": "FLASH_PLAYER_APSB15-19.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85326", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85326);\n script_version(\"1.18\");\n script_cvs_date(\"Date: 2018/07/12 15:01:52\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19)\");\n script_summary(english:\"Checks the version of Flash Player.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has a browser plugin installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Flash Player installed on the remote Windows host\nis equal or prior to version 18.0.0.209. It is, therefore, affected by\nthe following vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n # http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?0cb17c10\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Flash Player version 18.0.0.232 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:adobe:flash_player\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"flash_player_installed.nasl\");\n script_require_keys(\"SMB/Flash_Player/installed\");\n\n exit(0);\n}\n\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Flash_Player/installed\");\n\n# Identify vulnerable versions.\ninfo = \"\";\nvariants = make_list(\n \"Plugin\",\n \"ActiveX\",\n \"Chrome\",\n \"Chrome_Pepper\"\n);\n\n# we're checking for versions less than *or equal to* the cutoff!\nforeach variant (variants)\n{\n vers = get_kb_list(\"SMB/Flash_Player/\"+variant+\"/Version/*\");\n files = get_kb_list(\"SMB/Flash_Player/\"+variant+\"/File/*\");\n\n if(isnull(vers) || isnull(files))\n continue;\n\n foreach key (keys(vers))\n {\n ver = vers[key];\n if(isnull(ver))\n continue;\n\n vuln = FALSE;\n\n # Chrome Flash <= 18.0.0.209\n if(variant == \"Chrome_Pepper\" &&\n ver_compare(ver:ver,fix:\"18.0.0.209\",strict:FALSE) <= 0\n ) vuln = TRUE;\n\n # 14-18 <= 18.0.0.209\n if(variant != \"Chrome_Pepper\" &&\n ver =~ \"^1[4-8]\\.\" &&\n ver_compare(ver:ver,fix:\"18.0.0.209\",strict:FALSE) <= 0\n ) vuln = TRUE;\n\n if(vuln)\n {\n num = key - (\"SMB/Flash_Player/\"+variant+\"/Version/\");\n file = files[\"SMB/Flash_Player/\"+variant+\"/File/\"+num];\n if (variant == \"Plugin\")\n {\n info += '\\n Product : NPAPI Browser plugin (for Firefox / Netscape / Opera)';\n fix = \"18.0.0.232\";\n }\n else if (variant == \"ActiveX\")\n {\n info += '\\n Product : ActiveX control (for Internet Explorer)';\n fix = \"18.0.0.232\";\n }\n else if (variant == \"Chrome\")\n {\n info += '\\n Product : Browser plugin (for Google Chrome)';\n fix = \"Upgrade to the latest version of Google Chrome.\";\n }\n else if (variant == \"Chrome_Pepper\")\n {\n info += '\\n Product : PPAPI Browser plugin (for Opera and Chromium)';\n }\n info += '\\n Path : ' + file +\n '\\n Installed version : ' + ver;\n if (variant == \"Chrome_Pepper\")\n info += '\\n Fixed version : 18.0.0.232 (Chrome PepperFlash)';\n else if(!isnull(fix))\n info += '\\n Fixed version : '+fix;\n info += '\\n';\n }\n }\n}\n\nif (info)\n{\n port = get_kb_item(\"SMB/transport\");\n if (!port) port = 445;\n\n if (report_verbosity > 0) security_hole(port:port, extra:info);\n else security_hole(port);\n}\nelse\n{\n if (thorough_tests)\n exit(0, 'No vulnerable versions of Adobe Flash Player were found.');\n else\n exit(1, 'Google Chrome\\'s built-in Flash Player may not have been detected because the \\'Perform thorough tests\\' setting was not enabled.');\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-13T17:04:24", "references": ["https://access.redhat.com/security/cve/cve-2015-5549", "https://access.redhat.com/security/cve/cve-2015-5563", "https://access.redhat.com/security/cve/cve-2015-5540", "https://access.redhat.com/security/cve/cve-2015-5552", "https://access.redhat.com/security/cve/cve-2015-5546", "https://access.redhat.com/security/cve/cve-2015-5548", "https://access.redhat.com/security/cve/cve-2015-5539", "https://access.redhat.com/security/cve/cve-2015-5555", "https://access.redhat.com/security/cve/cve-2015-5562", "https://access.redhat.com/security/cve/cve-2015-5547", "https://access.redhat.com/security/cve/cve-2015-5551", "https://access.redhat.com/security/cve/cve-2015-5134", "https://access.redhat.com/security/cve/cve-2015-5544", "https://access.redhat.com/security/cve/cve-2015-5560", "https://access.redhat.com/security/cve/cve-2015-5130", "https://access.redhat.com/security/cve/cve-2015-5550", "https://access.redhat.com/security/cve/cve-2015-5131", "https://access.redhat.com/security/cve/cve-2015-5565", "https://access.redhat.com/security/cve/cve-2015-5133", "https://access.redhat.com/security/cve/cve-2015-5553", "https://access.redhat.com/security/cve/cve-2015-5556", "https://access.redhat.com/errata/RHSA-2015:1603", "https://access.redhat.com/security/cve/cve-2015-5132", "https://access.redhat.com/security/cve/cve-2015-5127", "https://access.redhat.com/security/cve/cve-2015-5564", "https://access.redhat.com/security/cve/cve-2015-5561", "https://access.redhat.com/security/cve/cve-2015-5554", "https://access.redhat.com/security/cve/cve-2015-5558", "https://access.redhat.com/security/cve/cve-2015-5129", "https://access.redhat.com/security/cve/cve-2015-5559", "https://access.redhat.com/security/cve/cve-2015-5557", "https://access.redhat.com/security/cve/cve-2015-5545", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "https://access.redhat.com/security/cve/cve-2015-5566", "https://access.redhat.com/security/cve/cve-2015-5541"], "pluginID": "85372", "description": "An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player.\nThese vulnerabilities are detailed in the Adobe Security Bulletin APSB15-19 listed in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.508.", "edition": 9, "reporter": "Tenable", "published": "2015-08-13T00:00:00", "title": "RHEL 5 / 6 : flash-plugin (RHSA-2015:1603)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546"], "modified": "2018-11-10T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:6.7", "cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:flash-plugin", "cpe:/o:redhat:enterprise_linux:6"], "id": "REDHAT-RHSA-2015-1603.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85372", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:1603. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85372);\n script_version(\"2.26\");\n script_cvs_date(\"Date: 2018/11/10 11:49:54\");\n\n script_cve_id(\"CVE-2015-5127\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_xref(name:\"RHSA\", value:\"2015:1603\");\n\n script_name(english:\"RHEL 5 / 6 : flash-plugin (RHSA-2015:1603)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated Adobe Flash Player package that fixes multiple security\nissues is now available for Red Hat Enterprise Linux 5 and 6\nSupplementary.\n\nRed Hat Product Security has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe\nFlash Player web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player.\nThese vulnerabilities are detailed in the Adobe Security Bulletin\nAPSB15-19 listed in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain\nSWF content. An attacker could use these flaws to create a specially\ncrafted SWF file that would cause flash-plugin to crash or,\npotentially, execute arbitrary code when the victim loaded a page\ncontaining the malicious SWF content. (CVE-2015-5127, CVE-2015-5128,\nCVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132,\nCVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540,\nCVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550,\nCVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554,\nCVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558,\nCVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562,\nCVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package,\nwhich upgrades Flash Player to version 11.2.202.508.