Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-3043
Vulnerability from cvelistv5
CISA Known exploited vulnerability
Data from the Known Exploited Vulnerabilities Catalog
Date added: 2022-03-03
Due date: 2022-03-24
Required action: The impacted product is end-of-life and should be disconnected if still in use.
Used in ransomware: Unknown
Notes: https://nvd.nist.gov/vuln/detail/CVE-2015-3043
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T05:32:21.211Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "openSUSE-SU-2015:0718", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "name": "SUSE-SU-2015:0722", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "name": "74062", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/74062" }, { "name": "GLSA-201504-07", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201504-07" }, { "name": "1032105", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1032105" }, { "name": "RHSA-2015:0813", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "name": "37536", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "url": "https://www.exploit-db.com/exploits/37536/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "name": "openSUSE-SU-2015:0725", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "name": "SUSE-SU-2015:0723", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-04-14T00:00:00", "descriptions": [ { "lang": "en", "value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-09-16T09:57:01", "orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe" }, "references": [ { "name": "openSUSE-SU-2015:0718", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "name": "SUSE-SU-2015:0722", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "name": "74062", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/74062" }, { "name": "GLSA-201504-07", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201504-07" }, { "name": "1032105", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1032105" }, { "name": "RHSA-2015:0813", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "name": "37536", "tags": [ "exploit", "x_refsource_EXPLOIT-DB" ], "url": "https://www.exploit-db.com/exploits/37536/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "name": "openSUSE-SU-2015:0725", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "name": "SUSE-SU-2015:0723", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@adobe.com", "ID": "CVE-2015-3043", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "openSUSE-SU-2015:0718", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "name": "SUSE-SU-2015:0722", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "name": "74062", "refsource": "BID", "url": "http://www.securityfocus.com/bid/74062" }, { "name": "GLSA-201504-07", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201504-07" }, { "name": "1032105", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1032105" }, { "name": "RHSA-2015:0813", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "name": "37536", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/37536/" }, { "name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "refsource": "CONFIRM", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "name": "openSUSE-SU-2015:0725", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "name": "SUSE-SU-2015:0723", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "assignerShortName": "adobe", "cveId": "CVE-2015-3043", "datePublished": "2015-04-14T22:00:00", "dateReserved": "2015-04-09T00:00:00", "dateUpdated": "2024-08-06T05:32:21.211Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "cisa_known_exploited": { "cveID": "CVE-2015-3043", "cwes": "[\"CWE-787\"]", "dateAdded": "2022-03-03", "dueDate": "2022-03-24", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043", "product": "Flash Player", "requiredAction": "The impacted product is end-of-life and should be disconnected if still in use.", "shortDescription": "A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.", "vendorProject": "Adobe", "vulnerabilityName": "Adobe Flash Player Memory Corruption Vulnerability" }, "nvd": "{\"cve\":{\"id\":\"CVE-2015-3043\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2015-04-14T22:59:21.323\",\"lastModified\":\"2024-11-21T02:28:32.663\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player anterior a 13.0.0.281 y 14.x hasta 17.x anterior a 17.0.0.169 en Windows y OS X y anterior a 11.2.202.457 en Linux permite a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, tal y como fue utilizado activamente en Abril del 2015, una vulnerabilidad diferente a CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041 y CVE-2015-3042.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2022-03-03\",\"cisaActionDue\":\"2022-03-24\",\"cisaRequiredAction\":\"The impacted product is end-of-life and should be disconnected if still in use.\",\"cisaVulnerabilityName\":\"Adobe Flash Player Memory Corruption Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.2.202.457\",\"matchCriteriaId\":\"DB7AC7FF-08B7-4323-ACC8-A613BB548F4C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.0.0.281\",\"matchCriteriaId\":\"312E9852-2CDF-476D-ADDE-56EEBD24D59C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0.0.125\",\"versionEndExcluding\":\"17.0.0.169\",\"matchCriteriaId\":\"B133F90A-6480-4C63-9E94-8F84AB046986\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A46AFB60-4775-48A9-81FA-5A54CEDA7625\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA04C9F1-6257-4D82-BA0B-37DE66D94736\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF461FB4-8BA5-4065-9A69-DC017D3611C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10BC294-9196-425F-9FB0-B1625465B47F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"133AAFA7-AF42-4D7B-8822-AA2E85611BF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"319EC0C6-94C5-494A-9C5D-DC5124DFC8E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54D669D4-6D7E-449D-80C1-28FA44F06FFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16E6D998-B41D-4B49-9E00-8336D2E40A4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8821E5FE-319D-40AB-A515-D56C1893E6F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AE981D4-0CA1-46FA-8E91-E1A4D5B31383\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0813.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74062\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032105\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-07\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/37536/\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0813.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74062\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032105\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/37536/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]}]}}" } }
var-201504-0548
Vulnerability from variot
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. Attacks on this vulnerability 2015 Year 4 Observed on the moon. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. The following versions are affected: Adobe Flash Player 13.0.0.277 and earlier versions and 17.0.0.134 and earlier versions based on Windows and OS X platforms, Adobe Flash Player 11.2.202.451 and earlier versions based on Linux systems. (Widely exploited in April 2015).
