Adobe Flash Sound Universal Cross Site Scripting Vulnerability

🗓️ 08 Jul 2015 00:00:00Reported by David Kraftsow (dontsave)Type

zdi🔗 www.zerodayinitiative.com👁 33 Views

Adobe Flash Sound Universal Cross Site Scripting Vulnerability allows remote attackers to run arbitrary script in the context of any domain and read browser cookies or saved passwords. Authentication is not required to exploit this vulnerability

Reporter	Title	Published	Views	Family All 53
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47	8 Jul 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt47	8 Jul 201500:00	–	altlinux
Tenable Nessus	Flash Player < 13.0.0.302 / 18.0.0.203 Multiple Vulnerabilities (APSB15-16)	24 Jul 201500:00	–	nessus
Tenable Nessus	Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)	11 Sep 201500:00	–	nessus
Tenable Nessus	Google Chrome OS < 43.0.2357.132 Multiple Vulnerabilities	25 Sep 201500:00	–	nessus
Tenable Nessus	Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)	9 Jul 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16)	9 Jul 201500:00	–	nessus
Tenable Nessus	GLSA-201507-13 : Adobe Flash Player: Multiple vulnerabilities (Underminer)	23 Sep 201500:00	–	nessus
Tenable Nessus	Google Chrome < 43.0.2357.132 Multiple Vulnerabilities	10 Jul 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)	9 Jul 201500:00	–	nessus

Source	Link
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-16.html

08 Jul 2015 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25.8

EPSS0.00352