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2015:1603\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5127\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5129\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5564\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5563\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5562\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5561\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5560\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5541\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5540\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5545\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5544\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5547\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5546\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5549\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5548\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5130\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5131\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5132\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5133\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5134\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5552\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5553\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5550\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5551\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5556\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5557\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5554\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5555\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5558\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5559\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5539\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5565\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5566\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected flash-plugin package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:flash-plugin\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.7\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(5|6)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x / 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2015:1603\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"flash-plugin-11.2.202.508-1.el5\")) flag++;\n\n\n if (rpm_check(release:\"RHEL6\", reference:\"flash-plugin-11.2.202.508-1.el6_7\")) flag++;\n\n\n if (flag)\n {\n flash_plugin_caveat = '\\n' +\n 'NOTE: This vulnerability check only applies to RedHat released\\n' +\n 'versions of the flash-plugin package. This check does not apply to\\n' +\n 'Adobe released versions of the flash-plugin package, which are\\n' +\n 'versioned similarly and cause collisions in detection.\\n\\n' +\n\n 'If you are certain you are running the Adobe released package of\\n' +\n 'flash-plugin and are running a version of it equal or higher to the\\n' +\n 'RedHat version listed above then you can consider this a false\\n' +\n 'positive.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat() + flash_plugin_caveat\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"flash-plugin\");\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-27T05:13:07", "references": ["http://www.nessus.org/u?86d2e9a2", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85370", "description": "Adobe reports :\n\nAdobe has released security updates for Adobe Flash Player. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.\n\nThese updates resolve type confusion vulnerabilities that could lead to code execution (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562).\n\nThese updates include further hardening to a mitigation introduced in version 18.0.0.209 to defend against vector length corruptions (CVE-2015-5125).\n\nThese updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5124, CVE-2015-5564).\n\nThese updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5129, CVE-2015-5541).\n\nThese updates resolve buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133).\n\nThese updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553).\n\nThese updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-5560).", "edition": 7, "reporter": "Tenable", "published": "2015-08-13T00:00:00", "title": "FreeBSD : Adobe Flash Player -- critical vulnerabilities (f3778328-d288-4b39-86a4-65877331eaf7)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "FreeBSD Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-26T00:00:00", "cpe": ["cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:linux-f10-flashplugin", "p-cpe:/a:freebsd:freebsd:linux-c6-flashplugin", "p-cpe:/a:freebsd:freebsd:linux-c6_64-flashplugin"], "id": "FREEBSD_PKG_F3778328D2884B3986A465877331EAF7.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85370", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2018 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85370);\n script_version(\"2.10\");\n script_cvs_date(\"Date: 2018/11/26 11:02:14\");\n\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\");\n\n script_name(english:\"FreeBSD : Adobe Flash Player -- critical vulnerabilities (f3778328-d288-4b39-86a4-65877331eaf7)\");\n script_summary(english:\"Checks for updated packages in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote FreeBSD host is missing one or more security-related\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Adobe reports :\n\nAdobe has released security updates for Adobe Flash Player. These\nupdates address critical vulnerabilities that could potentially allow\nan attacker to take control of the affected system.\n\nThese updates resolve type confusion vulnerabilities that could lead\nto code execution (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555,\nCVE-2015-5558, CVE-2015-5562).\n\nThese updates include further hardening to a mitigation introduced in\nversion 18.0.0.209 to defend against vector length corruptions\n(CVE-2015-5125).\n\nThese updates resolve use-after-free vulnerabilities that could lead\nto code execution (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107,\nCVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\nCVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127,\nCVE-2015-5563, CVE-2015-5561, CVE-2015-5124, CVE-2015-5564).\n\nThese updates resolve heap buffer overflow vulnerabilities that could\nlead to code execution (CVE-2015-5129, CVE-2015-5541).\n\nThese updates resolve buffer overflow vulnerabilities that could lead\nto code execution (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133).\n\nThese updates resolve memory corruption vulnerabilities that could\nlead to code execution (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\nCVE-2015-5553).\n\nThese updates resolve an integer overflow vulnerability that could\nlead to code execution (CVE-2015-5560).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\"\n );\n # https://vuxml.freebsd.org/freebsd/f3778328-d288-4b39-86a4-65877331eaf7.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?86d2e9a2\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-c6-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-c6_64-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:linux-f10-flashplugin\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"linux-c6-flashplugin<11.2r202.508\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"linux-c6_64-flashplugin<11.2r202.508\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"linux-f10-flashplugin<11.2r202.508\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:42:43", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "http://www.nessus.org/u?e46da2dd"], "pluginID": "85568", "description": "The version of Google Chrome installed on the remote Mac OS X host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-20T00:00:00", "title": "Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "MacOS X Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-16T00:00:00", "cpe": ["cpe:/a:google:chrome"], "id": "MACOSX_GOOGLE_CHROME_44_0_2403_155.