CVE-2015-5123

2015-07-1400:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.274 Low

EPSS

Percentile

96.7%

JSON

Use-after-free vulnerability in the BitmapData class in the ActionScript 3
(AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on
Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through
11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome
installations allows remote attackers to execute arbitrary code or cause a
denial of service (memory corruption) via crafted Flash content that
overrides a valueOf function, as exploited in the wild in July 2015.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchadobe-flashplugin< 1:20150714.1-0precise1UNKNOWN
ubuntu14.04noarchadobe-flashplugin< 1:20150714.1-0trusty1UNKNOWN
ubuntu14.10noarchadobe-flashplugin< 1:20150714.1-0utopic1UNKNOWN
ubuntu15.04noarchadobe-flashplugin< 1:20150714.1-0vivid1UNKNOWN
ubuntu12.04noarchflashplugin-nonfree< 11.2.202.481ubuntu0.12.04.2UNKNOWN
ubuntu14.04noarchflashplugin-nonfree< 11.2.202.481ubuntu0.14.04.2UNKNOWN
ubuntu14.10noarchflashplugin-nonfree< 11.2.202.481ubuntu0.14.10.2UNKNOWN
ubuntu15.04noarchflashplugin-nonfree< 11.2.202.481ubuntu0.15.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	adobe-flashplugin	< 1:20150714.1-0precise1	UNKNOWN
ubuntu	14.04	noarch	adobe-flashplugin	< 1:20150714.1-0trusty1	UNKNOWN
ubuntu	14.10	noarch	adobe-flashplugin	< 1:20150714.1-0utopic1	UNKNOWN
ubuntu	15.04	noarch	adobe-flashplugin	< 1:20150714.1-0vivid1	UNKNOWN
ubuntu	12.04	noarch	flashplugin-nonfree	< 11.2.202.481ubuntu0.12.04.2	UNKNOWN
ubuntu	14.04	noarch	flashplugin-nonfree	< 11.2.202.481ubuntu0.14.04.2	UNKNOWN
ubuntu	14.10	noarch	flashplugin-nonfree	< 11.2.202.481ubuntu0.14.10.2	UNKNOWN
ubuntu	15.04	noarch	flashplugin-nonfree	< 11.2.202.481ubuntu0.15.04.2	UNKNOWN