Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8848.PRM
HistorySep 11, 2015 - 12:00 a.m.

Adobe AIR < 18.0.0.199 Multiple Vulnerabilities (APSB15-19)

2015-09-1100:00:00
Tenable
www.tenable.com
22

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

JSON

Versions of Adobe AIR prior to 18.0.0.199 are outdated and thus unpatched for the following vulnerabilities :

  • Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562)
  • An unspecified vulnerability exists related to vector length corruptions. (CVE-2015-5125)
  • Multiple use-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5564, CVE-2015-5565, CVE-2015-5566)
  • Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5129, CVE-2015-5541)
  • Multiple buffer overflow conditions exist that allow an attacker to execute arbitrary code. (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133)
  • Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553)
  • An integer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2015-5560)
Binary data 8848.prm
VendorProductVersionCPE
adobeadobe_aircpe:/a:adobe:adobe_air

References

Related

nessus 17
openvas 8
redhat 1
suse 5
kaspersky 1
mageia 1
ubuntucve 32
altlinux 2
freebsd 1
gentoo 1
cve 32
prion 33
cvelist 32
nvd 32
checkpoint_advisories 1
nessus
nessus
Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)
2015-08-20 00:00:00
Google Chrome OS < 44.0.2403.155 Multiple Vulnerabilities
2015-09-25 00:00:00
Google Chrome < 44.0.2403.155 Multiple Vulnerabilities
2015-08-20 00:00:00
openvas
openvas
SUSE: Security Advisory for flash-player (SUSE-SU-2015:1374-1)
2015-10-16 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 (Aug 2015) - Linux
2015-08-18 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 (Aug 2015) - Windows
2015-08-18 00:00:00
redhat
redhat
(RHSA-2015:1603) Critical: flash-plugin security update
2015-08-12 00:00:00
suse
suse
Security update for flash-player (critical)
2015-08-14 19:10:30
Security update for flash-player (critical)
2015-08-14 19:09:22
Security update for flash-player (critical)
2015-08-12 16:09:53
kaspersky
kaspersky
KLA10650 Multiple vulnerabilities in Adobe products
2015-08-11 00:00:00
mageia
mageia
Updated flash-player-plugin package fixes security vulnerabilities
2015-08-11 23:22:53
ubuntucve
ubuntucve
CVE-2015-5566
2015-08-24 00:00:00
CVE-2015-5550
2015-08-14 00:00:00
CVE-2015-5556
2015-08-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52
2015-08-12 00:00:00
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt52
2015-08-12 00:00:00
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-08-11 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-08-15 00:00:00
cve
cve
CVE-2015-5540
2015-08-14 01:59:27
CVE-2015-5551
2015-08-14 01:59:36
CVE-2015-5564
2015-08-14 01:59:50
prion
prion
Design/Logic Flaw
2015-08-14 01:59:00
Design/Logic Flaw
2015-08-14 01:59:00
Design/Logic Flaw
2015-08-14 01:59:00
cvelist
cvelist
CVE-2015-5130
2015-08-14 01:00:00
CVE-2015-5540
2015-08-14 01:00:00
CVE-2015-5557
2015-08-14 01:00:00
nvd
nvd
CVE-2015-5551
2015-08-14 01:59:36
CVE-2015-5559
2015-08-14 01:59:44
CVE-2015-5566
2015-08-24 10:59:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB15-19: CVE-2015-3107; CVE-2015-5565)
2015-08-12 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

JSON
Related for 8848.PRM
nessus17openvas8redhat1suse5kaspersky1mageia1ubuntucve32altlinux2freebsd1gentoo1cve32prion33cvelist32nvd32checkpoint_advisories1