Lucene search

K
freebsdFreeBSDA63F2C06-726B-11E5-A12B-BCAEC565249C
HistoryOct 13, 2015 - 12:00 a.m.

flash -- multiple vulnerabilities

2015-10-1300:00:00
vuxml.freebsd.org
8

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.087 Low

EPSS

Percentile

94.4%

Adobe reports:

These updates resolve a vulnerability that could be exploited
to bypass the same-origin-policy and lead to information
disclosure (CVE-2015-7628).
These updates include a defense-in-depth feature in the Flash
broker API (CVE-2015-5569).
These updates resolve use-after-free vulnerabilities that
could lead to code execution (CVE-2015-7629, CVE-2015-7631,
CVE-2015-7643, CVE-2015-7644).
These updates resolve a buffer overflow vulnerability that
could lead to code execution (CVE-2015-7632).
These updates resolve memory corruption vulnerabilities that
could lead to code execution (CVE-2015-7625, CVE-2015-7626,
CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, CVE-2015-7634).

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.087 Low

EPSS

Percentile

94.4%