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85568", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85568);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2018/07/16 12:48:31\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)\");\n script_summary(english:\"Checks the version number of Google Chrome.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Mac OS X host contains a web browser that is affected by\nmultiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Google Chrome installed on the remote Mac OS X host is\nprior to 44.0.2403.155. It is, therefore, affected by multiple\nvulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n # http://googlechromereleases.blogspot.com/2015/08/stable-channel-update_11.html\n script_set_attribute(attribute:\"see_also\",value:\"http://www.nessus.org/u?e46da2dd\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to Google Chrome 44.0.2403.155 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/20\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:google:chrome\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"macosx_google_chrome_installed.nbin\");\n script_require_keys(\"MacOSX/Google Chrome/Installed\");\n\n exit(0);\n}\n\ninclude(\"google_chrome_version.inc\");\n\nget_kb_item_or_exit(\"MacOSX/Google Chrome/Installed\");\n\ngoogle_chrome_check_version(fix:'44.0.2403.155', severity:SECURITY_HOLE);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:37:45", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", "http://www.nessus.org/u?e46da2dd"], "pluginID": "85567", "description": "The version of Google Chrome installed on the remote Windows host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 9, "reporter": "Tenable", "published": "2015-08-20T00:00:00", "title": "Google Chrome < 44.0.2403.155 Multiple Vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-07-13T00:00:00", "cpe": ["cpe:/a:google:chrome"], "id": "GOOGLE_CHROME_44_0_2403_155.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85567", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85567);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2018/07/13 15:08:46\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n\n script_name(english:\"Google Chrome < 44.0.2403.155 Multiple Vulnerabilities\");\n script_summary(english:\"Checks the version number of Google Chrome.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host contains a web browser that is affected by\nmultiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Google Chrome installed on the remote Windows host is\nprior to 44.0.2403.155. It is, therefore, affected by multiple\nvulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n\n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n # http://googlechromereleases.blogspot.com/2015/08/stable-channel-update_11.html\n script_set_attribute(attribute:\"see_also\",value:\"http://www.nessus.org/u?e46da2dd\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to Google Chrome 44.0.2403.155 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/20\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:google:chrome\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"google_chrome_installed.nasl\");\n script_require_keys(\"SMB/Google_Chrome/Installed\");\n\n exit(0);\n}\n\ninclude(\"google_chrome_version.inc\");\n\nget_kb_item_or_exit(\"SMB/Google_Chrome/Installed\");\ninstalls = get_kb_list(\"SMB/Google_Chrome/*\");\n\ngoogle_chrome_check_version(installs:installs, fix:'44.0.2403.155', severity:SECURITY_HOLE);\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-17T03:04:39", "references": ["https://support.microsoft.com/en-us/help/3087916/microsoft-security-advisory-update-for-vulnerabilities-in-adobe-flash", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "85329", "description": "The remote Windows host is missing KB3087916. It is, therefore, affected by multiple remote code execution vulnerabilities :\n\n - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566) \n - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133) \n - Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)\n\n - An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)", "edition": 11, "reporter": "Tenable", "published": "2015-08-11T00:00:00", "title": "MS KB3087916: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-15T00:00:00", "cpe": ["cpe:/a:adobe:flash_player"], "id": "SMB_KB3087916.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=85329", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85329);\n script_version(\"1.19\");\n script_cvs_date(\"Date: 2018/11/15 20:50:28\");\n\n script_cve_id(\n \"CVE-2015-3107\",\n \"CVE-2015-5125\",\n \"CVE-2015-5127\",\n \"CVE-2015-5128\",\n \"CVE-2015-5129\",\n \"CVE-2015-5130\",\n \"CVE-2015-5131\",\n \"CVE-2015-5132\",\n \"CVE-2015-5133\",\n \"CVE-2015-5134\",\n \"CVE-2015-5539\",\n \"CVE-2015-5540\",\n \"CVE-2015-5541\",\n \"CVE-2015-5544\",\n \"CVE-2015-5545\",\n \"CVE-2015-5546\",\n \"CVE-2015-5547\",\n \"CVE-2015-5548\",\n \"CVE-2015-5549\",\n \"CVE-2015-5550\",\n \"CVE-2015-5551\",\n \"CVE-2015-5552\",\n \"CVE-2015-5553\",\n \"CVE-2015-5554\",\n \"CVE-2015-5555\",\n \"CVE-2015-5556\",\n \"CVE-2015-5557\",\n \"CVE-2015-5558\",\n \"CVE-2015-5559\",\n \"CVE-2015-5560\",\n \"CVE-2015-5561\",\n \"CVE-2015-5562\",\n \"CVE-2015-5563\",\n \"CVE-2015-5564\",\n \"CVE-2015-5565\",\n \"CVE-2015-5566\"\n );\n script_bugtraq_id(\n 75087,\n 76282,\n 76283,\n 76287,\n 76288,\n 76289,\n 76291\n );\n script_xref(name:\"MSKB\", value:\"3087916\");\n\n script_name(english:\"MS KB3087916: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer\");\n script_summary(english:\"Checks the version of the ActiveX control.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has a browser plugin installed that is\naffected by multiple remote code execution vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing KB3087916. It is, therefore,\naffected by multiple remote code execution vulnerabilities :\n\n - Multiple type confusion errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5128,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5558,\n CVE-2015-5562)\n\n - An unspecified vulnerability exists related to vector\n length corruptions. (CVE-2015-5125)\n\n - Multiple user-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5550,\n CVE-2015-5551, CVE-2015-3107, CVE-2015-5556,\n CVE-2015-5130, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n CVE-2015-5127, CVE-2015-5563, CVE-2015-5561,\n CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)\n \n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-5129, CVE-2015-5541)\n\n - Multiple buffer overflow conditions exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133)\n \n - Multiple memory corruption issues exist that allow an\n attacker to execute arbitrary code. (CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547,\n CVE-2015-5548, CVE-2015-5549, CVE-2015-5552,\n CVE-2015-5553)\n\n - An integer overflow condition exists that allows an\n attacker to execute arbitrary code. (CVE-2015-5560)\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.microsoft.com/en-us/help/3087916/microsoft-security-advisory-update-for-vulnerabilities-in-adobe-flash\");\n script_set_attribute(attribute:\"solution\", value:\"Install Microsoft KB3087916.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"vuln_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"patch_publication_date\",value:\"2015/08/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/11\");\n\n script_set_attribute(attribute:\"plugin_type\",value:\"local\");\n script_set_attribute(attribute:\"cpe\",value:\"cpe:/a:adobe:flash_player\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"smb_hotfixes.