Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8858.PRM
HistorySep 11, 2015 - 12:00 a.m.

Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

2015-09-1100:00:00
Tenable
www.tenable.com
10
JSON

Versions of Adobe AIR prior to 18.0.0.180 are outdated and thus unpatched for the following vulnerabilities :

  • An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. (CVE-2015-3097)
  • Multiple heap-based buffer overflow vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)
  • Multiple memory corruption vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431)
  • Multiple NULL pointer dereference flaws exist. (CVE-2015-3126, CVE-2015-4429)
  • A security bypass vulnerability exists that results in an information disclosure. (CVE-2015-3114)
  • Multiple type confusion vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)
  • Multiple use-after-free errors exist that allow arbitrary code execution. (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119)
  • Multiple same-origin policy bypass vulnerabilities exist that allow information disclosure. (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116)
  • A memory corruption issue exists due to improper validation of user-supplied input. An attacker can exploit this to execute arbitrary code. (CVE-2015-5124)
Binary data 8858.prm
VendorProductVersionCPE
adobeadobe_aircpe:/a:adobe:adobe_air

References

Related

nessus 17
altlinux 2
redhat 1
openvas 10
suse 4
mageia 1
securityvulns 1
gentoo 1
prion 37
ubuntucve 37
cve 37
kaspersky 1
checkpoint_advisories 27
zdi 1
canvas 1
threatpost 4
attackerkb 2
metasploit 1
freebsd 1
cert 1
securelist 1
fireeye 3
zdt 1
packetstorm 1
archlinux 1
cisa 1
cisa_kev 1
hackerone 1
f5 1
symantec 1
nessus
nessus
Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)
2015-07-09 00:00:00
Google Chrome < 43.0.2357.132 Multiple Vulnerabilities
2015-07-10 00:00:00
Google Chrome < 43.0.2357.132 Multiple Vulnerabilities
2015-09-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
redhat
redhat
(RHSA-2015:1214) Critical: flash-plugin security update
2015-07-08 00:00:00
openvas
openvas
Adobe Air Multiple Vulnerabilities-01 (Jul 2015) - Windows
2015-07-09 00:00:00
Gentoo Security Advisory GLSA 201507-13
2015-09-29 00:00:00
Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X
2015-07-08 00:00:00
suse
suse
Security update for flash-player (critical)
2015-07-09 11:08:12
Security update for flash-player (critical)
2015-07-09 14:08:22
Security update for flash-player (critical)
2015-07-08 22:07:55
mageia
mageia
Updated flash-player-plugin package fixes critical security vulnerabilities
2015-07-09 11:09:20
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-07-19 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-07-10 00:00:00
prion
prion
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
ubuntucve
ubuntucve
CVE-2015-3136
2015-07-09 00:00:00
CVE-2015-3137
2015-07-09 00:00:00
CVE-2015-3128
2015-07-09 00:00:00
cve
cve
CVE-2015-3137
2015-07-09 16:59:00
CVE-2015-3132
2015-07-09 16:59:00
CVE-2015-3118
2015-07-09 16:59:00
kaspersky
kaspersky
KLA10623 Multiple vulnerabilities in Adobe products
2015-07-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Use After Free Code Execution (APSB15-16: CVE-2015-3128; CVE-2015-3136; CVE-2015-3137; CVE-2015-4428)
2015-07-26 00:00:00
Adobe Flash Player Use After Free Remote Code Execution (APSB15-16: CVE-2015-3127; CVE-2015-3131)
2015-07-26 00:00:00
Adobe Flash Player Same Origin Policy Bypass (APSB15-16: CVE-2015-3125; CVE-2015-5116)
2015-08-23 00:00:00
zdi
zdi
Adobe Flash Sound Universal Cross Site Scripting Vulnerability
2015-07-08 00:00:00
canvas
canvas
Immunity Canvas: ADOBE_FLASH_VALUEOF
2015-07-08 14:59:00
threatpost
threatpost
Adobe to Patch Hacking Team Flash Zero Day
2015-07-07 15:46:59
Wekby APT Gang Seen Using DNS Tunneling for Command and Control
2016-05-25 14:58:52
Hacking Team Flash Zero Day Weaponized in Exploit Kits
2015-07-08 11:19:02
attackerkb
attackerkb
CVE-2015-5119
2021-07-27 00:00:00
Adobe Flash ByteArray Use-After-Free
2015-07-08 00:00:00
metasploit
metasploit
Adobe Flash Player ByteArray Use After Free
2015-07-07 16:19:48
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-07-07 00:00:00
cert
cert
Adobe Flash ActionScript 3 ByteArray use-after-free vulnerability
2015-07-07 00:00:00
securelist
securelist
An overview of targeted attacks and APTs on Linux
2020-09-10 10:00:39
fireeye
fireeye
Top-ranked Advertising Network Leads to Exploit Kit
2015-11-13 13:32:25
Ghosts in the Endpoint
2016-04-13 13:00:00
Ghosts in the Endpoint
2016-04-13 09:00:00
zdt
zdt
Adobe Flash Player ByteArray Use After Free Exploit
2015-07-08 00:00:00
packetstorm
packetstorm
Adobe Flash Player ByteArray Use After Free
2015-07-08 00:00:00
archlinux
archlinux
flashplugin: remote code execution
2015-07-08 00:00:00
cisa
cisa
Adobe Releases Security Updates for Flash Player
2015-07-08 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Use-After-Free Vulnerability
2022-03-03 00:00:00
hackerone
hackerone
HackerOne: CSRF possible when SOP Bypass/UXSS is available
2015-12-06 12:56:10
f5
f5
K80533167 : BIND vulnerability CVE-2017-3135
2017-02-23 00:00:00
symantec
symantec
Adobe Flash Player ActionScript 3 ByteArray Use After Free Remote Memory Corruption Vulnerability
2015-07-07 00:00:00
JSON
Related for 8858.PRM
nessus17altlinux2redhat1openvas10suse4mageia1securityvulns1gentoo1prion37ubuntucve37cve37kaspersky1checkpoint_advisories27zdi1canvas1threatpost4attackerkb2metasploit1freebsd1cert1securelist1fireeye3zdt1packetstorm1archlinux1cisa1cisa_kev1hackerone1f51symantec1