CVE-2015-3122

CVE-2015-3122 is a type confusion vulnerability in Adobe Flash Player and related Adobe AIR components. Affected products include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 an...

CVE-2015-3132

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execu...

CVE-2015-3134

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a deni...

CVE-2015-4432

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

CVE-2015-3125

CVE-2015-3125 concerns Adobe Flash Player and Adobe AIR components affected by a Same Origin Policy bypass vulnerability described as affecting Flash Player versions before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 for Windows/macOS, and before 11.2.202.481 on Linux, plus Adobe AIR before ...

CVE-2015-3122

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging a...

CVE-2015-3127

Technical details (affected products, versions, impact, or exploit information for CVE-2015-3127) are not provided in the supplied connected documents. Monitor for updates.

CVE-2015-3137

CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (

CVE-2015-3119

CVE-2015-3119 is a type-confusion bug in Adobe Flash Player (AS2) triggered by a watch on a NetConnection property. When the native code sets a property (e.g., fileList) the watch’s callback redefines the object to a different type (NetStream), causing type confusion and potential misuse of the o...

CVE-2015-4432

CVE-2015-4432 is a heap-based buffer overflow in Adobe Flash Player (before 13.0.0.302 and before 18.0.0.203 for 14.x–18.x) on Windows, OS X, and before 11.2.202.481 on Linux, and in Adobe AIR/AIR SDK before 18.0.0.180. The vulnerability allows attackers to execute arbitrary code via unspecified ...

CVE-2015-3119

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging a...

CVE-2015-3132

CVE-2015-3132 is a use-after-free vulnerability in Adobe Flash Player (pre-13.0.0.302 and 14.x–18.x before 18.0.0.203 on Windows/macOS; before 11.2.202.481 on Linux) and Adobe AIR before 18.0.0.180, plus AIR SDK kits before 18.0.0.180, that could allow arbitrary code execution via unspecified vec...

MGASA-2015-0273 Updated flash-player-plugin package fixes critical security vulnerabilities

Adobe Flash Player 11.2.202.481 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit targeting CVE-2015-5119 has been publicly published. This updat...

Updated flash-player-plugin package fixes critical security vulnerabilities

Adobe Flash Player 11.2.202.481 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit targeting CVE-2015-5119 has been publicly published. This updat...

FreeBSD : Adobe Flash Player -- critical vulnerabilities (348bfa69-25a2-11e5-ade1-0011d823eebd) (Underminer)

Adobe reports : Adobe has released security updates for Adobe Flash Player. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit targeting CVE-2015-5119 has been publicly publishe...

Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow Exploit

Exploit for multiple platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow', 'Descriptio...

Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.194. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. CVE-2015-3097 ...

MS KB3065823: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote Windows host is missing KB3065823. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. CVE-2015-3097 - Multiple heap-based buffer overflow vulnerabilities exist that...

Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.194. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. CVE-2015-3097...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1214)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1214 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...