flash -- multiple vulnerabilities

2016-11-0800:00:00

vuxml.freebsd.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.018 Low

EPSS

Percentile

88.2%

JSON

Adobe reports:

These updates resolve type confusion vulnerabilities that
could lead to code execution (CVE-2016-7860, CVE-2016-7861,
CVE-2016-7865).
These updates resolve use-after-free vulnerabilities that
could lead to code execution (CVE-2016-7857, CVE-2016-7858,
CVE-2016-7859, CVE-2016-7862, CVE-2016-7863, CVE-2016-7864).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlinux-c6-flashplugin< 11.2r202.644UNKNOWN
FreeBSDanynoarchlinux-c7-flashplugin< 11.2r202.644UNKNOWN
FreeBSDanynoarchlinux-f10-flashplugin< 11.2r202.644UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	linux-c6-flashplugin	< 11.2r202.644	UNKNOWN
FreeBSD	any	noarch	linux-c7-flashplugin	< 11.2r202.644	UNKNOWN
FreeBSD	any	noarch	linux-f10-flashplugin	< 11.2r202.644	UNKNOWN