Background
The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details.
Workaround
There is no known workaround at this time.
Resolution
All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457"
References
[ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201504-07
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 =====================================================================
- Summary:
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
- Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043)
A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044)
Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws.
- Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06)
- Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386: flash-plugin-11.2.202.457-1.el5.i386.rpm
x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386: flash-plugin-11.2.202.457-1.el5.i386.rpm
x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201504-0548", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "enterprise linux supplementary", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "5.0" }, { "model": "enterprise linux server supplementary", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "6.0" }, { "model": "enterprise linux workstation supplementary", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "6.0" }, { "model": "enterprise linux desktop supplementary", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "5.0" }, { "model": "enterprise linux desktop supplementary", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "6.0" }, { "model": "enterprise linux server supplementary eus", "scope": "eq", "trust": 1.6, "vendor": "redhat", "version": "6.6.z" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.167" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "14.0.0.125" }, { "model": "suse linux enterprise desktop", "scope": "eq", "trust": 1.0, "vendor": "novell", "version": "11.0" }, { "model": "opensuse", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "13.1" }, { "model": "flash player", "scope": "lte", "trust": 1.0, "vendor": "adobe", "version": "13.0.0.264" }, { "model": "suse linux enterprise desktop", "scope": "eq", "trust": 1.0, "vendor": "novell", "version": "12.0" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.246" }, { "model": "suse linux enterprise workstation extension", "scope": "eq", "trust": 1.0, "vendor": "novell", "version": "12.0" }, { "model": "flash player", "scope": "lte", "trust": 1.0, "vendor": "adobe", "version": "11.2.202.451" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "14.0.0.176" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.239" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "16.0.0.235" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "16.0.0.287" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "14.0.0.145" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "16.0.0.257" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "17.0.0.134" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.152" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.189" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "14.0.0.179" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "15.0.0.223" }, { "model": "opensuse", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "13.2" }, { "model": "flash player", "scope": "eq", "trust": 1.0, "vendor": "adobe", "version": "16.0.0.296" }, { "model": "chrome", "scope": null, "trust": 0.8, "vendor": "google", "version": null }, { "model": "flash player", "scope": "lt", "trust": 0.8, "vendor": "adobe", "version": "11.2.202.457 (linux)" }, { "model": "flash player", "scope": "lt", "trust": 0.8, "vendor": "adobe", "version": "17.0.0.169 (internet explorer 10/11)" }, { "model": "flash player", "scope": "lt", "trust": 0.8, "vendor": "adobe", "version": "17.0.0.169 (windows/machintosh/linux edition chrome)" }, { "model": "flash player", "scope": "lt", "trust": 0.8, "vendor": "adobe", "version": "desktop runtime 17.0.0.169 (windows/macintosh)" }, { "model": "flash player", "scope": "lt", "trust": 0.8, "vendor": "adobe", "version": "continuous support release 13.0.0.281 (windows/macintosh)" }, { "model": "internet explorer", "scope": "eq", "trust": 0.8, "vendor": "microsoft", "version": "10 (windows 8/windows server 2012/windows rt)" }, { "model": "internet explorer", "scope": "eq", "trust": 0.8, "vendor": "microsoft", "version": "11 (windows 8.1/windows server 2012 r2/windows rt 8.1)" }, { "model": "hat enterprise linux workstation supplementary", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux supplementary server", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "hat enterprise linux server supplementary", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop supplementary", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop supplementary client", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "linux", "scope": null, "trust": 0.3, "vendor": "gentoo", "version": null }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.53.64" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.51.66" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.452" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.3218" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.22.87" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.15.3" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.12.36" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.12.35" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.262" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.2460" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.152.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.151.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.124.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.48.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.47.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.45.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.31.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.289.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.283.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.280" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.28.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.277.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.262.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.260.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.246.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.159.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.155.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9.0.115.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "9" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "8.0.35.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "8.0.34.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "8" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.73.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.70.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.69.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.68.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.67.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.66.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.61.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.60.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.53.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.24.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.19.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7.0.14.