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"SMB/WindowsVersion\");\n script_require_ports(139, 445);\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_activex_func.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(win8:'0', win81:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\nif (hotfix_check_server_core() == 1) audit(AUDIT_WIN_SERVER_CORE);\n\nif (activex_init() != ACX_OK) audit(AUDIT_FN_FAIL, \"activex_init()\");\n\n# Adobe Flash Player CLSID\nclsid = '{D27CDB6E-AE6D-11cf-96B8-444553540000}';\n\nfile = activex_get_filename(clsid:clsid);\nif (isnull(file))\n{\n activex_end();\n audit(AUDIT_FN_FAIL, \"activex_get_filename\", \"NULL\");\n}\nif (!file)\n{\n activex_end();\n audit(AUDIT_ACTIVEX_NOT_FOUND, clsid);\n}\n\n# Get its version.\nversion = activex_get_fileversion(clsid:clsid);\nif (!version)\n{\n activex_end();\n audit(AUDIT_VER_FAIL, file);\n}\n\ninfo = '';\n\niver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(iver); i++)\n iver[i] = int(iver[i]);\n\n# <= 18.0.0.209.\nif (\n (report_paranoia > 1 || activex_get_killbit(clsid:clsid) == 0) &&\n (\n iver[0] < 18 ||\n (\n iver[0] == 18 &&\n (\n (iver[1] == 0 && iver[2] == 0 && iver[3] <= 228)\n )\n )\n )\n)\n{\n info = '\\n Path : ' + file +\n '\\n Installed version : ' + version +\n '\\n Fixed version : 18.0.0.232' +\n '\\n';\n}\n\nport = kb_smb_transport();\n\nif (info != '')\n{\n if (report_verbosity > 0)\n {\n if (report_paranoia > 1)\n {\n report = info +\n '\\n' +\n 'Note, though, that Nessus did not check whether the kill bit was\\n' +\n \"set for the control's CLSID because of the Report Paranoia setting\" + '\\n' +\n 'in effect when this scan was run.\\n';\n }\n else\n {\n report = info +\n '\\n' +\n 'Moreover, its kill bit is not set so it is accessible via Internet\\n' +\n 'Explorer.\\n';\n }\n security_hole(port:port, extra:report);\n }\n else security_hole(port);\n}\nelse audit(AUDIT_HOST_NOT, 'affected');\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "freebsd": [{"lastseen": "2018-08-31T01:14:35", "references": ["https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "affectedPackage": [{"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-c6-flashplugin", "operator": "lt"}, {"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-f10-flashplugin", "operator": "lt"}, {"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "11.2r202.508", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-c6_64-flashplugin", "operator": "lt"}], "description": "\nAdobe reports:\n\nAdobe has released security updates for Adobe Flash Player.\n\t These updates address critical vulnerabilities that could\n\t potentially allow an attacker to take control of the affected\n\t system.\nThese updates resolve type confusion vulnerabilities that could\n\t lead to code execution (CVE-2015-5128, CVE-2015-5554,\n\t CVE-2015-5555, CVE-2015-5558, CVE-2015-5562).\nThese updates include further hardening to a mitigation\n\t introduced in version 18.0.0.209 to defend against vector\n\t length corruptions (CVE-2015-5125).\nThese updates resolve use-after-free vulnerabilities that could\n\t lead to code execution (CVE-2015-5550, CVE-2015-5551,\n\t CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134,\n\t CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559,\n\t CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5124,\n\t CVE-2015-5564).\nThese updates resolve heap buffer overflow vulnerabilities\n\t that could lead to code execution (CVE-2015-5129,\n\t CVE-2015-5541).\nThese updates resolve buffer overflow vulnerabilities that\n\t could lead to code execution (CVE-2015-5131, CVE-2015-5132,\n\t CVE-2015-5133).\nThese updates resolve memory corruption vulnerabilities that\n\t could lead to code execution (CVE-2015-5544, CVE-2015-5545,\n\t CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n\t CVE-2015-5552, CVE-2015-5553).\nThese updates resolve an integer overflow vulnerability that\n\t could lead to code execution (CVE-2015-5560).\n\n", "edition": 3, "reporter": "FreeBSD", "published": "2015-08-11T00:00:00", "title": "Adobe Flash Player -- critical vulnerabilities", "type": "freebsd", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-11T00:00:00", "id": "F3778328-D288-4B39-86A4-65877331EAF7", "href": "https://vuxml.freebsd.org/freebsd/f3778328-d288-4b39-86a4-65877331eaf7.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:24", "references": ["http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3107", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5563", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5122", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5564", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5551", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5546", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5545", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5130", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5553", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5125", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5123", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5544", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5541", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5965", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5129", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5133", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5561", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5132", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5540", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5556", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5134", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5131", "https://bugs.gentoo.org/show_bug.cgi?id=557342", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5548", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5124", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5552", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5560", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5554", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5550", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5555", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5127", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5549", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5562", "https://bugs.gentoo.org/show_bug.cgi?id=554882", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5558", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5539", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5547", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5557", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5559"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "11.2.202.508", "arch": "all", "packageFilename": "UNKNOWN", "packageName": "www-plugins/adobe-flash", "operator": "lt"}], "edition": 1, "description": "### Background\n\nThe Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. \n\n### Description\n\nMultiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll Adobe Flash Player users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=www-plugins/adobe-flash-11.2.202.508\"", "reporter": "Gentoo Foundation", "published": "2015-08-15T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "gentoo", "title": "Adobe Flash Player: Multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-15T00:00:00", "id": "GLSA-201508-01", "href": "https://security.gentoo.org/glsa/201508-01", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2018-11-19T13:03:00", "references": ["2015:1374_1"], "pluginID": "1361412562310851073", "description": "The remote host is missing an update for the ", "edition": 8, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-10-16T00:00:00", "title": "SuSE Update