Kaspersky LabKLA10595KLA10595 Flash Player update for Google Chrome
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.4%
Detect date:
06/10/2015
Severity:
Critical
Description:
Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10593.
Affected products:
Google Chrome versions earlier than 43.0.2357.124
Solution:
Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Google Chrome Enterprise
Get Google Chrome
Original advisories:
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2015-31085.0Critical
CVE-2015-30966.8High
CVE-2015-30995.0Critical
CVE-2015-30985.0Critical
CVE-2015-31014.3Warning
CVE-2015-30975.0Critical
CVE-2015-31025.0Critical
Exploitation:
Public exploits exist for this vulnerability.
References
googlechromereleases.blogspot.ru/2015/06/stable-channel-update.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+GoogleChromeReleases+(Google+Chrome+Releases)
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3096
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3097
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3098
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3099
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3101
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3102
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3108
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/chrome/browser/desktop/index.html
www.google.com/work/chrome/browser/
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.4%