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "7" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "6.0.79" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "6.0.21.0" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.2.202.235" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.2.202.233" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.2.202.229" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.2.202.228" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.2.202.223" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.115.8" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.115.7" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.115.6" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.112.61" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.111.9" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.111.8" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.111.7" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.111.6" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.111.5" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.102.63" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.102.62" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.102.55" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.1.102.228" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "11.0.1.152" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.186.7" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.186.6" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.186.3" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.186.2" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.185.25" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.185.23" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.185.22" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.185.21" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.183.7" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.183.5" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.183.4" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.183.10" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.34" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.26" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.23" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.22" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.16" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.3.181.14" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.159.1" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.157.51" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.156.12" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.28" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.27" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.25" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.24" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.18" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.154.13" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.153.1" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.152.33" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.152.32" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.152.21" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.2.152" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.95.2" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.95.1" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.92.8" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.92.10" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.85.3" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.82.76" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.52.15" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.52.14.1" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.106.16" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.105.6" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.102.65" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.1.102.64" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.42.34" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10.0.32.18" }, { "model": "flash player", "scope": "eq", "trust": 0.3, "vendor": "adobe", "version": "10" } ], "sources": [ { "db": "BID", "id": "74062" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "11.2.202.451", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "13.0.0.264", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:client:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_supplementary:5.0:server:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2015-3043" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "s3tm3m, working with HP\u0027s Zero Day Initiative, Steven Vittitoe of Google Project Zero, Chris Evans of Google Project, instruder of Alibaba Security Research Team, Jihui Lu of KeenTeam (@K33nTeam), working with the Chromium Vulnerability Reward Program, Mic", "sources": [ { "db": "BID", "id": "74062" } ], "trust": 0.3 }, "cve": "CVE-2015-3043", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": true, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 10.0, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2015-3043", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.9, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "id": "VHN-81004", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2015-3043", "trust": 1.8, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201504-209", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULHUB", "id": "VHN-81004", "trust": 0.1, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2015-3043", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. Attacks on this vulnerability 2015 Year 4 Observed on the moon. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. The following versions are affected: Adobe Flash Player 13.0.0.277 and earlier versions and 17.0.0.134 and earlier versions based on Windows and OS X platforms, Adobe Flash Player 11.2.202.451 and earlier versions based on Linux systems. (Widely exploited in April 2015). \n\nBackground\n==========\n\nThe Adobe Flash Player is a renderer for the SWF file format, which is\ncommonly used to provide interactive websites. \nPlease review the CVE identifiers referenced below for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Adobe Flash Player users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot -v \"\u003e=www-plugins/adobe-flash-11.2.202.457\"\n\nReferences\n==========\n\n[ 1 ] CVE-2015-0346\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346\n[ 2 ] CVE-2015-0347\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347\n[ 3 ] CVE-2015-0348\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348\n[ 4 ] CVE-2015-0349\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349\n[ 5 ] CVE-2015-0350\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350\n[ 6 ] CVE-2015-0351\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351\n[ 7 ] CVE-2015-0352\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352\n[ 8 ] CVE-2015-0353\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353\n[ 9 ] CVE-2015-0354\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354\n[ 10 ] CVE-2015-0355\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355\n[ 11 ] CVE-2015-0356\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356\n[ 12 ] CVE-2015-0357\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357\n[ 13 ] CVE-2015-0358\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358\n[ 