Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
jvnJapan Vulnerability NotesJVN:22533124
HistoryDec 17, 2015 - 12:00 a.m.

JVN#22533124: Adobe Flash Player issue where iframe contents may be overwritten

2015-12-1700:00:00
Japan Vulnerability Notes
jvn.jp
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.1%

JSON

Adobe Flash Player contains an issue where the same-origin policy may be bypassed leading to iframe contents being overwritten.

Impact

Processing specially crafted Flash content may lead to iframe contents being overwritten.

Solution

Apply an Update
Update to the latest version according to the information provided by the developer.

This issue was addressed in the update released on October 13, 2015

Products Affected

  • Adobe Flash Player version 19.0.0.185 and earlier

Related

ubuntucve 1
prion 1
kaspersky 1
checkpoint_advisories 1
cve 1
suse 4
nessus 14
altlinux 2
redhat 2
freebsd 1
archlinux 1
openvas 8
mageia 1
gentoo 1
ubuntucve
ubuntucve
CVE-2015-7628
2015-10-15 00:00:00
prion
prion
Design/Logic Flaw
2015-10-15 00:00:00
kaspersky
kaspersky
KLA10679 Multiple vulnerabilities in Adobe Flash Player & AIR
2015-10-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Security Bypass (APSB15-25: CVE-2015-7628)
2015-10-29 00:00:00
cve
cve
CVE-2015-7628
2015-10-15 00:00:00
suse
suse
Security update for Adobe Flash Player (important)
2015-10-14 18:09:47
Security update for flash-player (important)
2015-10-14 17:11:22
Security update for flash-player (important)
2015-10-14 17:10:32
nessus
nessus
FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)
2015-10-15 00:00:00
Adobe Flash Player <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)
2015-10-13 00:00:00
openSUSE Security Update : Adobe Flash Player (openSUSE-2015-656)
2015-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54
2015-10-14 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt54
2015-10-14 00:00:00
redhat
redhat
(RHSA-2015:1893) Critical: flash-plugin security update
2015-10-15 00:00:00
(RHSA-2015:2024) Critical: flash-plugin security update
2015-11-11 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2015-10-13 00:00:00
archlinux
archlinux
flashplugin: multiple issues
2015-10-14 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0399)
2015-10-15 00:00:00
SUSE: Security Advisory for flash-player (SUSE-SU-2015:1740-1)
2015-10-16 00:00:00
Adobe Flash Player Multiple Vulnerabilities - 01 (Oct 2015) - Linux
2015-10-16 00:00:00
mageia
mageia
Updated flash-player-plugin packages fixes security vulnerabilities
2015-10-14 08:55:15
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-11-17 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.1%

JSON
Related for JVN:22533124
ubuntucve1prion1kaspersky1checkpoint_advisories1cve1suse4nessus14altlinux2redhat2freebsd1archlinux1openvas8mageia1gentoo1