flash-plugin: information leak and hardening fixes in APSB15-25

🗓️ 15 Oct 2015 11:17:22Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Flash plugin and AIR vulnerabilities allow remote information leak by bypassing same origin policy.

Reporter	Title	Published	Views	Family All 52
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54	14 Oct 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt54	14 Oct 201500:00	–	altlinux
Tenable Nessus	Adobe AIR < 19.0.0.213 Multiple Vulnerabilities (APSB15-25)	21 Oct 201500:00	–	nessus
Tenable Nessus	Flash Player < 19.0.0.207 Multiple Vulnerabilities (APSB15-25)	21 Oct 201500:00	–	nessus
Tenable Nessus	Adobe AIR <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)	15 Oct 201500:00	–	nessus
Tenable Nessus	GLSA-201511-02 : Adobe Flash Player: Multiple vulnerabilities	18 Nov 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)	14 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	i686	flash-plugin	0:11.2.202.535-1.el6_7	flash-plugin-0:11.2.202.535-1.el6_7.i686.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2015-7628
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-25.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-7628
cve	www.cve.org/CVERecord

21 Nov 2025 17:53Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25

EPSS0.04308

Flash plugin Adobe air Information leak Same origin policy Remote exploit