14 ] CVE-2015-0359\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359\n[ 15 ] CVE-2015-0360\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360\n[ 16 ] CVE-2015-3038\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038\n[ 17 ] CVE-2015-3039\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039\n[ 18 ] CVE-2015-3040\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040\n[ 19 ] CVE-2015-3041\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041\n[ 20 ] CVE-2015-3042\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042\n[ 21 ] CVE-2015-3043\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043\n[ 22 ] CVE-2015-3044\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201504-07\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2015 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Critical: flash-plugin security update\nAdvisory ID: RHSA-2015:0813-01\nProduct: Red Hat Enterprise Linux Supplementary\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html\nIssue date: 2015-04-15\nCVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 \n CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 \n CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 \n CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 \n CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 \n CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 \n CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 \n CVE-2015-3044 \n=====================================================================\n\n1. Summary:\n\nAn updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary. \n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64\n\n3. Description:\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-06\nlisted in the References section. \n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349,\nCVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354,\nCVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360,\nCVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043)\n\nA security bypass flaw was found in flash-plugin that could lead to the\ndisclosure of sensitive information. (CVE-2015-3044)\n\nTwo memory information leak flaws were found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws. \n\n4. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06\n1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06)\n1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06)\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.457-1.el5.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.457-1.el5.i386.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.457-1.el5.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.457-1.el5.i386.rpm\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nRed Hat Enterprise Linux Workstation Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.457-1.el6_6.i686.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2015-0346\nhttps://access.redhat.com/security/cve/CVE-2015-0347\nhttps://access.redhat.com/security/cve/CVE-2015-0348\nhttps://access.redhat.com/security/cve/CVE-2015-0349\nhttps://access.redhat.com/security/cve/CVE-2015-0350\nhttps://access.redhat.com/security/cve/CVE-2015-0351\nhttps://access.redhat.com/security/cve/CVE-2015-0352\nhttps://access.redhat.com/security/cve/CVE-2015-0353\nhttps://access.redhat.com/security/cve/CVE-2015-0354\nhttps://access.redhat.com/security/cve/CVE-2015-0355\nhttps://access.redhat.com/security/cve/CVE-2015-0356\nhttps://access.redhat.com/security/cve/CVE-2015-0357\nhttps://access.redhat.com/security/cve/CVE-2015-0358\nhttps://access.redhat.com/security/cve/CVE-2015-0359\nhttps://access.redhat.com/security/cve/CVE-2015-0360\nhttps://access.redhat.com/security/cve/CVE-2015-3038\nhttps://access.redhat.com/security/cve/CVE-2015-3039\nhttps://access.redhat.com/security/cve/CVE-2015-3040\nhttps://access.redhat.com/security/cve/CVE-2015-3041\nhttps://access.redhat.com/security/cve/CVE-2015-3042\nhttps://access.redhat.com/security/cve/CVE-2015-3043\nhttps://access.redhat.com/security/cve/CVE-2015-3044\nhttps://access.redhat.com/security/updates/classification/#critical\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-06.html\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2015 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL\n9gBkw1TFVgaSAtPj0Xh+ubg=\n=LVW2\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n", "sources": [ { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "BID", "id": "74062" }, { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "PACKETSTORM", "id": "131493" }, { "db": "PACKETSTORM", "id": "131451" } ], "trust": 2.25 }, "exploit_availability": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "reference": "https://www.scap.org.cn/vuln/vhn-81004", "trust": 0.1, "type": "unknown" }, { "reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=37536", "trust": 0.1, "type": "exploit" } ], "sources": [ { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" } ] }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2015-3043", "trust": 3.1 }, { "db": "BID", "id": "74062", "trust": 1.5 }, { "db": "EXPLOIT-DB", "id": "37536", "trust": 1.2 }, { "db": "SECTRACK", "id": "1032105", "trust": 1.2 }, { "db": "JVNDB", "id": "JVNDB-2015-002247", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201504-209", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "132525", "trust": 0.1 }, { "db": "VULHUB", "id": "VHN-81004", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2015-3043", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "131493", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "131451", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "BID", "id": "74062" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "PACKETSTORM", "id": "131493" }, { "db": "PACKETSTORM", "id": "131451" }, { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "id": "VAR-201504-0548", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-81004" } ], "trust": 0.01 }, "last_update_date": "2023-12-18T11:20:48.523000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "APSB15-06", "trust": 0.8, "url": "http://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "title": "APSB15-06", "trust": 0.8, "url": "http://helpx.adobe.com/jp/security/products/flash-player/apsb15-06.html" }, { "title": "Google Chrome \u3092\u66f4\u65b0\u3059\u308b", "trust": 0.8, "url": "https://support.google.com/chrome/answer/95414?hl=ja" }, { "title": "Google Chrome", "trust": 0.8, "url": "https://www.google.com/intl/ja/chrome/browser/features.html" }, { "title": "Chrome Releases", "trust": 0.8, "url": "http://googlechromereleases.blogspot.jp/" }, { "title": "Update for Vulnerabilities in Adobe Flash Player in Internet Explorer (2755801)", "trust": 0.8, "url": "https://technet.microsoft.com/en-us/library/security/2755801" }, { "title": "Internet Explorer \u4e0a\u306e Adobe Flash Player \u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\u3059\u308b\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0 (2755801)", "trust": 0.8, "url": "https://technet.microsoft.com/ja-jp/library/security/2755801" }, { "title": "\u30a2\u30c9\u30d3 \u30b7\u30b9\u30c6\u30e0\u30ba\u793e Adobe Flash Player \u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u304a\u77e5\u3089\u305b", "trust": 0.8, "url": "http://www.fmworld.net/biz/common/adobe/20150416f.html" }, { "title": "Red Hat: CVE-2015-3043", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2015-3043" }, { "title": "CVE-Study", "trust": 