KLA10593 Multiple vulnerabilities in Adobe products

Detect date:

06/09/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code or obtain sensitive information.

Affected products:

Adobe Flash Player for Linux versions earlier than 11.2.202.466
Adobe Flash Player for Windows & OS X versions earlier than 18.0.0.160
Adobe AIR Desktop Runtime & SDK for OS X versions earlier than 18.0.0.143
Adobe AIR Desktop Runtime & SDK for Windows versions earlier than 18.0.0.144
Adobe AIR for Android versions earlier than 18.0.0.143

Solution:

Update to the latest version
Get AIR
Get Flash Player

Original advisories:

Adobe security bulletin

Impacts:

ACE

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2015-31085.0Critical
CVE-2015-30966.8High
CVE-2015-30995.0Critical
CVE-2015-30985.0Critical
CVE-2015-31014.3Warning
CVE-2015-30975.0Critical
CVE-2015-31025.0Critical

Exploitation:

Public exploits exist for this vulnerability.