Lucene search

K
freebsdFreeBSD1E63DB88-1050-11E5-A4DF-C485083CA99C
HistoryJun 09, 2015 - 12:00 a.m.

Adobe Flash Player -- critical vulnerabilities

2015-06-0900:00:00
vuxml.freebsd.org
13

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

Adobe reports:

    Adobe has released security updates for Adobe Flash Player for
    Windows, Macintosh and Linux.  These updates address vulnerabilities
    that could potentially allow an attacker to take control of the
    affected system.
  

    These updates resolve a vulnerability (CVE-2015-3096) that could be
    exploited to bypass the fix for CVE-2014-5333.
  

    These updates improve memory address randomization of the Flash heap
    for the Window 7 64-bit platform (CVE-2015-3097).
  

    These updates resolve vulnerabilities that could be exploited to
    bypass the same-origin-policy and lead to information disclosure
    (CVE-2015-3098, CVE-2015-3099, CVE-2015-3102).
  

    These updates resolve a stack overflow vulnerability that could lead
    to code execution (CVE-2015-3100).
  

    These updates resolve a permission issue in the Flash broker for
    Internet Explorer that could be exploited to perform privilege
    escalation from low to medium integrity level (CVE-2015-3101).
  

    These updates resolve an integer overflow vulnerability that could
    lead to code execution (CVE-2015-3104).
  

    These updates resolve a memory corruption vulnerability that could
    lead to code execution (CVE-2015-3105).
  

    These updates resolve use-after-free vulnerabilities that could lead
    to code execution (CVE-2015-3103, CVE-2015-3106, CVE-2015-3107).
  

    These updates resolve a memory leak vulnerability that could be used
    to bypass ASLR (CVE-2015-3108).
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlinux-c6-flashplugin< 11.2r202.466UNKNOWN
FreeBSDanynoarchlinux-f10-flashplugin< 11.2r202.466UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%