0.1, "url": "https://github.com/thdusdl1219/cve-study " }, { "title": "The Register", "trust": 0.1, "url": "https://www.theregister.co.uk/2015/04/20/russian_cyberspies_two_zero_days/" }, { "title": "The Register", "trust": 0.1, "url": "https://www.theregister.co.uk/2015/04/15/april_patch_tuesday/" }, { "title": "Threatpost", "trust": 0.1, "url": "https://threatpost.com/microsoft-patches-critical-http-sys-vulnerability/112251/" } ], "sources": [ { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "NVD-CWE-noinfo", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2015-3043" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.9, "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "trust": 1.3, "url": "https://www.exploit-db.com/exploits/37536/" }, { "trust": 1.3, "url": "https://security.gentoo.org/glsa/201504-07" }, { "trust": 1.3, "url": "http://rhn.redhat.com/errata/rhsa-2015-0813.html" }, { "trust": 1.2, "url": "http://www.securityfocus.com/bid/74062" }, { "trust": 1.2, "url": "http://www.securitytracker.com/id/1032105" }, { "trust": 1.2, "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "trust": 1.2, "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" }, { "trust": 1.2, "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "trust": 1.2, "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3043" }, { "trust": 0.8, "url": "http://www.ipa.go.jp/security/ciadr/vul/20150415-adobeflashplayer.html" }, { "trust": 0.8, "url": "http://www.jpcert.or.jp/at/2015/at150011.html" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3043" }, { "trust": 0.8, "url": "http://www.npa.go.jp/cyberpolice/topics/?seq=16044" }, { "trust": 0.3, "url": "http://www.adobe.com" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0350" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0348" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0353" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0352" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0356" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3043" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0355" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3040" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3042" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0357" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0347" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0354" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0349" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0360" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0358" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3044" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0351" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0346" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3041" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3039" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-0359" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3038" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/.html" }, { "trust": 0.1, "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=41243" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://threatpost.com/microsoft-patches-critical-http-sys-vulnerability/112251/" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0357" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3042" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3043" }, { "trust": 0.1, "url": "https://security.gentoo.org/" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0360" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0346" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0347" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0352" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0350" }, { "trust": 0.1, "url": "http://creativecommons.org/licenses/by-sa/2.5" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0348" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0358" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0355" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0354" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0349" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3041" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0351" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3039" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0356" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3038" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3040" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0353" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3044" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-0359" }, { "trust": 0.1, "url": "https://bugs.gentoo.org." }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0359" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3043" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0350" }, { "trust": 0.1, "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0349" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0348" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0354" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0357" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0347" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0346" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3044" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3042" }, { "trust": 0.1, "url": "https://access.redhat.com/articles/11258" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0352" }, { "trust": 0.1, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.1, "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3038" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3039" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0356" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0351" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3041" }, { "trust": 0.1, "url": "https://bugzilla.redhat.com/):" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-3040" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0358" }, { "trust": 0.1, "url": "https://access.redhat.com/security/team/key/" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0353" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0360" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-0355" } ], "sources": [ { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "BID", "id": "74062" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "PACKETSTORM", "id": "131493" }, { "db": "PACKETSTORM", "id": "131451" }, { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-81004" }, { "db": "VULMON", "id": "CVE-2015-3043" }, { "db": "BID", "id": "74062" }, { "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "db": "PACKETSTORM", "id": "131493" }, { "db": "PACKETSTORM", "id": "131451" }, { "db": "NVD", "id": "CVE-2015-3043" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2015-04-14T00:00:00", "db": "VULHUB", "id": "VHN-81004" }, { "date": "2015-04-14T00:00:00", "db": "VULMON", "id": "CVE-2015-3043" }, { "date": "2015-04-14T00:00:00", "db": "BID", "id": "74062" }, { "date": "2015-04-16T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "date": "2015-04-19T17:34:12", "db": "PACKETSTORM", "id": "131493" }, { "date": "2015-04-16T04:28:51", "db": "PACKETSTORM", "id": "131451" }, { "date": "2015-04-14T22:59:21.323000", "db": "NVD", "id": "CVE-2015-3043" }, { "date": "2015-04-15T00:00:00", "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-10-30T00:00:00", "db": "VULHUB", "id": "VHN-81004" }, { "date": "2018-10-30T00:00:00", "db": "VULMON", "id": "CVE-2015-3043" }, { "date": "2015-11-03T19:09:00", "db": "BID", "id": "74062" }, { "date": "2015-04-22T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-002247" }, { "date": "2018-10-30T16:27:35.843000", "db": "NVD", "id": "CVE-2015-3043" }, { "date": "2015-04-15T00:00:00", "db": "CNNVD", "id": "CNNVD-201504-209" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "PACKETSTORM", "id": "131493" }, { "db": "CNNVD", "id": "CNNVD-201504-209" } ], "trust": 0.7 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Adobe Flash Player Vulnerable to arbitrary code execution", "sources": [ { "db": "JVNDB", "id": "JVNDB-2015-002247" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Unknown", "sources": [ { "db": "BID", "id": "74062" } ], "trust": 0.3 } }