for flash-player SUSE-SU-2015:1374-1 (flash-player)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-11-16T00:00:00", "id": "OPENVAS:1361412562310851073", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851073", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_suse_2015_1374_1.nasl 12381 2018-11-16 11:16:30Z cfischer $\n#\n# SuSE Update for flash-player SUSE-SU-2015:1374-1 (flash-player)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851073\");\n script_version(\"$Revision: 12381 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-16 12:16:30 +0100 (Fri, 16 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-10-16 19:29:36 +0200 (Fri, 16 Oct 2015)\");\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"SuSE Update for flash-player SUSE-SU-2015:1374-1 (flash-player)\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'flash-player'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"This security update to 11.2.202.508 (bsc#941239) fixes the following\n issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127,\n CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,\n CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557,\n CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\n CVE-2015-5562, CVE-2015-5563\");\n script_tag(name:\"affected\", value:\"flash-player on SUSE Linux Enterprise Desktop 12\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n script_xref(name:\"SUSE-SU\", value:\"2015:1374_1\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=SLED12\\.0SP0\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\nres = \"\";\n\nif(release == \"SLED12.0SP0\")\n{\n\n if ((res = isrpmvuln(pkg:\"flash-player\", rpm:\"flash-player~11.2.202.508~99.1\", rls:\"SLED12.0SP0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"flash-player-gnome\", rpm:\"flash-player-gnome~11.2.202.508~99.1\", rls:\"SLED12.0SP0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-22T16:38:26", "references": ["http://get.adobe.com/air", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805958", "description": "This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.", "edition": 7, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-12T00:00:00", "id": "OPENVAS:1361412562310805958", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805958", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_air_mult_vuln01_aug15_macosx.nasl 11872 2018-10-12 11:22:41Z cfischer $\n#\n# Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:adobe_air\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805958\");\n script_version(\"$Revision: 11872 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 13:22:41 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 10:04:52 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Air Multiple Vulnerabilities-01 Aug15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Air versions before 18.0.0.199 on\n Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Air version 18.0.0.199\n or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Air/MacOSX/Version\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/air\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!airVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:airVer, test_version:\"18.0.0.199\"))\n{\n report = 'Installed version: ' + airVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.199\" + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-22T16:39:31", "references": ["http://get.adobe.com/air", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805957", "description": "This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.", "edition": 7, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-12T00:00:00", "id": "OPENVAS:1361412562310805957", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805957", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_air_mult_vuln01_aug15_win.nasl 11872 2018-10-12 11:22:41Z cfischer $\n#\n# Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:adobe_air\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805957\");\n script_version(\"$Revision: 11872 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 13:22:41 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:38:37 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Air Multiple Vulnerabilities-01 Aug15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Air and\n is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Air versions before 18.0.0.199 on\n Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Air version 18.0.0.199\n or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Air/Win/Installed\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/air\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!airVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:airVer, test_version:\"18.0.0.199\"))\n{\n report = 'Installed version: ' + airVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.199\" + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-29T12:40:27", "references": ["https://security.gentoo.org/glsa/201508-01"], "pluginID": "1361412562310121404", "description": "Gentoo Linux Local Security Checks GLSA 201508-01", "edition": 7, "reporter": "Eero Volotinen", "published": "2015-09-29T00:00:00", "title": "Gentoo Security Advisory GLSA 201508-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5965", "CVE-2015-5563", "CVE-2015-5123", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5122", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-26T00:00:00", "id": "OPENVAS:1361412562310121404", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121404", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: glsa-201508-01.nasl 12128 2018-10-26 13:35:25Z cfischer $\n#\n# Gentoo Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.121404\");\n script_version(\"$Revision: 12128 $\");\n script_tag(name:\"creation_date\", value:\"2015-09-29 11:29:00 +0300 (Tue, 29 Sep 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-26 15:35:25 +0200 (Fri, 26 Oct 2018) $\");\n script_name(\"Gentoo Security Advisory GLSA 201508-01\");\n script_tag(name:\"insight\", value:\"Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://security.gentoo.org/glsa/201508-01\");\n script_cve_id(\"CVE-2015-3107\", \"CVE-2015-5122\", \"CVE-2015-5123\", \"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\", \"CVE-2015-5564\", \"CVE-2015-5965\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks GLSA 201508-01\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Gentoo Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"www-plugins/adobe-flash\", unaffected: make_list(\"ge 11.2.202.508\"), vulnerable: make_list(\"lt 11.2.202.508\"))) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-22T16:38:27", "references": ["http://get.adobe.com/flashplayer", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805956", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 7, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-12T00:00:00", "id": "OPENVAS:1361412562310805956", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805956", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_lin.nasl 11872 2018-10-12 11:22:41Z cfischer $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805956\");\n script_version(\"$Revision: 11872 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 13:22:41 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:54:26 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Linux)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 11.2.202.508 on Linux.