Flash Exploit Found in Seven Exploit Kits

A nasty Adobe Flash zero-day vulnerability that was remediated in an emergency update in October 2015 was thereafter co-opted by seven exploit kits, according to an analysis published today by researchers at Recorded Future. The Adobe vulnerability, CVE-2015-7645, was also used by the Russian APT...

Google Chrome < 46.0.2490.80 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is prior to 46.0.2490.80. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647, CVE-2015-7648...

MS KB3105216: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge

The remote Windows host is missing KB3105216. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647, CVE-2015-7648 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Security update for flash-player (critical)

This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474...

Mageia: Security Advisory (MGASA-2015-0404)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player for Mac <= 19.0.0.207 Vulnerability (APSB15-27)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 19.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt55

3:11-alt55 built Oct. 19, 2015 Sergey V Turchin in task 151823 Oct. 19, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7645, CVE-2015-7647, CVE-2015-7648...

FreeBSD : flash -- remote code execution (84147b46-e876-486d-b746-339ee45a8bb9)

Adobe reports : These updates resolve type confusion vulnerabilities that could lead to code execution CVE-2015-7645, CVE-2015-7647, CVE-2015-7648. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

RHEL 6 : flash-plugin (RHSA-2015:1913)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1913 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes three vulnerabiliti...

openSUSE Security Update : flash-player (openSUSE-2015-665)

flash-player was updated to fix one security issue. This security issue was fixed : - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1771-1)

flash-player was updated to fix one security issue. This security issue was fixed : - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1770-1)

flash-player was updated to fix one security issue. This security issue was fixed : - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt55

3:11-alt55 built Oct. 19, 2015 Sergey V Turchin in task 151824 Oct. 19, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7645, CVE-2015-7647, CVE-2015-7648...

Adobe Flash Player <= 19.0.0.207 Vulnerability (APSB15-27)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 19.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647,...

flashplugin: arbitrary code execution

Several critical type confusion vulnerabilities CVE-2015-7645, CVE-2015-7647, CVE-2015-7648 have been identified in Adobe Flash Player 11.2.202.535 and earlier 11.x versions for Linux. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected...

MGASA-2015-0404 Updated flash-player-plugin package fix security vulnerabilities

Adobe Flash Player 11.2.202.540 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves type confusion vulnerabilities that could lead to code execution CVE-2015-7645,...

Updated flash-player-plugin package fix security vulnerabilities

Adobe Flash Player 11.2.202.540 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves type confusion vulnerabilities that could lead to code execution CVE-2015-7645,...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:1770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for flash-player (critical)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474...

Emergency Adobe Flash Zero Day Patch Arrives Ahead of Schedule

Adobe has decided to patch the zero day vulnerability that was disclosed in Flash Player earlier this week today — instead of next week as originally scheduled. According to a security bulletin Adobe posted this morning the update actually fixes three vulnerabilities in the software, but the most...