ghsa-68qr-58pp-42rr
Vulnerability from github
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
{ "affected": [], "aliases": [ "CVE-2015-3043" ], "database_specific": { "cwe_ids": [ "CWE-787" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-04-14T22:59:00Z", "severity": "HIGH" }, "details": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", "id": "GHSA-68qr-58pp-42rr", "modified": "2024-07-16T18:31:34Z", "published": "2022-05-14T02:06:53Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043" }, { "type": "WEB", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201504-07" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/37536" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/74062" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1032105" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
rhsa-2015_0813
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-06\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349,\nCVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354,\nCVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360,\nCVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043)\n\nA security bypass flaw was found in flash-plugin that could lead to the\ndisclosure of sensitive information. (CVE-2015-3044)\n\nTwo memory information leak flaws were found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-0357, CVE-2015-3040)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.457.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0813", "url": "https://access.redhat.com/errata/RHSA-2015:0813" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "category": "external", "summary": "1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "1211894", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894" }, { "category": "external", "summary": "1211898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0813.json" } ], "title": "Red Hat Security Advisory: flash-plugin security update", "tracking": { "current_release_date": "2024-11-14T18:08:18+00:00", "generator": { "date": "2024-11-14T18:08:18+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2015:0813", "initial_release_date": "2015-04-15T13:04:05+00:00", "revision_history": [ { "date": "2015-04-15T13:04:05+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-04-15T13:04:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T18:08:18+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.6.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.6.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.6.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.11.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.11.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "product": { "name": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "product_id": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el6_6?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "flash-plugin-0:11.2.202.457-1.el5.i386", "product": { "name": "flash-plugin-0:11.2.202.457-1.el5.i386", "product_id": "flash-plugin-0:11.2.202.457-1.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el5?arch=i386" } } } ], "category": "architecture", "name": "i386" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386" }, "product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386", "relates_to_product_reference": "5Client-Supplementary-5.11.Z" }, { "category": "default_component_of", "full_product_name": { "name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386" }, "product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386", "relates_to_product_reference": "5Server-Supplementary-5.11.Z" }, { "category": "default_component_of", "full_product_name": { "name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" }, "product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "relates_to_product_reference": "6Client-Supplementary-6.6.z" }, { "category": "default_component_of", "full_product_name": { "name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" }, "product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "relates_to_product_reference": "6Server-Supplementary-6.6.z" }, { "category": "default_component_of", "full_product_name": { "name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" }, "product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.6.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2015-0346", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0346" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0346", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0347", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0347" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0347", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0347" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0348", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0348" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0348", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0348" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0349", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0349" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0349", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0349" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0350", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0350" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0350", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0350" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0351", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0351" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0351", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0352", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0352" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0352", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0352" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0353", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0353" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0353", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0353" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0354", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0354" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0354", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0354" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0355", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0355" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0355", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0355" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0356", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0356" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0356", