flash-plugin: multiple code execution issues fixed in APSB15-25

🗓️ 11 Nov 2015 11:21:16Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

APSB15-25 fixes use-after-free in Flash Player and Air components enabling arbitrary code execution on multiple platforms.

Reporter	Title	Published	Views	Family All 186
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54	14 Oct 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt54	14 Oct 201500:00	–	altlinux
Tenable Nessus	Adobe AIR < 19.0.0.213 Multiple Vulnerabilities (APSB15-25)	21 Oct 201500:00	–	nessus
Tenable Nessus	Flash Player < 19.0.0.207 Multiple Vulnerabilities (APSB15-25)	21 Oct 201500:00	–	nessus
Tenable Nessus	Adobe AIR <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)	15 Oct 201500:00	–	nessus
Tenable Nessus	GLSA-201511-02 : Adobe Flash Player: Multiple vulnerabilities	18 Nov 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)	14 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)	13 Oct 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5	i386	flash-plugin	0:11.2.202.548-1.el5	flash-plugin-0:11.2.202.548-1.el5.i386.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2015-7635
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-25.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-7635
cve	www.cve.org/CVERecord

21 Nov 2025 17:53Current

6.2Medium risk

Vulners AI Score6.2

CVSS 210

EPSS0.19895

use after free flash player air component windows mac os linux arbitrary code execution