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 11.2.202.508 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_lin.nasl\");\n script_mandatory_keys(\"AdobeFlashPlayer/Linux/Ver\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/flashplayer\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"11.2.202.508\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"11.2.202.508\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-01T10:29:13", "references": ["https://advisories.mageia.org/MGASA-2015-0311.html"], "pluginID": "1361412562310130068", "description": "Mageia Linux Local Security Checks mgasa-2015-0311", "edition": 5, "reporter": "Eero Volotinen", "published": "2015-10-15T00:00:00", "title": "Mageia Linux Local Check: mgasa-2015-0311", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Mageia Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-09-28T00:00:00", "id": "OPENVAS:1361412562310130068", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310130068", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: mgasa-2015-0311.nasl 11692 2018-09-28 16:55:19Z cfischer $\n#\n# Mageia Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://www.solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.130068\");\n script_version(\"$Revision: 11692 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-15 10:42:19 +0300 (Thu, 15 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 18:55:19 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Mageia Linux Local Check: mgasa-2015-0311\");\n script_tag(name:\"insight\", value:\"Adobe Flash Player 11.2.202.508 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://advisories.mageia.org/MGASA-2015-0311.html\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5128\", \"CVE-2015-5129\", \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\", \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\", \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\", \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\", \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\", \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\", \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mageia_linux\", \"ssh/login/release\", re:\"ssh/login/release=MAGEIA5\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Mageia Linux Local Security Checks mgasa-2015-0311\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Mageia Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MAGEIA5\")\n{\nif ((res = isrpmvuln(pkg:\"flash-player-plugin\", rpm:\"flash-player-plugin~11.2.202.508~1.mga5.nonfree\", rls:\"MAGEIA5\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-22T16:38:58", "references": ["http://get.adobe.com/flashplayer", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805954", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 8, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-12T00:00:00", "id": "OPENVAS:1361412562310805954", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805954", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_win.nasl 11872 2018-10-12 11:22:41Z cfischer $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805954\");\n script_version(\"$Revision: 11872 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 13:22:41 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:38:37 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 18.0.0.232 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 18.0.0.232 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_adobe_flash_player_detect_win.nasl\");\n script_mandatory_keys(\"AdobeFlashPlayer/Win/Installed\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/flashplayer\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"18.0.0.232\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.232\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-10-22T16:39:32", "references": ["http://get.adobe.com/flashplayer", "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html"], "pluginID": "1361412562310805955", "description": "This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.", "edition": 6, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-08-18T00:00:00", "title": "Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-10-12T00:00:00", "id": "OPENVAS:1361412562310805955", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310805955", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_flash_player_mult_vuln01_aug15_macosx.nasl 11872 2018-10-12 11:22:41Z cfischer $\n#\n# Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\nCPE = \"cpe:/a:adobe:flash_player\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.805955\");\n script_version(\"$Revision: 11872 $\");\n script_cve_id(\"CVE-2015-5124\", \"CVE-2015-5125\", \"CVE-2015-5127\", \"CVE-2015-5129\",\n \"CVE-2015-5130\", \"CVE-2015-5131\", \"CVE-2015-5132\", \"CVE-2015-5133\",\n \"CVE-2015-5134\", \"CVE-2015-5539\", \"CVE-2015-5540\", \"CVE-2015-5541\",\n \"CVE-2015-5544\", \"CVE-2015-5545\", \"CVE-2015-5546\", \"CVE-2015-5547\",\n \"CVE-2015-5548\", \"CVE-2015-5549\", \"CVE-2015-5550\", \"CVE-2015-5551\",\n \"CVE-2015-5552\", \"CVE-2015-5553\", \"CVE-2015-5554\", \"CVE-2015-5555\",\n \"CVE-2015-5556\", \"CVE-2015-5557\", \"CVE-2015-5558\", \"CVE-2015-5559\",\n \"CVE-2015-5560\", \"CVE-2015-5561\", \"CVE-2015-5562\", \"CVE-2015-5563\",\n \"CVE-2015-5564\", \"CVE-2015-5565\", \"CVE-2015-5566\");\n script_bugtraq_id(75959, 76291, 76282, 76282, 76283, 76283, 76289, 76288, 76287);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 13:22:41 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-08-18 09:53:03 +0530 (Tue, 18 Aug 2015)\");\n script_name(\"Adobe Flash Player Multiple Vulnerabilities -01 Aug15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Flash\n Player and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist due to multiple type\n confusion errors, a vector-length corruption error, multiple use-after-free\n errors, multiple heap buffer overflow errors, multiple buffer overflow errors,\n multiple memory corruption errors and an integer overflow error.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, execute arbitrary code in the\n context of the affected user and possibly have other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"Adobe Flash Player before version\n 18.0.0.232 on Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Flash Player version\n 18.0.0.232 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Flash/Player/MacOSX/Version\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/flashplayer\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!playerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_is_less(version:playerVer, test_version:\"18.0.0.232\"))\n{\n report = 'Installed version: ' + playerVer + '\\n' +\n 'Fixed version: ' + \"18.0.0.232\" + '\\n';\n security_message(data:report);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "suse": [{"lastseen": "2016-09-04T11:23:40", "references": ["https://bugzilla.suse.com/941239"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-kde4", "packageFilename": "flash-player-kde4-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player", "packageFilename": "flash-player-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player", "packageFilename": "flash-player-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-gnome", "packageFilename": "flash-player-gnome-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-gnome", "packageFilename": "flash-player-gnome-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-kde4", "packageFilename": "flash-player-kde4-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-kde4", "packageFilename": "flash-player-kde4-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-kde4", "packageFilename": "flash-player-kde4-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-gnome", "packageFilename": "flash-player-gnome-11.2.202.508-0.14.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.4", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player", "packageFilename": "flash-player-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player", "packageFilename": "flash-player-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.3", "packageVersion": "11.2.202.508-0.14.1", "packageName": "flash-player-gnome", "packageFilename": "flash-player-gnome-11.2.202.508-0.14.