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0356" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0357", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211898" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0357" }, { "category": "external", "summary": "RHBZ#1211898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0357", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0357" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)" }, { "cve": "CVE-2015-0358", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0358" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0358", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0358" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0359", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0359" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0359", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0359" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-0360", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0360" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0360", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0360" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3038", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3038" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3038", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3038" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3039", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3039" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3039", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3039" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3040", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211898" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3040" }, { "category": "external", "summary": "RHBZ#1211898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3040", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)" }, { "cve": "CVE-2015-3041", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3041" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3041", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3041" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3042", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3042" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3042", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3042" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3043", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211869" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: multiple code execution issues fixed in APSB15-06", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3043" }, { "category": "external", "summary": "RHBZ#1211869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3043", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3043" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "flash-plugin: multiple code execution issues fixed in APSB15-06" }, { "cve": "CVE-2015-3044", "discovery_date": "2015-04-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1211894" } ], "notes": [ { "category": "description", "text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "flash-plugin: security bypass leading to information disclosure (APSB15-06)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3044" }, { "category": "external", "summary": "RHBZ#1211894", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3044", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3044" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044" }, { "category": "external", "summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" } ], "release_date": "2015-04-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-15T13:04:05+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0813" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "flash-plugin: security bypass leading to information disclosure (APSB15-06)" } ] }
gsd-2015-3043
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2015-3043", "description": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", "id": "GSD-2015-3043", "references": [ "https://www.suse.com/security/cve/CVE-2015-3043.html", "https://access.redhat.com/errata/RHSA-2015:0813", "https://advisories.mageia.org/CVE-2015-3043.html", "https://packetstormsecurity.com/files/cve/CVE-2015-3043" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2015-3043" ], "details": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", "id": "GSD-2015-3043", "modified": "2023-12-13T01:20:07.938064Z", "schema_version": "1.4.0" } }, "namespaces": { "cisa.gov": { "cveID": "CVE-2015-3043", "dateAdded": "2022-03-03", "dueDate": "2022-03-24", "product": "Flash Player", "requiredAction": "Apply updates per vendor instructions.", "shortDescription": "A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.", "vendorProject": "Adobe", "vulnerabilityName": "Adobe Flash Player Memory Corruption Vulnerability" }, "cve.org": { "CVE_data_meta": { "ASSIGNER": "psirt@adobe.com", "ID": "CVE-2015-3043", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "openSUSE-SU-2015:0718", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "name": "SUSE-SU-2015:0722", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "name": "74062", "refsource": "BID", "url": "http://www.securityfocus.com/bid/74062" }, { "name": "GLSA-201504-07", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201504-07" }, { "name": "1032105", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1032105" }, { "name": "RHSA-2015:0813", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "name": "37536", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/37536/" }, { "name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "refsource": "CONFIRM", "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "name": "openSUSE-SU-2015:0725", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "name": "SUSE-SU-2015:0723", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "11.2.202.451", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "13.0.0.264", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:client:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_supplementary:5.0:server:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "psirt@adobe.com", "ID": "CVE-2015-3043" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html" }, { "name": "openSUSE-SU-2015:0718", "refsource": "SUSE", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html" }, { "name": "RHSA-2015:0813", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html" }, { "name": "SUSE-SU-2015:0723", "refsource": "SUSE", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html" }, { "name": "SUSE-SU-2015:0722", "refsource": "SUSE", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html" }, { "name": "74062", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/74062" }, { "name": "GLSA-201504-07", "refsource": "GENTOO", "tags": [], "url": "https://security.gentoo.org/glsa/201504-07" }, { "name": "1032105", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id/1032105" }, { "name": "openSUSE-SU-2015:0725", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" }, { "name": "37536", "refsource": "EXPLOIT-DB", "tags": [], "url": "https://www.exploit-db.com/exploits/37536/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": true, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false } }, "lastModifiedDate": "2018-10-30T16:27Z", "publishedDate": "2015-04-14T22:59Z" } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.