April 2015 Microsoft Patch Tuesday Security Bulletins

🗓️ 14 Apr 2015 14:49:25Reported by Michael MimosoType

threatpost🔗 threatpost.com👁 58 Views

Microsoft patches critical Windows HTTP.sys vulnerability. Also, addresses Office and Internet Explorer vulnerabilities

Reporter	Title	Published	Views	Family All 143
zdt	Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow Exploit	9 Jul 201500:00	–	zdt
FreeBSD	Adobe Flash Player -- critical vulnerabilities	14 Apr 201500:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt43	15 Apr 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt43	15 Apr 201500:00	–	altlinux
Tenable Nessus	Flash Player < 17.0.0.189 (inferred) Multiple Vulnerabilities (APSB15-06 through 11)	24 Jul 201500:00	–	nessus
Tenable Nessus	Flash Player < 13.0.0.281 / 17.0.0.169 Multiple Vulnerabilities (APSB15-06)	24 Jul 201500:00	–	nessus
Tenable Nessus	Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-06)	24 Jul 201500:00	–	nessus
Tenable Nessus	Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-06)	12 Jun 201500:00	–	nessus
Tenable Nessus	Adobe/Apache Flex ASDoc Tool XSS	14 May 201500:00	–	nessus
Tenable Nessus	Adobe ColdFusion Unspecified XSS (APSB15-07) (credentialed check)	14 Apr 201500:00	–	nessus

Source	Link
technet	www.technet.microsoft.com/library/security/MS15-034
technet	www.technet.microsoft.com/library/security/MS15-033
threatpost	www.threatpost.com/all-major-browsers-fall-at-pwn2own-day-2/111731
technet	www.technet.microsoft.com/library/security/MS15-032
technet	www.technet.microsoft.com/library/security/MS15-035
technet	www.technet.microsoft.com/library/security/MS15-036
technet	www.technet.microsoft.com/library/security/MS15-037
technet	www.technet.microsoft.com/library/security/MS15-038
technet	www.technet.microsoft.com/library/security/MS15-039
technet	www.technet.microsoft.com/library/security/MS15-040

16 Apr 2015 14:39Current

10High risk

Vulners AI Score10

EPSS0.96758

microsoft windows http.sys vulnerability patch office internet explorer security bulletin remote code execution privilege escalation iis kernel caching aslr bypass information disclosure pwn2own contest