Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8886.PRM
HistorySep 25, 2015 - 12:00 a.m.

Google Chrome OS < 43.0.2357.132 Multiple Vulnerabilities

2015-09-2500:00:00
Tenable
www.tenable.com
11
JSON

The version of Google Chrome OS on the remote mobile host is prior to 43.0.2357.132 and thus unpatched for the following vulnerabilities :

  • A use-after-free error exists in the opaqueBackground class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5122)
  • A use-after-free error exists in the BitmapData class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5123)
  • A flaw exists due to user-supplied input not being properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2015-5124)
  • An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. (CVE-2015-3097)
  • Multiple heap-based buffer overflow vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)
  • Multiple memory corruption vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431)
  • Multiple NULL pointer dereference flaws exist. (CVE-2015-3126, CVE-2015-4429)
  • A security bypass vulnerability exists that results in an information disclosure. (CVE-2015-3114)
  • Multiple type confusion vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)
  • Multiple use-after-free errors exist that allow arbitrary code execution. (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119)
  • Multiple same-origin policy bypass vulnerabilities exist that allow information disclosure. (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116)
  • A memory corruption issue exists due to improper validation of user-supplied input. An attacker can exploit this to execute arbitrary code. (CVE-2015-5124)
Binary data 8886.prm
VendorProductVersionCPE
googlechrome_oscpe:/o:google:chrome_os

References

Related

nessus 25
altlinux 6
redhat 2
securityvulns 1
suse 5
mageia 2
openvas 15
gentoo 1
prion 36
ubuntucve 36
cve 37
kaspersky 1
checkpoint_advisories 14
threatpost 4
thn 2
archlinux 2
freebsd 1
symantec 1
googleprojectzero 1
cert 2
packetstorm 1
zdi 1
zdt 1
attackerkb 1
cisa_kev 1
nessus
nessus
Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16)
2015-07-09 00:00:00
Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X)
2015-07-09 00:00:00
Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)
2015-09-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt50
2015-07-15 00:00:00
redhat
redhat
(RHSA-2015:1214) Critical: flash-plugin security update
2015-07-08 00:00:00
(RHSA-2015:1235) Critical: flash-plugin security update
2015-07-16 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-07-19 00:00:00
suse
suse
Security update for flash-player (critical)
2015-07-09 11:08:12
Security update for flash-player (critical)
2015-07-09 14:08:22
Security update for flash-player (critical)
2015-07-17 12:09:45
mageia
mageia
Updated flash-player-plugin package fixes critical security vulnerabilities
2015-07-09 11:09:20
Updated flash-player-plugin package fixes security vulnerabilities
2015-07-17 00:20:30
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0273)
2015-10-15 00:00:00
Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Linux
2015-07-08 00:00:00
Adobe Air Multiple Vulnerabilities-01 (Jul 2015) - Windows
2015-07-09 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-07-10 00:00:00
prion
prion
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
ubuntucve
ubuntucve
CVE-2015-3136
2015-07-09 00:00:00
CVE-2015-3128
2015-07-09 00:00:00
CVE-2015-3118
2015-07-09 00:00:00
cve
cve
CVE-2015-3137
2015-07-09 16:59:00
CVE-2015-3132
2015-07-09 16:59:00
CVE-2015-4428
2015-07-09 16:59:00
kaspersky
kaspersky
KLA10623 Multiple vulnerabilities in Adobe products
2015-07-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Use After Free Code Execution (APSB15-16: CVE-2015-3128; CVE-2015-3136; CVE-2015-3137; CVE-2015-4428)
2015-07-26 00:00:00
Adobe Flash Player Use After Free Remote Code Execution (APSB15-16: CVE-2015-3127; CVE-2015-3131)
2015-07-26 00:00:00
Adobe Flash Player Same Origin Policy Bypass (APSB15-16: CVE-2015-3125; CVE-2015-5116)
2015-08-23 00:00:00
threatpost
threatpost
New Campaign Targeting Japanese with Hacking Team Zero Day
2015-07-20 11:27:15
Adobe Patches Hacking Team Zero Days in Flash
2015-07-14 11:47:14
Hacking Team Promises to Rebuild RCS
2015-07-13 12:43:38
thn
thn
Second Flash Player Zero-day Exploit found in 'Hacking Team' Dump
2015-07-11 20:34:00
WikiLeaks Reveals CIA Teams Up With Tech to Collect Ideas For Malware Development
2017-07-19 00:08:00
archlinux
archlinux
lib32-flashplugin: arbitrary code execution
2015-07-16 00:00:00
flashplugin: arbitrary code execution
2015-07-16 00:00:00
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-07-10 00:00:00
symantec
symantec
Adobe Flash Player ActionScript 3 ByteArray Use After Free Remote Memory Corruption Vulnerability
2015-07-07 00:00:00
googleprojectzero
googleprojectzero
Attacking ECMAScript Engines with Redefinition
2015-08-17 00:00:00
cert
cert
Adobe Flash ActionScript 3 BitmapData memory corruption vulnerability
2015-07-12 00:00:00
Adobe Flash ActionScript 3 opaqueBackground use-after-free vulnerability
2015-07-11 00:00:00
packetstorm
packetstorm
Adobe Flash opaqueBackground Use After Free
2015-07-13 00:00:00
zdi
zdi
Adobe Flash Sound Universal Cross Site Scripting Vulnerability
2015-07-08 00:00:00
zdt
zdt
Adobe Flash opaqueBackground Use After Free Exploit
2015-07-13 00:00:00
attackerkb
attackerkb
CVE-2015-5123
2015-07-14 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Use-After-Free Vulnerability
2022-04-13 00:00:00
JSON
Related for 8886.PRM
nessus25altlinux6redhat2securityvulns1suse5mageia2openvas15gentoo1prion36ubuntucve36cve37kaspersky1checkpoint_advisories14threatpost4thn2archlinux2freebsd1symantec1googleprojectzero1cert2packetstorm1zdi1zdt1attackerkb1cisa_kev1