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}], "description": "This security update to 11.2.202.508 (bsc#941239) fixes the following\n issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127,\n CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,\n CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557,\n CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\n CVE-2015-5562, CVE-2015-5563\n\n", "edition": 1, "reporter": "Suse", "published": "2015-08-12T16:09:33", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "suse", "title": "Security update for flash-player (critical)", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-12T16:09:33", "id": "SUSE-SU-2015:1373-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00004.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T12:47:50", "references": ["https://bugzilla.suse.com/941239"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "12", "packageVersion": "11.2.202.508-99.1", "packageFilename": "flash-player-gnome-11.2.202.508-99.1.x86_64.rpm", "packageName": "flash-player-gnome", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Workstation Extension", "OSVersion": "12", "packageVersion": "11.2.202.508-99.1", "packageFilename": "flash-player-11.2.202.508-99.1.x86_64.rpm", "packageName": "flash-player", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "12", "packageVersion": "11.2.202.508-99.1", "packageFilename": "flash-player-11.2.202.508-99.1.x86_64.rpm", "packageName": "flash-player", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Workstation Extension", "OSVersion": "12", "packageVersion": "11.2.202.508-99.1", "packageFilename": "flash-player-gnome-11.2.202.508-99.1.x86_64.rpm", "packageName": "flash-player-gnome", "arch": "x86_64", "operator": "lt"}], "edition": 1, "description": "This security update to 11.2.202.508 (bsc#941239) fixes the following\n issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127,\n CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,\n CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557,\n CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\n CVE-2015-5562, CVE-2015-5563\n\n", "reporter": "Suse", "published": "2015-08-12T16:09:53", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "title": "Security update for flash-player (critical)", "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-12T16:09:53", "id": "SUSE-SU-2015:1374-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00005.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T11:18:18", "references": ["https://bugzilla.suse.com/941239"], "affectedPackage": [{"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-11.2.202.508-132.1.i586.rpm", "packageName": "flash-player", "arch": "i586", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-11.2.202.508-132.1.x86_64.rpm", "packageName": "flash-player", "arch": "x86_64", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-gnome-11.2.202.508-132.1.i586.rpm", "packageName": "flash-player-gnome", "arch": "i586", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-gnome-11.2.202.508-132.1.x86_64.rpm", "packageName": "flash-player-gnome", "arch": "x86_64", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-kde4-11.2.202.508-132.1.i586.rpm", "packageName": "flash-player-kde4", "arch": "i586", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.1", "packageVersion": "11.2.202.508-132.1", "packageFilename": "flash-player-kde4-11.2.202.508-132.1.x86_64.rpm", "packageName": "flash-player-kde4", "arch": "x86_64", "operator": "lt"}], "description": "Security update to 11.2.202.508 (bsc#941239):\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127,\n CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,\n CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557,\n CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\n CVE-2015-5562, CVE-2015-5563\n\n", "edition": 1, "reporter": "Suse", "published": "2015-08-14T19:09:22", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "suse", "title": "Security update for flash-player (critical)", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-14T19:09:22", "id": "OPENSUSE-SU-2015:1388-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00013.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T11:37:36", "references": ["https://bugzilla.suse.com/941239"], "affectedPackage": [{"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-11.2.202.508-2.67.1.i586.rpm", "packageName": "flash-player", "arch": "i586", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-gnome-11.2.202.508-2.67.1.x86_64.rpm", "packageName": "flash-player-gnome", "arch": "x86_64", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-kde4-11.2.202.508-2.67.1.i586.rpm", "packageName": "flash-player-kde4", "arch": "i586", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-kde4-11.2.202.508-2.67.1.x86_64.rpm", "packageName": "flash-player-kde4", "arch": "x86_64", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-11.2.202.508-2.67.1.x86_64.rpm", "packageName": "flash-player", "arch": "x86_64", "operator": "lt"}, {"OS": "openSUSE NonFree", "OSVersion": "13.2", "packageVersion": "11.2.202.508-2.67.1", "packageFilename": "flash-player-gnome-11.2.202.508-2.67.1.i586.rpm", "packageName": "flash-player-gnome", "arch": "i586", "operator": "lt"}], "description": "- Security update to 11.2.202.508 (bsc#941239):\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127,\n CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131,\n CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\n CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,\n CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549,\n CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553,\n CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557,\n CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\n CVE-2015-5562, CVE-2015-5563\n\n", "edition": 1, "reporter": "Suse", "published": "2015-08-14T19:10:30", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "title": "Security update for flash-player (critical)", "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2015-08-14T19:10:30", "id": "OPENSUSE-SU-2015:1391-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T12:37:53", "references": ["https://bugzilla.suse.com/950474", "https://bugzilla.suse.com/941239", "https://bugzilla.suse.com/950169", "https://bugzilla.suse.com/946880"], "affectedPackage": [{"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "i586", "packageFilename": "flash-player-gnome-11.2.202.540-176.1.i586.rpm", "packageName": "flash-player-gnome", "operator": "lt"}, {"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "i586", "packageFilename": "flash-player-kde4-11.2.202.540-176.1.i586.rpm", "packageName": "flash-player-kde4", "operator": "lt"}, {"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "x86_64", "packageFilename": "flash-player-gnome-11.2.202.540-176.1.x86_64.rpm", "packageName": "flash-player-gnome", "operator": "lt"}, {"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "x86_64", "packageFilename": "flash-player-11.2.202.540-176.1.x86_64.rpm", "packageName": "flash-player", "operator": "lt"}, {"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "x86_64", "packageFilename": "flash-player-kde4-11.2.202.540-176.1.x86_64.rpm", "packageName": "flash-player-kde4", "operator": "lt"}, {"OS": "openSUSE Evergreen", "OSVersion": "11.4", "packageVersion": "11.2.202.540-176.1", "arch": "i586", "packageFilename": "flash-player-11.2.202.540-176.1.i586.rpm", "packageName": "flash-player", "operator": "lt"}], "description": "This security issue was fixed:\n - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in\n Pawn Storm (APSA15-05) (bsc#950474).