Lucene search

K
freebsdFreeBSD4E3E8A50-65C1-11E5-948E-BCAEC565249C
HistorySep 21, 2015 - 12:00 a.m.

flash -- multiple vulnerabilities

2015-09-2100:00:00
vuxml.freebsd.org
14

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.816 High

EPSS

Percentile

98.3%

Adobe reports:

These updates resolve a type confusion vulnerability that could
lead to code execution (CVE-2015-5573).
These updates resolve use-after-free vulnerabilities that could
lead to code execution (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682).
These updates resolve buffer overflow vulnerabilities that could
lead to code execution (CVE-2015-6676, CVE-2015-6678).
These updates resolve memory corruption vulnerabilities that
could lead to code execution (CVE-2015-5575, CVE-2015-5577,
CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588,
CVE-2015-6677).
These updates include additional validation checks to ensure
that Flash Player rejects malicious content from vulnerable
JSONP callback APIs (CVE-2015-5571).
These updates resolve a memory leak vulnerability
(CVE-2015-5576).
These updates include further hardening to a mitigation to
defend against vector length corruptions (CVE-2015-5568).
These updates resolve stack corruption vulnerabilities that
could lead to code execution (CVE-2015-5567, CVE-2015-5579).
These updates resolve a stack overflow vulnerability that could
lead to code execution (CVE-2015-5587).
These updates resolve a security bypass vulnerability that could
lead to information disclosure (CVE-2015-5572).
These updates resolve a vulnerability that could be exploited to
bypass the same-origin-policy and lead to information disclosure
(CVE-2015-6679).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlinux-c6-flashplugin< 11.2r202.521UNKNOWN
FreeBSDanynoarchlinux-f10-flashplugin< 11.2r202.521UNKNOWN
FreeBSDanynoarchlinux-c6_64-flashplugin< 11.2r202.521UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.816 High

EPSS

Percentile

98.3%