Heap overflow

🗓️ 10 Dec 2015 06:00:00Reported by PRIOn knowledge baseType

Heap-based buffer overflow in Adobe Flash Player affecting versions before 18.0.0.268, and 19.x and 20.x before 20.0.0.228. Also impacts Adobe AIR before 20.0.0.204 and Adobe AIR SDK before 20.0.0.204. Allows arbitrary code execution via mishandled COMM tags in MP3 files during memory allocation

Reporter	Title	Published	Views	Family All 143
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt57	9 Dec 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt57	9 Dec 201500:00	–	altlinux
Tenable Nessus	Flash Player < 20.0.0.228 Multiple Vulnerabilities (APSB15-32)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 20.0.0.204 Multiple Vulnerabilities (APSB15-32)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (c8842a84-9ddd-11e5-8c2f-c485083ca99c)	9 Dec 201500:00	–	nessus
Tenable Nessus	GLSA-201601-03 : Adobe Flash Player: Multiple vulnerabilities	27 Jan 201600:00	–	nessus
Tenable Nessus	Google Chrome < 47.0.2526.80 Multiple Vulnerabilities	8 Dec 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus

Source	Link
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-32.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-609
securityfocus	www.securityfocus.com/bid/78712
security	www.security.gentoo.org/glsa/201601-03
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.html
securitytracker	www.securitytracker.com/id/1034318
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.html
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

17 Feb 2017 02:59Current

8.1High risk

Vulners AI Score8.1

EPSS0.07985