\n\n", "edition": 1, "reporter": "Suse", "published": "2015-10-19T19:09:31", "title": "Security update for flash-player (critical)", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-6677", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-6676", "CVE-2015-5588", "CVE-2015-5563", "CVE-2015-5584", "CVE-2015-7634", "CVE-2015-7625", "CVE-2015-5133", "CVE-2015-5575", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5569", "CVE-2015-7627", "CVE-2015-5573", "CVE-2015-7633", "CVE-2015-7630", "CVE-2015-5587", "CVE-2015-7629", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5580", "CVE-2015-5544", "CVE-2015-6682", "CVE-2015-5568", "CVE-2015-7626", "CVE-2015-6678", "CVE-2015-5572", "CVE-2015-3107", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5571", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5576", "CVE-2015-7643", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-7628", "CVE-2015-5577", "CVE-2015-5581", "CVE-2015-6679", "CVE-2015-5567", "CVE-2015-5574", "CVE-2015-5550", "CVE-2015-7645", "CVE-2015-5578", "CVE-2015-7632", "CVE-2015-5582", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-7631", "CVE-2015-5559", "CVE-2015-7644", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5579", "CVE-2015-5546", "CVE-2015-5570", "CVE-2015-5125"], "modified": "2015-10-19T19:09:31", "id": "OPENSUSE-SU-2015:1781-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "kaspersky": [{"lastseen": "2018-12-06T13:24:19", "references": [], "description": "### *CVSS*:\n10.0\n\n### *Detect date*:\n08/11/2015\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code.\n\n### *Affected products*:\nAdobe Flash Player for Windows and OS X versions earlier than 18.0.0.232 \nAdobe Flash Player ESR versions earlier than 18.0.0.232 \nAdobe Flash Player for Linux versions earlier than 11.2.202.508 \nAdobe flash player at Google Chrome for Linux and Chrome OS versions earlier than 18.0.0.233 \nAdobe AIR versions earlier than 18.0.0.199\n\n### *Solution*:\nUpdate to the latest version \n[Get Flash Player](<https://get.adobe.com/flashplayer/>) \n[Get AIR](<https://get.adobe.com/air/>)\n\n### *Original advisories*:\n[Adobe Security bulletin](<https://helpx.adobe.com/security/products/flash-player/apsb15-19.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Adobe Flash Player ActiveX](<https://threats.kaspersky.com/en/product/Adobe-Flash-Player-ActiveX/>)\n\n### *CVE-IDS*:\n[CVE-2015-5124](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5124>) \n[CVE-2015-5544](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5544>) \n[CVE-2015-5545](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5545>) \n[CVE-2015-5540](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5540>) \n[CVE-2015-5541](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5541>) \n[CVE-2015-5548](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5548>) \n[CVE-2015-5549](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5549>) \n[CVE-2015-5546](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5546>) \n[CVE-2015-5547](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5547>) \n[CVE-2015-5539](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5539>) \n[CVE-2015-5561](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5561>) \n[CVE-2015-5565](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5565>) \n[CVE-2015-5564](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5564>) \n[CVE-2015-5563](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5563>) \n[CVE-2015-5562](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5562>) \n[CVE-2015-5555](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5555>) \n[CVE-2015-5566](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5566>) \n[CVE-2015-5125](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5125>) \n[CVE-2015-5127](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5127>) \n[CVE-2015-5129](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5129>) \n[CVE-2015-5560](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5560>) \n[CVE-2015-5130](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5130>) \n[CVE-2015-5131](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5131>) \n[CVE-2015-5551](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5551>) \n[CVE-2015-5550](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5550>) \n[CVE-2015-5557](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5557>) \n[CVE-2015-5556](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5556>) \n[CVE-2015-5559](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5559>) \n[CVE-2015-5558](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5558>) \n[CVE-2015-5553](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5553>) \n[CVE-2015-5552](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5552>) \n[CVE-2015-5134](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5134>) \n[CVE-2015-5554](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5554>) \n[CVE-2015-5133](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5133>) \n[CVE-2015-5132](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5132>)", "edition": 25, "reporter": "Kaspersky Lab", "published": "2015-08-11T00:00:00", "title": "\r KLA10650Multiple vulnerabilities in Adobe products ", "type": "kaspersky", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "info", "cvelist": ["CVE-2015-5127", "CVE-2015-5553", "CVE-2015-5124", "CVE-2015-5539", "CVE-2015-5556", "CVE-2015-5130", "CVE-2015-5563", "CVE-2015-5565", "CVE-2015-5133", "CVE-2015-5557", "CVE-2015-5134", "CVE-2015-5561", "CVE-2015-5541", "CVE-2015-5551", "CVE-2015-5540", "CVE-2015-5564", "CVE-2015-5555", "CVE-2015-5554", "CVE-2015-5549", "CVE-2015-5544", "CVE-2015-5131", "CVE-2015-5562", "CVE-2015-5558", "CVE-2015-5547", "CVE-2015-5552", "CVE-2015-5545", "CVE-2015-5560", "CVE-2015-5566", "CVE-2015-5550", "CVE-2015-5132", "CVE-2015-5548", "CVE-2015-5559", "CVE-2015-5129", "CVE-2015-5546", "CVE-2015-5125"], "modified": "2018-12-04T00:00:00", "id": "KLA10650", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10650", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "redhat": [{"lastseen": "2018-12-11T19:43:24", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "5", "packageVersion": "11.2.202.508-1.el5", "arch": "i386", "packageName": "flash-plugin", "packageFilename": "flash-plugin-11.2.202.508-1.el5.i386.rpm", "operator": "lt"}], "description": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-19\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,\nCVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539,\nCVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546,\nCVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551,\nCVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\nCVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561,\nCVE-2015-5562, CVE-2015-5563, CVE-2015-5564)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.508.\n", "reporter": "RedHat", "published": "2015-08-12T04:00:00", "type": "redhat", "title": "(RHSA-2015:1603) Critical: flash-plugin security update", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-5127", "CVE-2015-5128", "CVE-2015-5129", "CVE-2015-5130", "CVE-2015-5131", "CVE-2015-5132", "CVE-2015-5133", "CVE-2015-5134", "CVE-2015-5539", "CVE-2015-5540", "CVE-2015-5541", "CVE-2015-5544", "CVE-2015-5545", "CVE-2015-5546", "CVE-2015-5547", "CVE-2015-5548", "CVE-2015-5549", "CVE-2015-5550", "CVE-2015-5551", "CVE-2015-5552", "CVE-2015-5553", "CVE-2015-5554", "CVE-2015-5555", "CVE-2015-5556", "CVE-2015-5557", "CVE-2015-5558", "CVE-2015-5559", "CVE-2015-5560", "CVE-2015-5561", "CVE-2015-5562", "CVE-2015-5563", "CVE-2015-5564"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-06-07T09:04:25", "id": "RHSA-2015:1603", "href": "https://access.redhat.com/errata/RHSA-2015:1603", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}